
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft
File: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft (raw, json)
Hash identifier: wKC9Ys/AWJatTOiP9NjhUGGVHGxhr3fKXcG6kvjNJv0=
Subject key identifier: 45:C1:81:F7:EF:B5:95:A8:CC:FA:FD:C5:BB:2C:DB:A1:31:49:34:21
Authority key identifier: 6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97
Certificate issuer: /CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497
Certificate serial: 6725663937CCB37B9F577B07211126E07451F33D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 09:04:50 +0000
Manifest this update: Thu 17 Sep 2026 08:59:49 +0000
Manifest next update: Fri 18 Sep 2026 11:05:49 +0000
Files and hashes: 1: 6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl (hash: BgVTxJ2x1cth6LdIIeOUIsXJEd5nzbd+H557EQ3sNUQ=)
2: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: /9mhE8hilLMkdKj/KGoukj1sKVJz3HgKOnytnAx8zSY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl
rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:25:66:39:37:cc:b3:7b:9f:57:7b:07:21:11:26:e0:74:51:f3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A138712A1D2C838F863A7B882ED7FD6C7CBD497
Validity
Not Before: Sep 17 08:59:49 2026 GMT
Not After : Sep 18 11:05:49 2026 GMT
Subject: CN=45C181F7EFB595A8CCFAFDC5BB2CDBA131493421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:b5:e9:0b:14:a6:a1:b9:66:6f:65:98:bd:
f9:cb:f8:4a:fc:30:f5:0c:a7:15:c0:d8:55:e8:6f:
89:13:47:be:70:82:b1:07:03:4d:4f:57:2f:fa:61:
18:98:6f:c2:4d:f7:fd:8d:67:c2:18:2f:99:53:0f:
76:14:58:1d:ed:86:b5:15:19:76:53:d5:53:b0:cb:
38:de:e4:86:93:33:dd:96:bb:a7:5e:8d:76:58:df:
88:8d:6f:b5:8f:3c:95:77:2d:1f:82:fa:17:3b:69:
96:4e:99:19:7a:98:53:57:46:09:e6:16:e4:34:19:
99:58:9a:65:5e:e2:b3:f3:89:bb:e1:f4:8f:07:0d:
78:a2:6a:4a:17:4e:3c:09:cb:1a:bc:7d:c0:89:34:
ae:94:e7:05:08:07:26:47:13:1c:6f:89:7b:70:8b:
8f:87:51:ad:49:6a:12:84:75:b1:04:fc:9d:22:91:
81:ca:0d:d0:cb:14:59:11:e5:ad:54:17:a8:76:77:
97:59:b5:24:32:b9:b4:46:fc:21:2d:7f:40:b4:95:
c3:ba:62:69:3c:b3:b6:a0:03:6d:8f:05:61:e0:31:
6c:74:57:82:4d:98:41:11:19:29:95:f1:88:e9:b2:
e7:99:a4:c2:1a:6d:9a:2b:29:b9:05:83:20:97:2c:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C1:81:F7:EF:B5:95:A8:CC:FA:FD:C5:BB:2C:DB:A1:31:49:34:21
X509v3 Authority Key Identifier:
keyid:6A:13:87:12:A1:D2:C8:38:F8:63:A7:B8:82:ED:7F:D6:C7:CB:D4:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/6A138712A1D2C838F863A7B882ED7FD6C7CBD497.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:62:22:3d:cf:af:23:42:e7:a6:ab:82:a3:86:fc:c6:fc:bc:
b2:95:62:b9:bf:15:98:35:0a:91:01:0c:f5:06:d7:db:86:12:
12:7d:e2:c0:94:88:54:62:64:ae:b8:13:79:1c:87:6b:6e:ee:
a0:51:10:3e:a6:14:0a:da:93:f1:bc:9a:55:bb:e6:f2:c8:0c:
56:fe:3b:c5:e2:ba:3c:ac:53:82:ec:7a:2f:29:91:15:63:3e:
88:e4:76:5e:cb:f6:a4:f7:17:56:3d:a5:b9:89:83:8f:f5:41:
49:12:3d:18:21:ac:de:75:f9:4e:4f:d9:6e:9b:88:98:a7:37:
89:df:6a:ac:88:6e:0a:b3:45:89:79:a8:8d:81:b3:d8:27:a4:
a7:aa:b1:64:c6:cc:75:02:16:02:54:17:64:a7:dd:90:3e:d1:
03:e5:f2:4d:5e:ca:e6:31:7b:55:6d:9d:e3:fd:d1:5e:b5:47:
37:24:4c:c7:28:b9:65:65:11:fa:46:51:47:de:34:e4:90:69:
84:a4:e1:78:ff:8f:13:c6:9d:eb:a3:8b:14:72:45:0e:c2:3e:
cc:cc:03:e3:91:5a:a2:5c:e5:15:c2:c7:36:bb:e0:d5:d8:76:
ff:e5:65:43:b7:dc:7b:b4:c8:4b:71:92:f6:90:31:3e:a9:b7:
1f:f5:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:07:53 2026 by rpki-client