
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/6E9E7C02630983CE900C230302BBB85D5049C526.mft
File: 6E9E7C02630983CE900C230302BBB85D5049C526.mft (raw, json)
Hash identifier: cnSZ7X4kIyVcZTP89oUvNmmJKJcE43HMCk3pNd2lLCY=
Subject key identifier: 59:DB:4C:08:6A:0D:E6:AB:16:D2:6C:69:0A:3A:75:BB:3E:64:71:84
Authority key identifier: 6E:9E:7C:02:63:09:83:CE:90:0C:23:03:02:BB:B8:5D:50:49:C5:26
Certificate issuer: /CN=6E9E7C02630983CE900C230302BBB85D5049C526
Certificate serial: 5BE59D3F91D6387B7015C48B5211BB758387DB7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E9E7C02630983CE900C230302BBB85D5049C526.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/6E9E7C02630983CE900C230302BBB85D5049C526.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 22:47:05 +0000
Manifest this update: Wed 16 Sep 2026 22:42:05 +0000
Manifest next update: Fri 18 Sep 2026 00:32:05 +0000
Files and hashes: 1: 3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa (hash: n2u6M7lUl0VvUPnrSzKUG4d1fJRNrVoX/uyHO0JINng=)
2: 6E9E7C02630983CE900C230302BBB85D5049C526.crl (hash: NPDexC06m6IiRDFv/ErbWjoor11z2N+SVAPFHtKx6uE=)
3: 3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa (hash: NOFO5rIKz2BY2ps/bHzbjsEH30e9BdQccOspDTn66/M=)
4: 3130332e3231312e32362e302f32332d3233203d3e20313530313933.roa (hash: J4Hu86/94BilpR6MnLAJvUpbyzHv8/+rQjzs8pQjoxA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/6E9E7C02630983CE900C230302BBB85D5049C526.crl
rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/6E9E7C02630983CE900C230302BBB85D5049C526.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E9E7C02630983CE900C230302BBB85D5049C526.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e5:9d:3f:91:d6:38:7b:70:15:c4:8b:52:11:bb:75:83:87:db:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E9E7C02630983CE900C230302BBB85D5049C526
Validity
Not Before: Sep 16 22:42:05 2026 GMT
Not After : Sep 18 00:32:05 2026 GMT
Subject: CN=59DB4C086A0DE6AB16D26C690A3A75BB3E647184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:c9:af:ce:e4:28:e8:65:96:25:18:60:aa:
b9:67:65:8d:40:8a:66:d5:28:9e:ba:43:bf:2b:17:
d9:86:76:ef:af:1a:3d:62:b9:ed:b2:a8:0a:2f:bf:
10:fe:65:9f:50:07:98:96:96:21:f4:a0:8c:ee:58:
c5:8a:80:a4:09:e1:06:38:4a:c6:bc:30:12:2f:c3:
0b:e9:cf:c6:21:ce:72:19:50:d5:7f:77:5d:ed:ed:
88:f3:c6:d2:26:99:17:13:4f:36:60:93:3d:05:cb:
d6:3a:dc:6c:26:3e:c2:c6:d7:28:5b:c3:cd:dc:ef:
e4:41:0f:a5:87:4e:aa:0c:fd:fd:b2:20:0d:21:78:
ce:94:05:f6:01:56:83:35:67:e5:16:2c:02:a5:4c:
99:47:8a:31:c7:02:15:bc:27:79:35:e5:b1:95:96:
4a:f7:3e:28:cd:ef:25:e8:d8:45:dd:c8:aa:49:12:
62:4f:c3:e5:e7:f6:1f:23:e5:b0:fc:6d:9c:c2:05:
b7:f2:4f:e7:09:92:f0:6e:81:ca:74:f5:7f:b5:89:
95:c9:22:e0:39:44:b6:61:da:a7:a5:83:32:30:bf:
23:db:cc:d3:23:c0:20:2a:00:d8:38:50:52:dd:26:
17:22:5c:91:b6:b9:0d:22:2c:35:8d:76:1f:41:43:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DB:4C:08:6A:0D:E6:AB:16:D2:6C:69:0A:3A:75:BB:3E:64:71:84
X509v3 Authority Key Identifier:
keyid:6E:9E:7C:02:63:09:83:CE:90:0C:23:03:02:BB:B8:5D:50:49:C5:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/6E9E7C02630983CE900C230302BBB85D5049C526.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E9E7C02630983CE900C230302BBB85D5049C526.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/6E9E7C02630983CE900C230302BBB85D5049C526.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f8:0e:cd:cd:92:a9:23:44:73:8e:a8:1f:e1:3a:24:eb:9c:
f9:47:2a:00:28:25:fc:ef:9e:98:69:71:5c:46:00:91:47:e0:
c7:87:32:5a:86:7c:3e:b4:3f:84:68:ea:55:12:7f:3e:02:a7:
1d:c5:de:a9:3f:40:b1:db:e9:33:0d:54:35:b9:23:21:b7:cd:
90:1d:c0:13:62:0b:b8:04:ac:49:a1:99:f9:c7:42:c8:7f:be:
fc:2d:6c:a9:a1:33:4e:96:12:b3:95:8e:4c:84:0d:eb:b1:a9:
18:1b:c3:75:cb:5f:02:4a:98:63:59:a4:59:e4:bb:cd:1b:ac:
2c:96:15:5c:b7:44:b3:95:6a:90:9d:7d:5d:3a:5b:5b:92:8d:
42:ae:53:2a:54:f3:cb:f2:30:36:3e:cf:02:3e:1a:59:cc:91:
25:a7:65:ad:e9:d7:45:ea:99:f6:a7:b8:f7:71:07:6f:61:29:
2f:52:10:00:8c:27:27:b8:1e:65:ec:94:4f:79:c6:71:d2:c2:
ab:1e:90:8d:44:83:16:7f:c7:76:ef:53:d4:83:ee:33:e8:2e:
ac:2f:9b:33:ab:99:2b:ee:c6:21:05:43:00:5d:0b:e9:30:f1:
54:01:7a:bb:4e:cb:b4:10:7d:0f:e7:d4:05:96:2a:1b:61:97:
87:b5:9b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:28:33 2026 by rpki-client