
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
File: 6C11FF5474BE690E545132237E53030296585D32.mft (raw, json)
Hash identifier: LO0UcS8sagF/TCt7jCZQJPk7qwpBAgaG28H8cL2UMT8=
Subject key identifier: 41:BB:84:90:F0:16:31:6E:7A:3A:96:C0:90:4F:F9:8B:65:2A:3D:7E
Authority key identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
Certificate issuer: /CN=6C11FF5474BE690E545132237E53030296585D32
Certificate serial: 42F60DAD47939E6E66B0435EB539D591C54AE08D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
Manifest number: 04BD
Signing time: Thu 26 Mar 2026 12:50:54 +0000
Manifest this update: Thu 26 Mar 2026 12:45:54 +0000
Manifest next update: Sun 29 Mar 2026 13:27:54 +0000
Files and hashes: 1: 3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa (hash: bRNZ8nUlgm5rj4Lv4Xn5qKIuBE6nw8cnVSc6VxHCPew=)
2: 6C11FF5474BE690E545132237E53030296585D32.crl (hash: WYTZIeirfouildG0/tmTezD+nEerJntcGvvQ4uZuDyo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl
rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 13:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f6:0d:ad:47:93:9e:6e:66:b0:43:5e:b5:39:d5:91:c5:4a:e0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C11FF5474BE690E545132237E53030296585D32
Validity
Not Before: Mar 26 12:45:54 2026 GMT
Not After : Mar 29 13:27:54 2026 GMT
Subject: CN=41BB8490F016316E7A3A96C0904FF98B652A3D7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:dd:4f:4b:89:09:44:fa:96:a0:1a:b6:4c:
69:6a:45:cc:e8:0a:44:f7:61:33:31:98:fc:44:41:
fa:9b:02:89:e5:df:67:34:23:f3:38:a8:f8:21:9f:
74:1a:a0:7c:8e:d0:0e:e6:40:c2:54:3c:d9:a8:86:
38:76:f0:29:34:87:4b:12:2c:54:e2:18:88:70:91:
dd:47:1e:b4:7b:ba:8f:80:f1:5d:49:25:25:f6:6b:
04:83:e3:de:f9:32:34:c5:90:16:e4:5a:93:6c:a4:
7a:a8:31:74:fe:7e:86:1d:88:e8:ab:59:1a:a2:de:
b3:d1:b2:45:b4:97:ad:db:58:12:e3:41:1a:64:6e:
98:3b:54:0c:b7:6d:8c:50:e0:31:0f:d7:f6:ec:a7:
1e:84:20:58:6e:07:f8:82:61:26:ef:a7:69:84:95:
60:e7:3e:bc:15:8d:bd:7f:c7:23:3d:ff:d6:f4:4e:
bd:d8:a4:3c:f6:79:dd:a2:fc:e5:fc:52:5b:06:2d:
3f:c6:cb:3d:a6:99:df:46:f8:31:ac:b9:ac:3e:9d:
f8:2c:03:9b:7b:f5:0a:42:df:0b:53:8c:94:78:59:
bb:57:dc:27:d0:94:0a:3a:b0:66:c7:05:cf:12:a4:
d9:79:e4:c4:a1:7f:28:f4:4f:02:47:81:9d:cc:79:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BB:84:90:F0:16:31:6E:7A:3A:96:C0:90:4F:F9:8B:65:2A:3D:7E
X509v3 Authority Key Identifier:
keyid:6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:52:01:b8:d6:0d:86:2a:94:94:62:95:1b:09:8c:0c:1a:2f:
9b:fb:1c:96:56:52:53:01:61:e7:d6:cf:31:44:5a:0e:d4:32:
a8:d6:e5:74:ac:52:68:1f:fa:85:02:5f:ed:fa:bd:8c:89:db:
3b:a0:7e:51:ba:f1:4e:7e:30:75:88:05:e7:19:23:91:21:42:
c0:f1:69:ec:84:a5:22:09:2b:25:a2:f3:40:6b:ac:5b:c1:4c:
c7:0f:76:6f:46:a3:16:dc:c8:5e:3d:28:ba:f9:a0:3e:19:d9:
a5:11:ab:d1:6d:fb:05:3e:71:7b:f0:c6:4e:12:bf:b3:b8:32:
6b:54:08:3f:a7:32:1c:61:cd:a0:0a:4d:a4:08:52:23:19:55:
e1:a4:96:c8:2e:51:51:ac:1c:87:75:09:43:34:84:44:0d:32:
2b:b7:e2:00:dd:56:6a:f4:89:fb:ac:0f:4e:ff:04:dc:76:ad:
c6:94:c9:1f:ad:f9:dd:9d:60:86:65:49:82:d7:88:d9:3c:4d:
44:cb:73:03:84:0b:35:fa:48:11:cc:4f:ce:47:9f:1c:3e:49:
3e:ad:17:e5:97:b3:48:f6:9f:48:e9:73:a3:21:a3:47:38:c8:
34:f6:da:5b:83:eb:dc:d7:11:39:29:1b:51:cf:82:18:8c:10:
1e:e4:f5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:07:05 2026 by rpki-client