
$ rpki-client -vvf rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
File: 6D171A25D57FF823724FB6208343D200F64CBBB9.mft (raw, json)
Hash identifier: AqCo0qUt+7/SyAep+HT8kGR3taexu+7il5Z8SJYRUeM=
Subject key identifier: FA:1E:5C:01:B2:AD:A6:55:A0:2F:CD:FA:A4:87:15:23:FE:53:39:29
Authority key identifier: 6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9
Certificate issuer: /CN=6D171A25D57FF823724FB6208343D200F64CBBB9
Certificate serial: 6217C32EF74F028D56B7E3C8F2D68492CD63FECC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
Manifest number: 7B
Signing time: Sun 02 Aug 2026 01:09:06 +0000
Manifest this update: Sun 02 Aug 2026 01:04:06 +0000
Manifest next update: Mon 03 Aug 2026 04:40:06 +0000
Files and hashes: 1: 6D171A25D57FF823724FB6208343D200F64CBBB9.crl (hash: myDlqYWmf1Mt2VtC/N95isZBSN8YE/oxXbE99ZR3Jvk=)
2: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: 2UjxxTGC1nNXBGbq1J0Vw32Q3bb9jyytfhNHGdS8EJk=)
3: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: opRYiyX8Gzxcov3p6XrBWNKwC4F/IpDzv8/YLsBUDfE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl
rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:17:c3:2e:f7:4f:02:8d:56:b7:e3:c8:f2:d6:84:92:cd:63:fe:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D171A25D57FF823724FB6208343D200F64CBBB9
Validity
Not Before: Aug 2 01:04:06 2026 GMT
Not After : Aug 3 04:40:06 2026 GMT
Subject: CN=FA1E5C01B2ADA655A02FCDFAA4871523FE533929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:ac:03:b8:25:59:d7:0d:9a:fb:d9:9d:35:
9f:09:ed:15:f9:d3:11:c7:d6:66:b7:04:c6:aa:30:
f3:c3:49:fb:d3:4f:a7:4c:5e:68:df:dc:0a:97:4b:
66:44:f4:a9:ea:15:8f:3f:6d:0a:cc:0d:de:db:e4:
7b:8f:41:50:6a:28:8d:bc:3c:8c:61:3c:a5:02:65:
96:63:66:37:21:88:7d:7b:1f:a2:6d:a1:ab:61:12:
60:7c:1a:dc:46:ea:f6:31:16:02:a5:0d:d3:64:d4:
ec:02:57:cd:6e:99:fb:4a:95:6f:db:30:59:82:bd:
4b:48:da:15:78:f4:b9:7b:c0:c2:25:75:98:3e:e9:
77:46:4a:e9:b9:0c:25:eb:d7:80:f8:3c:2f:c1:2f:
50:0b:78:96:35:99:5f:b0:0d:71:6d:9a:b4:71:d4:
68:bf:fe:dd:3b:a2:f6:43:67:2b:a3:45:3b:96:27:
14:e8:c2:be:f9:7e:d5:a7:3d:5d:3e:7d:09:a8:3b:
73:ec:ea:e3:ca:d5:49:61:a9:f1:fd:56:6b:0e:a4:
d1:89:33:3b:dd:3b:d8:20:9c:6f:6c:67:27:83:ae:
f1:3c:cc:10:a0:2c:fb:5f:c4:21:e7:3f:ce:69:b5:
bb:ae:f3:74:d3:8d:78:ba:92:03:03:6d:76:70:57:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1E:5C:01:B2:AD:A6:55:A0:2F:CD:FA:A4:87:15:23:FE:53:39:29
X509v3 Authority Key Identifier:
keyid:6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:99:37:94:ff:7e:dd:91:0d:f4:90:b0:9a:75:c4:58:a2:4c:
b4:a8:02:f0:06:7d:f3:c2:63:71:5a:ff:6d:68:e9:b2:7f:cf:
e6:ca:25:04:86:f6:7a:81:04:c1:c6:e1:ee:77:51:87:3c:28:
42:89:5d:77:82:a0:a3:ae:ef:15:79:36:9d:93:bd:90:2b:f3:
ab:c8:4f:6f:ef:64:1c:f7:31:fb:08:87:a0:4a:df:c4:60:ea:
4e:6e:04:0e:d5:e3:c8:9f:63:2b:45:f0:4f:c5:f1:28:95:f8:
03:a9:41:ec:c9:dd:c2:cc:91:32:c2:c8:09:6e:e4:17:85:6f:
c7:cf:89:b6:b5:6c:71:64:37:db:c0:9d:11:af:42:eb:c3:ed:
65:96:cc:b5:4f:26:ee:27:72:68:54:17:81:1d:d7:3f:a9:b5:
c8:f3:f5:56:9d:b0:76:78:2a:d9:0a:aa:16:05:ce:72:69:6e:
7f:b8:6b:58:78:a5:8b:5d:26:6f:12:cb:f1:90:75:41:b8:de:
72:02:bb:5d:79:5e:cc:86:fa:20:19:f6:cb:cb:13:39:ce:44:
25:54:89:1c:8e:14:69:0b:c8:3d:57:ca:72:48:95:4e:c3:2a:
82:8c:fc:83:c9:63:37:0d:2d:0d:f1:9f:2d:0f:bc:d0:56:9d:
a3:9d:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 20:35:41 2026 by rpki-client