
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
File: 6807307655CEA502796E1026C663C4A882D37E72.mft (raw, json)
Hash identifier: pBHtIvISsgzpuKi1pnX/O/UHo2QBAI7hdIdu2DGSu2A=
Subject key identifier: 4C:1E:68:48:4E:47:AE:CD:8C:1D:FB:9E:59:C8:D8:6E:D4:E9:40:59
Authority key identifier: 68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72
Certificate issuer: /CN=6807307655CEA502796E1026C663C4A882D37E72
Certificate serial: 3A90070D701933099237173E6EC1C6627DBD66C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 05:52:13 +0000
Manifest this update: Tue 02 Jun 2026 05:47:13 +0000
Manifest next update: Wed 03 Jun 2026 06:25:13 +0000
Files and hashes: 1: 6807307655CEA502796E1026C663C4A882D37E72.crl (hash: 2TBVbq8pUExbs6L6IZlPPn8T3tVwQ9EpsYiCUV5dmSA=)
2: 3230332e33332e33352e302f32342d3234203d3e203137383835.roa (hash: k002Muyqc9cS3UpWT7uJHqyqbjEHyYRWloXEdO7c7yA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.crl
rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 06:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:90:07:0d:70:19:33:09:92:37:17:3e:6e:c1:c6:62:7d:bd:66:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6807307655CEA502796E1026C663C4A882D37E72
Validity
Not Before: Jun 2 05:47:13 2026 GMT
Not After : Jun 3 06:25:13 2026 GMT
Subject: CN=4C1E68484E47AECD8C1DFB9E59C8D86ED4E94059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:2e:fc:0e:1a:ad:cd:3d:e2:a6:90:10:65:
83:bd:bc:0b:47:d0:f7:9c:59:6b:5e:b5:90:1d:da:
ca:7c:e0:07:e9:15:d3:41:6d:6f:35:c2:67:5e:2f:
2c:40:6e:25:34:a8:34:66:73:7b:59:9d:70:c4:99:
06:f6:c9:2b:3d:f7:8d:0d:29:69:38:c1:e8:58:2c:
2b:bd:cd:18:3c:29:5a:2e:09:fe:88:dc:cd:e2:f2:
9d:e2:e7:93:47:21:c0:78:83:b5:40:5c:01:96:16:
e2:28:ee:5c:d6:ab:38:e9:d6:3c:fd:b4:c7:eb:7b:
18:e4:80:47:97:bd:e5:70:a0:4a:c7:d2:47:9e:59:
c5:f8:72:12:1d:5b:99:91:d2:a3:00:8a:40:51:b0:
d2:bc:cb:54:a2:35:b7:b9:d1:4a:91:d8:1f:1e:13:
b3:f9:21:f9:82:79:5b:d7:8b:a4:ff:03:dd:dc:d8:
e5:f3:f3:c7:f8:e0:4a:b3:34:e5:89:00:f7:4c:7e:
3c:6f:11:30:36:3f:e1:64:d9:3d:93:2a:af:18:0e:
39:86:d3:dd:73:92:07:37:82:fd:cf:0f:8a:f1:fd:
94:d6:94:c6:18:f7:5a:d4:b7:76:fc:b8:f4:93:49:
a4:4a:f7:f1:5d:53:19:2a:68:f0:86:fc:5f:01:f7:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1E:68:48:4E:47:AE:CD:8C:1D:FB:9E:59:C8:D8:6E:D4:E9:40:59
X509v3 Authority Key Identifier:
keyid:68:07:30:76:55:CE:A5:02:79:6E:10:26:C6:63:C4:A8:82:D3:7E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6807307655CEA502796E1026C663C4A882D37E72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/6807307655CEA502796E1026C663C4A882D37E72.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c6:df:a9:cf:b9:67:da:a7:b8:25:4b:8b:da:f5:78:c0:ca:
28:7d:84:61:a0:7f:5d:e6:c4:01:1a:70:f8:b3:1a:e1:5a:ad:
39:d6:ff:9c:9e:15:07:0e:63:c4:3b:dd:3e:d4:5a:04:05:79:
01:c4:e0:7f:7c:e5:af:c8:9a:72:f2:c8:f6:ec:41:12:1c:25:
d4:c5:7f:04:08:35:10:27:95:17:fc:8e:44:51:1d:01:bc:8a:
e1:5d:79:a9:4d:5d:59:5a:c5:14:90:da:77:ad:0b:da:21:f4:
34:be:d0:4d:75:0b:94:1c:af:4c:7d:36:92:1c:a2:ea:60:06:
11:a9:80:db:55:f6:05:38:06:80:82:54:fa:40:66:41:b7:f4:
97:c1:c3:ca:8c:93:c5:c5:cf:34:47:6b:15:4b:4b:5b:f7:20:
98:6a:6f:5e:b9:d7:a7:16:af:94:b4:59:ee:5d:a3:af:c8:9f:
ad:f6:d6:99:bd:fd:3f:db:56:e5:8e:cd:2b:6e:9a:ea:44:7e:
e4:ed:16:25:d4:3e:df:c8:e2:18:60:73:e4:2b:8b:be:18:9b:
4e:54:4e:3c:61:d1:38:a4:23:a0:aa:08:a6:1f:54:83:c3:62:
50:09:8d:2d:73:c2:5d:33:ce:cf:91:12:cb:99:0c:bf:97:29:
45:d5:c2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:08:06 2026 by rpki-client