
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft
File: 6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft (raw, json)
Hash identifier: U0eAknsPx4CQMicXZcWWVU7hDWKmeoFLSJJr4G/PHAc=
Subject key identifier: D9:B4:EC:71:78:D2:52:77:5D:85:52:F0:B0:A9:BB:21:09:3A:60:0B
Authority key identifier: 6B:9B:F1:E1:9F:7B:AA:8F:C4:BB:47:0A:E1:9E:C4:18:6F:6F:BB:BD
Certificate issuer: /CN=6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD
Certificate serial: 0FCC8B7A65D1B4B0105A783970DC54536414C2E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft
Manifest number: 3F
Signing time: Thu 18 Jun 2026 05:08:16 +0000
Manifest this update: Thu 18 Jun 2026 05:03:16 +0000
Manifest next update: Fri 19 Jun 2026 07:53:16 +0000
Files and hashes: 1: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: Td28/CJkhSrDBpr5GMD46a5qt8s5yGrgfbAD8PtUEzk=)
2: 6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl (hash: mtqSHrMNrns6OHqETp1tAiMrdU1M+W+YA8gxaDfFKWk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl
rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 07:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:cc:8b:7a:65:d1:b4:b0:10:5a:78:39:70:dc:54:53:64:14:c2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD
Validity
Not Before: Jun 18 05:03:16 2026 GMT
Not After : Jun 19 07:53:16 2026 GMT
Subject: CN=D9B4EC7178D252775D8552F0B0A9BB21093A600B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:13:91:7a:c9:0d:e2:87:52:a8:09:3c:f8:
36:79:5b:b3:e5:a7:e3:40:99:05:4a:51:fc:ed:cf:
06:10:a1:d3:5d:32:37:03:e1:2a:53:9f:e1:c9:68:
4a:1c:be:91:10:02:1c:e7:46:af:4c:fb:11:9d:a7:
9f:93:aa:3e:54:7d:b2:0d:58:fa:45:15:31:0a:b3:
5b:f7:cb:b0:84:b8:c4:f5:a0:94:4f:b7:7f:76:30:
3e:b2:df:63:82:55:db:29:66:e4:66:69:cd:69:8f:
40:4f:ef:57:ef:f9:68:f4:59:fb:0e:f2:3f:68:09:
1c:76:3b:af:a3:32:74:43:c8:34:e5:a0:32:f3:9c:
79:76:32:0f:24:0a:59:10:d7:81:2c:16:42:62:f6:
e1:07:0b:fd:5c:e3:3a:78:d3:cf:f7:b1:63:66:9c:
d0:19:3d:0e:49:fe:07:6d:93:86:7d:b8:4f:c3:c2:
ff:86:79:0c:47:85:8f:5f:cf:13:f8:59:fb:91:f9:
d3:6c:5d:d7:7a:68:fb:66:47:f0:41:14:93:56:58:
49:ea:3e:f0:7e:9c:b8:09:3c:94:2b:61:45:59:44:
79:78:68:c7:3b:5b:4d:e9:4c:76:dc:23:cb:5d:84:
70:44:18:11:a3:17:36:a3:93:b2:e7:0b:17:db:2a:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B4:EC:71:78:D2:52:77:5D:85:52:F0:B0:A9:BB:21:09:3A:60:0B
X509v3 Authority Key Identifier:
keyid:6B:9B:F1:E1:9F:7B:AA:8F:C4:BB:47:0A:E1:9E:C4:18:6F:6F:BB:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:81:b4:3e:56:24:a1:2d:50:52:f3:45:24:56:c3:25:69:b5:
d5:76:9d:9d:d3:bb:0b:4c:b6:18:ff:fb:02:fa:42:39:a2:8d:
a8:6f:2c:72:48:4a:c9:30:61:5f:71:2e:45:53:bc:24:34:d8:
25:26:20:d7:cd:af:46:e7:31:bc:e1:a8:52:94:90:a3:02:a1:
48:6f:61:18:01:38:d8:48:19:66:6d:e2:33:33:c5:6a:e9:89:
35:75:55:b9:6f:58:75:65:83:27:a5:bc:2e:81:dd:d4:e3:92:
67:00:30:6b:48:ad:30:ac:92:81:94:e6:1a:7b:fb:92:bb:b0:
23:c3:30:60:f2:b2:d3:d1:27:21:3c:74:3e:71:9d:f3:9f:0e:
52:e3:9c:b0:c4:b6:98:c1:c0:d1:1f:39:25:90:e7:e9:43:36:
33:4e:fd:40:d9:20:f3:13:5b:f8:37:79:ca:9f:2a:f1:2f:9d:
f7:03:a0:f3:43:06:a0:42:f2:37:69:f9:81:b6:c0:10:24:f3:
61:57:28:d4:7f:27:29:df:6f:9f:63:f2:2d:37:45:42:f5:40:
f5:55:54:5e:d8:e9:2d:d1:87:35:67:48:e1:cd:37:7a:e1:26:
2b:c2:b6:58:51:63:1c:90:a4:56:a2:74:47:cb:86:38:79:44:
bd:69:5d:73
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUD8yLemXRtLAQWng5cNxUU2QUwuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI5QkYxRTE5RjdCQUE4RkM0QkI0NzBBRTE5RUM0MTg2
RjZGQkJCRDAeFw0yNjA2MTgwNTAzMTZaFw0yNjA2MTkwNzUzMTZaMDMxMTAvBgNV
BAMTKEQ5QjRFQzcxNzhEMjUyNzc1RDg1NTJGMEIwQTlCQjIxMDkzQTYwMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87xOReskN4odSqAk8+DZ5W7Pl
p+NAmQVKUfztzwYQodNdMjcD4SpTn+HJaEocvpEQAhznRq9M+xGdp5+Tqj5UfbIN
WPpFFTEKs1v3y7CEuMT1oJRPt392MD6y32OCVdspZuRmac1pj0BP71fv+Wj0WfsO
8j9oCRx2O6+jMnRDyDTloDLznHl2Mg8kClkQ14EsFkJi9uEHC/1c4zp408/3sWNm
nNAZPQ5J/gdtk4Z9uE/Dwv+GeQxHhY9fzxP4WfuR+dNsXdd6aPtmR/BBFJNWWEnq
PvB+nLgJPJQrYUVZRHl4aMc7W03pTHbcI8tdhHBEGBGjFzajk7LnCxfbKpOJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU2bTscXjSUnddhVLwsKm7IQk6YAswHwYDVR0j
BBgwFoAUa5vx4Z97qo/Eu0cK4Z7EGG9vu70wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWY5ZTFhOGEtMzlmMS00ZmUyLTgzMmEtYmIyZjIwOTJmYmY2LzAvNkI5QkYxRTE5
RjdCQUE4RkM0QkI0NzBBRTE5RUM0MTg2RjZGQkJCRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82QjlCRjFFMTlGN0JBQThGQzRCQjQ3MEFFMTlFQzQxODZGNkZC
QkJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWY5ZTFhOGEtMzlmMS00ZmUyLTgz
MmEtYmIyZjIwOTJmYmY2LzAvNkI5QkYxRTE5RjdCQUE4RkM0QkI0NzBBRTE5RUM0
MTg2RjZGQkJCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHGBtD5WJKEtUFLzRSRWwyVptdV2nZ3TuwtM
thj/+wL6QjmijahvLHJISskwYV9xLkVTvCQ02CUmINfNr0bnMbzhqFKUkKMCoUhv
YRgBONhIGWZt4jMzxWrpiTV1VblvWHVlgyelvC6B3dTjkmcAMGtIrTCskoGU5hp7
+5K7sCPDMGDystPRJyE8dD5xnfOfDlLjnLDEtpjBwNEfOSWQ5+lDNjNO/UDZIPMT
W/g3ecqfKvEvnfcDoPNDBqBC8jdp+YG2wBAk82FXKNR/Jynfb59j8i03RUL1QPVV
VF7Y6S3RhzVnSOHNN3rhJivCtlhRYxyQpFaidEfLhjh5RL1pXXM=
-----END CERTIFICATE-----
Generated at Thu Jun 18 17:13:36 2026 by rpki-client