
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
File: 6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft (raw, json)
Hash identifier: ERKmanxBZU45WTG62RXakRoRL6X5C3ifPwk9qS7FjwI=
Subject key identifier: CA:2C:13:7E:A9:D0:76:B7:30:2D:83:49:8D:39:78:09:C1:58:6A:7E
Authority key identifier: 6F:6E:A0:D1:6E:82:88:D1:7A:47:0B:D5:1F:92:A3:49:C0:54:6C:57
Certificate issuer: /CN=6F6EA0D16E8288D17A470BD51F92A349C0546C57
Certificate serial: 5BE2ACDA8E5C59877EF3791DD64AC7745E8D5F5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 21:24:00 +0000
Manifest this update: Tue 12 May 2026 21:19:00 +0000
Manifest next update: Wed 13 May 2026 23:24:00 +0000
Files and hashes: 1: 6F6EA0D16E8288D17A470BD51F92A349C0546C57.crl (hash: RsJ8d6zdUUCTgzgBj2sbGRz/kb3Ftul7tnJF6bZGqHY=)
2: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: 5L8OxoDBph/9fu+4CbtRAtlIzGmHICxIfDadaISFa44=)
3: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: WQ6DOIdSKVAA4byBsNGYK5xMdMyH4CwRYtpJ87YdQ9E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.crl
rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e2:ac:da:8e:5c:59:87:7e:f3:79:1d:d6:4a:c7:74:5e:8d:5f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F6EA0D16E8288D17A470BD51F92A349C0546C57
Validity
Not Before: May 12 21:19:00 2026 GMT
Not After : May 13 23:24:00 2026 GMT
Subject: CN=CA2C137EA9D076B7302D83498D397809C1586A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:12:70:ed:94:ad:d2:02:7f:39:70:ff:cd:
66:dc:95:0f:51:a7:de:64:45:44:b6:f8:95:78:ec:
cf:08:71:2d:2f:1c:9b:3c:40:5d:89:13:17:5f:1b:
71:ac:05:18:c5:9d:49:d9:55:59:67:78:6b:97:74:
77:ad:b7:22:03:52:00:ef:8b:49:9b:be:32:ab:31:
99:4d:20:d4:73:91:e2:69:d8:38:ba:b2:1a:88:47:
bb:d9:79:38:ac:a0:bf:5f:82:bb:98:12:99:04:fc:
98:91:ea:e9:87:5c:62:6b:13:86:ed:d8:3f:63:b0:
d3:6b:6a:cf:a0:4e:d6:44:b2:43:5e:e1:c1:15:ae:
c6:6b:52:af:58:ba:c2:37:43:21:e4:61:74:6d:4c:
64:a1:da:61:d2:2b:1e:f1:a3:cc:6a:68:08:d1:b7:
49:d7:69:67:6f:b3:38:71:98:0d:80:fc:ba:07:61:
1c:40:6f:bd:80:d4:23:03:0a:81:b7:0b:fd:12:5d:
95:a9:c6:4f:9a:b6:4a:39:46:01:30:7d:d2:94:15:
5b:3a:2e:6c:1d:0a:8e:48:c1:c2:1f:ab:34:82:36:
15:09:e8:eb:ed:c1:da:80:df:0f:8e:18:c3:74:e1:
0f:3e:86:14:1f:1b:c1:af:d4:6e:14:d7:81:45:d3:
66:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:13:7E:A9:D0:76:B7:30:2D:83:49:8D:39:78:09:C1:58:6A:7E
X509v3 Authority Key Identifier:
keyid:6F:6E:A0:D1:6E:82:88:D1:7A:47:0B:D5:1F:92:A3:49:C0:54:6C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F6EA0D16E8288D17A470BD51F92A349C0546C57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/6F6EA0D16E8288D17A470BD51F92A349C0546C57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4c:bd:7f:9a:de:c0:ed:93:aa:04:b9:fc:a3:90:92:f6:52:
25:f2:27:b8:ad:0f:ed:42:95:41:f7:2c:0c:d8:60:e7:33:6d:
63:56:ad:c4:9d:0e:cf:4a:24:3b:95:13:63:7c:8f:b9:67:b1:
3b:d8:ac:77:54:2f:dc:a8:57:25:86:cb:54:0e:06:2d:55:6f:
54:de:0a:09:29:a5:22:2c:29:6b:c7:5b:13:eb:97:6f:c2:a8:
22:ad:d7:30:94:e8:9c:73:e0:83:b5:6a:4b:da:4a:2a:0f:d2:
92:45:b0:4d:db:00:2c:2c:fd:e5:d6:57:60:0c:1d:5a:7a:0c:
90:30:94:ba:7d:a3:b5:bc:c1:4a:fb:94:32:46:45:56:82:17:
6a:a6:74:a7:f0:29:0f:98:af:e2:7d:a2:bd:e5:d1:82:81:c9:
e5:8c:c1:06:09:5b:38:8a:6c:cc:40:9a:45:1e:f9:9b:66:d1:
fb:10:d1:02:1b:70:94:91:08:2e:31:23:7b:68:ec:94:5a:21:
bc:fe:d1:48:03:ce:63:fa:82:3a:dd:23:b5:be:01:a9:0e:60:
60:66:91:20:37:77:12:18:6e:3b:84:88:b7:32:7a:82:68:87:
41:57:53:31:bf:a2:1a:46:74:90:d8:60:ec:2a:e7:4b:e4:93:
e0:b4:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:10 2026 by rpki-client