
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft
File: 6E36D51ED37E76652D33954036B724B015FE6535.mft (raw, json)
Hash identifier: Y/6uDG1W0ByXzeXsBB/D/HgEFXwodB1ruRvJVr/V8TE=
Subject key identifier: 4B:01:BC:85:AA:08:E1:04:9C:DA:8E:CF:EA:C0:19:1F:C5:2A:A8:D3
Authority key identifier: 6E:36:D5:1E:D3:7E:76:65:2D:33:95:40:36:B7:24:B0:15:FE:65:35
Certificate issuer: /CN=6E36D51ED37E76652D33954036B724B015FE6535
Certificate serial: 5EA3F08467919DD21FF83F5BEDA37E2D39734273
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft
Manifest number: EC
Signing time: Mon 26 Oct 2026 09:38:55 +0000
Manifest this update: Mon 26 Oct 2026 09:33:55 +0000
Manifest next update: Tue 27 Oct 2026 11:54:55 +0000
Files and hashes: 1: 6E36D51ED37E76652D33954036B724B015FE6535.crl (hash: dSwJjab1DEly1YR9sjZQ/hzud3/jU4W0VODNtu/5YSE=)
2: 3130332e3133392e3138362e302f32342d3234203d3e20313338383634.roa (hash: FcbgzQdIQigiunMpm6/hzO5KdG9gtqkjcIfWQ/NRFWE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.crl
rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 11:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a3:f0:84:67:91:9d:d2:1f:f8:3f:5b:ed:a3:7e:2d:39:73:42:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E36D51ED37E76652D33954036B724B015FE6535
Validity
Not Before: Oct 26 09:33:55 2026 GMT
Not After : Oct 27 11:54:55 2026 GMT
Subject: CN=4B01BC85AA08E1049CDA8ECFEAC0191FC52AA8D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:2a:27:8a:cf:2f:33:d3:07:ed:f0:27:e1:
11:4a:00:d9:16:62:93:b5:f3:8c:96:37:1e:69:61:
50:a7:6e:7f:f9:f5:c2:92:5d:66:d5:f4:08:51:55:
37:aa:9a:c7:ee:83:d2:58:bd:67:0a:8f:1a:65:b1:
0d:34:33:29:ec:df:6a:f3:b2:63:6f:0d:d5:0c:07:
cb:f7:ce:52:e9:f9:7f:f2:06:26:19:13:04:4f:19:
c2:b4:41:bd:90:8f:37:7d:e3:35:0b:c7:2e:6b:6b:
88:55:77:ac:08:b6:99:85:0c:9d:41:82:b7:0f:07:
21:8f:20:81:c0:ba:c9:97:27:1f:18:16:c5:87:26:
f3:41:9e:1a:a3:b1:5e:91:df:c6:33:3f:15:a9:ba:
7a:b4:32:a8:62:e4:27:d4:54:14:79:44:29:24:84:
93:91:2f:9b:e8:a2:43:33:40:d8:80:9d:ae:d8:24:
fa:8b:69:83:ea:83:ec:8e:e9:eb:a6:02:7b:6d:53:
35:31:1c:9a:b1:f2:0d:71:fb:1c:dc:bc:49:ce:16:
74:56:c4:f1:9f:15:3d:6b:cf:99:b8:59:31:36:17:
4c:b4:be:db:62:54:28:28:b1:6c:31:a7:3a:1a:f6:
8a:ac:c1:6e:99:92:27:9a:c4:d1:0c:5e:4f:70:d1:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:01:BC:85:AA:08:E1:04:9C:DA:8E:CF:EA:C0:19:1F:C5:2A:A8:D3
X509v3 Authority Key Identifier:
keyid:6E:36:D5:1E:D3:7E:76:65:2D:33:95:40:36:B7:24:B0:15:FE:65:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E36D51ED37E76652D33954036B724B015FE6535.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04358b00-31cd-41a3-9536-dbb193e7f4d0/0/6E36D51ED37E76652D33954036B724B015FE6535.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9d:69:95:f9:0d:83:a4:30:1c:e9:92:c9:8b:22:6c:60:f8:
b9:62:cd:02:f5:73:a7:f3:9e:ee:5f:c0:2a:01:c2:eb:41:ad:
27:cc:91:42:da:07:10:e5:28:82:61:02:86:a0:b9:04:3d:e9:
75:1d:97:6d:91:47:aa:dc:5a:cb:9f:84:2d:d5:01:58:47:11:
8c:75:97:ff:6e:07:e2:a9:e3:b2:32:78:fe:11:46:e8:87:4a:
04:e0:60:d8:e0:88:60:87:99:9b:aa:f9:70:01:05:65:fc:f1:
00:a1:f4:53:b4:48:0f:85:43:db:69:54:20:d0:d5:f8:d7:0b:
7f:bc:0c:85:1a:aa:8b:84:76:c7:84:4f:72:ce:68:ce:6d:47:
f8:01:e9:91:bf:77:75:51:35:a9:1b:83:ea:e1:71:8e:0d:e8:
67:02:46:66:b5:03:38:38:cd:72:ec:01:00:4a:68:9d:4e:dc:
e1:09:a5:7c:43:e4:92:88:97:dd:9f:be:b7:1c:88:f5:fc:a5:
99:bd:09:36:24:29:6d:c1:3c:2f:08:da:bf:ea:5e:5a:f8:3b:
df:03:f6:11:27:49:f7:06:35:9f:fe:f3:9d:36:5c:57:3d:d8:
92:8e:b6:b2:37:aa:6c:fa:9b:99:6f:f1:47:ec:e4:47:e9:dc:
89:97:3e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:14:40 2026 by rpki-client