
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft
File: 6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft (raw, json)
Hash identifier: zr77AR6g1cV0QvTmubLrMN5bO8+gkXj/cwIqveLw6nU=
Subject key identifier: 95:B4:4E:67:47:69:13:9D:06:47:CF:80:00:D1:BB:EC:8E:11:A7:FA
Authority key identifier: 6D:B4:41:CB:4C:FB:11:6A:FE:8A:E0:30:14:3C:7D:E4:0A:F8:9B:B0
Certificate issuer: /CN=6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0
Certificate serial: 2F0DE2325E0B15DA1AACEC9AF5EB78A05B570424
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 21:24:50 +0000
Manifest this update: Thu 17 Sep 2026 21:19:50 +0000
Manifest next update: Fri 18 Sep 2026 22:36:50 +0000
Files and hashes: 1: 6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl (hash: JiMukol25qdssi7qpRZLlRgQzLdrIkcUoIO2V679PEI=)
2: 3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa (hash: wL8mPbrDXSqS55aHxdLNlPMS48d9sDFxyNKF6bE5qfk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl
rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 22:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:0d:e2:32:5e:0b:15:da:1a:ac:ec:9a:f5:eb:78:a0:5b:57:04:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0
Validity
Not Before: Sep 17 21:19:50 2026 GMT
Not After : Sep 18 22:36:50 2026 GMT
Subject: CN=95B44E674769139D0647CF8000D1BBEC8E11A7FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:8b:d2:62:62:a0:de:95:cf:e4:8c:06:b4:
37:83:27:9f:43:ea:3e:28:11:bc:99:58:c3:b0:43:
e9:12:52:a0:a9:77:11:4d:f5:d0:fd:d0:f9:92:b9:
58:a7:85:5a:b3:e8:cf:49:d6:92:0e:e4:d5:06:cd:
14:93:ce:ac:09:61:01:ed:0b:f8:e0:2d:be:cf:ef:
56:07:b5:16:bc:83:d2:b5:ff:49:dc:82:39:b3:27:
d1:44:e4:27:c1:c5:ea:3a:7c:a2:c5:76:2f:a0:01:
fa:ba:99:f4:c8:17:6b:52:93:06:97:08:c6:1e:d7:
a1:4f:51:b5:14:38:48:49:1f:3d:23:a9:20:ad:36:
23:4f:e3:3a:f7:f0:7e:b1:02:c9:99:5a:10:8d:c1:
0a:b0:08:e9:aa:e6:64:14:26:bf:1a:94:9f:34:4b:
78:b7:b2:44:d4:c1:45:38:bd:2e:cf:8e:6d:81:c3:
db:35:58:ab:26:7b:d4:93:e6:97:2e:37:01:7c:e9:
e1:3b:b1:03:bd:66:16:fc:a0:24:d6:a8:c8:b9:f4:
60:42:74:cc:8c:41:35:ed:86:d9:cf:32:a9:86:e2:
c3:48:c9:28:8d:f9:43:96:ce:f4:33:c0:5e:c6:7f:
60:43:2c:20:c9:6e:39:a9:cf:17:a0:1b:a2:8c:1d:
4a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B4:4E:67:47:69:13:9D:06:47:CF:80:00:D1:BB:EC:8E:11:A7:FA
X509v3 Authority Key Identifier:
keyid:6D:B4:41:CB:4C:FB:11:6A:FE:8A:E0:30:14:3C:7D:E4:0A:F8:9B:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/6DB441CB4CFB116AFE8AE030143C7DE40AF89BB0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a9:11:75:a9:97:3a:ab:8f:87:94:cf:81:c0:98:f8:b7:eb:
b2:19:63:9b:53:fb:88:00:51:e4:bc:1a:8e:1f:29:e3:b1:06:
26:59:40:74:c9:6a:a2:a7:92:2d:d7:29:2a:46:e8:cf:f5:9f:
87:3f:fb:ce:7b:71:b2:e1:80:5b:aa:95:1d:52:2f:82:a8:8d:
8b:23:11:48:df:8f:28:df:61:84:a8:53:60:71:46:5b:39:57:
c2:61:7f:34:dc:cd:f4:27:f3:8f:fa:3c:6d:da:f4:80:3b:d6:
f4:4e:17:24:a3:63:93:39:0e:62:9e:e1:8e:3b:9f:39:10:44:
25:70:6b:4a:6a:ef:c3:c0:af:d6:a8:28:de:c9:59:b4:86:0e:
71:60:06:f0:af:dd:69:88:bd:65:bf:8e:a3:fe:64:d5:30:dd:
71:52:fc:8e:25:9b:66:9e:d2:96:5b:49:20:74:b6:f5:6a:7a:
09:b0:24:79:65:6a:89:57:43:95:2f:70:3c:9e:70:06:40:a7:
05:f2:0b:a3:8f:9c:fe:30:ed:59:0f:50:3d:95:69:8d:04:80:
41:78:f8:f4:5d:c6:1d:e0:c8:8f:f5:83:8c:17:d7:2c:38:be:
8e:15:fe:77:33:bc:4e:6b:ff:92:d1:00:a4:d6:cd:7d:0e:89:
cd:37:99:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:07:03 2026 by rpki-client