
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
File: 6A18E24186A3D3ED8D5089777A2464365FF00A27.mft (raw, json)
Hash identifier: bHvqjaTkB/3YmMjaxHfOA375nVOxqJOBUbzwowiU+/s=
Subject key identifier: 20:85:17:42:32:5D:89:AF:F9:AA:DD:29:FB:7E:AC:97:FD:C9:BD:E2
Authority key identifier: 6A:18:E2:41:86:A3:D3:ED:8D:50:89:77:7A:24:64:36:5F:F0:0A:27
Certificate issuer: /CN=6A18E24186A3D3ED8D5089777A2464365FF00A27
Certificate serial: 3654C03F1AE4B2F168AEEB3B0314A830B40E5FBB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:35:39 +0000
Manifest this update: Tue 12 May 2026 19:30:39 +0000
Manifest next update: Wed 13 May 2026 21:27:39 +0000
Files and hashes: 1: 6A18E24186A3D3ED8D5089777A2464365FF00A27.crl (hash: Db9fPWx7xeqCZ2DVni08GWbFZnY/m4RFzPqPwcpokFE=)
2: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: h3C8yms9g4R1YiVLRu6ZS9/9U4FvJR5pkKQb8FutKck=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.crl
rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:54:c0:3f:1a:e4:b2:f1:68:ae:eb:3b:03:14:a8:30:b4:0e:5f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A18E24186A3D3ED8D5089777A2464365FF00A27
Validity
Not Before: May 12 19:30:39 2026 GMT
Not After : May 13 21:27:39 2026 GMT
Subject: CN=20851742325D89AFF9AADD29FB7EAC97FDC9BDE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:aa:57:53:3d:b4:41:e0:6c:3f:06:5f:37:
76:a7:9f:52:83:21:92:83:6a:d3:63:f0:58:db:bb:
60:49:88:cf:28:a7:84:e8:4f:78:ee:53:30:b6:75:
0a:3b:4c:29:e8:a8:bc:ff:bb:66:53:f9:b0:a3:14:
30:07:a4:50:76:f2:96:aa:8c:35:b8:a3:c6:20:e7:
e6:40:07:85:62:b0:0f:4e:09:a5:b1:f1:66:a0:4a:
8e:b0:eb:4f:04:c1:64:bc:96:75:61:0b:43:a2:a6:
7d:91:1d:e1:5a:71:17:89:fc:16:d3:57:7e:01:c8:
48:83:63:37:4e:da:ec:41:40:de:29:07:87:65:ff:
68:16:29:48:89:9e:8a:b4:73:80:fd:c8:bd:2d:f6:
83:9b:0c:c0:86:95:04:c4:d0:fe:ce:01:e1:be:0a:
ed:a5:3f:34:dc:a7:b5:c9:d3:26:cb:a8:b3:38:9b:
03:7b:d8:65:40:91:32:b5:cc:55:08:b5:32:26:8c:
0b:e4:48:a5:72:d1:ea:07:87:66:46:06:88:8d:ff:
45:fe:24:09:e7:cb:c8:09:ac:a5:f6:c1:ce:c7:52:
60:d9:e8:59:ae:f0:b6:d5:ec:65:ca:c8:db:37:97:
32:20:43:93:9d:4c:99:9f:f1:12:ec:e6:8b:00:4b:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:85:17:42:32:5D:89:AF:F9:AA:DD:29:FB:7E:AC:97:FD:C9:BD:E2
X509v3 Authority Key Identifier:
keyid:6A:18:E2:41:86:A3:D3:ED:8D:50:89:77:7A:24:64:36:5F:F0:0A:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/6A18E24186A3D3ED8D5089777A2464365FF00A27.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f9:a8:fd:82:e6:1c:5f:e5:09:f5:a1:f4:10:d9:eb:14:e4:
46:ab:94:89:ba:8e:99:71:6d:04:96:a0:16:2c:2c:d6:e1:c6:
5d:7f:f6:7d:80:16:af:fe:b3:4f:1f:74:d8:38:0a:36:89:b6:
d4:e3:d8:b7:94:00:2c:2f:dc:23:51:c5:78:3d:ec:5e:2e:19:
06:48:2f:aa:69:dc:64:c2:d9:01:7b:1d:5a:84:10:5a:c7:95:
50:d8:ea:2f:c6:e9:79:46:28:ef:f5:d0:b0:42:93:51:f7:4f:
87:fd:fa:4b:ad:96:ca:88:0e:8b:d1:5c:12:e6:dd:f9:d4:7b:
51:4c:de:85:59:2a:0a:07:da:01:8f:97:e3:6c:3a:96:1c:d5:
5c:6d:3f:9c:80:b2:65:28:64:a3:d0:0d:7e:fe:84:3a:af:69:
5b:65:1b:e8:63:ac:2c:c4:c5:13:e3:02:2f:01:15:54:11:01:
98:ee:99:5d:4b:c7:a3:c6:44:43:ba:00:db:59:6a:9b:4b:e7:
7e:5b:0d:f5:46:c8:59:95:80:de:65:5e:df:ad:be:ea:2d:4c:
2f:33:5e:e9:d4:c2:41:80:4e:db:c3:2c:3c:b4:47:57:65:56:
5b:81:16:b9:4c:33:58:83:72:29:70:79:33:b7:cb:cf:a4:33:
43:46:5d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:44 2026 by rpki-client