
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft
File: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft (raw, json)
Hash identifier: aA0lqtD3QPcPiBs3WynFNYbMcZsqYLfTuMWbyAaw/xs=
Subject key identifier: C6:87:07:86:CD:E6:BC:88:4B:B3:50:13:43:94:A3:42:1B:89:C4:C9
Authority key identifier: 6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E
Certificate issuer: /CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E
Certificate serial: 749834AEDD47411DC01858B10810698AFC6540B7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft
Manifest number: B9
Signing time: Thu 17 Sep 2026 11:53:26 +0000
Manifest this update: Thu 17 Sep 2026 11:48:26 +0000
Manifest next update: Fri 18 Sep 2026 14:17:26 +0000
Files and hashes: 1: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: mk6P6nzKZPfeuKq11ThKG2gxjN5qYDKYLpgARoWf7Rc=)
2: 6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl (hash: jCX9bjtfsyUEjsK0Rnzr36gojmqYiSznOnOrg3AEzLA=)
3: 3130332e3135362e37302e302f32332d3234203d3e20313431303831.roa (hash: ogFXEVAytgNk6SWtWC/grPALKoCzJ8xJnVE6iKhIzy8=)
4: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: AZDpkOWjnamEqT8fmcEDZ5d6r3arhBukAiqycsYxsj0=)
5: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: jF+TxIXKCt0yx/IV65T2kSOoO+FWM7E2CPsCxs8p1io=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl
rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:98:34:ae:dd:47:41:1d:c0:18:58:b1:08:10:69:8a:fc:65:40:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FB253A4F99C0F811EAE0D142B7275CAAE49B65E
Validity
Not Before: Sep 17 11:48:26 2026 GMT
Not After : Sep 18 14:17:26 2026 GMT
Subject: CN=C6870786CDE6BC884BB350134394A3421B89C4C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:97:39:e9:98:4f:2d:3c:46:4b:c7:63:e9:
22:f2:12:9d:46:ed:f8:7f:10:0b:d5:4d:af:61:76:
c0:c3:6c:ee:0a:77:3b:3b:bb:49:73:ee:7c:7f:0c:
38:2a:9e:cd:2c:76:88:c0:04:ab:6f:4e:bb:23:79:
75:a4:37:3e:dd:57:9d:ea:98:fb:a9:ce:77:1a:87:
8f:59:b6:26:52:56:db:61:9d:13:84:3a:bd:0a:47:
94:21:3f:d1:c8:f1:49:22:aa:53:d6:1c:a5:26:d0:
e9:a8:ab:17:3b:35:37:d0:f4:3d:94:ef:d8:0c:ae:
23:b0:25:e0:95:b9:04:ef:db:32:69:29:6b:d9:59:
1e:dc:6e:0a:6e:c3:d4:11:2f:21:2e:68:51:5c:ba:
71:82:e4:bd:83:d1:a0:8b:44:ea:7f:44:a2:63:a1:
35:57:da:18:dc:98:ac:11:c0:b6:50:50:41:bf:79:
32:70:8c:0a:89:ae:5a:9f:61:4c:3a:b2:6c:a8:e0:
01:50:a0:c5:61:d2:b1:2e:67:40:02:bf:e3:fb:55:
71:54:8b:c8:3a:69:4d:bf:1b:b4:b6:72:2c:3a:65:
0b:7d:26:c1:bb:d4:84:7c:fd:52:90:35:5a:fc:34:
d1:d0:76:82:ec:93:3b:d6:af:d2:89:b6:6a:56:98:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:87:07:86:CD:E6:BC:88:4B:B3:50:13:43:94:A3:42:1B:89:C4:C9
X509v3 Authority Key Identifier:
keyid:6F:B2:53:A4:F9:9C:0F:81:1E:AE:0D:14:2B:72:75:CA:AE:49:B6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/6FB253A4F99C0F811EAE0D142B7275CAAE49B65E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c8:a8:c9:63:64:30:b9:69:96:25:03:db:d9:6f:32:33:12:
38:26:b2:71:f8:5e:08:8e:6c:67:e4:96:a2:0c:65:b1:ce:ac:
8d:0d:29:4b:41:7b:e2:f0:84:d6:ec:eb:e8:df:74:02:8b:26:
dd:60:da:e5:a0:d6:50:df:a7:81:f0:94:59:92:ad:3b:d2:80:
91:d0:29:e0:91:a0:10:38:86:0d:83:99:f6:bd:05:db:e7:5d:
59:87:54:1e:19:db:92:22:47:87:9c:93:2d:5e:cc:28:fb:1d:
03:0c:ba:8c:15:e9:b5:d9:0b:11:e7:74:72:e3:52:c7:20:72:
8b:e6:24:58:99:b3:ad:0d:b5:21:72:03:d0:96:08:ec:f2:7f:
79:b5:db:4b:73:46:58:96:85:6b:09:96:40:93:90:f6:77:5e:
7e:91:c7:65:33:f4:af:aa:e1:e3:fb:2f:8d:fe:ef:65:2e:2e:
c3:4e:69:8a:0a:3d:2a:9e:a6:74:28:e4:ae:70:ba:fe:93:6b:
3e:78:98:ca:39:81:53:6a:5f:8c:f1:1e:f9:19:23:1c:05:1f:
aa:dd:28:87:d6:f8:57:aa:6c:4f:7e:a2:56:01:d2:26:a9:44:
f6:b9:b8:58:5f:26:61:5b:f9:fa:b1:c6:77:5b:48:f0:6f:48:
35:85:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:20:12 2026 by rpki-client