
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft (raw, json)
Hash identifier: CBNQ4JW/Py9TPh70HG4d4jf0+ElpCxQfB/rzEXYuhUA=
Subject key identifier: ED:17:9A:F2:86:A3:FA:3B:3D:E6:4E:FD:CF:5B:16:A3:AD:03:A2:C4
Authority key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8
Certificate issuer: /CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
Certificate serial: 5FBE25F5A949F24830B48B327E9343B1D0A4C1A0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
Manifest number: E6
Signing time: Wed 25 Mar 2026 01:41:35 +0000
Manifest this update: Wed 25 Mar 2026 01:36:35 +0000
Manifest next update: Sat 28 Mar 2026 10:18:35 +0000
Files and hashes: 1: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl (hash: S/tnIE0L3EU51YFiqF8pn8hFZgREiltMSFTgTbAe9VQ=)
2: 323030313a6466343a353663303a3a2f34382d3438203d3e20313533313231.roa (hash: EZ7jR9+lQhRaaJFDwK6y0EbEgy21NUoqJfk8uRlaKvI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl
rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 10:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:be:25:f5:a9:49:f2:48:30:b4:8b:32:7e:93:43:b1:d0:a4:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8
Validity
Not Before: Mar 25 01:36:35 2026 GMT
Not After : Mar 28 10:18:35 2026 GMT
Subject: CN=ED179AF286A3FA3B3DE64EFDCF5B16A3AD03A2C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:56:1f:12:02:0e:92:78:3d:38:41:29:14:
7f:e1:68:31:1c:d4:52:1f:f5:aa:84:e0:0e:ae:74:
bf:97:68:71:2c:e9:82:d4:91:54:b1:97:56:be:92:
08:29:d6:9d:da:4c:36:0b:69:7f:77:c0:0b:99:89:
da:3b:22:72:eb:0f:fd:a3:8c:3c:0d:8d:0a:69:ff:
b1:95:df:d7:33:53:3e:60:09:2d:49:c1:f6:e4:c8:
04:a5:2f:d8:26:77:01:c2:0f:fa:6d:2f:2b:e7:9a:
b0:05:20:67:4c:76:ee:4f:a5:56:8f:3d:be:b0:b9:
fc:0a:00:b3:f3:2a:0a:ce:6d:5c:35:5c:f9:1f:3e:
27:c8:24:fc:5c:6e:b8:21:42:2a:69:a6:41:a6:b4:
68:7d:c0:82:61:d3:06:c6:74:f3:10:55:5f:06:4e:
db:5e:b3:e3:a9:aa:7d:7e:69:a1:2d:26:63:60:c9:
22:f5:05:5a:8a:8c:76:72:b9:22:8f:b6:6a:b1:b2:
48:b8:f4:9d:90:e8:90:95:e6:e4:ad:72:c5:6d:ab:
5b:16:b7:48:00:c8:38:af:73:cd:cf:3c:35:b8:82:
6c:ec:2f:ee:11:e1:ab:35:67:43:0d:ca:af:c9:68:
a2:e5:ab:61:2c:50:95:9a:0d:f3:f0:fa:67:fc:f5:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:17:9A:F2:86:A3:FA:3B:3D:E6:4E:FD:CF:5B:16:A3:AD:03:A2:C4
X509v3 Authority Key Identifier:
keyid:6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cb:da:64:ff:d8:63:4e:cc:9f:5c:80:87:79:a5:d0:9d:12:
d0:3e:84:79:b9:4b:cf:b6:80:fe:8f:2b:b1:4e:30:11:27:a4:
c6:81:39:7f:c1:b7:ab:78:09:52:ba:68:fa:ea:02:23:ae:a7:
cc:2a:0c:89:6d:a7:55:db:65:62:2e:8c:bd:d6:b5:ab:3b:5d:
72:0a:4c:fa:a0:1e:41:42:2e:49:f0:73:fd:f3:5d:27:da:4d:
68:df:7a:e8:64:0c:6c:f8:47:66:24:5c:39:63:15:a9:da:db:
6f:83:31:2a:e0:99:c7:48:9a:c8:1f:c3:72:d0:d1:88:44:41:
f9:65:ba:e4:8e:84:3d:24:03:8d:b5:a4:fc:54:02:d7:61:c0:
eb:4d:0c:04:80:5a:0a:85:93:19:78:69:08:64:d2:60:ce:9c:
e7:1c:db:54:af:2c:65:dd:7a:c1:18:76:f0:e4:45:21:3d:b5:
2e:0f:b5:d4:fa:b9:26:e9:f4:d8:01:c7:16:9c:e1:a1:ed:1d:
b8:77:bb:16:19:33:62:ec:59:b9:69:24:70:03:e2:0d:4c:61:
a5:6c:9e:4d:df:a9:c1:4a:7c:8f:16:e8:1d:36:9d:90:8a:11:
b6:2c:33:77:11:10:cb:80:42:6b:6f:84:70:b6:9a:43:47:f5:
e6:13:de:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:07 2026 by rpki-client