
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.mft
File: 6E337B5444B52C51F604D54444178A988904A1E8.mft (raw, json)
Hash identifier: o9d3C2qch1AszT9UvcnzmY1KhmcXSenXSKEqKYmMHcM=
Subject key identifier: 03:E0:C3:0B:A6:76:7C:44:DA:FA:B0:7F:13:76:B6:74:E8:BE:3A:29
Authority key identifier: 6E:33:7B:54:44:B5:2C:51:F6:04:D5:44:44:17:8A:98:89:04:A1:E8
Certificate issuer: /CN=6E337B5444B52C51F604D54444178A988904A1E8
Certificate serial: 01C52C2DF79CE8F75F8C69181C794202CC478BE8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E337B5444B52C51F604D54444178A988904A1E8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.mft
Manifest number: C5
Signing time: Sat 26 Sep 2026 19:34:19 +0000
Manifest this update: Sat 26 Sep 2026 19:29:19 +0000
Manifest next update: Sun 27 Sep 2026 21:32:19 +0000
Files and hashes: 1: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: OnKbLbqaCOoe9pX82WNBd90kbAA8fqzfZioSItTfPoE=)
2: 6E337B5444B52C51F604D54444178A988904A1E8.crl (hash: Ssu7ZHNp67x5ighyT+QhaJiKYIyVvaLM0yTdH7QQ5yk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.crl
rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E337B5444B52C51F604D54444178A988904A1E8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c5:2c:2d:f7:9c:e8:f7:5f:8c:69:18:1c:79:42:02:cc:47:8b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E337B5444B52C51F604D54444178A988904A1E8
Validity
Not Before: Sep 26 19:29:19 2026 GMT
Not After : Sep 27 21:32:19 2026 GMT
Subject: CN=03E0C30BA6767C44DAFAB07F1376B674E8BE3A29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:68:40:e1:10:35:f3:af:11:38:08:a6:b2:
48:ae:69:83:d4:4f:2a:07:ad:f2:8e:41:4e:ae:01:
96:3e:ae:5e:31:95:0f:d6:bc:2e:88:f2:df:34:18:
59:88:59:8d:d5:08:73:0d:93:7e:0a:60:e6:e3:e6:
c3:1a:68:dc:62:6d:43:ab:0d:e2:be:88:ef:22:63:
f7:43:d1:a3:0e:5b:9a:3b:10:b5:5d:37:e3:7e:a2:
43:83:df:8c:02:fb:d9:0a:fd:80:3e:72:2e:87:69:
fb:eb:55:14:94:a2:99:1f:66:6e:11:4a:fe:b5:56:
0d:36:52:92:21:ac:e9:d1:17:2b:85:36:be:a2:f8:
de:8a:96:e5:61:a6:59:d3:00:72:3b:4f:bd:02:5c:
1d:d8:96:d4:b4:fe:47:4c:13:19:f1:ba:94:e6:81:
40:bd:10:fd:5e:a3:57:44:7c:4f:43:3b:a4:61:95:
c7:20:d3:1e:8e:d3:46:48:29:1b:ce:07:16:c7:7e:
02:5f:6f:91:68:b0:0b:15:67:75:73:a3:55:ee:ed:
c6:d6:fb:95:13:9e:cf:09:62:a8:43:e5:bf:1f:49:
e5:02:ef:4a:c4:0e:fb:2f:26:df:1f:00:1e:f1:26:
29:ad:15:40:64:58:42:75:94:55:0e:f1:d0:c1:21:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:C3:0B:A6:76:7C:44:DA:FA:B0:7F:13:76:B6:74:E8:BE:3A:29
X509v3 Authority Key Identifier:
keyid:6E:33:7B:54:44:B5:2C:51:F6:04:D5:44:44:17:8A:98:89:04:A1:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6E337B5444B52C51F604D54444178A988904A1E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/6E337B5444B52C51F604D54444178A988904A1E8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:eb:80:db:bb:75:b5:60:c0:15:1b:26:da:4b:ae:79:80:a8:
cf:31:31:c5:d8:84:aa:24:14:92:72:41:36:93:9d:71:91:5b:
4d:4b:33:18:49:e9:ba:8d:ce:9f:88:38:be:00:7c:df:32:f0:
77:ba:0b:df:79:75:79:fe:58:0e:f6:0e:e9:b1:99:7a:43:7e:
3c:df:21:a3:ec:ac:6e:98:7a:fb:12:d4:e0:39:b8:a0:36:89:
6b:4c:61:43:65:f9:7d:62:a5:5b:f5:57:e8:72:40:3e:54:e3:
49:13:75:4f:cf:0c:2f:bf:5c:35:0c:52:fc:a0:35:b5:55:1e:
08:3e:eb:7d:39:9e:55:ff:8b:f0:c6:dd:45:4e:3e:66:38:51:
3b:d4:11:b3:31:ca:b9:55:a3:44:a5:6d:e1:49:1e:ae:65:0f:
f5:70:6c:17:8a:ec:9c:9a:a6:8c:12:76:3a:9e:c3:10:d5:5a:
a3:31:dd:49:39:d4:09:d7:77:1b:c3:91:23:32:0e:4c:75:43:
77:1b:b6:9d:17:fb:91:cf:cb:11:58:aa:e1:d1:0a:e5:96:f0:
02:b6:67:64:35:18:9a:00:2e:2c:af:7e:f5:30:25:67:67:5e:
25:36:be:07:78:67:e7:b5:e7:eb:9b:5c:ea:44:f5:0d:7a:aa:
69:93:dd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:49:55 2026 by rpki-client