
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
File: A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft (raw, json)
Hash identifier: dDpJUxQrxUCDHQluGgBkTJ0Ycnrb3ERLd49pBOjmDGA=
Subject key identifier: 5F:CF:45:8C:45:FB:19:F3:AA:5F:80:65:3C:05:F5:C8:5C:7E:02:00
Authority key identifier: A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4
Certificate issuer: /CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
Certificate serial: 40DC6CD5F181239B689CF0CE4BE6199A5B1A0A15
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
Manifest number: 42
Signing time: Fri 19 Jun 2026 22:33:13 +0000
Manifest this update: Fri 19 Jun 2026 22:28:13 +0000
Manifest next update: Sun 21 Jun 2026 02:25:13 +0000
Files and hashes: 1: A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl (hash: OGg4WKP/J0mIbp+Y4jOwoTTAf1wkeiIpHhFPHuuaVsI=)
2: 3130332e3137382e322e302f32332d3233203d3e20313431303737.roa (hash: xGJx+r1ntKLFX7/fs8KLZEY5oObqr/E40CahT7/MaA0=)
3: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: s+sTY2aYtG/SFja7fxXnQbGi+haO9AYfperyGy23oaM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl
rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 02:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:dc:6c:d5:f1:81:23:9b:68:9c:f0:ce:4b:e6:19:9a:5b:1a:0a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
Validity
Not Before: Jun 19 22:28:13 2026 GMT
Not After : Jun 21 02:25:13 2026 GMT
Subject: CN=5FCF458C45FB19F3AA5F80653C05F5C85C7E0200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:e8:d0:2b:36:b0:20:fb:0a:cf:01:00:04:
47:80:72:cb:86:83:5c:d8:55:67:2c:8c:dc:65:c7:
70:ae:50:66:bd:61:08:c7:e6:84:a2:d1:67:9d:eb:
b8:6b:3c:4c:41:33:24:6d:3b:ec:54:47:a0:af:3c:
4b:c2:bc:30:a4:9b:57:74:c5:1a:43:d1:25:21:87:
73:11:5b:f8:5a:45:2f:b2:02:e6:c2:da:4b:49:4b:
77:e5:98:cf:dd:f0:d0:c7:99:e9:53:ca:58:35:b1:
f5:4c:27:cd:9e:b6:d2:18:34:be:64:d7:29:96:cd:
0e:36:58:64:91:a0:34:fc:81:fb:c6:9b:38:fa:b0:
d7:63:f7:30:a6:0b:34:7f:b2:39:90:b9:7b:8f:71:
26:db:9c:96:e1:6e:4d:6d:9f:6f:fd:cf:b9:78:f5:
c2:7d:34:8c:21:9d:33:30:06:59:22:59:64:e3:9b:
ae:63:0a:03:cc:98:55:ea:66:e1:d5:02:43:04:93:
40:6c:ab:b6:ed:8d:ca:d5:1f:20:18:f4:19:bf:b0:
c2:1a:2a:78:88:be:5d:2a:1a:ae:4b:49:c9:bb:2b:
bb:a2:25:2d:c4:ed:54:4c:8c:6a:98:38:85:e4:87:
96:ed:ef:a3:9d:40:b5:b7:79:fc:4e:22:cf:2a:38:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:45:8C:45:FB:19:F3:AA:5F:80:65:3C:05:F5:C8:5C:7E:02:00
X509v3 Authority Key Identifier:
keyid:A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e5:65:85:ef:11:dc:b9:a4:06:b5:dc:95:7d:cb:fa:c8:c5:
8d:d2:4b:af:73:ee:ef:91:f5:ba:2f:52:91:6e:4f:e6:f9:03:
5d:7a:11:ad:14:55:4b:7c:d5:22:cd:e3:55:a3:e9:b8:32:51:
b4:45:98:02:70:cf:cd:14:8a:f2:6a:49:62:9b:3f:ff:d7:86:
83:a0:22:84:19:2e:ec:87:1b:e4:38:1c:8e:be:91:84:86:84:
ac:d2:af:9e:8c:c9:41:84:86:18:f4:90:1c:2e:17:33:31:cf:
04:38:4f:4a:5c:7d:1c:8b:86:71:19:8c:ad:17:e1:12:8f:12:
78:e4:81:7e:32:ab:cd:a1:bd:4d:ed:91:82:5b:d1:57:97:73:
df:bd:69:98:f3:ae:7c:49:4b:36:9f:f8:d6:59:df:92:ba:ad:
2b:d7:31:24:d8:ef:e7:64:28:d8:27:c5:9d:f8:7d:0d:72:d0:
0a:03:6c:f0:30:04:9a:8e:a7:51:f6:af:3d:cd:c5:b9:aa:2b:
62:0b:6a:0f:ca:9c:de:90:d5:03:65:96:e4:96:33:c1:30:3e:
14:45:7b:72:fd:ab:e6:d7:3f:62:d1:a2:46:5d:2d:2b:0c:0b:
91:d6:f2:45:b9:6a:d3:03:c9:a6:4f:04:f7:b2:d7:92:f4:05:
16:8c:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:21:01 2026 by rpki-client