
$ rpki-client -vvf rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft
File: 6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft (raw, json)
Hash identifier: +gFP2zcIl5Q+BOiiVOqFLV/oSD77yt0r49AjGGXRAcQ=
Subject key identifier: 13:B0:38:BF:46:D3:70:60:51:EC:5B:E4:48:F1:53:D5:A9:50:1B:5B
Authority key identifier: 6D:4E:1B:3F:92:4B:DE:79:ED:AF:C6:28:17:3F:AD:26:DE:B7:2C:E1
Certificate issuer: /CN=6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1
Certificate serial: 6E076FB020EC47BFAA5ECB48894A50A0BCAD388A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 04:08:43 +0000
Manifest this update: Tue 12 May 2026 04:03:43 +0000
Manifest next update: Wed 13 May 2026 04:56:43 +0000
Files and hashes: 1: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: 1yZQJfUMIdupzXA1ljHpU5mWQfYGWg8xMYH2Yx/jRFc=)
2: 6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl (hash: kAznyX7as4F51Zv6diBL8jJChKwu5LqXKvfLl039+3k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl
rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 04:56:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:07:6f:b0:20:ec:47:bf:aa:5e:cb:48:89:4a:50:a0:bc:ad:38:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1
Validity
Not Before: May 12 04:03:43 2026 GMT
Not After : May 13 04:56:43 2026 GMT
Subject: CN=13B038BF46D3706051EC5BE448F153D5A9501B5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:da:aa:2b:49:c9:2c:14:c2:85:af:e3:df:
45:9d:71:da:25:b8:9d:bc:45:47:30:fa:79:79:3c:
31:01:0c:dc:70:80:1e:05:6c:1f:50:ff:6b:a9:3c:
66:1c:20:26:f3:f1:cd:6e:c5:ec:d9:d0:13:2a:19:
74:27:07:da:6e:96:99:38:f4:77:9c:af:7b:e5:c2:
f0:2e:3f:b2:cc:94:00:31:39:6a:28:5c:54:75:6a:
e2:8e:9d:91:cb:be:f8:e8:69:85:7f:f4:4a:f2:95:
d5:42:13:20:49:46:8c:74:12:60:0f:c9:c8:a5:8f:
18:a9:86:4d:42:8e:bb:8c:26:2b:69:76:2c:75:74:
c2:5c:40:ed:f7:94:35:43:73:c0:f1:08:6d:63:8a:
6e:0f:2d:0d:63:38:74:79:4d:7c:ae:94:07:ce:30:
f6:61:66:e0:fa:18:3e:02:1d:02:96:3c:d5:6c:fa:
41:0d:5e:c3:6b:bc:1f:65:20:2c:e7:85:03:2c:a7:
c0:17:88:63:16:1e:47:06:81:88:5e:ad:15:b9:d7:
80:90:a4:87:bf:d6:53:b3:9e:9e:df:15:6e:e5:8f:
b3:45:a1:24:73:2a:e4:d1:74:8f:ed:79:09:ba:1c:
fb:e8:bc:56:fb:ef:c2:a5:4c:f8:8f:b6:20:df:52:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B0:38:BF:46:D3:70:60:51:EC:5B:E4:48:F1:53:D5:A9:50:1B:5B
X509v3 Authority Key Identifier:
keyid:6D:4E:1B:3F:92:4B:DE:79:ED:AF:C6:28:17:3F:AD:26:DE:B7:2C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:78:57:b5:3c:ed:f5:ad:90:e3:d7:68:7c:9e:71:0d:50:de:
31:82:cf:c2:0a:72:8f:ad:fc:3b:8e:d3:9f:fe:d1:f0:65:b4:
6a:86:ff:2a:84:a5:f2:02:86:8c:d1:7c:2b:5d:1e:2a:f5:60:
15:c7:46:e6:bf:95:11:50:fa:1b:38:84:38:3d:28:9e:e0:35:
79:32:de:8d:90:86:1f:bc:12:9d:77:7f:2e:d7:66:2a:65:74:
8b:d3:19:e8:80:86:86:92:13:bc:31:77:c2:1a:58:2f:e0:39:
1b:68:9d:3c:ad:c1:2c:ef:8b:1d:7e:e7:fc:10:92:15:6f:f8:
0b:77:c3:b4:0b:bf:32:47:ac:9e:94:0e:50:bf:16:ba:05:47:
09:50:6e:27:7b:25:ec:67:ac:8d:82:ee:d5:42:88:be:48:f2:
8b:66:a1:9f:97:72:87:14:62:b9:38:d7:b6:27:34:ce:33:3f:
38:b8:73:df:b3:93:8e:2c:39:96:05:29:27:ed:ed:33:39:eb:
a3:8f:aa:a0:de:58:a0:96:de:28:80:0a:3e:f2:0b:f4:39:b5:
79:39:f0:74:95:93:13:c6:4a:33:48:a5:f4:d6:54:08:c9:78:
0b:08:92:0f:15:e0:f4:65:98:32:27:f1:0e:7a:6d:2e:be:9b:
b2:7c:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:49 2026 by rpki-client