
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
File: 6FFB900EDEAE8469264C3200683452F52D2C7D20.mft (raw, json)
Hash identifier: EnL7tCicu/XqXGdpgDj6UK+YLzCifVbyFX9+qXZMkhI=
Subject key identifier: B1:1C:0D:E6:1C:AA:F0:FD:26:4E:BB:5D:63:02:4D:94:3A:A5:52:B5
Authority key identifier: 6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20
Certificate issuer: /CN=6FFB900EDEAE8469264C3200683452F52D2C7D20
Certificate serial: 5DB42DD3563B03D5E2AD86F80AF623A874DE351A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:22:12 +0000
Manifest this update: Tue 12 May 2026 17:17:12 +0000
Manifest next update: Wed 13 May 2026 20:01:12 +0000
Files and hashes: 1: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: X+J06+s9GFmOyzL8tq52i7jtkOJP8+Epb+CH1drPU9k=)
2: 6FFB900EDEAE8469264C3200683452F52D2C7D20.crl (hash: 0x9mgkoc6MJusUFdnM8bOqTIg+cpDiZFsxlvswJ6XhE=)
3: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: wSTIS3GtulXBIyX85d5grLpnIqXDyNCDJIfxayh+SJY=)
4: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: 2EwjI2yaWnE5gULqJdGsbLF8ZASObltpfAUMyYETxbI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.crl
rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b4:2d:d3:56:3b:03:d5:e2:ad:86:f8:0a:f6:23:a8:74:de:35:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FFB900EDEAE8469264C3200683452F52D2C7D20
Validity
Not Before: May 12 17:17:12 2026 GMT
Not After : May 13 20:01:12 2026 GMT
Subject: CN=B11C0DE61CAAF0FD264EBB5D63024D943AA552B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:11:e6:c4:c2:e7:5f:07:8d:f3:40:6b:ec:
fe:ec:a1:cc:26:51:b7:6b:42:20:58:1e:d9:51:05:
f8:52:83:91:57:01:f8:04:77:b5:28:7e:07:f3:81:
3f:33:bd:89:72:8b:d3:ff:02:6d:8e:40:bb:ab:65:
d6:86:d0:9c:c6:2e:c9:d6:19:6a:2d:c2:71:dc:20:
8c:47:68:dc:b9:a2:0a:de:dd:56:64:b7:45:ee:29:
02:c3:62:46:82:bb:cc:f1:ba:a0:a7:ee:7a:b3:d8:
0d:71:00:6c:65:6c:45:58:b3:64:86:5a:a9:d0:8d:
79:48:99:b3:e2:79:95:50:ce:65:f8:8e:46:4a:ef:
0a:25:0d:34:76:86:42:f8:74:c0:7b:d1:e4:2a:99:
8b:71:b2:eb:6f:b7:5f:a1:80:57:37:62:c1:3a:36:
1b:d5:a6:91:fb:01:b0:a4:b6:98:2d:dd:5e:32:c6:
ae:81:28:77:58:48:9e:e7:f9:93:70:6b:67:05:e1:
28:9d:01:6d:62:72:4d:60:92:90:54:fd:8e:e5:8a:
75:95:c0:d9:06:0e:80:8c:1c:82:7f:a8:e2:0f:06:
80:21:39:dc:ad:d3:57:63:74:d1:f1:05:6b:d5:1c:
95:d7:62:93:d0:3d:e3:d4:68:27:19:a3:26:55:ef:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:0D:E6:1C:AA:F0:FD:26:4E:BB:5D:63:02:4D:94:3A:A5:52:B5
X509v3 Authority Key Identifier:
keyid:6F:FB:90:0E:DE:AE:84:69:26:4C:32:00:68:34:52:F5:2D:2C:7D:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/6FFB900EDEAE8469264C3200683452F52D2C7D20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2f:bc:e7:69:52:52:3b:59:6b:04:9f:26:64:d3:ca:92:8b:
28:17:e9:82:f4:1a:c6:a2:e5:df:96:cc:38:e3:a1:2b:a6:c6:
12:fa:87:3f:f4:62:e6:5d:42:6b:cd:10:79:a6:c4:e9:fa:75:
0f:33:83:69:69:e1:06:4d:75:2d:55:b1:6a:52:7e:e2:28:05:
c0:27:5e:21:da:47:d1:bd:73:c9:4b:06:4b:f8:3a:7f:43:3f:
6f:9b:a6:09:83:a4:8b:58:81:76:88:f3:a8:37:55:f1:3c:11:
72:ff:cb:f2:c2:3d:a4:c5:9b:32:96:09:24:4c:8d:f1:9a:41:
6f:9d:1c:0f:ee:5c:e3:ea:3a:f9:03:70:20:be:91:38:b1:1d:
f2:09:ed:06:23:6a:ce:4f:f9:e6:2d:03:0c:8b:05:3e:f6:27:
bf:f1:c9:b2:72:aa:78:59:9e:3c:86:7a:46:33:31:14:11:b4:
01:02:2b:4c:0e:2f:2b:00:72:0f:0b:38:de:6e:ab:6a:03:93:
8e:e9:22:0e:f5:9f:a4:92:50:6e:ce:1c:99:3d:4a:50:8a:5d:
8b:6f:71:af:d3:b6:02:8b:0b:d2:7d:3b:e4:66:c7:cc:ec:60:
e0:35:b4:f8:38:b3:48:f9:a6:e0:25:89:0a:21:da:25:cb:ee:
bc:d2:2a:14
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXbQt01Y7A9XirYb4CvYjqHTeNRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGQjkwMEVERUFFODQ2OTI2NEMzMjAwNjgzNDUyRjUy
RDJDN0QyMDAeFw0yNjA1MTIxNzE3MTJaFw0yNjA1MTMyMDAxMTJaMDMxMTAvBgNV
BAMTKEIxMUMwREU2MUNBQUYwRkQyNjRFQkI1RDYzMDI0RDk0M0FBNTUyQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxSxHmxMLnXweN80Br7P7socwm
UbdrQiBYHtlRBfhSg5FXAfgEd7UofgfzgT8zvYlyi9P/Am2OQLurZdaG0JzGLsnW
GWotwnHcIIxHaNy5ogre3VZkt0XuKQLDYkaCu8zxuqCn7nqz2A1xAGxlbEVYs2SG
WqnQjXlImbPieZVQzmX4jkZK7wolDTR2hkL4dMB70eQqmYtxsutvt1+hgFc3YsE6
NhvVppH7AbCktpgt3V4yxq6BKHdYSJ7n+ZNwa2cF4SidAW1ick1gkpBU/Y7linWV
wNkGDoCMHIJ/qOIPBoAhOdyt01djdNHxBWvVHJXXYpPQPePUaCcZoyZV7/DbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsRwN5hyq8P0mTrtdYwJNlDqlUrUwHwYDVR0j
BBgwFoAUb/uQDt6uhGkmTDIAaDRS9S0sfSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZkYTBlODItMDc2NC00NWQzLWFlZDktZmQyNThlNzJiNmUyLzAvNkZGQjkwMEVE
RUFFODQ2OTI2NEMzMjAwNjgzNDUyRjUyRDJDN0QyMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82RkZCOTAwRURFQUU4NDY5MjY0QzMyMDA2ODM0NTJGNTJEMkM3
RDIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl
ZDktZmQyNThlNzJiNmUyLzAvNkZGQjkwMEVERUFFODQ2OTI2NEMzMjAwNjgzNDUy
RjUyRDJDN0QyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABkvvOdpUlI7WWsEnyZk08qSiygX6YL0Gsai
5d+WzDjjoSumxhL6hz/0YuZdQmvNEHmmxOn6dQ8zg2lp4QZNdS1VsWpSfuIoBcAn
XiHaR9G9c8lLBkv4On9DP2+bpgmDpItYgXaI86g3VfE8EXL/y/LCPaTFmzKWCSRM
jfGaQW+dHA/uXOPqOvkDcCC+kTixHfIJ7QYjas5P+eYtAwyLBT72J7/xybJyqnhZ
njyGekYzMRQRtAECK0wOLysAcg8LON5uq2oDk47pIg71n6SSUG7OHJk9SlCKXYtv
ca/TtgKLC9J9O+Rmx8zsYOA1tPg4s0j5puAliQoh2iXL7rzSKhQ=
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:44 2026 by rpki-client