
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft
File: 286FEF74182957F840C8CD66D505DD9A8BF4A606.mft (raw, json)
Hash identifier: en3ApNxdSI6XroGg1vGyrxUEfb4KhZNujpgQTObh7AE=
Subject key identifier: 2B:B6:23:69:B7:E3:C5:D1:DC:60:3B:B2:C9:6C:3C:FC:23:C1:10:5B
Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06
Certificate issuer: /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606
Certificate serial: 1A68243C6960DC874C8FDC303B3812453B994A9F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft
Manifest number: C6
Signing time: Sat 26 Sep 2026 01:32:02 +0000
Manifest this update: Sat 26 Sep 2026 01:27:02 +0000
Manifest next update: Sun 27 Sep 2026 04:09:02 +0000
Files and hashes: 1: 286FEF74182957F840C8CD66D505DD9A8BF4A606.crl (hash: l56/j3M2SyqcsfO4AuOWmqGQGqZQyfwaCavvhebOrfA=)
2: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: AthlSg+fC+KDbEL8BU+u7C1PwYX8FKjL7COZzuS8GwQ=)
3: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: B28bgCxG5yIMS8RvUUNRnlY6fRGrdbq+yR9rEsAykN0=)
4: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: qLtwF3ISuvLzArijpMOF5fAjENE5AmrknqjjuwJX4QM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl
rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 04:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:68:24:3c:69:60:dc:87:4c:8f:dc:30:3b:38:12:45:3b:99:4a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606
Validity
Not Before: Sep 26 01:27:02 2026 GMT
Not After : Sep 27 04:09:02 2026 GMT
Subject: CN=2BB62369B7E3C5D1DC603BB2C96C3CFC23C1105B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:d2:11:72:f6:a4:bd:c7:4f:0d:6a:f4:77:
b2:11:30:db:40:1c:56:51:67:a3:ac:94:51:61:53:
ed:11:9c:e5:6a:88:0f:f6:16:c1:e6:08:1e:9a:32:
86:07:27:01:2c:5b:13:dc:65:6a:ff:d0:77:24:f9:
cd:bd:f6:40:da:60:66:fc:ad:04:6f:a9:09:f4:6f:
6e:a1:1d:aa:53:b0:75:db:d8:3f:a5:5f:51:93:f9:
ee:7c:c3:90:22:83:36:10:23:c6:f8:fb:5f:00:7f:
e6:d9:63:4d:a3:1f:fe:07:f3:2d:91:ea:04:97:5c:
fe:e5:3f:c4:9a:1f:ba:8d:0c:74:48:93:64:73:9d:
e7:02:dd:ce:ab:a0:ff:95:44:96:4e:76:62:88:d4:
eb:84:c7:5e:2f:af:4d:b3:3e:9f:0d:1c:20:61:29:
9f:02:80:9d:11:6b:5d:ed:62:70:e1:36:2a:70:8a:
2a:b1:2d:0b:cb:a4:14:36:26:79:88:37:b6:80:a2:
dc:4c:f5:77:43:c6:a2:55:cd:d2:bc:bf:d5:0a:63:
3f:7f:f5:24:0f:00:42:0c:a0:96:a9:a6:92:7b:c5:
f8:43:52:fd:94:58:e9:07:ca:da:e2:9f:bb:fe:31:
97:1f:9d:f0:03:59:28:20:58:a5:0a:e4:48:98:05:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B6:23:69:B7:E3:C5:D1:DC:60:3B:B2:C9:6C:3C:FC:23:C1:10:5B
X509v3 Authority Key Identifier:
keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:dd:78:10:87:51:c6:c8:b7:e1:37:39:0d:db:9e:36:ec:52:
a6:50:af:f7:cb:0d:2a:20:d9:56:66:03:9e:57:eb:af:41:1c:
0a:ed:e6:96:0c:02:61:fb:08:cd:23:4c:5e:46:cf:a2:c1:51:
27:5e:2a:53:98:dd:de:ef:d6:5f:94:0b:84:ac:b7:82:92:26:
da:fe:91:c2:38:1d:4b:a1:ed:37:8e:87:66:38:1a:3d:9d:22:
3a:3e:db:96:34:f8:ab:cd:c3:8f:10:51:b5:9a:bf:67:ae:9b:
17:44:ae:77:bf:4c:e4:7f:57:0c:63:50:86:93:87:20:f6:7b:
8d:a8:67:25:c0:7b:9b:2a:14:f6:0f:91:72:2b:6b:2e:00:84:
3d:1e:a1:4e:13:74:0c:3a:d3:42:99:a8:28:38:dd:df:1a:b2:
0e:46:7e:bd:94:b0:e3:45:74:fa:2e:b5:28:0f:51:1f:28:93:
73:b2:91:21:ec:85:6f:1f:97:5a:9b:22:19:8d:27:f5:8b:49:
79:0e:ed:3a:c2:a7:a1:54:fd:10:ef:b2:c4:c4:83:3e:4a:b0:
54:aa:e6:4d:7e:2c:fe:65:8b:bf:4b:cc:60:f7:da:8c:95:8d:
d8:9e:c3:90:4e:ab:a9:70:3e:88:84:85:4c:44:58:ce:c9:ad:
63:3e:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:01 2026 by rpki-client