
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
File: A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft (raw, json)
Hash identifier: jQtX8jL6MRsX6aXye8FAFDTGEQDninBqhjX22dxXbIQ=
Subject key identifier: 29:16:CA:54:85:2D:C3:00:BB:45:8E:93:24:2D:BB:66:6C:7B:E1:94
Authority key identifier: A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4
Certificate issuer: /CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
Certificate serial: 6A7A2FEEC61B4232E0DE776940AC875476228968
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 21:26:12 +0000
Manifest this update: Thu 23 Jul 2026 21:21:12 +0000
Manifest next update: Fri 24 Jul 2026 22:30:12 +0000
Files and hashes: 1: 3130332e3137382e322e302f32332d3233203d3e20313431303737.roa (hash: xGJx+r1ntKLFX7/fs8KLZEY5oObqr/E40CahT7/MaA0=)
2: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: s+sTY2aYtG/SFja7fxXnQbGi+haO9AYfperyGy23oaM=)
3: A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl (hash: NKKWdm3p5hFjsynot45dx5NLZE0vaSDusu6MXr+KrZc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl
rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:7a:2f:ee:c6:1b:42:32:e0:de:77:69:40:ac:87:54:76:22:89:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
Validity
Not Before: Jul 23 21:21:12 2026 GMT
Not After : Jul 24 22:30:12 2026 GMT
Subject: CN=2916CA54852DC300BB458E93242DBB666C7BE194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:9e:74:b7:e7:0a:4d:5a:bc:88:8a:b5:a8:
8e:89:a5:6b:e2:b3:78:9d:f8:6a:be:84:b1:fc:a2:
9a:b8:51:d7:12:05:40:28:91:6e:2d:d1:94:25:54:
74:4e:95:a1:51:40:16:1d:de:fe:44:ef:a8:e4:5a:
43:7c:4a:3c:db:53:46:65:99:e7:20:d4:e0:08:bd:
e4:59:00:db:d7:b6:45:59:0d:92:01:90:40:93:e6:
ab:29:46:a6:9d:cf:c6:df:4d:13:86:89:e9:ad:b6:
90:67:99:90:7a:2c:f9:e2:50:9b:b0:59:09:a8:0f:
45:f0:fb:53:28:5f:4f:da:9a:ae:90:68:c7:5a:e5:
c1:95:92:8d:f7:91:a2:26:fc:6d:9f:23:53:35:1e:
c7:43:22:eb:6b:4b:61:ba:52:9f:ef:32:ae:29:12:
ca:f8:b3:c6:00:96:16:af:67:4f:09:df:a8:5b:00:
ab:95:06:20:26:34:dc:0b:c1:c5:7b:9b:5b:76:c2:
8c:63:2d:57:6e:f8:2c:f1:cc:07:2c:47:7b:48:e7:
8a:03:59:56:1c:ce:7c:a7:e4:07:da:19:4f:8f:99:
f6:d1:41:16:32:55:1f:c5:56:79:68:a2:8d:1e:ff:
65:e9:d6:f3:79:1a:92:8c:01:45:81:28:e0:7c:77:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:16:CA:54:85:2D:C3:00:BB:45:8E:93:24:2D:BB:66:6C:7B:E1:94
X509v3 Authority Key Identifier:
keyid:A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:47:8a:3c:c2:eb:8f:b7:2a:47:b7:58:b5:33:aa:fe:7f:07:
08:df:3e:1c:55:73:b7:50:18:1d:9a:f6:72:fb:75:19:cd:5c:
de:8e:e4:8e:9d:4b:9b:ed:1c:ba:a8:24:a4:89:93:1f:f0:c7:
23:84:21:92:64:46:7f:a4:e9:b9:d3:65:62:f8:c3:75:d0:48:
60:0a:7d:8b:20:f6:12:a3:b3:6a:02:b5:74:b7:f1:df:bc:70:
8a:dd:93:49:31:72:09:05:64:92:73:b4:2f:b1:23:8c:3f:ca:
db:7d:08:32:9d:b4:65:8e:46:b7:79:ff:4a:44:46:c7:d9:77:
d5:e0:37:9d:7b:ed:4f:df:7b:df:0e:ef:b0:7c:e2:e5:8d:53:
ce:0b:dd:8e:61:3c:bf:a2:ae:41:93:5e:af:1c:3a:f2:0b:40:
7c:fc:3c:7a:6b:9a:fe:c3:cd:0b:7e:4e:32:f3:cf:bc:a6:b6:
39:50:eb:f3:7f:78:f0:72:67:eb:64:f8:96:7e:a8:8d:67:ea:
b1:bd:3a:3d:3d:28:94:8d:5c:61:43:a1:8e:68:ac:c3:c4:f2:
3e:f7:e3:14:bb:34:81:7b:e4:f5:a4:39:b0:c4:08:e6:a9:91:
cd:24:6b:ad:76:03:ac:20:5c:50:31:99:0e:1c:eb:d8:a3:d6:
bf:a3:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:33 2026 by rpki-client