
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft
File: 6D8C2202C602D4BCB9586F638744BA643908A389.mft (raw, json)
Hash identifier: LLNJ58B1hntwT7gXWH6wt6U1wa5G9oaDEdy09OSRoVs=
Subject key identifier: 56:79:FF:A8:75:81:22:63:75:A4:A2:D9:B5:A7:4D:38:F0:93:94:E8
Authority key identifier: 6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89
Certificate issuer: /CN=6D8C2202C602D4BCB9586F638744BA643908A389
Certificate serial: 16402BCBF3B2DDCD4D95B914EC454EA57109268B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 09:30:51 +0000
Manifest this update: Tue 12 May 2026 09:25:51 +0000
Manifest next update: Wed 13 May 2026 12:48:51 +0000
Files and hashes: 1: 6D8C2202C602D4BCB9586F638744BA643908A389.crl (hash: Fe9crfn3cU3z9mlwXlxR16wdW+g2ilqOrZANclnt1g8=)
2: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: b7wBGbC9SNhjzw8V9K2lv7CY6SFtdKxPdtK4cOG4BhI=)
3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: m+uFtZihUm3fWV/iOrWY8zLaQsNI9BmUlq7mnOF09qo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl
rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 12:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:40:2b:cb:f3:b2:dd:cd:4d:95:b9:14:ec:45:4e:a5:71:09:26:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D8C2202C602D4BCB9586F638744BA643908A389
Validity
Not Before: May 12 09:25:51 2026 GMT
Not After : May 13 12:48:51 2026 GMT
Subject: CN=5679FFA87581226375A4A2D9B5A74D38F09394E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:c8:c3:98:62:53:d0:4e:69:cf:93:06:fb:
39:af:8e:d6:95:20:71:cd:fd:fd:4a:53:57:90:16:
f5:9a:f9:8a:2b:d9:9b:5b:2f:ca:39:39:7e:da:22:
2a:ad:19:44:d6:8d:45:e6:f0:24:93:00:e8:80:8b:
5d:22:36:98:39:44:78:d0:08:2a:2c:c7:51:28:9d:
13:97:38:36:b3:57:10:21:df:74:49:21:b6:8d:fa:
59:af:88:9c:52:7e:20:32:26:a5:91:88:fc:25:3b:
38:7a:67:9e:e1:98:95:f0:b3:b1:a5:d1:bb:93:dc:
e7:ec:de:19:5e:a9:87:5c:1c:ab:08:b6:a0:2c:9b:
80:02:5a:04:e3:b9:a4:59:1f:79:e7:ac:51:a6:47:
8f:bf:76:32:6c:34:c9:ce:9c:55:78:2e:a1:d0:d6:
0f:0e:c2:70:f0:95:da:a4:b8:2c:12:96:6b:22:1f:
80:21:3f:65:b6:ad:f9:34:ce:f9:dc:13:cf:af:84:
c1:fa:06:86:41:a4:32:fc:ba:fc:26:c3:66:7b:87:
3d:80:39:1e:3a:17:91:b0:5b:ba:36:b5:84:f3:3c:
b3:7c:91:f5:93:6e:35:bf:4c:02:95:61:45:49:a3:
31:c3:38:37:30:71:47:6d:cb:b4:c3:c0:3b:8b:c3:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:79:FF:A8:75:81:22:63:75:A4:A2:D9:B5:A7:4D:38:F0:93:94:E8
X509v3 Authority Key Identifier:
keyid:6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d4:ab:0b:45:28:01:5c:bd:5c:c9:7e:d2:89:bf:be:c5:4f:
b0:c3:56:fa:00:b0:39:d3:52:e1:38:0f:a4:8d:a4:22:cc:56:
a9:d5:66:d7:85:de:dc:55:6e:14:f0:37:a1:5e:ac:38:e6:48:
5d:a9:e9:e5:ef:ad:92:b0:cf:62:76:02:95:ec:bf:42:fd:71:
1b:52:93:8b:cf:72:9a:b0:22:4e:81:3f:2f:25:64:89:c1:23:
c2:17:5d:23:47:a6:dc:e5:03:f5:b0:f1:4a:38:8a:22:aa:75:
42:ac:e9:79:4d:1f:bd:34:da:6b:31:b4:7a:fb:1c:b5:8b:8c:
48:74:3a:55:26:25:81:51:c8:6a:90:d2:3f:12:1d:3a:78:4c:
52:24:da:16:f5:f5:06:b7:12:f7:50:e7:a3:90:f5:d9:f4:db:
00:66:4a:d2:f9:a4:e7:c7:24:73:36:12:26:1d:33:71:d3:25:
a0:ac:0c:a8:dd:74:86:42:b7:10:dd:9c:23:e4:d6:55:e5:bc:
25:69:9f:a3:81:94:dd:28:0e:00:68:b9:82:0f:45:08:10:9b:
23:7c:f4:8a:98:5e:bd:7c:83:2a:28:d0:91:9d:d9:32:75:af:
dc:e6:1e:a9:97:0f:63:35:75:c5:34:67:ce:3c:0c:4f:34:0f:
98:e6:17:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:17 2026 by rpki-client