
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
File: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft (raw, json)
Hash identifier: kaes3s2TUKjtB0kOVqcZv/t7WzNJzKbTXUjDjYOnD5A=
Subject key identifier: A1:9C:D3:F9:58:3B:43:B6:74:12:B5:1C:C1:2C:A9:8B:15:D9:02:09
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Certificate issuer: /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial: 3E5FC4A984635ABCC896710F4F7183FCF1F78B40
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 00:34:18 +0000
Manifest this update: Thu 17 Sep 2026 00:29:18 +0000
Manifest next update: Fri 18 Sep 2026 02:06:18 +0000
Files and hashes: 1: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: S7UAzIZzLebBGoPx8HW74rT6/bn+VmPadNNYeTv3kZU=)
2: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: pjt/PoMD2rISkjEBbEVdFpq3Lfkti0ImQZr5UDhsxdI=)
3: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: y0vf+b+WaxpgW62iYyK78WU25GzF5XHO+ZNE1qslKzM=)
4: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: 2RPhLvFo9neTmfPqwsVlBCVEW/vWAuk44bCI72x1cVc=)
5: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl (hash: +y56Jv1rUwmQ6Vw6vvAFJa4AOhXPIY6oUhZmIBteoWs=)
6: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: m44IQsih+GAEYeNlxdOnRw3U6wKDlFyxDmcm/uil4os=)
7: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: RFsABZwQUKrnFL3kGb4LQCkeg8Y7lRmJ8snepdRl5LE=)
8: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: sVWZtsjpcpezFv1cmO31cy7yxR6Y49KAqemmha7HUbc=)
9: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: dBBC9Ld8u7gkoTo/g/PxsRZ0jIN5riREG0FHLcyqmts=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:5f:c4:a9:84:63:5a:bc:c8:96:71:0f:4f:71:83:fc:f1:f7:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Validity
Not Before: Sep 17 00:29:18 2026 GMT
Not After : Sep 18 02:06:18 2026 GMT
Subject: CN=A19CD3F9583B43B67412B51CC12CA98B15D90209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:08:91:cc:89:aa:55:24:64:b7:0e:d9:45:
e8:65:6c:5f:f4:cb:af:66:c6:32:ed:ea:2e:b3:c9:
6e:c3:25:61:fe:e8:f7:82:0c:88:c9:71:ad:29:26:
d1:8c:3e:26:80:d2:bc:10:f4:3e:64:d8:a4:ec:e1:
13:46:9e:c3:7f:63:91:76:44:8e:80:81:b0:95:6b:
80:32:f5:b7:55:1e:59:34:9a:73:2f:9a:8c:ab:f3:
b4:28:4c:c1:56:23:0d:37:ec:fd:28:b3:cc:99:7b:
7c:39:7b:91:bd:06:c3:d5:4b:fb:9c:0a:f0:4d:66:
81:a5:e2:7a:f9:84:c2:04:b1:b0:aa:18:36:cd:59:
31:db:ee:29:2e:58:96:1f:79:ef:90:10:36:12:13:
9e:71:c1:bf:e9:59:81:a3:8f:13:a2:18:3d:1e:80:
6e:1e:d8:01:68:4d:a1:e0:80:6e:ea:8e:09:2e:bd:
e1:30:2c:6c:da:10:1e:f2:56:70:11:f7:47:a4:4b:
ae:4f:bd:bb:3a:c2:42:7d:65:6e:2f:d9:f9:dd:53:
65:0d:f7:d2:2c:26:57:a6:2e:09:ef:5a:6e:cf:34:
b6:4b:0d:33:aa:ce:4a:cf:99:ea:7c:e2:00:92:6e:
f1:3a:d3:be:11:97:c2:ea:c9:a4:27:b9:f0:40:67:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9C:D3:F9:58:3B:43:B6:74:12:B5:1C:C1:2C:A9:8B:15:D9:02:09
X509v3 Authority Key Identifier:
keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5f:3b:93:90:ba:47:95:28:32:0e:a0:09:ee:3d:ca:cc:0a:
b9:ef:c9:86:1d:02:b6:3c:e5:9d:b6:5d:67:d2:9f:28:13:55:
46:80:8e:6f:87:51:9d:eb:a6:b4:91:c1:57:b8:6e:14:26:46:
b9:d7:bb:1a:50:f1:86:5e:15:fd:a1:eb:cc:d4:86:1f:43:b0:
a2:1f:af:30:26:fa:26:ab:67:e5:c2:56:0d:98:35:4b:ad:83:
79:98:ca:ee:98:bb:c7:bb:89:21:8f:a3:44:04:2d:63:fe:d8:
ae:fd:46:db:3a:ff:3b:b8:ba:4f:17:6d:f0:1a:73:75:82:d2:
f8:88:b4:84:26:c3:9f:50:74:8e:0c:5a:91:a9:d1:fc:ef:6c:
a8:41:98:b7:e7:ae:39:3d:05:2f:74:62:bf:94:04:ba:a0:9e:
59:58:9b:1c:f9:d4:69:3b:3a:26:d7:03:b2:7a:28:ce:38:4e:
44:d2:30:e1:f0:63:1d:1c:9f:cb:0f:26:44:e4:82:30:3f:4d:
ce:c2:67:0a:ff:7e:5a:93:67:3c:94:68:ca:66:dc:5c:52:3f:
5f:91:07:e7:a1:cd:f0:08:49:a5:c3:f2:5e:4d:d0:8c:77:72:
47:19:ec:89:91:69:2d:17:d1:28:c0:c9:b5:24:6e:57:ec:69:
40:56:cb:d6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUPl/EqYRjWrzIlnEPT3GD/PH3i0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ1RTU0MjBCNDM0OURCNzc5OTU3NEQxQUE4RUZBNDIz
NEIwNjM4RTAeFw0yNjA5MTcwMDI5MThaFw0yNjA5MTgwMjA2MThaMDMxMTAvBgNV
BAMTKEExOUNEM0Y5NTgzQjQzQjY3NDEyQjUxQ0MxMkNBOThCMTVEOTAyMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JgiRzImqVSRktw7ZRehlbF/0
y69mxjLt6i6zyW7DJWH+6PeCDIjJca0pJtGMPiaA0rwQ9D5k2KTs4RNGnsN/Y5F2
RI6AgbCVa4Ay9bdVHlk0mnMvmoyr87QoTMFWIw037P0os8yZe3w5e5G9BsPVS/uc
CvBNZoGl4nr5hMIEsbCqGDbNWTHb7ikuWJYfee+QEDYSE55xwb/pWYGjjxOiGD0e
gG4e2AFoTaHggG7qjgkuveEwLGzaEB7yVnAR90ekS65Pvbs6wkJ9ZW4v2fndU2UN
99IsJlemLgnvWm7PNLZLDTOqzkrPmep84gCSbvE6074Rl8LqyaQnufBAZ4wLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUoZzT+Vg7Q7Z0ErUcwSypixXZAgkwHwYDVR0j
BBgwFoAUbV5UILQ0nbd5lXTRqo76QjSwY44wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDRmMmMwMjUtMWQ3Ni00YTM2LTgxNjAtYTllOGFmZTM1NzlmLzAvNkQ1RTU0MjBC
NDM0OURCNzc5OTU3NEQxQUE4RUZBNDIzNEIwNjM4RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82RDVFNTQyMEI0MzQ5REI3Nzk5NTc0RDFBQThFRkE0MjM0QjA2
MzhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDRmMmMwMjUtMWQ3Ni00YTM2LTgx
NjAtYTllOGFmZTM1NzlmLzAvNkQ1RTU0MjBCNDM0OURCNzc5OTU3NEQxQUE4RUZB
NDIzNEIwNjM4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE9fO5OQukeVKDIOoAnuPcrMCrnvyYYdArY8
5Z22XWfSnygTVUaAjm+HUZ3rprSRwVe4bhQmRrnXuxpQ8YZeFf2h68zUhh9DsKIf
rzAm+iarZ+XCVg2YNUutg3mYyu6Yu8e7iSGPo0QELWP+2K79Rts6/zu4uk8XbfAa
c3WC0viItIQmw59QdI4MWpGp0fzvbKhBmLfnrjk9BS90Yr+UBLqgnllYmxz51Gk7
OibXA7J6KM44TkTSMOHwYx0cn8sPJkTkgjA/Tc7CZwr/flqTZzyUaMpm3FxSP1+R
B+ehzfAISaXD8l5N0Ix3ckcZ7ImRaS0X0SjAybUkblfsaUBWy9Y=
-----END CERTIFICATE-----
Generated at Thu Sep 17 14:44:28 2026 by rpki-client