
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft
File: 6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft (raw, json)
Hash identifier: nWXVoogW32hh/m6HVhycXck4lGP0O6bGDSjdO6LUL5U=
Subject key identifier: 9A:CE:C2:79:7A:A3:0E:A5:30:44:11:D0:9C:D3:7A:FB:8A:89:D4:71
Authority key identifier: 6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1
Certificate issuer: /CN=6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1
Certificate serial: 1553B9670EA7144D1D3E898CCF433B4EA823D2A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft
Manifest number: D5
Signing time: Fri 09 Oct 2026 18:45:50 +0000
Manifest this update: Fri 09 Oct 2026 18:40:50 +0000
Manifest next update: Sat 10 Oct 2026 20:07:50 +0000
Files and hashes: 1: 6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl (hash: AHD814IAqH9zWw0Ymr0Mxc553qXYWOrEqi0FkRfTDhk=)
2: 3130332e3136372e32322e302f32332d3234203d3e203137393935.roa (hash: jBjn/26T9nOLxs1yUlk7/z6hpoVPKoLHthzCZsrv0gk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl
rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:53:b9:67:0e:a7:14:4d:1d:3e:89:8c:cf:43:3b:4e:a8:23:d2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1
Validity
Not Before: Oct 9 18:40:50 2026 GMT
Not After : Oct 10 20:07:50 2026 GMT
Subject: CN=9ACEC2797AA30EA5304411D09CD37AFB8A89D471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:75:cf:e2:f3:07:8e:0a:1d:18:1e:a5:c7:
68:27:a9:eb:d1:f4:f2:4f:cc:48:e0:f7:ab:cb:02:
34:ca:0c:df:5d:af:9d:56:9d:bf:a7:60:e3:b2:85:
23:96:c8:36:39:51:02:19:8c:d0:dd:24:5a:c9:62:
92:5b:65:70:2f:e1:c4:5b:c8:81:0f:7c:fd:6f:4f:
bd:19:fd:9c:cc:29:6a:44:9b:f5:c7:60:64:2b:f1:
d3:65:7b:46:45:99:bb:e6:5b:b6:1c:5e:23:81:98:
b1:1c:96:17:83:90:0a:95:6e:37:a5:ca:fb:52:f7:
a8:a2:b6:7c:98:1c:8c:7e:b2:0f:6c:ba:c3:e8:c4:
0d:2d:a1:46:a2:e6:ee:c3:14:dd:01:3b:65:6f:7f:
08:d1:64:e1:e5:ef:d2:d1:2b:54:a6:98:3c:43:ee:
b1:31:f4:0a:90:11:02:57:ac:05:48:15:f4:c9:1e:
76:1c:79:ed:d3:a3:30:9d:d4:81:d9:ab:9b:bd:f9:
2a:9f:08:c7:da:f1:92:37:74:ae:38:ce:1c:9b:56:
7b:d5:89:33:8b:ff:4e:86:c1:fe:2a:b4:5b:cb:fb:
b4:18:88:67:15:c6:fb:43:37:f2:30:2f:e2:33:58:
ee:75:9f:ee:f9:6f:50:18:31:10:d5:0b:28:0d:2b:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CE:C2:79:7A:A3:0E:A5:30:44:11:D0:9C:D3:7A:FB:8A:89:D4:71
X509v3 Authority Key Identifier:
keyid:6F:AE:5D:44:DD:E9:97:DF:0A:08:C5:5D:DF:BE:12:D2:6F:1F:D9:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6FAE5D44DDE997DF0A08C55DDFBE12D26F1FD9B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:98:9b:06:41:1e:d9:48:80:1d:32:7a:e7:b0:bc:ce:4e:e1:
52:55:40:f5:5e:2e:70:25:93:5f:4c:96:b3:88:0e:0b:59:32:
0a:90:5f:0b:50:1d:b1:05:91:89:3d:d6:04:78:e5:d3:35:ac:
ae:fe:72:4a:24:64:58:12:bb:9b:44:b0:cb:eb:a5:64:c6:67:
66:13:a2:7b:3e:ff:ff:5b:45:92:46:b7:0f:92:b8:c7:df:b2:
a1:84:8d:ee:87:e5:e6:6a:d7:58:ee:cb:40:f0:7c:4f:b6:90:
0f:c6:b2:c3:12:18:ab:42:c5:a6:94:ca:d5:34:04:ec:5d:f9:
90:a0:9a:89:ab:09:a4:5e:ed:b9:7b:00:2b:b4:c7:77:4f:bc:
3c:08:47:d5:85:68:e4:fc:5f:7e:9c:e0:bc:b7:a4:47:02:86:
53:8b:43:e9:ad:62:c6:ef:04:c6:51:23:7e:fb:2d:94:77:55:
b5:8e:5a:ac:97:7b:73:8f:bb:fb:aa:b4:87:70:a5:f7:01:b9:
01:06:e2:c1:5d:a1:ff:f7:b2:5a:87:cd:1b:9a:99:10:ef:12:
45:4d:38:e8:eb:8c:76:10:ca:65:06:84:12:20:ea:6f:10:38:
32:42:f1:fd:39:02:72:f4:47:63:9d:e1:bc:fd:7a:1c:ae:6f:
54:4b:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:38:54 2026 by rpki-client