
$ rpki-client -vvf rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
File: 6D171A25D57FF823724FB6208343D200F64CBBB9.mft (raw, json)
Hash identifier: QGwzwL4kzobVlVM2i6ciVhrl0Pr9BRJEbpc840R7wXY=
Subject key identifier: FC:FF:F6:22:ED:C4:98:7B:D5:3D:AA:73:EA:D6:01:6B:D5:35:A2:43
Authority key identifier: 6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9
Certificate issuer: /CN=6D171A25D57FF823724FB6208343D200F64CBBB9
Certificate serial: 5C4B777507FECEF46894D00B41CC04352AE1E310
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 22:50:16 +0000
Manifest this update: Wed 17 Jun 2026 22:45:16 +0000
Manifest next update: Fri 19 Jun 2026 00:47:16 +0000
Files and hashes: 1: 6D171A25D57FF823724FB6208343D200F64CBBB9.crl (hash: Lf02yM54MPqGgKXrYodQSbrqTX2Ux8Ric1+8HMZLDSw=)
2: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: opRYiyX8Gzxcov3p6XrBWNKwC4F/IpDzv8/YLsBUDfE=)
3: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: 2UjxxTGC1nNXBGbq1J0Vw32Q3bb9jyytfhNHGdS8EJk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl
rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 00:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:4b:77:75:07:fe:ce:f4:68:94:d0:0b:41:cc:04:35:2a:e1:e3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D171A25D57FF823724FB6208343D200F64CBBB9
Validity
Not Before: Jun 17 22:45:16 2026 GMT
Not After : Jun 19 00:47:16 2026 GMT
Subject: CN=FCFFF622EDC4987BD53DAA73EAD6016BD535A243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:3b:48:75:cd:5e:a2:f0:70:fe:90:c5:48:
5d:b1:c2:0d:36:16:dc:1d:71:ce:ca:dc:dc:70:6b:
9f:7c:3e:c2:8b:91:39:5e:01:6a:a3:22:85:da:b6:
ff:b1:07:e7:6d:75:05:5a:11:f7:5b:63:38:aa:05:
b4:40:64:af:41:46:d9:13:90:1c:21:e3:a9:4f:41:
8c:2b:32:77:3f:34:42:c8:01:7f:c5:5d:26:2b:92:
ef:14:0e:87:89:61:da:22:a4:0f:e1:8b:9e:04:fb:
0b:83:8a:e1:20:40:41:7e:c6:e0:d7:48:ad:a2:b5:
bc:0a:a9:5c:78:74:85:cb:25:56:c1:fa:4a:42:f7:
6b:54:69:3d:50:d3:41:05:c4:e2:86:e0:03:74:11:
40:74:b4:66:c3:07:f0:6b:28:ff:1a:57:e2:f8:4f:
9f:3c:12:2b:a8:9c:53:df:26:1e:f2:5c:a8:89:17:
d4:c1:83:19:ab:14:b6:c9:3c:01:7f:55:fa:b5:73:
fc:ae:9a:bd:b0:c5:9c:a8:15:7b:09:a9:3c:8f:e3:
3c:55:d2:21:8c:ac:95:ee:1f:06:1b:51:b8:2e:d3:
9a:d0:91:a8:7a:52:2b:dd:15:c1:a9:cf:f5:65:96:
d4:d2:04:93:aa:a8:ee:99:0f:a5:58:1e:67:66:fc:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FF:F6:22:ED:C4:98:7B:D5:3D:AA:73:EA:D6:01:6B:D5:35:A2:43
X509v3 Authority Key Identifier:
keyid:6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d8:e6:f3:58:8f:e6:84:60:a2:0a:8e:1a:d1:c0:28:6a:04:
14:6a:96:cc:db:94:57:e3:a7:db:1d:4b:63:98:38:dc:86:c2:
82:69:6a:40:da:5b:6c:5e:87:1b:f1:09:f2:02:c8:a9:62:bc:
c7:a5:18:17:d4:20:2c:d8:1b:b6:bc:d1:33:2e:e4:80:78:60:
af:bc:78:67:7d:e8:3a:f5:b1:7d:5d:cc:7f:4e:bc:1d:51:04:
57:e3:de:b5:bc:cb:49:63:c4:a1:39:ce:be:7c:9f:0e:ef:69:
c2:2b:a7:3e:d6:2f:be:8b:5b:31:a8:65:ea:17:ea:fa:26:25:
52:d7:32:65:42:3b:c3:d5:80:ac:7b:de:72:94:87:45:a7:56:
ae:f8:a0:a6:8d:93:7d:b7:b1:d6:e5:bd:e5:e8:66:fa:86:c9:
66:27:5e:83:cb:ff:66:a9:90:80:8b:ec:b4:23:54:97:ed:92:
fe:7a:f0:53:0b:56:df:89:0f:08:a8:13:af:32:18:5a:3c:e2:
19:6a:0b:20:b4:57:58:f6:be:88:a5:5e:4e:90:ef:53:bd:2b:
c3:91:db:1a:21:a3:18:84:4b:42:48:73:49:f6:17:47:7f:ba:
b0:1e:f4:28:89:ca:23:47:3b:f0:40:80:3f:3e:e7:63:6a:69:
1e:a8:c2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:15:37 2026 by rpki-client