
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
File: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft (raw, json)
Hash identifier: MgPodS9hA8bImyQBBUy+oN5sGkXz2nJ3ZAOIWoX+JB0=
Subject key identifier: A5:20:32:F9:9D:8E:1D:96:46:2F:B6:90:F3:B3:FF:16:28:52:B8:A8
Authority key identifier: 63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F
Certificate issuer: /CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F
Certificate serial: 40EB5AF7CF96AF700942875295D406BE22A21B7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 13:28:09 +0000
Manifest this update: Thu 18 Jun 2026 13:23:09 +0000
Manifest next update: Fri 19 Jun 2026 14:49:09 +0000
Files and hashes: 1: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: 5m8jt+QhN+1/ftTd1aWEurJoPll4jK1bMA68WFrQCqE=)
2: 6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl (hash: BXJXqhMagE5zRtKakvhdEgU5+hcS7u8eauFok/Kl9HM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl
rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:eb:5a:f7:cf:96:af:70:09:42:87:52:95:d4:06:be:22:a2:1b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F
Validity
Not Before: Jun 18 13:23:09 2026 GMT
Not After : Jun 19 14:49:09 2026 GMT
Subject: CN=A52032F99D8E1D96462FB690F3B3FF162852B8A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:04:26:0a:ad:eb:49:46:65:43:af:57:4a:bc:
38:a2:b8:1b:6e:9d:b0:b9:c5:48:22:00:c3:b4:09:
26:15:39:ae:23:cf:82:4e:50:86:8d:40:b7:70:f8:
53:f1:63:7b:57:1c:77:71:4b:9f:37:c4:4a:a9:98:
f4:1f:ff:70:c6:30:b4:19:1c:9a:6a:37:b4:21:01:
15:5c:61:d0:36:c4:2a:e0:53:e1:26:27:29:ed:8a:
9e:d7:51:92:f1:ff:06:d0:e4:29:14:70:ad:02:7d:
45:8d:42:a2:40:60:df:61:40:19:43:2a:f2:92:a0:
2b:f8:fd:47:9a:26:41:12:25:0f:64:f9:a6:48:4a:
cb:09:e1:17:cd:4e:e6:e4:65:45:57:22:c0:47:0e:
c4:01:a6:4e:29:0c:e4:30:c8:2b:76:b9:f8:38:19:
dc:2d:cb:64:d3:00:ee:bf:4b:fc:b1:70:d5:8b:7c:
a8:99:27:ac:6d:a9:26:da:93:1d:4d:26:0e:77:a8:
fe:63:b0:8b:e4:7b:97:82:c2:3a:b0:25:f4:90:fe:
12:7c:2a:04:d7:c3:31:82:01:ae:4a:16:39:06:c0:
32:b4:9f:28:90:cc:c4:12:f4:89:1c:21:71:35:ba:
5a:16:27:f5:46:4e:ab:8d:a3:29:2c:e9:9e:96:b7:
c9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:32:F9:9D:8E:1D:96:46:2F:B6:90:F3:B3:FF:16:28:52:B8:A8
X509v3 Authority Key Identifier:
keyid:63:09:09:1B:8F:7D:4A:6A:E8:C6:A1:16:85:D8:3D:C2:F9:26:FB:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/6309091B8F7D4A6AE8C6A11685D83DC2F926FB7F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6b:af:75:ee:5c:91:9d:ae:d6:8a:d6:e7:2c:b0:df:ab:92:
b4:f6:5b:c2:b2:c6:83:08:1e:7f:c2:25:f2:05:90:0e:f5:f3:
75:ab:e8:a2:f6:00:cf:f0:d4:21:c6:e7:84:25:49:03:54:33:
c6:5e:01:c3:dc:d1:a9:6b:d2:23:1c:21:79:60:16:80:f8:64:
6c:c4:72:07:7e:9e:a3:63:4e:a5:95:1a:94:70:11:89:d7:ef:
99:57:9e:7f:ef:ac:17:d0:be:6a:3b:8f:61:03:59:6f:fc:ed:
6e:d6:50:88:fc:ba:6a:78:0b:9b:d0:23:24:81:f2:0b:4d:44:
43:31:7f:c9:b6:e4:ad:74:06:70:53:34:f2:5a:55:5b:a0:59:
ea:34:d3:18:3a:a1:2a:0c:6f:ec:e7:25:f7:90:2d:5b:62:7d:
69:af:05:95:43:4c:f4:7d:63:a4:b6:bf:84:28:bb:af:19:00:
02:7f:36:45:ce:2c:c3:c9:99:14:a6:d1:4b:80:e7:bd:00:ef:
68:33:69:f8:39:ae:40:c5:db:ae:2a:d9:25:48:bd:45:38:d0:
7d:26:0c:e7:85:dd:ca:6b:ac:92:4f:30:d2:3c:a6:3f:95:6b:
f1:fe:20:94:63:a0:bb:be:de:6b:27:93:24:2b:c1:dd:ab:2e:
e3:d1:ae:67
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQOta98+Wr3AJQodSldQGviKiG3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNEQzJG
OTI2RkI3RjAeFw0yNjA2MTgxMzIzMDlaFw0yNjA2MTkxNDQ5MDlaMDMxMTAvBgNV
BAMTKEE1MjAzMkY5OUQ4RTFEOTY0NjJGQjY5MEYzQjNGRjE2Mjg1MkI4QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpBCYKretJRmVDr1dKvDiiuBtu
nbC5xUgiAMO0CSYVOa4jz4JOUIaNQLdw+FPxY3tXHHdxS583xEqpmPQf/3DGMLQZ
HJpqN7QhARVcYdA2xCrgU+EmJyntip7XUZLx/wbQ5CkUcK0CfUWNQqJAYN9hQBlD
KvKSoCv4/UeaJkESJQ9k+aZISssJ4RfNTubkZUVXIsBHDsQBpk4pDOQwyCt2ufg4
Gdwty2TTAO6/S/yxcNWLfKiZJ6xtqSbakx1NJg53qP5jsIvke5eCwjqwJfSQ/hJ8
KgTXwzGCAa5KFjkGwDK0nyiQzMQS9IkcIXE1uloWJ/VGTquNoyks6Z6Wt8l9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpSAy+Z2OHZZGL7aQ87P/FihSuKgwHwYDVR0j
BBgwFoAUYwkJG499SmroxqEWhdg9wvkm+38wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDU0NmUwOWEtYzAwNy00YjBjLTk0NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4
RjdENEE2QUU4QzZBMTE2ODVEODNEQzJGOTI2RkI3Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82MzA5MDkxQjhGN0Q0QTZBRThDNkExMTY4NUQ4M0RDMkY5MjZG
QjdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0
NjAtN2M0MDM0MWNhMmY3LzAvNjMwOTA5MUI4RjdENEE2QUU4QzZBMTE2ODVEODNE
QzJGOTI2RkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAERrr3XuXJGdrtaK1ucssN+rkrT2W8KyxoMI
Hn/CJfIFkA7183Wr6KL2AM/w1CHG54QlSQNUM8ZeAcPc0alr0iMcIXlgFoD4ZGzE
cgd+nqNjTqWVGpRwEYnX75lXnn/vrBfQvmo7j2EDWW/87W7WUIj8ump4C5vQIySB
8gtNREMxf8m25K10BnBTNPJaVVugWeo00xg6oSoMb+znJfeQLVtifWmvBZVDTPR9
Y6S2v4Qou68ZAAJ/NkXOLMPJmRSm0UuA570A72gzafg5rkDF264q2SVIvUU40H0m
DOeF3cprrJJPMNI8pj+Va/H+IJRjoLu+3msnkyQrwd2rLuPRrmc=
-----END CERTIFICATE-----
Generated at Thu Jun 18 17:13:56 2026 by rpki-client