
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
File: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft (raw, json)
Hash identifier: g6UtuyD4StovtBSRNsbmDSZuqeaeNcDp8CQbJIoMUS0=
Subject key identifier: 79:E0:3D:C0:C4:F3:44:8E:69:3D:DA:85:90:68:8D:03:45:DF:66:D3
Authority key identifier: 63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F
Certificate issuer: /CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F
Certificate serial: 1F0D95C1C818EBB773AF6859E62C981D303A323B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 04:08:35 +0000
Manifest this update: Thu 17 Sep 2026 04:03:35 +0000
Manifest next update: Fri 18 Sep 2026 07:24:35 +0000
Files and hashes: 1: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl (hash: Xmjuk+gQYXoV4yZaMMFE4yOVFTZsBRK68aUoCLSdIk0=)
2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: 5m8jt+QhN+1/ftTd1aWEurJoPll4jK1bMA68WFrQCqE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl
rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 07:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0d:95:c1:c8:18:eb:b7:73:af:68:59:e6:2c:98:1d:30:3a:32:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F
Validity
Not Before: Sep 17 04:03:35 2026 GMT
Not After : Sep 18 07:24:35 2026 GMT
Subject: CN=79E03DC0C4F3448E693DDA8590688D0345DF66D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:9b:d5:3e:ed:39:5e:22:42:73:5a:9d:8c:
17:14:92:45:58:c1:d8:88:f2:a0:91:15:7c:f2:bd:
83:87:2e:58:a1:38:e3:cf:a8:9e:ba:89:4d:0f:90:
db:cb:e3:74:ee:04:da:41:24:3a:19:07:2f:ca:33:
34:6e:e8:c4:37:55:61:03:75:32:54:cd:f4:91:d2:
16:2f:27:e7:03:50:ad:99:7b:ab:04:56:3c:68:c3:
94:8e:3e:32:50:5d:0f:5b:78:49:e5:e7:41:cc:d3:
9a:da:22:b4:7f:5e:fc:50:aa:4f:2e:ed:b3:3d:f1:
3e:ac:64:19:c0:d3:8c:28:ff:36:26:9a:b8:af:90:
5e:49:b4:dd:6f:2d:72:0e:8c:b0:8c:a1:26:03:99:
1f:c8:c0:a4:4b:96:a0:fe:a9:46:ba:99:ce:70:b9:
0a:1a:b8:f9:c5:b6:2a:74:6b:30:ab:2b:44:0b:d7:
e4:88:27:cd:31:7f:64:cf:fd:c8:e9:5d:97:1a:cf:
90:86:80:36:4c:5c:c6:41:03:b8:82:6f:33:5a:f0:
1c:6b:39:c1:7b:43:29:01:d4:4e:2c:0a:cd:2c:f0:
b3:61:be:3e:fe:ff:19:99:77:ab:3b:e3:7c:df:f7:
a4:23:f8:9f:c9:c8:c1:43:80:a7:6b:e6:44:92:d1:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E0:3D:C0:C4:F3:44:8E:69:3D:DA:85:90:68:8D:03:45:DF:66:D3
X509v3 Authority Key Identifier:
keyid:63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ac:01:d4:59:1d:e9:22:ab:7b:8e:2b:c1:2d:3f:0b:cb:db:
59:0c:fe:84:b1:43:a2:ef:c3:3e:78:c8:9b:e1:b0:f8:b8:29:
5b:a4:5b:f5:13:27:72:d9:5e:77:46:a5:6c:a9:35:d6:2f:f9:
0a:ec:45:bd:e0:25:de:07:cf:57:5c:57:6b:e6:c8:d8:33:f0:
6e:05:4e:85:f6:48:58:06:e2:c1:d0:91:10:b9:db:a9:da:92:
77:6c:66:91:19:13:f2:b4:c5:8f:29:67:ae:f0:d8:1f:26:2c:
39:b7:0d:68:1f:75:c1:5f:2a:ab:c6:8c:0d:2d:0d:45:82:c8:
a6:27:4f:ce:f7:10:5a:12:86:03:f7:f6:62:14:cb:30:86:dd:
89:b0:81:a9:80:b8:70:ae:dd:c5:21:2a:7e:6d:6c:ff:e0:82:
4d:d1:8b:f1:f5:c8:7b:70:97:eb:53:ea:87:72:9e:0c:04:c9:
7b:27:1a:ea:95:b8:68:ea:86:74:9a:63:f2:08:0c:11:6f:65:
65:79:3d:bb:82:82:c4:66:1f:63:4f:1a:b4:7c:ef:55:f0:86:
db:0a:81:20:13:5f:60:31:d5:30:88:14:b2:02:0b:d1:1a:99:
41:88:31:2b:38:9d:1a:5f:b2:84:74:8a:2c:e0:19:8a:5f:98:
ed:96:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:23:37 2026 by rpki-client