
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
File: B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft (raw, json)
Hash identifier: VPie2XnYYrILNjWB/o0vgm6WrxrnjGkh9KSdiThYf9M=
Subject key identifier: FC:2D:EC:CF:96:59:93:5B:5B:E0:3B:0A:45:1E:62:F1:4F:CF:E5:88
Authority key identifier: B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45
Certificate issuer: /CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
Certificate serial: 3099254AB96E0308FB034A5072FD2AA26EFF2467
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
Manifest number: F8
Signing time: Mon 02 Nov 2026 14:26:03 +0000
Manifest this update: Mon 02 Nov 2026 14:21:03 +0000
Manifest next update: Tue 03 Nov 2026 18:20:03 +0000
Files and hashes: 1: B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl (hash: GiyXPW+Pfco/NznKoXYqdCM3wT3DyCfnVTQ76dox4vY=)
2: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: FM7P4A6GhMRCdFWVFylFnVzysNCeJktD7lQb8mDxaKs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl
rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 12:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:99:25:4a:b9:6e:03:08:fb:03:4a:50:72:fd:2a:a2:6e:ff:24:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
Validity
Not Before: Nov 2 14:21:03 2026 GMT
Not After : Nov 3 18:20:03 2026 GMT
Subject: CN=FC2DECCF9659935B5BE03B0A451E62F14FCFE588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:ab:64:1f:eb:b1:77:fd:5d:30:0d:52:4c:
2d:9a:61:5a:80:28:18:2b:40:9b:5b:10:48:4a:75:
e2:b6:54:b2:fa:4e:05:d7:25:43:56:fc:13:2d:07:
cd:e1:a6:7d:53:2b:08:63:cd:ca:a8:3a:32:c1:74:
8d:df:77:c2:46:6e:81:01:7c:5f:34:40:ca:98:4c:
fc:75:d3:d4:83:dd:d0:d6:01:5a:3c:0a:61:aa:14:
cc:b9:c7:b3:fe:0b:39:e5:5b:66:f4:b5:58:38:35:
0e:0c:93:04:d0:5d:ec:ae:6c:24:b0:c5:92:14:50:
08:eb:cc:b4:d6:ab:79:40:14:26:fb:67:a1:07:15:
fe:2b:ef:90:39:df:74:22:1f:5f:a2:39:5b:37:ba:
6b:4f:bc:29:c5:40:94:30:90:f6:59:91:1f:b9:a6:
33:88:ef:ed:43:53:33:db:c0:0c:06:79:66:83:0a:
18:40:e4:06:9a:1b:73:4c:12:b0:66:bf:10:17:a8:
ce:eb:d9:b0:a2:0b:16:0c:54:c5:0c:d2:5e:ce:45:
df:bd:e7:ec:a2:c4:d4:65:8c:ab:74:8c:78:8b:29:
82:31:23:94:7d:69:84:0a:e8:32:af:b1:1c:17:e7:
48:5b:d1:26:4e:83:b0:77:48:58:ff:ba:c9:55:65:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2D:EC:CF:96:59:93:5B:5B:E0:3B:0A:45:1E:62:F1:4F:CF:E5:88
X509v3 Authority Key Identifier:
keyid:B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:66:b1:dc:52:8d:70:54:22:1a:e7:05:e2:88:d2:16:20:1a:
55:86:21:32:c1:44:e8:9e:e8:41:27:ed:cf:bf:cc:68:3f:da:
33:6a:e0:78:85:19:83:a7:55:ef:63:98:a5:f1:ca:c5:e3:b4:
e4:37:bf:92:1c:19:67:4e:7a:a7:31:2d:14:93:89:91:3a:32:
77:d7:0f:0c:5f:d9:f6:a0:f2:3f:7f:80:65:86:d5:03:f8:7d:
37:87:94:cb:54:e4:8f:37:ae:1a:10:4b:fa:5d:b1:18:2e:06:
fc:c0:04:49:3f:b4:e0:93:45:ec:c2:fd:e7:12:7e:37:4c:8b:
94:b3:9a:42:84:63:e1:b5:0d:c1:31:1f:c3:ee:a2:1d:a7:0d:
16:97:36:22:9e:ba:c7:8d:f3:4a:3e:be:8e:bc:d7:37:3b:1b:
aa:13:16:d8:d9:e4:74:a0:82:71:66:11:b2:de:f5:6f:82:65:
2d:e0:6e:af:b6:f9:bd:46:c0:68:94:ad:44:87:0d:4e:96:db:
ca:f5:d2:35:49:a0:41:2d:8a:fe:e6:82:5b:48:e2:b6:96:ca:
ee:0c:11:30:68:86:26:05:37:a7:07:3a:7f:bd:b7:d3:0a:16:
08:2d:c0:3b:36:f8:33:c1:0e:90:03:74:34:de:98:0b:e1:c3:
ea:15:b3:f6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMJklSrluAwj7A0pQcv0qom7/JGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMUEwNDJGNThGRDc3M0VDNkI3MjIxNDcwMTU2RjVF
QkQwQ0U0NTAeFw0yNjExMDIxNDIxMDNaFw0yNjExMDMxODIwMDNaMDMxMTAvBgNV
BAMTKEZDMkRFQ0NGOTY1OTkzNUI1QkUwM0IwQTQ1MUU2MkYxNEZDRkU1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+VatkH+uxd/1dMA1STC2aYVqA
KBgrQJtbEEhKdeK2VLL6TgXXJUNW/BMtB83hpn1TKwhjzcqoOjLBdI3fd8JGboEB
fF80QMqYTPx109SD3dDWAVo8CmGqFMy5x7P+CznlW2b0tVg4NQ4MkwTQXeyubCSw
xZIUUAjrzLTWq3lAFCb7Z6EHFf4r75A533QiH1+iOVs3umtPvCnFQJQwkPZZkR+5
pjOI7+1DUzPbwAwGeWaDChhA5AaaG3NMErBmvxAXqM7r2bCiCxYMVMUM0l7ORd+9
5+yixNRljKt0jHiLKYIxI5R9aYQK6DKvsRwX50hb0SZOg7B3SFj/uslVZdnFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/C3sz5ZZk1tb4DsKRR5i8U/P5YgwHwYDVR0j
BBgwFoAUtvGgQvWP13Psa3IhRwFW9evQzkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjk1N2ZhNWQtZmE2Ny00ZTZiLTg5MjAtYzQ3NDdhZGIzMGJiLzAvQjZGMUEwNDJG
NThGRDc3M0VDNkI3MjIxNDcwMTU2RjVFQkQwQ0U0NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNkYxQTA0MkY1OEZENzczRUM2QjcyMjE0NzAxNTZGNUVCRDBD
RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5
MjAtYzQ3NDdhZGIzMGJiLzAvQjZGMUEwNDJGNThGRDc3M0VDNkI3MjIxNDcwMTU2
RjVFQkQwQ0U0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHpmsdxSjXBUIhrnBeKI0hYgGlWGITLBROie
6EEn7c+/zGg/2jNq4HiFGYOnVe9jmKXxysXjtOQ3v5IcGWdOeqcxLRSTiZE6MnfX
Dwxf2fag8j9/gGWG1QP4fTeHlMtU5I83rhoQS/pdsRguBvzABEk/tOCTRezC/ecS
fjdMi5SzmkKEY+G1DcExH8Puoh2nDRaXNiKeuseN80o+vo681zc7G6oTFtjZ5HSg
gnFmEbLe9W+CZS3gbq+2+b1GwGiUrUSHDU6W28r10jVJoEEtiv7mgltI4raWyu4M
ETBohiYFN6cHOn+9t9MKFggtwDs2+DPBDpADdDTemAvhw+oVs/Y=
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:12:28 2026 by rpki-client