
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
File: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft (raw, json)
Hash identifier: dXwZP4TlGgYkCInhVfy4SrPtyHlqzlf90AuoIY0Bz4M=
Subject key identifier: BE:E1:CA:A9:CE:E6:ED:E6:48:72:80:E9:F2:2D:45:EF:CD:7D:C3:63
Authority key identifier: 6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5
Certificate issuer: /CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5
Certificate serial: 07E676E275B298F6CF5509932B5AF85AEF1EB099
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
Manifest number: C4
Signing time: Fri 25 Sep 2026 11:50:13 +0000
Manifest this update: Fri 25 Sep 2026 11:45:13 +0000
Manifest next update: Sat 26 Sep 2026 15:46:13 +0000
Files and hashes: 1: 3130332e3136392e34342e302f32342d3234203d3e20313432333931.roa (hash: S9Rn028mN4RxKRfk1o8rZH0hTRoX3/5ujuVLyQFUwsA=)
2: 6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl (hash: EL4yfp0WT7+XiilN7WEtXdty69BUuFsBc76z2koBAL4=)
3: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (hash: y9avoo0XnwxjsH45wOCvll+IYaXWnM223zX3g6ZS9kU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl
rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 15:46:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e6:76:e2:75:b2:98:f6:cf:55:09:93:2b:5a:f8:5a:ef:1e:b0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5
Validity
Not Before: Sep 25 11:45:13 2026 GMT
Not After : Sep 26 15:46:13 2026 GMT
Subject: CN=BEE1CAA9CEE6EDE6487280E9F22D45EFCD7DC363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:44:b5:68:5a:f1:19:0f:4e:ee:73:d2:6c:
9a:aa:c8:0b:b5:e6:dc:19:f4:7e:dc:df:8b:63:d0:
dd:c4:69:5a:0a:1f:b6:f7:e5:55:bc:41:7b:cf:e9:
52:6b:a1:4d:87:22:87:31:c2:f4:80:f7:5c:3a:f1:
be:8a:13:8f:f5:b5:0a:a2:30:ce:9d:87:fa:0a:b5:
73:5f:a9:eb:17:14:26:88:19:32:7a:da:1c:0b:c7:
db:0d:d5:f0:ce:01:9d:0c:bc:8f:fe:b9:4c:0f:8b:
00:a4:da:8f:f9:c3:8a:4d:1a:bc:d9:cc:4f:5c:36:
96:58:f3:ba:00:f2:9d:0e:ec:81:4f:36:fe:f8:5d:
c2:59:84:7b:2a:25:1c:dd:28:72:64:8e:3a:06:a7:
e5:40:2c:2c:15:e6:09:b0:73:1e:93:ec:86:65:4d:
47:fc:0f:7f:e9:8a:83:d7:07:e1:a1:e6:86:17:58:
15:a5:92:6e:52:1d:cc:a3:09:fa:ed:f1:aa:97:21:
bc:54:3b:a8:93:12:a9:41:31:91:90:b1:0a:35:0c:
d9:5e:7d:28:5d:94:55:15:13:f9:85:e5:3a:ff:b3:
d2:5f:9e:7d:82:a3:b7:da:ba:7c:1d:59:ee:1e:25:
1e:2e:e6:da:7d:69:b0:fe:ac:19:6a:3d:05:26:c3:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E1:CA:A9:CE:E6:ED:E6:48:72:80:E9:F2:2D:45:EF:CD:7D:C3:63
X509v3 Authority Key Identifier:
keyid:6E:FC:A1:AA:74:52:F5:83:B4:33:17:E5:60:CC:93:F8:C9:CB:8D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/6EFCA1AA7452F583B43317E560CC93F8C9CB8DC5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d5:41:b8:70:19:93:2b:da:23:23:50:c7:aa:ba:d8:69:d5:
eb:4f:47:dc:b3:2d:0f:ca:02:d3:f2:a3:c0:0b:66:89:d1:69:
7e:a3:13:e6:ba:82:72:8a:25:7b:ef:5e:7e:86:2c:d9:eb:68:
ea:81:63:f0:7e:b7:ab:54:ac:4d:ee:c0:65:54:97:c9:de:49:
fc:4b:95:17:5c:c6:89:f3:b5:cc:ba:33:2b:24:15:fb:bf:07:
84:54:7c:ca:77:39:ea:19:f7:35:a0:34:53:d7:fd:b6:2e:21:
16:17:94:aa:4b:16:12:7d:a8:ef:51:ea:3a:f1:75:a6:d4:be:
b2:d4:f8:cd:f4:26:e8:93:92:98:67:50:89:4d:83:3e:4d:78:
5a:b4:71:44:7b:2c:2e:f4:21:a0:dc:9f:26:d8:4f:5e:2a:86:
da:a0:1a:99:eb:21:a0:44:63:82:ff:a6:4e:e0:31:3f:99:c3:
ad:41:73:51:f8:e9:b5:22:7f:b7:86:4c:38:75:07:3d:d4:7d:
e0:0d:e1:92:cd:23:31:49:33:f2:c2:55:39:c9:86:8e:42:63:
08:1e:23:28:18:7e:b2:1e:b9:71:c1:43:f2:8a:53:68:75:9d:
88:76:12:a7:1e:b4:2d:04:9c:62:18:34:61:7b:a0:c5:11:e9:
9f:0a:4f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:38:59 2026 by rpki-client