
$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
File: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft (raw, json)
Hash identifier: uTIF3qYyCnZfuDzbcH3rjrddZMEhwYxX2RNHX73aGy4=
Subject key identifier: AB:9C:0B:7A:C0:E8:05:85:91:88:55:5F:DB:79:A7:10:50:D3:DE:66
Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
Certificate issuer: /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
Certificate serial: 25611491A2918CA3B1F73B595DF826ED38E2ACCB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
Manifest number: 03E5
Signing time: Mon 20 Oct 2025 16:52:00 +0000
Manifest this update: Mon 20 Oct 2025 16:47:00 +0000
Manifest next update: Thu 23 Oct 2025 17:28:00 +0000
Files and hashes: 1: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: /QE3JbQC9fGdo5sebo5tYuWfdXhEXpRAxCPxewOPZfY=)
2: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: 8JbwHHtI2+x8Q7Ly9bJcp9ZLV+q/WXTIRy0nL9ot5M8=)
3: 3130332e3132302e36372e302f32342d3234203d3e20313337333733.roa (hash: IzbXTMVKVDEB9rg5msnU2DpFCw8NlvM8m/tSeauJb7M=)
4: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: RtKaOt0QVcUfg/opcNyngIYtGMAYjqUtlrzDiVJb3H0=)
5: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl (hash: 2ntJYhzNMEE2CM5oE6ZkaQonbC+749t/sPqFE4gLfzU=)
6: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: pCJYjvXonKex+skSqmImkbu4oPl5fBK9Q5SIxdeC0qw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl
rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Oct 2025 11:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:61:14:91:a2:91:8c:a3:b1:f7:3b:59:5d:f8:26:ed:38:e2:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
Validity
Not Before: Oct 20 16:47:00 2025 GMT
Not After : Oct 23 17:28:00 2025 GMT
Subject: CN=AB9C0B7AC0E805859188555FDB79A71050D3DE66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:5d:73:4b:4d:74:5a:aa:a1:db:24:00:9d:
b6:ed:81:4e:48:8f:0c:df:6c:3e:24:9e:73:c5:e3:
dc:98:9f:a6:35:d0:a1:96:00:27:ad:80:08:d6:23:
7a:b2:da:76:a3:98:bb:70:d4:a1:61:a4:d7:e6:6e:
91:fa:63:d8:89:36:e4:9f:01:3e:9d:80:3e:45:b1:
36:1d:04:20:58:ea:d1:e1:7f:68:2a:cb:ca:04:11:
28:1c:ba:c0:8b:fc:fb:a6:42:e9:c3:51:a1:f6:47:
20:cc:c0:23:52:e9:f4:c9:c5:e9:97:a4:4c:25:f9:
e2:e9:24:be:70:1b:db:cf:1b:1b:34:4f:60:ed:84:
25:0a:cf:52:37:f9:1e:cc:33:a0:51:e3:64:77:0a:
de:8d:23:81:29:b9:52:fd:d2:02:21:de:81:7d:c4:
36:1a:fb:49:0a:48:75:56:4d:28:fd:ed:0c:7a:0e:
7a:99:d2:90:6c:8d:81:6b:55:c4:51:bd:78:2b:02:
68:93:0c:ed:b0:6f:d6:44:01:73:3e:8d:14:2c:34:
34:8c:7c:fb:80:18:01:b9:1a:3e:94:ba:14:09:63:
4e:61:fa:8b:c9:9d:fc:12:16:24:bb:21:56:de:ee:
cd:69:2c:a1:b0:91:a8:87:5d:41:35:4a:e0:e7:fe:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9C:0B:7A:C0:E8:05:85:91:88:55:5F:DB:79:A7:10:50:D3:DE:66
X509v3 Authority Key Identifier:
keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e5:0f:9b:8f:7b:ed:87:0a:6c:37:47:e9:70:fe:ef:86:4a:
e6:9b:e3:7e:76:68:90:a5:de:9e:af:42:76:ba:0e:54:7b:78:
2a:93:5d:43:2c:47:90:67:eb:5a:38:f0:81:cc:7f:1d:df:1b:
d0:bc:da:ca:47:f5:64:31:f0:52:ea:0f:8d:1f:38:c5:a3:b3:
c0:f7:ed:f1:1f:e6:d8:0d:2a:04:f5:28:1e:bb:02:6b:f4:63:
d6:f2:8b:a0:35:93:b2:b2:b6:13:b1:c8:12:9d:4a:ca:d9:e9:
55:93:5b:d0:12:8e:04:a5:48:94:82:dd:a4:d3:11:c0:fa:5d:
2a:c1:7a:0d:c2:c8:f3:e8:d9:7c:9e:e8:87:88:9e:ec:2f:01:
47:22:ac:2b:2c:92:93:9f:b2:ae:16:cd:46:0b:bd:77:1e:a1:
2a:9b:9a:cf:96:8c:be:a6:1f:af:80:c1:d6:5e:3c:56:ac:27:
51:08:f2:a8:09:38:df:af:ff:77:9c:6c:08:6f:d7:ba:f4:e1:
18:bd:68:7b:18:f0:7b:a5:3d:67:a4:76:47:f1:58:e4:89:c2:
ff:60:e2:3a:09:87:50:9f:6a:00:f7:b4:5f:19:fe:74:07:44:
3e:b3:dc:7b:71:de:ab:c2:ca:57:07:ba:af:e1:c9:dc:a7:78:
88:1c:1e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:32:07 2025 by rpki-client