
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft
File: 6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft (raw, json)
Hash identifier: a1F68HYZO4O4sgYjeiZ/K/5ZQUFLRjCQiNhxvGkY3CU=
Subject key identifier: 1B:85:F9:CD:8B:2F:54:0F:A6:AD:DE:61:E1:58:BD:A0:5C:40:E5:03
Authority key identifier: 60:99:B7:4D:5C:9B:D1:B7:AE:0D:C6:75:E9:88:8F:94:EA:78:02:23
Certificate issuer: /CN=6099B74D5C9BD1B7AE0DC675E9888F94EA780223
Certificate serial: 6B6CB192EA52C09CF0D38BB3892B8AAB5AA7CB39
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 00:13:55 +0000
Manifest this update: Thu 17 Sep 2026 00:08:55 +0000
Manifest next update: Fri 18 Sep 2026 01:12:55 +0000
Files and hashes: 1: 6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl (hash: 9ovoFFZJ1yWaLcevtjvRJ1+Eyim5/x+EDGxeAIF4O68=)
2: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: rfB6zIUPCXAZ3rM7YYBLHBGPxWnBvq/A8DFJMLeaqGo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl
rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:6c:b1:92:ea:52:c0:9c:f0:d3:8b:b3:89:2b:8a:ab:5a:a7:cb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6099B74D5C9BD1B7AE0DC675E9888F94EA780223
Validity
Not Before: Sep 17 00:08:55 2026 GMT
Not After : Sep 18 01:12:55 2026 GMT
Subject: CN=1B85F9CD8B2F540FA6ADDE61E158BDA05C40E503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:23:af:4a:bb:ff:c4:a4:83:65:b5:a3:3e:
b1:5a:cb:07:78:58:f3:47:9b:16:c3:a4:ae:f2:9a:
49:66:7e:b1:89:f4:fa:69:d4:8d:df:1c:13:10:df:
6c:b6:aa:aa:24:93:7a:31:9b:58:6d:26:07:2f:c5:
39:d5:6f:88:ec:5e:12:53:b3:57:4a:56:ad:81:2a:
ee:53:5f:8b:8d:ab:e5:a0:41:24:96:a0:07:5b:29:
81:f9:c9:63:c3:cb:24:f9:9e:4d:35:c7:75:a3:0f:
d1:6a:d6:ff:4d:e1:52:b5:ce:5d:a8:26:a5:63:9c:
15:6b:d8:91:81:cb:bb:f7:38:c2:64:d0:15:74:93:
3e:de:a2:a4:38:29:b0:a2:c8:ee:73:cb:95:f8:fd:
50:9a:91:85:33:bc:86:11:f9:d8:f0:7d:5f:00:ac:
6d:0a:33:fa:23:aa:23:0c:df:76:cc:2b:09:2b:ac:
ed:c4:15:0a:eb:63:65:ab:98:95:6a:93:3f:e2:88:
66:e6:65:51:f5:d9:8c:cf:a4:15:ca:ba:ce:3a:94:
7e:e0:b1:fe:82:c0:36:c3:7e:e6:a7:31:eb:c5:b1:
71:1c:94:0e:ba:30:c5:a4:7b:47:06:fa:79:46:03:
5d:9b:ca:2b:07:c4:db:ac:f8:c7:e8:96:a5:c3:b5:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:F9:CD:8B:2F:54:0F:A6:AD:DE:61:E1:58:BD:A0:5C:40:E5:03
X509v3 Authority Key Identifier:
keyid:60:99:B7:4D:5C:9B:D1:B7:AE:0D:C6:75:E9:88:8F:94:EA:78:02:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/6099B74D5C9BD1B7AE0DC675E9888F94EA780223.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c1:f8:c7:ce:1f:48:b4:a0:9b:e2:10:07:73:92:95:75:6c:
da:42:7b:de:93:93:99:93:ee:20:a3:45:66:b3:eb:2b:60:8a:
69:e6:64:00:8a:ce:e9:dd:bd:cb:8f:0e:94:64:2e:8c:8c:d8:
a5:a9:d5:fd:f3:37:b0:fb:c4:3c:6e:33:05:6b:7c:10:03:e9:
0d:56:eb:28:4c:47:91:03:5c:10:40:6a:14:e8:8c:0c:a4:3a:
79:45:64:f1:30:7b:84:9b:56:a7:cb:08:0b:bc:b3:fd:81:1d:
34:1c:32:62:2e:13:c9:7d:b8:19:23:94:c7:f1:6b:88:ae:ae:
9c:8b:e3:8e:31:6c:35:e9:cd:16:45:50:bd:a9:94:9e:0e:8f:
25:8b:3b:e8:d8:12:69:8e:d1:33:81:a9:49:23:78:e2:60:33:
2e:75:2b:b7:d5:40:c5:69:80:cb:5d:e4:3a:ae:99:5a:e0:db:
81:79:9e:a7:11:b1:e1:6f:9b:06:61:7b:4d:ff:b8:71:bd:74:
83:2f:51:16:d9:68:9f:45:fe:1e:dd:64:36:84:f7:74:34:3a:
90:a9:3d:f8:2a:82:14:58:79:49:ab:0a:19:cd:bb:8b:06:7e:
31:3c:aa:f9:58:31:dd:43:d7:da:7e:c7:f9:dc:51:52:96:c7:
b0:d2:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:35:43 2026 by rpki-client