
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
File: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft (raw, json)
Hash identifier: 47a3/6ANSqtoyv+PpJXQXbc9yFed2zY0cqlsAoHQ8NA=
Subject key identifier: 6C:E5:64:E9:26:3F:BD:F0:78:7F:DF:BA:F9:D8:20:7C:FA:ED:06:73
Authority key identifier: D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF
Certificate issuer: /CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
Certificate serial: 6FDB7E9646718F18BFE133AEE3147AE3354F70C6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
Manifest number: 05
Signing time: Tue 05 May 2026 07:05:59 +0000
Manifest this update: Tue 05 May 2026 07:00:59 +0000
Manifest next update: Wed 06 May 2026 08:35:59 +0000
Files and hashes: 1: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: l3If5656x9/abmXUsw+HuDRH9mZ/0aH7VY6poIdvnX0=)
2: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: uML5u30yWokqHzJ1SmFvpIB0jm9tfbVvuIh4MPBrSV4=)
3: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: CeNdfOrQu4OqN7GWY23FwJ5ZvRzilpDPwGeBlsotfAc=)
4: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: QjvSUWXkehuis++c3tdVVUbDO47gQG2w6XSjtlUzYcs=)
5: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: 61Rq/XjoyZTnLO2u0C049vbn2Cq8QuVA+YAoxGZP5Uo=)
6: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: oeT54NjL50r7xCLxIqfzZvTu9HtL0qe2DtlLMw9OJ/s=)
7: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: tTZQRAZZ/xG34AQ1RUk/V3CgCC8lS878wnNuxBTMYiw=)
8: D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl (hash: +ALFINK3LVSvzDRWXgQq0wKs0HqQywRjNJubLF2xRr0=)
9: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: Iyyka7bnzQVTV7GIy6yjeq/WyDhwkqHPxzE+mk7VzKA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl
rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 08:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:db:7e:96:46:71:8f:18:bf:e1:33:ae:e3:14:7a:e3:35:4f:70:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF
Validity
Not Before: May 5 07:00:59 2026 GMT
Not After : May 6 08:35:59 2026 GMT
Subject: CN=6CE564E9263FBDF0787FDFBAF9D8207CFAED0673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:e7:15:e4:1a:c0:bb:82:8d:59:cd:b0:a1:
6a:ec:08:5d:fd:7f:36:6c:02:e1:e3:67:8f:f4:1c:
1e:89:0b:38:23:4b:00:3d:70:2c:08:d2:79:20:ee:
79:d0:63:27:be:e8:61:b2:6c:e8:6f:5f:95:c6:01:
d2:8c:ff:31:85:fe:4a:cc:e5:35:8f:1a:85:90:8e:
e1:dc:22:60:07:9c:2f:04:74:84:a4:e2:74:a1:e6:
d1:cc:d3:b3:b0:8b:ac:dc:ea:f0:30:2b:66:91:fd:
74:5a:39:80:e3:8d:f5:e6:e2:fa:91:31:fa:b3:56:
c8:4b:5a:7c:3f:66:11:da:4d:71:14:fc:e4:9c:86:
fe:2d:bf:34:6d:8a:21:10:87:99:8f:39:ca:a7:09:
d0:01:81:10:ed:0c:02:66:27:84:9c:c1:34:de:8d:
e8:23:72:29:f1:cd:92:b1:92:34:13:49:4c:7c:b6:
78:ec:84:50:97:51:8d:5b:3c:ec:74:db:5c:9e:4b:
64:45:3f:d4:ac:6f:91:b7:21:55:4e:4f:95:81:21:
a6:7b:22:a2:c4:71:5b:6c:7e:12:5f:2f:9b:46:4e:
f8:b7:94:1a:a6:ba:b7:4f:a4:0c:34:8f:31:de:6b:
30:31:82:3e:1f:7c:d8:c9:32:6d:82:ae:f8:22:85:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E5:64:E9:26:3F:BD:F0:78:7F:DF:BA:F9:D8:20:7C:FA:ED:06:73
X509v3 Authority Key Identifier:
keyid:D6:E7:68:69:11:E8:CE:E2:4C:FC:0D:A4:96:47:F1:F6:97:9E:E7:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/D6E7686911E8CEE24CFC0DA49647F1F6979EE7CF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d3:52:30:f4:86:08:6c:53:90:02:9e:19:73:98:99:93:36:
db:c2:37:46:87:f9:9c:30:5a:b7:65:dd:d1:d6:09:5a:96:4d:
29:68:00:2d:d2:2c:c0:d0:5d:9e:40:fe:c0:26:61:03:02:14:
bd:a6:6a:9f:1e:f2:a2:9b:9f:ae:ae:7d:74:18:a4:eb:9c:80:
d7:dc:65:c5:a5:d1:0a:2e:af:66:1a:f2:d4:a1:73:c0:5b:a1:
84:09:23:f2:47:8c:be:f5:c1:91:b4:65:65:8c:42:83:45:da:
9f:76:77:ae:01:6c:b0:fb:19:d2:42:c7:db:31:09:3c:6c:10:
21:20:1f:62:18:32:b4:c8:b6:ed:7b:22:78:ac:5e:6d:a7:ff:
50:29:5a:74:6d:e8:c4:b4:5a:d4:82:7b:54:52:01:85:64:23:
ab:0e:35:72:e7:9c:a0:02:50:39:68:a5:6c:f7:61:5c:b2:9e:
98:37:76:ce:4d:30:69:29:c9:98:9b:4e:c9:73:4e:63:5c:94:
1f:ca:4d:fa:02:64:6e:76:5f:80:8f:a0:eb:d5:9c:43:9e:67:
1b:a7:99:c5:c0:f4:98:3b:c5:d7:66:bc:ad:4d:0f:b0:b7:00:
53:13:a8:9a:73:66:5e:7f:0f:60:04:66:a9:ab:94:fa:d1:0e:
5c:14:49:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 17:52:02 2026 by rpki-client