
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft
File: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft (raw, json)
Hash identifier: ujzDcKQ/+1EipbTHTH6D8Ky42b0miTZag/I9DYkxnCY=
Subject key identifier: 42:B9:8E:74:F6:A0:60:1D:B0:86:81:C0:5F:5B:9D:4B:85:AD:7E:68
Authority key identifier: C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA
Certificate issuer: /CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA
Certificate serial: 40F5A722C2FBA42B2BF8EAF8A855619CE0948B1F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 21:43:50 +0000
Manifest this update: Wed 17 Jun 2026 21:38:50 +0000
Manifest next update: Fri 19 Jun 2026 01:24:50 +0000
Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: HZspwOVsQwVfgqob+tdF/VYwOu0qjgbpMvggc2B5G9U=)
2: C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl (hash: D1qoP29Ut04GcoSQrJKGZQtEvR8SU36YXHGHtWZOgck=)
3: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: jKcMmkxCrjthwE2DnIqjL6jc1f5PWi5F1NKZnZH2qVE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl
rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 01:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f5:a7:22:c2:fb:a4:2b:2b:f8:ea:f8:a8:55:61:9c:e0:94:8b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA
Validity
Not Before: Jun 17 21:38:50 2026 GMT
Not After : Jun 19 01:24:50 2026 GMT
Subject: CN=42B98E74F6A0601DB08681C05F5B9D4B85AD7E68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:98:bf:b5:34:d8:1c:23:2d:67:1f:c7:4c:
b8:8e:97:0e:16:92:24:fa:b0:33:f3:e7:29:e4:ef:
c0:9f:fc:0c:6f:41:6c:ca:37:b1:f9:8f:8a:1e:66:
e7:a4:99:80:c9:ff:94:3b:ec:a6:26:e2:ac:b3:ae:
df:e7:bb:4e:05:55:5d:99:40:f0:62:de:90:37:23:
54:7a:f8:9a:0a:8b:d1:b5:82:5b:d5:99:ea:f9:f4:
ee:9b:3c:b9:09:3f:be:2c:13:f8:d9:53:03:87:23:
28:2a:94:68:9e:e1:f3:96:a9:8b:2d:41:3d:c8:4a:
19:d6:45:a9:12:93:a2:a7:99:61:61:58:89:d2:12:
7b:4e:5d:99:b3:85:08:c9:aa:de:53:16:0d:ab:58:
35:06:2b:3f:82:db:49:27:d2:12:42:f3:9b:2f:12:
8d:37:8d:0f:96:2f:1a:6f:2a:57:93:c0:11:9d:3a:
06:1f:b8:c0:1a:83:ea:98:49:ac:8d:c4:cf:f6:d1:
7a:5e:bf:89:ee:f6:c3:74:62:d3:bc:f9:ee:6b:74:
09:ef:7f:f2:b2:8e:ce:ac:58:46:d3:51:52:b6:ec:
64:ab:6e:b9:91:8c:29:a2:59:05:e0:ad:e8:a4:5f:
85:d1:d7:fc:4b:48:a0:74:ea:64:4b:11:c1:3b:5f:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B9:8E:74:F6:A0:60:1D:B0:86:81:C0:5F:5B:9D:4B:85:AD:7E:68
X509v3 Authority Key Identifier:
keyid:C6:CB:B3:A9:8D:D4:74:C4:49:70:B8:B4:F0:6C:19:44:C3:BA:05:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/C6CBB3A98DD474C44970B8B4F06C1944C3BA05EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:33:c5:5f:51:ee:8f:3c:bf:5f:2b:d9:6d:5e:cd:84:1f:41:
cb:9b:af:a4:22:c8:b7:0d:a7:82:49:c4:19:55:24:bf:df:4d:
66:28:b5:18:38:12:cd:f6:e5:f7:33:c1:9e:12:31:ee:e4:45:
d0:8c:51:73:47:6f:25:cd:1b:34:35:ca:db:64:90:08:e5:9c:
66:13:f9:50:15:87:33:40:da:f4:0b:44:5d:63:78:74:13:45:
59:b9:be:2c:ed:ac:19:35:dc:e3:98:2e:c1:3e:c1:91:c3:92:
d9:09:41:2a:90:f6:1b:05:ae:f2:1e:f8:59:ab:db:4b:1e:90:
22:25:f9:b6:66:a0:19:02:e1:6f:b5:d6:1e:07:a2:80:f2:a3:
ba:12:07:58:f8:12:f5:44:72:a6:5a:69:fa:06:ae:3a:11:6a:
14:07:a7:3f:d7:9a:65:9b:8b:86:0f:5c:8f:22:ed:77:9e:76:
3b:cb:f0:d0:84:7e:7e:3e:ac:c6:dc:bd:9c:8e:cc:23:f7:ee:
86:5b:9f:2c:35:9b:be:cb:8c:b8:8b:a7:0c:f9:bf:4a:21:d8:
51:9c:29:0d:1b:1f:de:43:3d:b9:3c:9f:64:e0:2d:e1:d2:dd:
6a:fd:b4:fb:ef:5f:f8:bf:34:0e:3e:0b:5c:b6:cb:91:b4:55:
91:6e:50:f1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQPWnIsL7pCsr+Or4qFVhnOCUix8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRD
M0JBMDVFQTAeFw0yNjA2MTcyMTM4NTBaFw0yNjA2MTkwMTI0NTBaMDMxMTAvBgNV
BAMTKDQyQjk4RTc0RjZBMDYwMURCMDg2ODFDMDVGNUI5RDRCODVBRDdFNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqJi/tTTYHCMtZx/HTLiOlw4W
kiT6sDPz5ynk78Cf/AxvQWzKN7H5j4oeZuekmYDJ/5Q77KYm4qyzrt/nu04FVV2Z
QPBi3pA3I1R6+JoKi9G1glvVmer59O6bPLkJP74sE/jZUwOHIygqlGie4fOWqYst
QT3IShnWRakSk6KnmWFhWInSEntOXZmzhQjJqt5TFg2rWDUGKz+C20kn0hJC85sv
Eo03jQ+WLxpvKleTwBGdOgYfuMAag+qYSayNxM/20Xpev4nu9sN0YtO8+e5rdAnv
f/Kyjs6sWEbTUVK27GSrbrmRjCmiWQXgreikX4XR1/xLSKB06mRLEcE7X2U7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQrmOdPagYB2whoHAX1udS4WtfmgwHwYDVR0j
BBgwFoAUxsuzqY3UdMRJcLi08GwZRMO6BeowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2FmMDdmMTgtNWM0OS00MTI5LWFhNTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4
REQ0NzRDNDQ5NzBCOEI0RjA2QzE5NDRDM0JBMDVFQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9DNkNCQjNBOThERDQ3NEM0NDk3MEI4QjRGMDZDMTk0NEMzQkEw
NUVBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh
NTMtNzA4NWNjZDU3YjYzLzAvQzZDQkIzQTk4REQ0NzRDNDQ5NzBCOEI0RjA2QzE5
NDRDM0JBMDVFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABEzxV9R7o88v18r2W1ezYQfQcubr6QiyLcN
p4JJxBlVJL/fTWYotRg4Es325fczwZ4SMe7kRdCMUXNHbyXNGzQ1yttkkAjlnGYT
+VAVhzNA2vQLRF1jeHQTRVm5viztrBk13OOYLsE+wZHDktkJQSqQ9hsFrvIe+Fmr
20sekCIl+bZmoBkC4W+11h4HooDyo7oSB1j4EvVEcqZaafoGrjoRahQHpz/XmmWb
i4YPXI8i7XeedjvL8NCEfn4+rMbcvZyOzCP37oZbnyw1m77LjLiLpwz5v0oh2FGc
KQ0bH95DPbk8n2TgLeHS3Wr9tPvvX/i/NA4+C1y2y5G0VZFuUPE=
-----END CERTIFICATE-----
Generated at Thu Jun 18 17:16:00 2026 by rpki-client