
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
File: 6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft (raw, json)
Hash identifier: XDvZu5pieZy5a79zsz+h8owpuCZ0SrQ3kmMjd59rSFE=
Subject key identifier: 85:A6:05:08:82:36:ED:85:6C:1F:79:43:7F:2A:0D:20:F3:C3:ED:B4
Authority key identifier: 6F:6E:A0:D1:6E:82:88:D1:7A:47:0B:D5:1F:92:A3:49:C0:54:6C:57
Certificate issuer: /CN=6F6EA0D16E8288D17A470BD51F92A349C0546C57
Certificate serial: 239858F910E84E69C543ADAD3FFE2B1D32FEFC8C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
Manifest number: BA
Signing time: Thu 17 Sep 2026 03:48:14 +0000
Manifest this update: Thu 17 Sep 2026 03:43:14 +0000
Manifest next update: Fri 18 Sep 2026 04:08:14 +0000
Files and hashes: 1: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: WQ6DOIdSKVAA4byBsNGYK5xMdMyH4CwRYtpJ87YdQ9E=)
2: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: 5L8OxoDBph/9fu+4CbtRAtlIzGmHICxIfDadaISFa44=)
3: 6F6EA0D16E8288D17A470BD51F92A349C0546C57.crl (hash: V3Y7d77DSrxBM1gf5pLlrN2dLeAj8ew91YmTftMl34U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.crl
rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 04:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:98:58:f9:10:e8:4e:69:c5:43:ad:ad:3f:fe:2b:1d:32:fe:fc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F6EA0D16E8288D17A470BD51F92A349C0546C57
Validity
Not Before: Sep 17 03:43:14 2026 GMT
Not After : Sep 18 04:08:14 2026 GMT
Subject: CN=85A605088236ED856C1F79437F2A0D20F3C3EDB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:85:22:5b:9c:bc:5a:df:cf:94:60:83:77:
24:a9:82:97:b3:b5:63:be:1e:05:a1:63:8c:5c:95:
c9:ce:13:fa:89:05:55:c0:de:e0:e9:fe:42:65:f4:
d6:ea:8a:a9:16:0f:6c:8b:13:5f:ee:df:1f:63:6b:
f0:ce:f8:02:8b:a5:b3:bb:04:9e:cc:95:34:36:2a:
6c:45:63:74:37:e5:ba:78:79:ae:8b:a7:1e:c5:60:
d6:3e:3b:74:ee:a9:37:e3:36:37:88:ea:dd:fb:78:
15:40:a2:0b:a6:86:3b:e5:bf:bb:95:ae:0f:d4:f1:
0c:85:cf:06:df:72:d5:b1:f5:9c:7b:28:38:33:be:
24:53:db:f0:84:4e:29:69:4d:4c:fc:8f:3a:9e:74:
fe:96:c6:44:45:d7:66:60:08:62:71:2c:44:8b:4e:
02:eb:06:df:1f:0a:33:1e:7e:38:ff:c4:1d:12:b1:
56:d0:14:e3:d6:4d:0a:cd:6b:39:b6:e6:75:20:7e:
03:7a:a4:34:f1:8b:c9:33:34:a5:1b:90:7c:c1:3d:
41:9a:f2:05:28:3a:a9:5f:e7:da:33:90:c0:82:61:
74:d4:63:2f:3a:f6:62:2d:02:c1:1b:d0:50:3c:38:
71:71:85:ab:3b:c8:99:bb:8d:00:91:01:71:f3:cc:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A6:05:08:82:36:ED:85:6C:1F:79:43:7F:2A:0D:20:F3:C3:ED:B4
X509v3 Authority Key Identifier:
keyid:6F:6E:A0:D1:6E:82:88:D1:7A:47:0B:D5:1F:92:A3:49:C0:54:6C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f8:58:f1:b1:1c:58:70:5e:fa:90:4c:15:51:1f:37:d1:5f:
f8:44:cb:e8:0d:23:9b:0f:f1:9c:04:b5:74:80:89:64:a7:a1:
50:2c:0e:39:9c:11:97:9e:ed:ec:56:86:56:53:3e:7b:2e:91:
e4:53:c2:fa:f3:44:9a:5a:e8:45:35:ac:ec:46:d7:7f:bd:8e:
16:84:25:30:9b:17:6d:e0:48:ca:5f:aa:6c:23:1c:c9:3e:2a:
e2:b9:73:0b:28:53:40:f4:37:97:58:69:60:1b:67:1d:29:c3:
77:24:08:b3:29:21:ae:c3:08:ed:e1:9b:0b:31:99:8a:50:26:
a5:25:a6:b1:50:bc:55:01:18:d1:78:87:8f:80:b7:a3:45:43:
60:b1:7e:df:d4:f2:fb:fd:5a:62:18:6a:b9:9e:ed:28:33:46:
68:0f:f2:b9:c9:df:11:3c:9a:6b:91:41:9a:79:49:23:d6:3b:
d1:33:c6:73:3c:fb:28:64:a5:d3:40:5c:09:57:b3:b7:d8:27:
1c:76:28:41:de:77:35:15:ea:58:58:36:a8:17:c2:40:93:0e:
85:52:6d:33:e1:d1:42:75:51:ef:23:98:6e:5a:0d:64:97:2d:
bb:65:2c:f9:c7:7e:0e:a4:2b:9e:b0:dc:07:52:7b:44:98:81:
86:85:2d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:12:27 2026 by rpki-client