
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
File: B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft (raw, json)
Hash identifier: 3hhIHG+oOIkznbfksEdkSr2y5DG2zB2cn6WogCPzGQ8=
Subject key identifier: 17:80:E6:C1:E7:14:6A:06:94:D1:A4:DC:A6:0E:D6:0B:8F:7A:A1:9B
Authority key identifier: B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45
Certificate issuer: /CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
Certificate serial: 0DE26DF684DA7D998DEBE3876E1F78AAB33B2B48
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 14:37:11 +0000
Manifest this update: Wed 16 Sep 2026 14:32:11 +0000
Manifest next update: Thu 17 Sep 2026 16:01:11 +0000
Files and hashes: 1: B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl (hash: PZjR+82K3yNPYangYNEa08CqtsGO/qhNJTRIi7KEAOQ=)
2: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: FM7P4A6GhMRCdFWVFylFnVzysNCeJktD7lQb8mDxaKs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl
rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e2:6d:f6:84:da:7d:99:8d:eb:e3:87:6e:1f:78:aa:b3:3b:2b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1A042F58FD773EC6B7221470156F5EBD0CE45
Validity
Not Before: Sep 16 14:32:11 2026 GMT
Not After : Sep 17 16:01:11 2026 GMT
Subject: CN=1780E6C1E7146A0694D1A4DCA60ED60B8F7AA19B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:90:0a:cb:ef:fd:9f:13:a9:7e:d7:37:65:
11:ee:67:aa:dc:f9:73:fc:2c:22:82:ac:36:15:ab:
ee:09:4d:07:7e:54:ab:d9:22:79:c7:d2:32:89:d3:
b3:65:c2:06:c5:ea:54:ec:53:0d:04:8a:1d:66:f4:
60:4a:83:67:1b:a6:1d:f3:34:5e:87:b9:2f:37:89:
01:72:c5:c5:12:80:25:8b:e3:fd:d1:2e:10:2c:28:
dc:9c:2a:66:a4:70:4a:ad:c6:27:3d:ac:20:fc:14:
71:a2:79:8b:22:ae:1c:ea:c6:6a:29:db:e2:ad:03:
9e:31:16:8a:e3:99:92:da:af:fb:a6:91:db:dc:dc:
b9:68:b3:09:6e:7c:70:38:f3:b7:23:f9:4e:47:de:
7d:e2:1d:53:3b:33:9e:87:b2:54:02:eb:e3:f6:95:
5f:d4:83:c0:75:90:67:c6:44:71:01:3a:93:57:77:
56:3b:45:25:ac:e2:78:2d:9b:30:28:90:1c:19:40:
4a:c3:72:1d:44:22:91:1c:c8:01:e3:29:c8:f9:1e:
e6:3c:1d:8e:0d:c8:a0:a3:24:3e:7e:bd:3c:54:c4:
11:b9:5e:14:f9:d7:37:41:1a:1a:f9:5a:38:1a:18:
00:f1:d0:23:86:b7:15:64:06:7b:6c:5e:0e:70:72:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:80:E6:C1:E7:14:6A:06:94:D1:A4:DC:A6:0E:D6:0B:8F:7A:A1:9B
X509v3 Authority Key Identifier:
keyid:B6:F1:A0:42:F5:8F:D7:73:EC:6B:72:21:47:01:56:F5:EB:D0:CE:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/B6F1A042F58FD773EC6B7221470156F5EBD0CE45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:0e:2e:e5:3d:f5:b9:52:d4:d2:7c:47:f0:8a:37:d5:71:60:
14:31:58:0f:cc:6f:88:c5:b9:c1:a2:f2:7d:cf:99:57:f5:02:
11:53:07:59:d7:06:c3:7c:ce:89:dc:d3:44:a7:70:5e:fe:7d:
e3:cb:96:d0:6f:ae:ab:ce:db:bf:1e:45:7a:ff:16:5e:12:66:
54:58:aa:78:41:80:1b:bc:80:b8:e2:1c:0a:48:81:63:df:12:
55:bb:13:01:28:13:0f:20:77:79:9c:b2:0f:46:12:62:a7:f1:
90:02:f5:00:e9:f9:3e:b9:b3:d7:70:e2:fe:55:42:76:2f:3c:
fd:6c:a3:6b:3f:70:f2:95:e6:58:1c:1f:01:01:eb:a0:75:48:
06:30:13:ab:dc:58:8e:f6:0d:bc:e4:68:9f:ce:ef:0d:73:a0:
f8:cf:80:a8:f8:8a:71:5b:70:f8:ad:05:24:92:16:0b:a7:9e:
96:0b:4c:c6:b7:a3:ad:42:e1:d7:90:2e:51:13:1b:45:a8:13:
a5:57:70:21:35:d2:66:60:d3:65:49:a3:95:70:c3:65:8c:73:
19:ac:ac:ac:aa:24:d8:bd:95:ec:c4:78:73:9e:10:55:b3:9b:
37:92:e5:f1:a5:a2:84:09:77:17:2c:52:d1:5e:da:b1:7b:fb:
94:b0:e7:f0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDeJt9oTafZmN6+OHbh94qrM7K0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMUEwNDJGNThGRDc3M0VDNkI3MjIxNDcwMTU2RjVF
QkQwQ0U0NTAeFw0yNjA5MTYxNDMyMTFaFw0yNjA5MTcxNjAxMTFaMDMxMTAvBgNV
BAMTKDE3ODBFNkMxRTcxNDZBMDY5NEQxQTREQ0E2MEVENjBCOEY3QUExOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5mpAKy+/9nxOpftc3ZRHuZ6rc
+XP8LCKCrDYVq+4JTQd+VKvZInnH0jKJ07NlwgbF6lTsUw0Eih1m9GBKg2cbph3z
NF6HuS83iQFyxcUSgCWL4/3RLhAsKNycKmakcEqtxic9rCD8FHGieYsirhzqxmop
2+KtA54xForjmZLar/umkdvc3LloswlufHA487cj+U5H3n3iHVM7M56HslQC6+P2
lV/Ug8B1kGfGRHEBOpNXd1Y7RSWs4ngtmzAokBwZQErDch1EIpEcyAHjKcj5HuY8
HY4NyKCjJD5+vTxUxBG5XhT51zdBGhr5WjgaGADx0COGtxVkBntsXg5wck+dAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUF4DmwecUagaU0aTcpg7WC496oZswHwYDVR0j
BBgwFoAUtvGgQvWP13Psa3IhRwFW9evQzkUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjk1N2ZhNWQtZmE2Ny00ZTZiLTg5MjAtYzQ3NDdhZGIzMGJiLzAvQjZGMUEwNDJG
NThGRDc3M0VDNkI3MjIxNDcwMTU2RjVFQkQwQ0U0NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNkYxQTA0MkY1OEZENzczRUM2QjcyMjE0NzAxNTZGNUVCRDBD
RTQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5
MjAtYzQ3NDdhZGIzMGJiLzAvQjZGMUEwNDJGNThGRDc3M0VDNkI3MjIxNDcwMTU2
RjVFQkQwQ0U0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAOQOLuU99blS1NJ8R/CKN9VxYBQxWA/Mb4jF
ucGi8n3PmVf1AhFTB1nXBsN8zonc00SncF7+fePLltBvrqvO278eRXr/Fl4SZlRY
qnhBgBu8gLjiHApIgWPfElW7EwEoEw8gd3mcsg9GEmKn8ZAC9QDp+T65s9dw4v5V
QnYvPP1so2s/cPKV5lgcHwEB66B1SAYwE6vcWI72DbzkaJ/O7w1zoPjPgKj4inFb
cPitBSSSFgunnpYLTMa3o61C4deQLlETG0WoE6VXcCE10mZg02VJo5Vww2WMcxms
rKyqJNi9lezEeHOeEFWzmzeS5fGlooQJdxcsUtFe2rF7+5Sw5/A=
-----END CERTIFICATE-----
Generated at Thu Sep 17 08:29:26 2026 by rpki-client