
$ rpki-client -vvf rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft
File: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft (raw, json)
Hash identifier: T4QHCpZxkSqD1LuWAbji3nkblZgePOY8+W6y78xyvkY=
Subject key identifier: 03:67:EC:84:6F:D9:4F:C3:1C:D6:10:4B:C0:84:06:29:79:20:BA:27
Authority key identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62
Certificate issuer: /CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462
Certificate serial: 4490919D766AF40BAC026F0342439127C05ADE19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 04:35:07 +0000
Manifest this update: Fri 24 Jul 2026 04:30:07 +0000
Manifest next update: Sat 25 Jul 2026 05:51:07 +0000
Files and hashes: 1: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: fq37ZHBu24pHeLdJZjOVOOPOX99zj7waBTPuiWqsdHw=)
2: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: 8t40pL4fQo3N87VVWTTwLCjvAxbdAzsDM6MoI8rvfOU=)
3: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: qPSkhr1Hfd95Nteo2ukz+NrVtlkjXkiSW+VId9eRa8U=)
4: A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl (hash: h9/+TrfG8+lr9jB5arTKGs7xyL+PRPfY8Xk2kLkHusM=)
5: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: QcsJg3qfqnd65tjMyauj31CLylmqEJ9JmPfIivInN4s=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl
rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 05:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:90:91:9d:76:6a:f4:0b:ac:02:6f:03:42:43:91:27:c0:5a:de:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462
Validity
Not Before: Jul 24 04:30:07 2026 GMT
Not After : Jul 25 05:51:07 2026 GMT
Subject: CN=0367EC846FD94FC31CD6104BC08406297920BA27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:e7:be:6f:a1:bc:60:7e:bd:d2:c9:ee:90:
ba:bf:08:e1:ff:bb:c5:1b:9c:a7:dc:fb:f5:f2:71:
57:a0:64:a1:11:0b:a5:52:7a:89:ae:57:62:3b:87:
17:ec:e5:4d:5b:8b:fe:3e:ed:24:9f:fd:ae:8d:88:
90:d4:7f:35:72:e6:ae:3f:c8:74:11:4f:d1:1e:39:
b1:61:1c:e7:93:15:32:05:70:07:44:c4:77:4d:c6:
b6:39:3f:2d:17:7e:1b:ca:33:0e:fb:02:49:23:c5:
72:3a:e3:5b:6c:d4:86:ec:e2:98:1a:52:75:eb:9f:
9a:5f:1a:60:29:4f:8a:4d:65:60:16:97:2c:ba:c6:
a4:0e:40:79:49:44:b9:a6:75:41:0a:df:62:53:bc:
fa:9d:35:8b:a3:79:be:54:31:cd:1a:b3:1c:c7:c9:
da:4b:21:5b:76:cc:3a:62:a9:cf:6d:56:95:92:c5:
dd:59:64:da:d6:13:a4:9f:d0:24:0d:da:4b:22:30:
65:d7:ea:d9:b6:1d:4d:ce:97:69:ab:ca:58:d2:3d:
cb:02:ba:97:90:86:72:a7:4f:79:dd:3f:c6:94:28:
5b:5d:fa:1a:56:9e:3f:75:37:79:78:c2:70:40:77:
49:bf:0b:95:02:66:18:a2:af:70:0d:57:eb:7b:67:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:67:EC:84:6F:D9:4F:C3:1C:D6:10:4B:C0:84:06:29:79:20:BA:27
X509v3 Authority Key Identifier:
keyid:A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e0:30:36:75:2e:4f:c7:c1:75:73:c4:a2:c8:4d:44:85:27:
7e:52:69:af:88:30:5e:00:89:8b:2c:52:83:9b:73:cb:3b:e7:
1f:8d:b0:3c:22:c4:4e:a5:40:43:36:70:4c:ad:24:ae:07:af:
0e:63:7a:0e:77:6e:83:d5:2a:97:40:1c:95:0d:06:bd:4b:cc:
4f:65:1d:cd:45:38:be:7c:79:98:28:a3:65:15:0b:68:e4:b0:
ef:d1:04:4c:a8:73:89:51:0e:11:4c:82:b7:4f:aa:9b:3c:93:
94:58:38:36:87:25:88:18:52:f2:93:87:a7:8a:c7:c9:30:d6:
29:0a:fb:3d:f8:67:e5:46:36:f9:6e:bf:2a:a4:8d:6d:7d:ce:
01:fe:69:22:05:8d:b5:31:df:0d:ea:10:dc:d1:de:41:6e:76:
41:71:08:c2:e7:52:35:b4:0b:5b:f5:fc:73:b2:8e:db:6d:73:
3c:56:14:29:2c:c0:08:30:b2:16:d8:19:71:eb:96:89:90:87:
cb:28:a8:20:b1:f3:3c:42:44:62:86:d8:2d:f0:f3:a2:39:0d:
ec:c6:90:43:bc:37:6a:c3:ef:34:50:f6:90:a9:a6:7c:2a:f9:
3b:e4:f3:f2:d0:0b:5a:e6:a8:dd:c1:d3:02:a2:f3:76:49:59:
3e:4b:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:06:52 2026 by rpki-client