
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
File: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft (raw, json)
Hash identifier: c8qOdjmhPDo5lrBnxjsOk1H67wKkJStWEsogrzWBHnQ=
Subject key identifier: 2A:4E:02:34:C9:85:5C:D3:07:B7:48:F3:5C:02:53:CC:2A:3A:23:45
Authority key identifier: 6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5
Certificate issuer: /CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5
Certificate serial: 5C70F03CDFD425CC58D8A348C10649ED037BB450
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 03:43:34 +0000
Manifest this update: Sun 25 Oct 2026 03:38:34 +0000
Manifest next update: Mon 26 Oct 2026 05:22:34 +0000
Files and hashes: 1: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: S9Rn028mN4RxKRfk1o8rZH0hTRoX3/5ujuVLyQFUwsA=)
2: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl (hash: kRau4SXA9IDZcQDBoDqVg+plngCio9b5B/ADShEWjoc=)
3: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: y9avoo0XnwxjsH45wOCvll+IYaXWnM223zX3g6ZS9kU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl
rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:70:f0:3c:df:d4:25:cc:58:d8:a3:48:c1:06:49:ed:03:7b:b4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5
Validity
Not Before: Oct 25 03:38:34 2026 GMT
Not After : Oct 26 05:22:34 2026 GMT
Subject: CN=2A4E0234C9855CD307B748F35C0253CC2A3A2345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:5b:83:4f:4a:60:a1:37:bf:d9:33:fe:ee:
9d:54:b2:25:e2:f6:8d:06:b2:b6:85:b4:8c:f1:4d:
5d:6a:a4:ca:8a:b5:d8:be:15:80:fb:0a:68:8d:0d:
38:89:33:b9:60:a2:87:dd:d6:a9:9a:44:26:ee:5e:
c3:5f:ef:9f:4d:44:1c:b6:c9:b7:8b:22:4c:4e:e6:
c4:60:6d:e0:ba:68:92:74:81:4b:26:a3:ec:b9:89:
8d:ac:9b:8c:9c:1a:55:60:0b:fb:98:f0:59:36:41:
d2:b1:cc:a8:f3:76:b3:f5:84:09:93:5a:fd:34:e6:
17:2d:5c:2a:28:b3:19:6d:0d:5c:50:9f:d9:7c:13:
1c:62:03:b7:a7:95:26:8c:a7:7d:ae:e3:bf:90:ff:
b9:f7:e8:bc:96:67:86:54:ba:dd:03:88:aa:67:a2:
12:9e:18:95:75:19:3f:21:58:8d:f5:d6:06:b0:d9:
58:de:ae:36:91:18:5e:6e:63:b8:d6:47:e8:36:85:
02:45:e3:d2:a0:a4:06:d8:25:b2:bd:e0:67:56:ed:
47:24:f2:eb:b5:eb:02:c6:90:9c:6e:19:c4:2d:af:
54:86:76:d6:e6:5a:94:01:05:0f:e1:34:46:4d:4a:
4d:75:8b:60:ac:db:eb:cc:e1:f4:ee:be:6f:80:08:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4E:02:34:C9:85:5C:D3:07:B7:48:F3:5C:02:53:CC:2A:3A:23:45
X509v3 Authority Key Identifier:
keyid:6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0b:31:c6:f1:47:06:99:2c:bd:5c:4b:80:71:f9:12:95:63:
e9:df:48:30:87:2b:ee:02:ea:c4:61:69:2e:81:c9:9e:a8:46:
93:13:ca:af:9d:d2:4c:52:4f:e4:94:26:7f:88:ec:02:1f:7d:
50:70:51:45:59:1f:68:ec:d6:55:73:46:ea:08:be:54:09:1c:
4c:0e:1d:33:cc:c3:97:64:66:01:44:d2:76:33:eb:3b:4b:9a:
ab:6a:d9:7a:57:56:6c:02:b0:7a:9c:34:20:c5:09:b1:80:ac:
84:bd:b1:1a:03:c8:55:62:18:8e:95:6a:39:e7:b4:30:7e:0e:
43:96:c5:1c:46:b6:1b:29:6e:af:ed:38:72:bd:5e:ce:bc:f7:
f7:70:12:03:56:75:e8:e9:ea:5e:08:a5:6d:7d:d9:5e:1f:f3:
05:8a:3b:5c:21:22:60:f5:f7:80:fa:11:80:e6:74:6b:6f:1e:
1d:ce:f8:7f:cf:7b:c6:80:a2:1c:90:19:37:02:81:52:c0:4f:
20:9a:1c:40:78:b9:1c:cc:a6:48:ae:88:50:b4:07:b7:b0:cf:
29:55:c2:d7:97:ac:c8:c8:ba:fa:e4:32:2e:34:54:4a:6f:c1:
c3:b1:36:06:24:03:51:08:6f:0f:19:56:05:1f:72:72:4b:f4:
51:27:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:33:44 2026 by rpki-client