
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
File: 6FFB900EDEAE8469264C3200683452F52D2C7D20.mft (raw, json)
Hash identifier: TaPPzFEK4oB/OvAmpc1FlT5rCQGXg7TGaotnJIPhZTw=
Subject key identifier: 8C:41:E9:1B:3A:34:C3:89:53:72:BE:E7:C0:7B:70:2A:7B:25:C1:07
Authority key identifier: 6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20
Certificate issuer: /CN=6FFB900EDEAE8469264C3200683452F52D2C7D20
Certificate serial: 49DAA42CA38D10281D6A8CB160A16C9C79539764
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 18:01:28 +0000
Manifest this update: Wed 16 Sep 2026 17:56:28 +0000
Manifest next update: Thu 17 Sep 2026 19:40:28 +0000
Files and hashes: 1: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: 2EwjI2yaWnE5gULqJdGsbLF8ZASObltpfAUMyYETxbI=)
2: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: wSTIS3GtulXBIyX85d5grLpnIqXDyNCDJIfxayh+SJY=)
3: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: X+J06+s9GFmOyzL8tq52i7jtkOJP8+Epb+CH1drPU9k=)
4: 6FFB900EDEAE8469264C3200683452F52D2C7D20.crl (hash: /BXFMhF8nK5K1z97pz6PMze2g+K/GQMhgPKPtgT2cnc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.crl
rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:da:a4:2c:a3:8d:10:28:1d:6a:8c:b1:60:a1:6c:9c:79:53:97:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FFB900EDEAE8469264C3200683452F52D2C7D20
Validity
Not Before: Sep 16 17:56:28 2026 GMT
Not After : Sep 17 19:40:28 2026 GMT
Subject: CN=8C41E91B3A34C3895372BEE7C07B702A7B25C107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:a2:0f:f0:a3:31:84:24:f3:30:4a:4e:7a:
22:e6:8e:60:b2:45:7a:2e:f3:c9:3a:5c:28:ed:e1:
90:1d:fa:93:8c:13:04:75:d0:f9:af:93:f3:20:8c:
92:8b:a8:4d:0f:5e:93:22:0f:e9:01:c6:d8:80:d7:
4b:83:e2:98:c2:e2:a1:ed:3d:d9:e4:89:77:1e:61:
dd:0a:1e:3e:7e:cb:6f:4e:d6:f8:0b:ba:55:f3:ee:
b7:12:a2:94:88:e2:c6:2d:4a:51:3b:8c:8c:c5:dd:
45:43:6d:5b:5b:3b:4a:0d:7a:24:f1:ed:5c:36:38:
04:f0:c7:04:9e:99:13:f1:fd:e8:93:e8:9a:46:9a:
29:f4:a5:ab:36:b0:a7:85:93:0c:5a:f6:fb:2d:fd:
a3:64:80:e1:8e:f9:de:55:d0:73:85:65:17:f5:32:
3c:b1:f6:86:b7:ea:55:8a:81:f6:86:ad:0d:ec:48:
06:f4:94:b9:84:d9:f9:80:81:06:e4:e3:27:a4:28:
05:43:46:b9:7c:b3:81:b2:3c:5d:e7:ef:16:5d:24:
ad:07:4b:fb:e7:f3:aa:47:85:74:d9:65:6b:10:05:
09:8d:2d:98:12:aa:fe:c1:6f:0b:88:93:b3:8d:af:
ae:8d:ed:96:aa:d8:cd:66:ee:f0:47:0f:da:0b:b8:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:41:E9:1B:3A:34:C3:89:53:72:BE:E7:C0:7B:70:2A:7B:25:C1:07
X509v3 Authority Key Identifier:
keyid:6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a5:4c:19:9a:55:45:89:0e:29:f4:d3:cc:83:7e:1a:a3:af:
05:3d:c2:eb:76:16:67:d6:34:0b:af:36:ac:08:e2:62:42:7e:
11:25:1d:b3:f7:3a:3e:f8:74:71:34:1a:42:a3:22:4b:5f:2f:
1d:59:ef:e1:a4:38:78:a4:3c:f5:fb:aa:ae:12:5c:92:3f:9d:
59:d0:9b:93:e4:c3:b1:87:85:2a:20:49:de:67:87:02:f4:5a:
e1:23:58:42:8e:c9:ba:f5:d3:da:5e:d5:e1:db:6e:c6:45:2b:
c6:12:6c:28:79:90:a3:9a:12:55:1b:cd:11:75:49:4e:52:bd:
d9:b2:aa:65:15:36:e7:53:ee:75:77:d3:fc:b8:22:cc:c6:48:
b5:12:00:47:f2:25:fb:5c:96:2d:de:56:ab:47:8a:7a:a4:c7:
42:82:65:c1:b4:d5:47:fd:14:73:eb:96:31:cd:5f:63:44:65:
7a:75:4c:2f:7e:a7:44:ac:56:5e:2f:fb:8d:79:91:71:a5:af:
5a:c1:f7:44:e5:f6:87:8d:c6:2e:17:74:c9:24:fa:61:8e:94:
85:5a:c8:e6:66:40:4b:56:4f:9e:bd:2b:4a:f7:fd:f7:0e:af:
b6:eb:dd:d9:f9:3b:ed:50:e8:08:5d:53:fc:76:1f:c1:cb:25:
a4:d3:49:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:07:11 2026 by rpki-client