
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft
File: 6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft (raw, json)
Hash identifier: Tdpq/nz5ExpB2k1CQvvmnlAp/xLJCIwA7Sc7bNENzIw=
Subject key identifier: DA:CD:B6:F7:8A:46:44:0F:CA:20:02:7F:7A:4A:2A:6E:FE:CF:1B:26
Authority key identifier: 6D:00:F9:E4:E0:9C:A6:15:20:26:0B:EF:BC:9B:76:54:69:9D:17:43
Certificate issuer: /CN=6D00F9E4E09CA61520260BEFBC9B7654699D1743
Certificate serial: 64A53EC6A31740A96FFA3B706EF7D9359801026C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D00F9E4E09CA61520260BEFBC9B7654699D1743.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft
Manifest number: 42
Signing time: Sat 20 Jun 2026 00:05:03 +0000
Manifest this update: Sat 20 Jun 2026 00:00:03 +0000
Manifest next update: Sun 21 Jun 2026 00:07:03 +0000
Files and hashes: 1: 3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (hash: D91F44iAtcWZE5ZPf8YuoNDIxLpGpmtmGkzs14Ogsnw=)
2: 6D00F9E4E09CA61520260BEFBC9B7654699D1743.crl (hash: +8/v5KhMoNIU8T6bnGabRfi4wu1az5SBaWHUXc/yybo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.crl
rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D00F9E4E09CA61520260BEFBC9B7654699D1743.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 00:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a5:3e:c6:a3:17:40:a9:6f:fa:3b:70:6e:f7:d9:35:98:01:02:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D00F9E4E09CA61520260BEFBC9B7654699D1743
Validity
Not Before: Jun 20 00:00:03 2026 GMT
Not After : Jun 21 00:07:03 2026 GMT
Subject: CN=DACDB6F78A46440FCA20027F7A4A2A6EFECF1B26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:0a:09:90:05:70:30:39:5e:45:3e:60:fc:
b6:db:4f:d3:78:85:da:25:75:cf:72:49:81:84:69:
57:e8:41:08:d3:5a:f4:26:2e:7b:76:4c:05:9c:6b:
2b:a3:bd:de:8c:43:4e:e3:30:f9:a1:07:d6:88:55:
99:d1:8e:30:e4:7b:6b:db:a4:87:05:0e:73:4a:2a:
4e:99:6a:ce:b5:70:82:33:1b:32:bf:52:e9:f4:9c:
f9:11:c7:68:84:06:64:d7:da:11:c0:f7:2e:b4:15:
82:56:43:01:e7:fe:e5:81:e9:7f:8d:20:66:58:70:
9c:2e:67:38:04:30:5d:7d:a0:56:fb:0e:e7:fc:ca:
a3:00:05:2a:b2:02:31:5a:c3:01:41:cd:88:1d:1d:
b0:8a:80:f6:84:4f:5d:a5:c5:29:e4:35:55:87:66:
92:12:9f:55:b5:95:f0:96:1a:f4:5e:e5:7f:34:1e:
55:64:d6:ea:6d:4a:ca:31:3c:48:55:e2:37:7f:b5:
89:0a:9d:d9:ca:e9:aa:8f:db:43:a6:16:48:99:fa:
3c:d4:88:7d:22:68:8b:45:5d:98:fb:a6:81:95:ce:
c4:e2:6d:92:d7:44:3d:75:ca:f1:bb:fa:0b:aa:15:
e2:bb:de:45:17:c8:cb:c0:44:94:66:33:f1:b8:6e:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CD:B6:F7:8A:46:44:0F:CA:20:02:7F:7A:4A:2A:6E:FE:CF:1B:26
X509v3 Authority Key Identifier:
keyid:6D:00:F9:E4:E0:9C:A6:15:20:26:0B:EF:BC:9B:76:54:69:9D:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D00F9E4E09CA61520260BEFBC9B7654699D1743.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:10:46:a6:98:23:c3:5d:80:93:1a:cb:a9:e4:92:8a:36:1b:
41:e8:a1:44:51:98:3f:23:9d:86:1a:ce:73:cc:c2:21:68:26:
c4:18:e7:8d:ed:79:ab:f4:f9:4d:14:57:b1:a5:81:7b:26:82:
85:0e:a9:ac:83:0d:32:48:79:69:ba:7a:d3:cd:62:c4:f8:7c:
8c:d7:77:33:f2:8e:53:cc:6f:94:0d:7e:7b:8e:14:b9:20:c8:
5b:48:48:d2:8a:dd:f7:26:ec:52:de:6a:5b:d7:38:2b:e5:9a:
d0:7b:4e:7c:90:89:10:41:9d:49:6f:7a:90:76:20:e1:cb:21:
f5:57:b6:58:f6:3a:db:9f:52:23:a7:2b:a7:4b:1c:ec:46:30:
40:c2:f1:ec:6f:14:9f:29:5f:ca:a5:ba:21:41:30:3b:87:15:
af:33:41:26:45:c9:e0:a1:45:72:7b:e6:97:47:6a:8d:23:32:
f1:21:a7:a5:2d:76:2d:7b:93:33:16:f6:29:90:cd:c5:72:ba:
1a:92:8b:76:c2:2e:35:ec:0a:d4:59:ee:76:03:32:8b:95:40:
8d:a2:f2:61:9f:78:20:b1:dc:20:0f:eb:d6:b3:b6:29:24:87:
55:a4:b0:dd:95:56:a2:66:3b:7f:58:cb:a0:73:4e:f1:d5:94:
f4:3d:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:19:56 2026 by rpki-client