
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft
File: 6259AAB8ACC12928C43A617CC9988F166C9AF024.mft (raw, json)
Hash identifier: xl9vI6vlKZR+u63x1k/oDBTDkFKK8wABNIRZQ7WOeYI=
Subject key identifier: 51:05:D5:B0:B2:4C:43:75:07:10:A7:41:71:01:84:AF:FB:2C:8E:4E
Authority key identifier: 62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24
Certificate issuer: /CN=6259AAB8ACC12928C43A617CC9988F166C9AF024
Certificate serial: 370A6B7C426DD8C2F075720EB5EAD920B6F8210E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft
Manifest number: EA
Signing time: Sat 24 Oct 2026 05:30:57 +0000
Manifest this update: Sat 24 Oct 2026 05:25:57 +0000
Manifest next update: Sun 25 Oct 2026 07:14:57 +0000
Files and hashes: 1: 3130332e3132362e3131362e302f32332d3234203d3e20313333383030.roa (hash: LH3jAEJt2gXKsQX/zjbaNzaUSZMXYsu7qVfx3W9RCWQ=)
2: 6259AAB8ACC12928C43A617CC9988F166C9AF024.crl (hash: b9fBVc4LUo/zbPmNtwTg0dyYg0FtrQftLVoUHVbx8dM=)
3: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: AV5JsX2Stj+seni25dRRWqI/Y+X0x+WhdAnmL2uFeMY=)
4: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: b4ggDV/ZNf+4NQdflqYvb28UdjLCoRXT/ZsbTg3v/fE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.crl
rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 03:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:0a:6b:7c:42:6d:d8:c2:f0:75:72:0e:b5:ea:d9:20:b6:f8:21:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6259AAB8ACC12928C43A617CC9988F166C9AF024
Validity
Not Before: Oct 24 05:25:57 2026 GMT
Not After : Oct 25 07:14:57 2026 GMT
Subject: CN=5105D5B0B24C43750710A741710184AFFB2C8E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:84:54:bf:bb:1c:a0:c7:16:ea:90:99:17:
22:f0:24:b1:67:8b:26:e6:58:57:6a:4e:eb:fa:04:
de:7a:3a:23:15:de:a5:19:c1:bd:d7:7f:95:38:0f:
f8:bf:00:43:c3:fc:57:3d:ea:9e:38:0e:04:99:d9:
fc:d9:96:54:93:fd:03:cf:9c:2d:eb:72:2a:4d:b8:
34:c3:02:ab:3c:40:62:63:e4:a5:42:43:9b:74:a1:
8a:4b:7d:4d:71:90:de:23:8f:9b:0a:63:78:a0:03:
81:e2:fe:0c:7b:c8:53:15:94:72:20:64:cc:89:96:
bc:10:a5:67:f7:77:a8:5e:4d:84:16:9f:44:b8:b7:
5e:7c:ed:f0:5a:ed:26:5d:58:e9:10:9f:b7:11:27:
43:95:28:1b:b3:f1:40:58:d4:4f:2b:39:4b:f2:f2:
c6:8d:66:50:04:d6:28:05:d5:6b:99:d3:bc:09:2d:
3f:bf:ac:29:d1:08:43:45:9a:46:bb:9d:d9:08:1f:
1b:4c:1d:c2:d7:c6:cb:3f:cf:e2:fc:1a:3d:8d:02:
46:f8:c3:eb:5d:86:c2:6f:af:a9:ab:57:e8:9d:af:
43:00:8f:ba:10:c7:ff:b1:25:76:00:be:9b:5e:12:
fc:a0:5d:a5:06:b2:43:85:a7:72:25:bc:23:88:98:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:D5:B0:B2:4C:43:75:07:10:A7:41:71:01:84:AF:FB:2C:8E:4E
X509v3 Authority Key Identifier:
keyid:62:59:AA:B8:AC:C1:29:28:C4:3A:61:7C:C9:98:8F:16:6C:9A:F0:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6259AAB8ACC12928C43A617CC9988F166C9AF024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6259AAB8ACC12928C43A617CC9988F166C9AF024.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e6:67:45:b1:f1:37:c6:ce:ca:ac:51:c3:62:d8:f3:18:07:
4e:1c:53:74:5a:e0:21:9b:95:1d:2b:88:1d:77:5c:ed:7d:f5:
cb:a8:86:c3:3e:3c:13:b3:47:2f:c5:13:33:64:ca:b8:06:26:
0a:7a:e7:a4:a6:e3:6e:9a:f9:49:2f:e2:cb:03:19:89:33:3e:
a2:8b:eb:45:dc:a2:07:db:cf:67:81:1d:c7:d2:82:66:63:ba:
54:46:60:62:ed:d7:69:0f:a9:a5:e0:00:b8:69:c9:40:5e:17:
32:d3:11:b4:55:85:69:57:d8:85:c4:8d:80:06:99:28:9a:87:
3b:57:1c:00:2b:03:3c:fa:e5:35:e7:67:34:d3:14:1c:81:d2:
00:ec:90:40:24:76:2f:ba:99:76:6d:c2:ae:d5:85:61:70:58:
a5:b0:f6:e5:d3:1e:d9:30:25:03:14:a4:c0:19:56:9e:17:70:
a1:4f:8c:e6:67:7a:f9:c6:c9:34:3d:a9:0c:2e:36:0e:10:9a:
91:e2:2c:c2:72:b6:c7:79:d0:d9:bf:2f:0e:80:49:d7:ef:99:
58:7a:a1:c4:50:c7:c4:a6:71:f0:e8:64:60:66:14:f7:17:10:
a4:cd:d5:85:68:8e:f6:96:8b:e7:89:94:bb:35:c3:a6:da:38:
3a:51:25:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:30:39 2026 by rpki-client