
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft
File: C6E5FF54770B28DB44FDD655765364797010697B.mft (raw, json)
Hash identifier: PqE1jy3aSn94jYDshliPi2koaYU8SP69jXxhdDzA4Dg=
Subject key identifier: 8D:61:59:A0:AC:91:7D:91:12:EB:5B:AC:3D:16:63:14:8A:C9:4A:5B
Authority key identifier: C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B
Certificate issuer: /CN=C6E5FF54770B28DB44FDD655765364797010697B
Certificate serial: 15E05AE346E75A64B652AC838D4C6A334176CD94
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft
Manifest number: 011C
Signing time: Wed 25 Mar 2026 10:42:22 +0000
Manifest this update: Wed 25 Mar 2026 10:37:22 +0000
Manifest next update: Sat 28 Mar 2026 15:43:22 +0000
Files and hashes: 1: C6E5FF54770B28DB44FDD655765364797010697B.crl (hash: tfNhAJ57P42gD9Pn93JTVUWqBjm/67At6SFk9O5E73Q=)
2: 3136302e32322e33342e302f32332d3234203d3e20313532383136.roa (hash: a4xJEDoYakiTMO96ZZKVCyVqliQmIGfucXGPHg4A430=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.crl
rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 15:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e0:5a:e3:46:e7:5a:64:b6:52:ac:83:8d:4c:6a:33:41:76:cd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6E5FF54770B28DB44FDD655765364797010697B
Validity
Not Before: Mar 25 10:37:22 2026 GMT
Not After : Mar 28 15:43:22 2026 GMT
Subject: CN=8D6159A0AC917D9112EB5BAC3D1663148AC94A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:eb:4d:d3:f8:10:cc:0b:0e:8f:5c:3d:90:
00:07:93:af:57:4c:9e:b9:70:7e:37:4d:1e:5a:14:
dd:b1:93:27:63:98:e5:c0:70:4a:25:bf:09:e2:07:
1c:0c:39:ac:f0:94:ab:07:4d:10:2e:11:5b:76:53:
f2:ac:a1:a5:98:1e:fa:d6:fe:f1:ce:b9:c6:3b:7a:
e3:a4:8a:97:cf:a2:f4:7c:76:21:57:14:b1:5c:a0:
16:6c:2e:f5:d3:41:4d:20:13:eb:bb:46:de:8e:ca:
5a:34:02:b4:e3:d5:aa:6f:b8:7f:8d:85:b3:9e:fa:
e4:74:62:0f:73:13:17:d2:86:16:a3:25:7e:04:b8:
f2:5f:af:3b:27:fd:86:79:28:40:e7:3a:ff:82:56:
1e:54:8c:97:92:56:dd:e7:d9:dd:c3:70:18:e4:de:
c1:d1:0c:09:06:fa:b4:60:56:14:c1:4a:f0:7d:e3:
89:5a:35:98:6a:80:3d:fb:e8:e6:1d:fd:59:6f:5b:
b7:6d:96:08:95:59:26:bc:39:1a:b2:99:6a:6a:ad:
8e:78:b1:c7:c7:f6:ba:80:d7:25:0f:c4:d1:0a:30:
4c:44:40:c1:73:38:4c:14:2c:45:27:29:8e:24:4a:
04:a8:66:a1:de:b5:99:bb:1f:6f:e8:bd:bf:32:2d:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:61:59:A0:AC:91:7D:91:12:EB:5B:AC:3D:16:63:14:8A:C9:4A:5B
X509v3 Authority Key Identifier:
keyid:C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:83:c6:c8:1d:d0:04:c3:88:d3:36:33:22:17:a5:5f:b4:26:
20:76:7c:2c:da:8c:dd:ea:ca:b0:be:c0:03:66:b7:46:b4:c5:
33:b5:7c:f6:49:99:87:13:47:16:36:7c:1f:a9:b5:fe:7c:70:
d3:7f:7c:35:e7:62:4a:d4:9d:5b:aa:4f:eb:75:3f:ec:d3:73:
98:a1:7b:40:a7:e8:81:1a:76:3b:0f:89:cf:04:26:4a:e7:4b:
77:d5:6d:12:d9:1f:16:fb:5b:c9:84:87:de:0d:0e:ce:2b:b3:
aa:08:ad:20:6f:94:15:d9:d3:80:c9:bb:a2:d8:41:80:36:c7:
8d:1c:93:8a:89:7d:9b:f3:96:ea:bf:72:53:6f:e5:d0:91:eb:
e1:57:e5:2e:09:cb:bf:f4:8d:ab:5b:5b:32:59:1f:05:54:bf:
27:44:20:64:64:71:74:3d:a8:60:45:9d:67:77:ec:6d:ba:51:
77:f4:0e:89:16:4d:5d:e5:22:a9:8a:08:b7:73:19:a2:20:90:
83:ae:44:84:b5:f4:f5:44:83:30:6a:4b:b9:c0:9f:e9:8a:a5:
9b:df:c2:57:ec:59:94:43:e8:32:b5:8b:39:e9:0d:bb:58:5f:
6f:9c:ea:4a:8b:36:fc:4a:f1:44:ac:60:78:67:fa:3a:42:11:
4f:13:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:16 2026 by rpki-client