
$ rpki-client -vvf rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft
File: 6D508CF79A65F098AC311FE1079E8840C240F1E0.mft (raw, json)
Hash identifier: iWE9fR3+Jv4J+mTXEPgMdImZP4nQY66m4tSKd94s/70=
Subject key identifier: 27:11:F2:CE:F6:EC:F2:72:33:1F:8C:51:CB:00:6C:E3:DE:19:A0:DB
Authority key identifier: 6D:50:8C:F7:9A:65:F0:98:AC:31:1F:E1:07:9E:88:40:C2:40:F1:E0
Certificate issuer: /CN=6D508CF79A65F098AC311FE1079E8840C240F1E0
Certificate serial: 3CEBEE02D8A4F3ABC5689B255CF6D1481D48F12E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft
Manifest number: 1A
Signing time: Thu 21 May 2026 06:02:38 +0000
Manifest this update: Thu 21 May 2026 05:57:38 +0000
Manifest next update: Fri 22 May 2026 09:07:38 +0000
Files and hashes: 1: 6D508CF79A65F098AC311FE1079E8840C240F1E0.crl (hash: eAIGXoypFtvLi1qMUEPBHDXydjrQ2hgLFl/By+ahAao=)
2: AS4761.roa (hash: ADAJv0tCjqrkfl7kHKQQa/gmh2pyLICyQ2Yo1anWdAk=)
3: AS45727.roa (hash: NQJlZcEt8XbEu6li30gl5gj7oBqSk0UpCNFCIlpUiV0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.crl
rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 09:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:eb:ee:02:d8:a4:f3:ab:c5:68:9b:25:5c:f6:d1:48:1d:48:f1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D508CF79A65F098AC311FE1079E8840C240F1E0
Validity
Not Before: May 21 05:57:38 2026 GMT
Not After : May 22 09:07:38 2026 GMT
Subject: CN=2711F2CEF6ECF272331F8C51CB006CE3DE19A0DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:93:5c:f9:57:54:31:02:f1:7b:3a:a9:4e:
65:3a:f1:a0:07:c7:8d:b1:11:d5:f9:ea:54:1e:15:
d8:e9:48:b3:98:8e:0e:7b:7d:5f:a9:ee:d4:95:84:
cc:12:bd:fe:20:84:4c:a8:2f:20:72:bf:5e:ea:68:
3b:0d:8b:b7:9a:f8:30:4d:48:ec:d8:26:7b:04:20:
6a:39:10:5d:de:1e:80:91:11:c3:cf:72:d0:56:38:
29:31:9e:bf:bb:d7:0d:da:a7:41:a5:42:a5:d1:c2:
49:9e:f6:74:5b:ee:d5:17:64:40:31:e7:fc:01:d5:
6e:7f:1d:c5:af:a2:ba:55:a4:21:96:96:e5:d0:1e:
c0:ac:31:12:b7:81:27:15:26:54:ee:4f:81:b5:96:
21:b9:9b:d8:41:82:79:8c:75:bf:31:01:17:3c:b3:
5c:98:5d:f4:40:d7:31:52:01:50:26:fe:fe:7f:1d:
00:ee:53:04:db:ba:74:83:c7:ec:52:5b:be:8d:6f:
b5:41:fe:e0:b6:e8:b6:80:7a:62:62:e0:6d:dc:c1:
47:ff:39:6b:5c:48:a0:73:63:b7:f1:f3:87:90:ee:
7d:73:a7:46:04:d2:90:ab:3c:0a:11:17:08:b0:cd:
c2:16:80:d2:b9:1d:0d:d8:7a:9a:0d:d2:05:ec:66:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:11:F2:CE:F6:EC:F2:72:33:1F:8C:51:CB:00:6C:E3:DE:19:A0:DB
X509v3 Authority Key Identifier:
keyid:6D:50:8C:F7:9A:65:F0:98:AC:31:1F:E1:07:9E:88:40:C2:40:F1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D508CF79A65F098AC311FE1079E8840C240F1E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/6D508CF79A65F098AC311FE1079E8840C240F1E0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:59:b7:be:b0:64:ad:bd:4c:85:ab:ff:d8:06:49:34:17:0b:
f8:50:49:5d:80:0d:ec:58:44:fc:df:34:76:95:c1:83:ba:0a:
66:0e:e4:d7:ae:0f:ff:78:06:31:68:85:07:75:b4:0f:06:05:
72:c5:79:5e:55:a6:db:57:9b:0f:e2:1f:34:26:ed:e9:ce:b7:
38:b3:12:2e:db:0c:04:0a:d1:4f:57:b9:c8:09:d4:25:2d:f3:
f8:3a:bf:d6:2a:4b:40:e8:27:5b:32:35:34:3a:35:aa:83:63:
96:e2:dd:ad:33:05:45:c0:10:12:1a:69:e3:d1:ea:b7:38:53:
c4:a7:99:a0:01:f8:d2:15:67:48:8a:83:91:ab:03:32:1c:18:
16:e2:70:42:14:63:36:60:15:2c:da:d2:8a:44:94:9e:08:e7:
b8:3d:5f:1d:c0:57:c0:6f:63:8b:e5:0d:d6:fe:4d:ce:4f:a0:
07:6f:fd:be:e4:45:31:fa:18:d0:65:20:ff:53:08:94:20:d3:
dc:6c:ad:05:dc:8e:64:01:d1:5e:69:4e:23:50:f3:aa:77:8f:
d8:48:0f:94:a2:0f:ab:dc:fd:12:0e:06:7b:e1:04:07:8a:b0:
a6:0a:45:02:a0:73:4c:52:b6:19:ff:75:0d:6f:92:54:df:f0:
69:bb:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:23:29 2026 by rpki-client