
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft
File: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft (raw, json)
Hash identifier: AwVhYeEcFPz54EKpRuqNUPL7kfowPM0nQNRmVULaiaA=
Subject key identifier: E0:E3:1F:3F:57:69:2C:11:89:0F:DE:D9:65:67:07:66:A9:06:49:6E
Authority key identifier: B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08
Certificate issuer: /CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108
Certificate serial: 34175A0CE1FB64E982E0827CFE2C87B4476D4562
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 23:54:00 +0000
Manifest this update: Thu 23 Jul 2026 23:49:00 +0000
Manifest next update: Sat 25 Jul 2026 02:27:00 +0000
Files and hashes: 1: 3130332e3138392e3136382e302f32332d3233203d3e2039333431.roa (hash: v0xv6ts8xNGmfAQ65ctkAG3Fqvb6dUvN83XOnaYe2GA=)
2: 3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (hash: 8e9FrxOA/xN95Yot7Ymznk0AodzlekAylsbbF3Artc4=)
3: 3130332e3138392e3136382e302f32342d3234203d3e2039333431.roa (hash: XBc3ZVVKXIlCbURfHv+y5tJpz8Y5k76pERxRfF4D1As=)
4: B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl (hash: ZRP28QBldxhrQChpfQ3MlXrQh4cbMxw/sO/NyCin774=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl
rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:17:5a:0c:e1:fb:64:e9:82:e0:82:7c:fe:2c:87:b4:47:6d:45:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F810F2293CBFDBC3D6FAA92888E9C796B30108
Validity
Not Before: Jul 23 23:49:00 2026 GMT
Not After : Jul 25 02:27:00 2026 GMT
Subject: CN=E0E31F3F57692C11890FDED965670766A906496E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:47:cf:ac:b6:15:98:b3:aa:b1:1a:93:59:
3c:9b:40:de:a3:1e:9c:34:c5:38:44:ed:e7:47:3e:
f3:02:b0:f5:79:ab:3c:46:31:3f:69:f3:d3:09:14:
35:37:18:00:77:b9:bf:54:d7:e3:8f:b5:eb:59:a9:
14:ce:29:48:c4:dd:17:a6:b2:07:cd:fa:e1:c3:c1:
54:cd:53:73:48:de:e2:9e:78:f4:62:05:3b:b4:34:
a0:1e:78:1e:4a:9e:97:78:17:bd:f0:84:58:0e:df:
c1:6a:ab:a1:d3:9c:3c:83:fa:13:03:3c:0f:58:36:
42:f6:89:e9:84:47:5d:90:22:3c:6b:e1:c3:d5:af:
9b:9f:3a:12:b4:27:57:bb:05:b5:de:c5:c8:64:72:
c4:e6:c6:94:60:9c:5a:ab:c5:ca:3f:48:e6:0a:ce:
8b:1a:2f:0a:2b:80:34:7f:3a:b4:f2:1d:10:d9:5b:
79:bd:04:24:f7:78:26:fe:85:0b:32:a8:f4:1f:f7:
cc:6b:75:94:f5:e0:af:18:ff:01:83:9f:8a:05:dd:
c2:a2:65:9a:99:8e:a8:eb:14:b8:63:29:05:2b:43:
60:84:ad:e2:ed:d5:1b:5f:71:9a:87:a1:c5:7c:d0:
99:81:ce:6b:21:ec:29:8a:11:0b:5d:a0:f0:f6:a6:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E3:1F:3F:57:69:2C:11:89:0F:DE:D9:65:67:07:66:A9:06:49:6E
X509v3 Authority Key Identifier:
keyid:B6:F8:10:F2:29:3C:BF:DB:C3:D6:FA:A9:28:88:E9:C7:96:B3:01:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/B6F810F2293CBFDBC3D6FAA92888E9C796B30108.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6c:be:9d:ae:0e:f9:23:85:99:c9:78:9b:1b:39:1d:03:38:
c9:58:35:9d:06:96:31:6f:46:5b:a9:6f:38:8a:11:6d:cf:f3:
3d:e8:40:09:48:ca:3e:db:76:cd:d6:fd:27:28:bc:be:1c:1f:
25:31:f0:5b:3b:2b:a2:ea:bc:47:e1:5d:05:fb:d4:86:9b:f9:
ff:52:07:c7:75:82:67:65:d6:be:ea:70:59:28:cc:6e:62:38:
00:23:f7:af:8c:b7:c2:9d:8e:2f:46:ed:9c:41:dc:e3:5c:cf:
7a:9e:a2:48:3e:33:fd:d6:22:0f:2a:b0:ec:61:7b:39:3d:6d:
55:a7:a7:64:85:7f:36:4d:5a:fa:9c:fb:84:a0:6e:0b:88:c3:
e9:13:68:c6:08:4d:a5:cb:0b:94:3c:b2:fe:4a:7f:24:b1:71:
63:45:6b:47:54:da:93:61:21:ce:a6:77:69:4b:23:2a:9e:c2:
1a:d0:d2:f4:7c:9d:a5:75:4d:0b:c4:69:3b:a6:ed:69:24:21:
16:6e:3f:40:3c:7b:89:0c:90:36:e6:9b:48:e2:3a:9f:68:4f:
03:3a:77:b6:38:d6:a6:02:ee:ea:4b:02:83:4a:02:93:67:f2:
6e:fa:95:29:3b:ee:07:cc:09:0b:83:29:fb:22:58:a0:c7:2c:
60:7e:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:57 2026 by rpki-client