
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft
File: 6B995520DD42E2AA6306A898618C472D1D5E4417.mft (raw, json)
Hash identifier: zvvRozUxmpfWRkzAyKFhEVYrOpcr04NEJc09cswvXfA=
Subject key identifier: 2A:AC:F2:9E:04:58:9A:BE:A6:8C:DF:F9:22:3E:E2:CC:AF:1F:1E:08
Authority key identifier: 6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17
Certificate issuer: /CN=6B995520DD42E2AA6306A898618C472D1D5E4417
Certificate serial: 10E7758F2023C53E9AF684DCE872D87436887FB6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft
Manifest number: C0
Signing time: Tue 22 Sep 2026 18:19:09 +0000
Manifest this update: Tue 22 Sep 2026 18:14:09 +0000
Manifest next update: Wed 23 Sep 2026 19:52:09 +0000
Files and hashes: 1: 6B995520DD42E2AA6306A898618C472D1D5E4417.crl (hash: YJwp/YFQCDkrcluzgPaXlXfzcyTRMEqAxfQMqBFQ2Og=)
2: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: RIdJ/cXYXoiLhfv+EGFjwti65Zd3wn1vdkd4IsQmrxo=)
3: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: EocJEXTX0mSSr7fMVzkhuxkZ+TwRT9I+6KSMP/66yxQ=)
4: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: XXmEikeW7+xMma0RK8ROxLTllOgfRUh6Qpdpx7HKJyc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl
rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 19:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e7:75:8f:20:23:c5:3e:9a:f6:84:dc:e8:72:d8:74:36:88:7f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B995520DD42E2AA6306A898618C472D1D5E4417
Validity
Not Before: Sep 22 18:14:09 2026 GMT
Not After : Sep 23 19:52:09 2026 GMT
Subject: CN=2AACF29E04589ABEA68CDFF9223EE2CCAF1F1E08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:9e:46:4a:7b:cb:16:cf:a1:8d:4d:f5:19:
fb:6a:37:c3:f0:23:6e:9d:7c:b2:69:39:81:9b:68:
7e:eb:c0:1d:73:af:d0:21:21:65:00:f0:b3:02:9f:
c7:39:53:eb:d4:ab:ce:20:35:41:00:3e:7a:1b:bc:
ba:5e:6d:a2:3d:ef:4e:36:b4:4f:43:81:9f:a5:f0:
34:40:7a:8a:b3:60:41:7b:a7:5e:0a:78:8e:59:4a:
23:08:f5:e5:b2:a4:d3:4d:ac:e0:b7:7f:15:a5:4d:
74:06:70:56:3e:33:bb:88:ff:8d:4d:2b:3d:8e:54:
fb:3c:f2:98:cf:14:46:23:e2:d4:e6:a7:cc:8a:25:
03:5d:46:55:19:61:7a:53:ab:21:81:98:23:27:87:
e5:b9:2b:0b:2c:e4:90:04:de:f3:ed:5c:5d:19:f8:
44:d2:44:59:fa:e6:32:36:cf:d5:ae:69:93:1c:ad:
0e:6e:fc:02:45:32:d7:b5:f3:c1:c6:cd:48:9b:25:
7c:dd:da:7a:d9:4b:06:3b:46:42:cc:0d:39:cd:c4:
63:c4:22:ba:a8:2f:c4:77:bb:e0:f7:2e:1d:b0:2a:
fd:09:7e:bd:bc:d4:6e:0a:22:f4:83:bf:7f:5f:14:
cd:25:81:0e:57:31:d8:da:f4:1f:84:76:be:a6:7d:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AC:F2:9E:04:58:9A:BE:A6:8C:DF:F9:22:3E:E2:CC:AF:1F:1E:08
X509v3 Authority Key Identifier:
keyid:6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cb:01:d2:c9:68:1f:84:4a:b8:00:08:3e:8b:12:10:89:4e:
02:ae:bf:e2:39:e9:e0:ef:bd:12:b8:71:9d:05:1a:cc:ac:a6:
57:d2:69:9c:5c:79:f7:af:e8:07:70:b5:c4:61:be:b8:e0:62:
ea:8f:22:9b:49:12:26:b5:f6:d9:5b:a1:cc:3f:55:33:21:2f:
7e:14:3e:56:18:54:cf:97:b5:c9:14:a5:96:ee:a3:53:b8:37:
da:f7:e4:a0:04:50:55:08:36:43:3e:ed:c8:68:9b:cf:bf:97:
cc:df:c1:69:c8:28:66:8d:fa:99:4d:3d:72:00:69:5c:0c:83:
c8:0d:14:7c:1d:c4:ca:3c:d2:d5:b7:40:06:de:fa:80:f5:2c:
13:2a:c6:f7:8c:5c:de:6f:9f:c2:fe:bf:54:77:05:ec:b9:80:
2f:4c:ff:65:82:54:ea:3e:0c:48:7a:47:5c:e8:24:ca:c0:e6:
45:67:5b:70:6d:d0:4c:56:d2:74:f8:1e:77:f2:d9:8e:94:55:
0e:35:b0:e4:48:bb:66:ba:22:99:1d:f6:ca:b3:7a:06:49:30:
2a:f0:94:d4:d7:c8:6e:af:82:dc:f7:58:7d:db:e9:d9:c3:ef:
b4:5a:a4:c3:66:0c:74:1d:21:16:1a:96:b3:42:39:f4:84:b9:
1b:8c:42:00
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEOd1jyAjxT6a9oTc6HLYdDaIf7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQx
RDVFNDQxNzAeFw0yNjA5MjIxODE0MDlaFw0yNjA5MjMxOTUyMDlaMDMxMTAvBgNV
BAMTKDJBQUNGMjlFMDQ1ODlBQkVBNjhDREZGOTIyM0VFMkNDQUYxRjFFMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBkp5GSnvLFs+hjU31GftqN8Pw
I26dfLJpOYGbaH7rwB1zr9AhIWUA8LMCn8c5U+vUq84gNUEAPnobvLpebaI97042
tE9DgZ+l8DRAeoqzYEF7p14KeI5ZSiMI9eWypNNNrOC3fxWlTXQGcFY+M7uI/41N
Kz2OVPs88pjPFEYj4tTmp8yKJQNdRlUZYXpTqyGBmCMnh+W5Kwss5JAE3vPtXF0Z
+ETSRFn65jI2z9WuaZMcrQ5u/AJFMte188HGzUibJXzd2nrZSwY7RkLMDTnNxGPE
IrqoL8R3u+D3Lh2wKv0Jfr281G4KIvSDv39fFM0lgQ5XMdja9B+Edr6mfbdNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKqzyngRYmr6mjN/5Ij7izK8fHggwHwYDVR0j
BBgwFoAUa5lVIN1C4qpjBqiYYYxHLR1eRBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGVkZDRjY2ItNDJlMy00YjcyLTkxOTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBE
RDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQxRDVFNDQxNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82Qjk5NTUyMERENDJFMkFBNjMwNkE4OTg2MThDNDcyRDFENUU0
NDE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx
OTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3
MkQxRDVFNDQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD/LAdLJaB+ESrgACD6LEhCJTgKuv+I56eDv
vRK4cZ0FGsysplfSaZxcefev6AdwtcRhvrjgYuqPIptJEia19tlbocw/VTMhL34U
PlYYVM+XtckUpZbuo1O4N9r35KAEUFUINkM+7chom8+/l8zfwWnIKGaN+plNPXIA
aVwMg8gNFHwdxMo80tW3QAbe+oD1LBMqxveMXN5vn8L+v1R3Bey5gC9M/2WCVOo+
DEh6R1zoJMrA5kVnW3Bt0ExW0nT4Hnfy2Y6UVQ41sORIu2a6Ipkd9sqzegZJMCrw
lNTXyG6vgtz3WH3b6dnD77RapMNmDHQdIRYalrNCOfSEuRuMQgA=
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:39:02 2026 by rpki-client