
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft
File: 6D8C2202C602D4BCB9586F638744BA643908A389.mft (raw, json)
Hash identifier: 1s+AAwWi8t1i7KM83/MNmGI3NevRs77KGYWrqwscd7A=
Subject key identifier: D8:87:07:A6:82:BD:35:88:85:14:3E:42:5C:AE:36:45:0B:DA:CB:DB
Authority key identifier: 6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89
Certificate issuer: /CN=6D8C2202C602D4BCB9586F638744BA643908A389
Certificate serial: 091C51588CC09DA8192C84B0AAE8CBD250533775
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft
Manifest number: C3
Signing time: Sat 26 Sep 2026 01:06:30 +0000
Manifest this update: Sat 26 Sep 2026 01:01:30 +0000
Manifest next update: Sun 27 Sep 2026 01:49:30 +0000
Files and hashes: 1: 6D8C2202C602D4BCB9586F638744BA643908A389.crl (hash: S5rIbQENVvvLafVOXKcfukx1bNAjAJFr0iDyB0iT1Jw=)
2: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: m+uFtZihUm3fWV/iOrWY8zLaQsNI9BmUlq7mnOF09qo=)
3: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: b7wBGbC9SNhjzw8V9K2lv7CY6SFtdKxPdtK4cOG4BhI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl
rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1c:51:58:8c:c0:9d:a8:19:2c:84:b0:aa:e8:cb:d2:50:53:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D8C2202C602D4BCB9586F638744BA643908A389
Validity
Not Before: Sep 26 01:01:30 2026 GMT
Not After : Sep 27 01:49:30 2026 GMT
Subject: CN=D88707A682BD358885143E425CAE36450BDACBDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:6a:1a:c3:64:56:c0:73:55:ca:29:e3:5b:
21:dd:ac:aa:40:c0:94:af:55:2f:24:e0:f8:78:a2:
66:6e:b5:57:aa:d3:5e:af:1c:46:ba:02:53:01:5e:
da:02:c0:34:3c:b8:2c:01:7f:0b:51:5d:be:29:d0:
a3:c5:da:90:74:c3:53:79:39:8f:65:a0:50:da:33:
39:8b:46:0c:b2:8d:c2:ee:12:de:ca:c2:39:77:4c:
53:ad:d6:17:40:22:ee:0e:92:7b:dc:b0:37:c2:e5:
8b:45:7d:a6:50:af:a8:d8:d4:9e:57:e1:70:55:86:
cd:55:22:54:6d:83:ab:fd:1e:cd:8b:92:e2:04:c5:
4e:0f:05:1f:2c:a7:6f:85:0f:24:0a:4d:ec:49:b4:
2b:81:bb:c4:86:3a:7f:23:5b:50:08:03:db:2b:9c:
6f:0f:48:67:61:3a:a0:23:59:92:4f:4e:69:c3:8d:
9a:7c:f6:ab:cc:91:c2:4a:00:46:bb:37:37:52:93:
fc:af:f4:17:3f:5e:31:7a:fd:96:ff:04:e6:f8:92:
b9:0d:e3:e0:da:fe:fe:03:78:09:e8:df:16:03:ee:
4e:4e:8a:6d:0a:3f:5a:6a:d3:5d:a4:84:c7:58:70:
a1:8b:5f:d8:3a:d7:69:dd:4a:2b:8d:3b:bb:7d:3f:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:87:07:A6:82:BD:35:88:85:14:3E:42:5C:AE:36:45:0B:DA:CB:DB
X509v3 Authority Key Identifier:
keyid:6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8a:3c:cd:80:93:87:5a:45:ee:98:29:f4:a2:62:6e:5e:0d:
93:e5:82:54:f2:54:10:94:da:a2:f1:bf:d1:ae:7b:92:ed:93:
42:1b:37:9e:e2:00:d8:74:24:3d:5f:e7:1d:b0:41:76:2b:5e:
fe:a7:30:a2:db:82:10:7a:e5:63:5c:06:5e:f2:9d:2b:a6:19:
fd:4b:a6:97:6a:ad:ba:22:3c:bf:c6:b9:97:da:6d:7b:65:09:
31:99:72:86:9a:c3:3c:1f:02:d7:2d:79:ee:11:80:f4:0e:22:
b6:e2:75:f3:d2:f8:3c:49:97:7c:06:66:6e:07:65:26:ac:75:
aa:53:ef:18:96:3f:5c:55:9d:bd:9b:4a:9b:5f:ef:da:18:d8:
6b:d8:f0:ba:ec:f2:d5:92:6e:7a:df:54:0c:58:56:11:7c:70:
67:83:57:92:40:a8:9d:fa:cd:2d:08:96:d7:d3:52:1f:69:3d:
d3:29:51:cf:a5:75:04:b5:e0:7a:5c:2c:1a:c4:b1:61:ba:99:
1f:0a:dc:30:39:1d:b0:e0:d9:3a:b0:6b:42:b2:98:fd:2b:4d:
f7:03:c3:4c:ca:8d:4e:5b:fc:b5:35:f9:11:81:2d:68:aa:9f:
d5:d8:f8:34:4e:84:32:62:62:d1:53:b9:de:ba:e1:47:11:f7:
0a:27:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:08:26 2026 by rpki-client