
$ rpki-client -vvf rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
File: 6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft (raw, json)
Hash identifier: mbq8/bdmx50L4+oM7HUg0mBaLiEeB+Q2H32LS4dj/oU=
Subject key identifier: 12:CA:61:E1:FF:E6:7C:D6:2C:47:BB:45:1B:CA:E6:1D:1A:8A:22:AA
Authority key identifier: 6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24
Certificate issuer: /CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824
Certificate serial: 02825F5296F71B8FDC5B32334175C6FC8FBABE38
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 16:34:58 +0000
Manifest this update: Tue 02 Jun 2026 16:29:58 +0000
Manifest next update: Wed 03 Jun 2026 16:47:58 +0000
Files and hashes: 1: 6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl (hash: //JRmBRneFoYDW6hyRUAk/sE/IVKmPMa2i4RqDGHny4=)
2: 3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (hash: /UiS0/YqAJP6vBXmUjstv/RqhsN7l6a5S8YjTvqIQ1U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl
rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:82:5f:52:96:f7:1b:8f:dc:5b:32:33:41:75:c6:fc:8f:ba:be:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824
Validity
Not Before: Jun 2 16:29:58 2026 GMT
Not After : Jun 3 16:47:58 2026 GMT
Subject: CN=12CA61E1FFE67CD62C47BB451BCAE61D1A8A22AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:43:50:e6:c8:eb:1f:93:22:05:92:95:a6:
8c:54:3b:71:72:56:f3:16:35:11:4d:36:6b:5a:9b:
7a:7f:bd:c9:f7:d4:39:5f:2d:ef:02:4f:c2:44:0e:
5a:36:21:97:91:52:3d:1d:71:c1:57:8f:f1:a3:f7:
7c:c6:a1:9a:39:7c:aa:71:33:c1:15:32:7b:55:32:
59:41:cd:79:e2:6e:da:e6:33:28:5d:fb:cd:da:cf:
5d:18:59:92:35:b0:f4:ae:e9:26:3e:ec:5c:f0:37:
4f:da:4b:93:cd:fe:c6:23:35:af:b3:de:fc:ed:9f:
49:55:b8:0c:c4:8e:37:1f:ad:77:39:0d:00:00:57:
92:2e:19:a3:fb:6b:4c:d8:af:82:17:f9:bb:d2:41:
14:6d:83:3c:3c:0e:0e:2f:e8:b4:71:68:72:31:ad:
44:07:f7:42:c7:3c:19:a6:ae:00:dc:21:00:e7:e7:
a0:80:78:cd:3b:d8:28:d6:27:4f:0a:a2:80:e7:31:
55:31:ad:9c:52:a8:70:fb:53:a6:4e:55:e4:29:c1:
f7:d1:13:e3:b8:08:ff:b4:54:0b:ae:2d:c0:65:8c:
23:52:76:e6:f4:fd:af:8e:7c:4c:88:14:05:dd:8f:
35:cc:0b:8f:94:e6:6c:ff:dd:5b:2b:a4:4c:a7:bc:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CA:61:E1:FF:E6:7C:D6:2C:47:BB:45:1B:CA:E6:1D:1A:8A:22:AA
X509v3 Authority Key Identifier:
keyid:6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bb:f3:a6:64:e0:46:a7:34:52:64:f2:c5:ab:fc:62:50:38:
dd:62:82:fc:10:2d:de:37:8b:d6:69:55:2f:dd:8a:49:b7:7a:
21:8e:8c:41:94:6d:aa:1b:5c:bb:1a:ac:07:15:3d:cc:d1:d8:
69:d2:1d:eb:48:3a:ae:29:e1:2f:b1:7b:a0:0e:55:28:d0:af:
26:be:46:aa:d3:00:f3:ec:04:66:33:a3:56:fb:c4:63:39:fc:
01:ed:8e:9b:74:14:43:1a:a7:27:1d:4e:68:6a:d8:de:cf:7d:
c7:83:93:dc:29:23:0b:2c:06:8a:6a:f7:ff:85:84:5f:b0:23:
ac:3c:26:c7:3f:0c:a4:91:c1:24:0f:31:7f:e6:bc:df:ed:00:
13:8d:f7:15:6e:fa:5a:7a:e3:7f:9a:71:5f:4e:d8:14:e6:4c:
01:ce:d2:11:f7:d9:5c:c0:44:8c:f0:ae:1d:88:a4:14:e1:2e:
f2:18:bc:e3:12:69:94:13:b2:97:7e:3f:86:bb:45:71:5d:d3:
c2:49:61:ac:7c:6d:62:19:18:60:b0:b8:35:7d:c3:20:8f:1b:
9c:de:bd:2c:8e:d9:ff:d8:5e:f1:6c:91:02:97:76:59:ba:68:
be:18:88:1b:07:d9:9c:16:f6:5c:8e:8a:66:9d:41:4a:17:bb:
ba:4f:42:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:43:21 2026 by rpki-client