
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft
File: 6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft (raw, json)
Hash identifier: yKVlcaC1VwQB/wj+gy9S67HOIJ/YqCUN5p2SkGowXWA=
Subject key identifier: 1E:FA:88:49:CC:6C:A2:0E:E1:38:69:AD:B3:CB:0B:01:BD:8A:00:54
Authority key identifier: 6F:06:B1:7C:38:FB:7A:19:9E:4A:85:32:13:C0:52:EA:E4:CD:65:23
Certificate issuer: /CN=6F06B17C38FB7A199E4A853213C052EAE4CD6523
Certificate serial: 0318AD725FB0036F53C235467A5E83CFFADF9064
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 01:35:26 +0000
Manifest this update: Thu 17 Sep 2026 01:30:26 +0000
Manifest next update: Fri 18 Sep 2026 03:23:26 +0000
Files and hashes: 1: 6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl (hash: eViK9fxO9o2CQr/fAHPAWcADJCwM+fSnAgE7N0HeCRw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl
rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:18:ad:72:5f:b0:03:6f:53:c2:35:46:7a:5e:83:cf:fa:df:90:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F06B17C38FB7A199E4A853213C052EAE4CD6523
Validity
Not Before: Sep 17 01:30:26 2026 GMT
Not After : Sep 18 03:23:26 2026 GMT
Subject: CN=1EFA8849CC6CA20EE13869ADB3CB0B01BD8A0054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:3f:34:62:ca:f2:7c:11:19:d8:a9:14:ac:
11:0e:7c:59:ac:b8:21:63:63:a0:79:d3:18:0c:c9:
1d:7a:b1:42:ce:59:f2:93:7a:33:d1:c1:f2:76:f0:
52:f8:2f:be:08:0a:cb:46:78:77:bc:38:58:2d:6b:
30:5c:14:04:b5:a9:5c:83:d7:ab:84:fe:2f:c7:04:
14:c3:63:67:05:63:d8:c6:8b:1d:a8:92:bd:57:42:
95:b7:df:43:66:99:db:3f:d5:bc:62:c7:07:6d:01:
f6:07:75:c0:7f:d6:c7:27:bb:61:66:32:66:44:06:
9e:8f:8d:22:52:32:25:78:6a:b7:6b:1a:d0:17:c9:
27:5b:e6:09:e3:2b:5a:fc:67:7e:4e:9b:81:0d:6d:
b9:57:96:7b:f0:cb:18:cf:6d:96:e1:de:c5:9f:4d:
5a:64:c8:51:0c:61:1b:d9:c2:fe:44:5a:bf:70:59:
d8:ae:c5:c6:b4:96:65:a8:88:93:b7:1d:c0:9e:0d:
ef:c5:5d:ef:8e:93:fb:ed:79:7c:12:96:da:7f:f6:
62:fc:ed:cc:a5:4b:2c:96:aa:fd:b1:24:d9:c4:45:
6c:f4:e2:c1:4e:d5:dd:4e:36:b1:89:96:1b:ab:da:
51:f6:a1:92:89:a6:d0:15:21:8e:34:d9:ea:a6:40:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FA:88:49:CC:6C:A2:0E:E1:38:69:AD:B3:CB:0B:01:BD:8A:00:54
X509v3 Authority Key Identifier:
keyid:6F:06:B1:7C:38:FB:7A:19:9E:4A:85:32:13:C0:52:EA:E4:CD:65:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/1/6F06B17C38FB7A199E4A853213C052EAE4CD6523.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e5:d1:af:fe:de:36:60:78:8e:f6:66:97:2a:1d:6f:24:af:
c3:b2:e7:b3:56:d6:0d:fc:db:af:e6:01:60:55:7b:7c:09:d3:
17:8a:2b:c9:0e:c6:86:44:84:9f:5b:e3:b4:1b:82:bf:da:d3:
50:35:68:95:92:e9:b0:da:a5:2e:95:4d:57:02:ee:9b:06:79:
22:57:ac:bf:5e:1c:b7:51:3e:d3:59:a2:09:f3:bd:be:20:bd:
8c:c6:77:6a:3f:86:d7:43:48:c0:8c:1c:3e:79:95:d0:45:bb:
cf:dc:19:45:b8:1f:d9:84:e5:38:11:b7:5f:0d:56:8c:dc:6b:
7a:75:ca:36:e7:21:e4:1f:28:76:99:19:89:1e:15:dc:91:bc:
5e:a4:1b:dc:40:83:6e:7b:3d:00:a6:d9:36:bf:1e:e3:3a:cb:
3a:99:e3:ba:00:68:e8:7d:fc:fc:dc:99:6e:f1:22:98:fb:83:
ef:90:42:2b:ec:eb:75:b9:22:e2:14:0e:ef:51:70:f2:bb:02:
e6:af:49:61:a5:1d:75:b1:fb:2e:56:e7:e8:fc:b3:28:3d:e7:
d0:c0:8d:30:e6:79:7c:aa:fb:81:ac:07:c3:32:ba:37:1f:23:
ab:3a:5e:a1:f8:a8:e1:57:5a:34:37:28:80:a7:22:ec:2b:93:
10:da:2a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:08:04 2026 by rpki-client