
$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
File: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft (raw, json)
Hash identifier: qwkkDuPVHqci+a16wAU86eHHH2YMNCf2DwPH6a7aLi0=
Subject key identifier: 46:31:2A:38:CF:76:89:B5:9C:C7:89:10:5D:BA:00:33:32:E3:37:E5
Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
Certificate issuer: /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
Certificate serial: 719484D6542EA617B216EF0F743BCA9A8A8EFF36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
Manifest number: 03EC
Signing time: Wed 05 Nov 2025 08:42:01 +0000
Manifest this update: Wed 05 Nov 2025 08:37:01 +0000
Manifest next update: Sat 08 Nov 2025 19:41:01 +0000
Files and hashes: 1: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: pCJYjvXonKex+skSqmImkbu4oPl5fBK9Q5SIxdeC0qw=)
2: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: /QE3JbQC9fGdo5sebo5tYuWfdXhEXpRAxCPxewOPZfY=)
3: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: RtKaOt0QVcUfg/opcNyngIYtGMAYjqUtlrzDiVJb3H0=)
4: 3130332e3132302e36372e302f32342d3234203d3e20313337333733.roa (hash: IzbXTMVKVDEB9rg5msnU2DpFCw8NlvM8m/tSeauJb7M=)
5: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl (hash: 3W3J4MUgPQMbBkJSVd2wTjXiVqb4isFCUAm9TgXBnWU=)
6: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: 8JbwHHtI2+x8Q7Ly9bJcp9ZLV+q/WXTIRy0nL9ot5M8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl
rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 19:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:94:84:d6:54:2e:a6:17:b2:16:ef:0f:74:3b:ca:9a:8a:8e:ff:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
Validity
Not Before: Nov 5 08:37:01 2025 GMT
Not After : Nov 8 19:41:01 2025 GMT
Subject: CN=46312A38CF7689B59CC789105DBA003332E337E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:60:c2:19:c3:8a:28:6a:a2:bd:5d:09:b6:
14:cc:8e:5e:1d:d3:27:d5:f7:9d:54:e1:e1:1c:57:
21:39:32:b1:ae:2a:f7:fa:73:19:b3:55:2d:6e:92:
2c:8d:63:93:40:78:58:e4:ac:00:85:d2:bb:dd:86:
e7:cf:bd:3d:18:77:e4:4a:3d:e5:f2:a6:91:59:9d:
ca:ef:90:40:14:3b:61:a2:6c:9b:05:ac:63:38:2b:
0a:28:b6:c0:8a:67:a8:97:fa:50:17:8e:20:aa:86:
a6:9a:12:74:a7:43:4e:ca:90:60:ee:4b:6a:a8:e9:
f4:88:dc:80:03:b4:68:c8:51:c6:e9:b5:2e:62:33:
93:f8:d3:19:b1:9c:29:db:49:a6:6b:ea:b4:3f:05:
2c:83:97:54:14:0b:84:fc:1c:d7:f6:63:8e:90:8e:
6e:78:c2:0d:a4:cc:84:22:03:9d:d3:bf:a8:6d:7a:
1b:39:bd:a1:33:f1:41:9c:ec:61:ff:44:2c:92:9e:
a7:26:0e:55:54:ae:8e:5e:0b:1d:bb:9e:d8:8f:24:
a8:4d:e6:19:a7:e2:10:a5:1f:1a:76:e5:09:c0:26:
7c:32:2a:88:77:1f:22:a0:68:f4:e7:6d:b8:14:b3:
5b:8e:ff:71:50:ac:51:2f:7a:73:0c:ae:7c:de:6d:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:31:2A:38:CF:76:89:B5:9C:C7:89:10:5D:BA:00:33:32:E3:37:E5
X509v3 Authority Key Identifier:
keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:50:8d:ea:12:58:b6:95:67:52:58:94:79:f2:ea:c9:a8:10:
89:99:ff:3c:f5:1b:2c:f7:93:e4:62:56:e9:1a:f9:40:8e:49:
db:48:b5:42:8e:65:ba:c9:43:c6:49:41:ad:da:bd:32:83:9b:
91:c6:a5:ea:20:98:c0:f1:26:4d:f0:62:b0:5f:04:a1:d7:88:
35:0e:5f:aa:02:40:cc:78:ae:94:b3:c3:09:87:e2:36:a2:5f:
62:76:fb:2f:3b:64:f2:d0:51:38:c3:11:18:f4:62:8a:a5:13:
38:9a:75:e6:f9:15:9d:9f:78:98:ca:ed:23:07:7a:0f:44:34:
9e:8a:e6:13:66:7c:e4:c2:99:ee:8f:b8:4d:d6:ff:61:fe:b1:
c5:8c:e9:97:0d:88:ab:07:e3:ac:c3:e3:0e:02:de:fa:15:c3:
e2:c0:c1:ed:a8:22:01:f9:74:21:36:58:3c:e5:5e:07:59:e3:
ab:0d:d3:9f:20:ba:64:cb:ca:9f:9a:4d:9c:e1:03:a0:9f:3d:
a4:e6:bc:56:93:9f:20:9d:21:3c:87:22:24:65:97:de:3e:1a:
5b:74:39:2a:1e:c8:68:e3:f7:ac:8d:7f:ca:cc:6d:84:0b:a9:
be:c9:23:d0:ae:0b:46:dc:33:67:3f:cd:fc:ef:d3:80:f2:c9:
bc:6d:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:46:17 2025 by rpki-client