
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
File: 6FFB900EDEAE8469264C3200683452F52D2C7D20.mft (raw, json)
Hash identifier: UbeL67+Fa9PUPkE2DJ5w5c2yISYzcITPUv/xh7tyziI=
Subject key identifier: 59:22:3B:61:D4:1A:37:D9:0B:17:AD:C2:97:F0:77:43:2D:C8:AB:81
Authority key identifier: 6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20
Certificate issuer: /CN=6FFB900EDEAE8469264C3200683452F52D2C7D20
Certificate serial: 519F0F528CFBED7B07CA6B541C870BD8301EC06A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 16:26:24 +0000
Manifest this update: Wed 23 Sep 2026 16:21:24 +0000
Manifest next update: Thu 24 Sep 2026 19:36:24 +0000
Files and hashes: 1: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: 2EwjI2yaWnE5gULqJdGsbLF8ZASObltpfAUMyYETxbI=)
2: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: wSTIS3GtulXBIyX85d5grLpnIqXDyNCDJIfxayh+SJY=)
3: 6FFB900EDEAE8469264C3200683452F52D2C7D20.crl (hash: ecw+hgX5rYo5dLlFCjb35j2lokuJWKnr+p1aMbR1NMY=)
4: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: X+J06+s9GFmOyzL8tq52i7jtkOJP8+Epb+CH1drPU9k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.crl
rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 19:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:9f:0f:52:8c:fb:ed:7b:07:ca:6b:54:1c:87:0b:d8:30:1e:c0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FFB900EDEAE8469264C3200683452F52D2C7D20
Validity
Not Before: Sep 23 16:21:24 2026 GMT
Not After : Sep 24 19:36:24 2026 GMT
Subject: CN=59223B61D41A37D90B17ADC297F077432DC8AB81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:17:4c:32:c6:25:7a:3a:db:9a:18:ed:81:13:
a1:45:2f:74:92:a1:79:20:0d:72:37:57:18:2d:e9:
1e:cd:b4:2e:9f:d1:55:07:29:1f:c9:bd:6b:58:1e:
99:04:14:ff:d3:6a:1d:d4:d8:53:f7:28:dd:9b:2e:
f8:f8:a7:00:41:9f:a6:36:86:42:69:c9:dc:84:09:
62:42:ce:34:d5:26:28:3f:32:1d:24:a0:dc:4e:2d:
c6:a4:82:f5:26:0b:5b:d3:3f:ec:a4:b2:fe:cd:0d:
1a:07:c8:10:57:7e:58:83:29:12:5d:f2:7e:85:2c:
43:aa:f2:fd:14:7a:d6:fc:e4:84:96:65:57:a5:03:
fc:fe:22:11:28:0a:93:83:d5:5c:90:1a:63:33:52:
3e:c2:40:a5:66:4d:54:d9:5f:52:16:db:37:b5:ca:
a2:0b:69:29:84:80:3f:66:0c:36:71:3c:d5:c7:d1:
28:07:b8:54:30:58:03:04:7d:3a:bf:3b:b2:37:05:
7d:9c:b3:5f:87:aa:b5:2d:61:e1:e6:f0:99:02:af:
fb:12:b7:8b:57:91:9a:eb:77:ad:a1:17:89:9d:5e:
86:ae:76:74:69:17:ce:66:e1:7a:ac:60:35:60:95:
22:ee:c6:02:41:19:91:f7:5f:56:e7:53:84:54:5c:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:22:3B:61:D4:1A:37:D9:0B:17:AD:C2:97:F0:77:43:2D:C8:AB:81
X509v3 Authority Key Identifier:
keyid:6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:96:8c:f2:ca:45:ed:21:27:b8:85:e6:28:b3:0f:c7:1a:65:
de:8c:5d:65:8a:2c:71:9d:c1:a5:3c:5e:2e:53:e7:1a:c7:16:
dc:b3:3c:44:72:4a:44:2e:9c:6b:6c:ad:fb:41:66:15:5a:a3:
53:6e:a8:86:7e:1c:a3:b1:fb:ae:80:55:4f:2e:21:4b:73:c0:
93:bf:17:6a:64:1c:ad:00:67:88:68:ab:5d:99:3b:e4:dd:79:
ff:4f:9b:1c:e3:56:f9:33:96:a0:a9:60:0c:9b:16:3c:3b:c7:
92:a2:d4:7b:dd:2e:1c:ec:67:b5:59:10:e4:df:bf:23:e8:ce:
d2:d4:71:cf:8b:17:86:0f:a3:a9:a5:c1:39:0c:d1:59:59:4a:
7a:4f:4d:fe:c2:36:8c:6c:a9:9b:0f:d3:d2:bb:b4:1f:0a:b6:
43:98:c3:61:1c:5e:0b:15:c2:40:1f:b8:6f:42:a7:38:c1:86:
53:fc:c6:eb:45:a5:cd:9e:c1:62:ee:d8:2b:02:53:58:56:3f:
c0:49:97:a0:a3:60:22:ff:fd:e2:23:ac:b5:0c:cf:09:96:f0:
37:4c:c3:62:d3:40:f6:2f:28:0b:95:71:f0:73:70:74:d9:66:
87:72:93:44:bd:f1:19:df:0c:24:50:25:85:47:ff:bc:a6:a8:
c8:74:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:39:50 2026 by rpki-client