
$ rpki-client -vvf rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
File: 6F45041EB7929E02B86768C39A786F570301BD76.mft (raw, json)
Hash identifier: NZ8QlHIB9Q31zhRaEzcDi/Bjg66/Y1bDaXecwb4y1x8=
Subject key identifier: 00:8C:6B:27:22:8F:02:9A:6E:28:1D:98:45:CA:81:72:22:9D:9F:22
Authority key identifier: 6F:45:04:1E:B7:92:9E:02:B8:67:68:C3:9A:78:6F:57:03:01:BD:76
Certificate issuer: /CN=6F45041EB7929E02B86768C39A786F570301BD76
Certificate serial: 0F7D45F527D9368597C8FF04D928052258449780
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 02:15:21 +0000
Manifest this update: Tue 12 May 2026 02:10:21 +0000
Manifest next update: Wed 13 May 2026 04:19:21 +0000
Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: MoKOK1axg8ykdgPvCQ12UuAuHp6wG4DqBfh3f87ints=)
2: 6F45041EB7929E02B86768C39A786F570301BD76.crl (hash: zQ+s2suwu8a7yEJhmCwpPQdUQiXQEMEDriMv7E/a2H0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.crl
rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 04:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7d:45:f5:27:d9:36:85:97:c8:ff:04:d9:28:05:22:58:44:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F45041EB7929E02B86768C39A786F570301BD76
Validity
Not Before: May 12 02:10:21 2026 GMT
Not After : May 13 04:19:21 2026 GMT
Subject: CN=008C6B27228F029A6E281D9845CA8172229D9F22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:54:bc:c8:a6:c9:82:86:f1:25:88:58:a6:
a3:23:c5:41:ba:11:12:64:b9:cf:b2:be:bc:fd:f7:
37:c7:39:20:94:cd:de:5e:6d:06:a7:22:e6:49:37:
4d:7c:6d:17:c0:25:b3:68:ac:e5:ac:ff:b8:5a:29:
a8:81:cf:64:7c:ee:33:ed:67:62:8c:e1:5f:54:04:
92:9e:1a:38:f6:e5:1f:27:23:d3:07:9e:3f:20:2f:
b4:b3:be:b7:d3:ff:e7:1d:68:9b:ac:95:34:83:fc:
a3:86:27:cd:73:ee:22:56:be:d6:d6:ba:b7:d7:e4:
00:5e:d6:6a:45:61:83:87:5c:b5:3c:f8:20:7e:02:
cb:1b:60:c6:b1:de:79:89:fc:5e:0f:b4:3b:57:36:
3b:a2:ce:fe:1b:e3:84:e7:05:b3:20:78:e2:ad:79:
1d:3e:5a:76:7c:21:8b:a8:c8:e8:bf:32:fc:f5:49:
14:81:ef:54:7e:56:00:e2:67:11:ab:a3:28:74:90:
ff:b4:6c:f5:a8:41:d5:25:96:0f:ea:92:fd:5a:0a:
e4:b5:3a:1b:bc:a2:cd:79:20:ec:18:53:99:7d:10:
a5:46:b5:7e:74:eb:9e:c7:e0:bd:c7:b6:41:15:c3:
40:72:06:b9:b2:07:43:7a:7e:a5:7a:b4:c9:b1:0f:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8C:6B:27:22:8F:02:9A:6E:28:1D:98:45:CA:81:72:22:9D:9F:22
X509v3 Authority Key Identifier:
keyid:6F:45:04:1E:B7:92:9E:02:B8:67:68:C3:9A:78:6F:57:03:01:BD:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5f:ff:72:e6:6b:2d:07:56:1f:60:02:26:51:0a:da:c2:aa:
61:07:01:69:63:38:c7:08:c4:59:6b:95:b3:f1:9c:9b:8a:2a:
9e:3a:f6:7c:70:8a:92:44:4b:25:8d:ae:5b:a4:b9:aa:21:82:
b6:9d:28:37:76:ae:1b:c0:27:f5:49:fd:b4:ca:f9:37:c7:ec:
96:8d:c8:3a:24:1f:74:5a:5f:a6:a4:27:f1:74:60:39:f4:66:
3a:10:78:a9:5b:28:15:0b:9c:4e:4c:30:c7:93:77:be:fc:a9:
28:e5:10:c7:ff:75:23:2a:d6:6a:88:30:83:68:85:23:e3:b4:
f3:26:da:c7:3f:bf:5f:a3:cf:b5:1d:f9:82:4b:5d:00:26:37:
5c:1a:6d:99:9b:1b:4c:38:dd:16:c7:56:8d:ec:43:a5:2a:d4:
19:9d:a5:27:8c:16:5a:9b:3d:5b:5f:67:54:37:15:7b:b2:40:
d0:f2:7e:29:02:74:88:c1:d4:ee:b8:15:28:37:6e:60:08:04:
9e:41:dc:fa:20:4e:5c:8e:6c:e2:99:3d:fc:29:08:10:74:e5:
eb:de:52:84:d1:f9:61:93:f2:4d:ef:12:c7:79:1e:14:17:01:
6c:1f:39:b8:77:f7:1d:ee:6e:bf:bb:8c:0d:57:4d:d8:7c:1c:
3f:68:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:12:58 2026 by rpki-client