
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
File: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft (raw, json)
Hash identifier: ziJjJQXInK2BWpBgoiyPUlz5QAso3XBIYvNoc8pUfqw=
Subject key identifier: 68:AE:81:37:E4:9C:B8:D6:D1:AD:38:FB:48:18:99:AD:78:3F:61:46
Authority key identifier: 6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6
Certificate issuer: /CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6
Certificate serial: 05F698AF47618A0EAF9F5D44CDA0F6E22C69C5AF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
Manifest number: C0
Signing time: Wed 23 Sep 2026 01:07:36 +0000
Manifest this update: Wed 23 Sep 2026 01:02:36 +0000
Manifest next update: Thu 24 Sep 2026 04:03:36 +0000
Files and hashes: 1: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: ap5cL+dJSygyHy3JSYMtq1KZaapKag3yb69415WykFA=)
2: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl (hash: clV8swlsvhLQxdoytN9j8c2QQuDhcgBG275ctagDlXo=)
3: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: hHnDBBqlNlJkiM3kC0egNr5SgsQ3bN7kXgKmTLM7WAQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl
rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 04:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f6:98:af:47:61:8a:0e:af:9f:5d:44:cd:a0:f6:e2:2c:69:c5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6
Validity
Not Before: Sep 23 01:02:36 2026 GMT
Not After : Sep 24 04:03:36 2026 GMT
Subject: CN=68AE8137E49CB8D6D1AD38FB481899AD783F6146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:5a:98:7b:72:18:82:90:46:c2:b5:02:d4:
4f:2d:ce:19:37:26:3b:6e:fe:62:1d:41:23:bb:85:
9d:11:b5:0e:2b:b0:a9:c9:0f:96:b7:eb:18:8d:4b:
7c:d5:1e:9c:ef:74:b2:83:54:91:f3:a4:af:5d:65:
0b:f1:ec:01:bb:59:fc:98:8a:b5:9d:44:6c:08:bd:
f8:93:c7:bf:5b:cd:7d:9a:8a:a9:7a:7b:1d:12:18:
9f:c7:db:6b:18:fd:a2:c2:1c:38:3b:ae:19:14:18:
6a:65:0e:77:e3:a4:34:a4:3f:1b:21:38:ad:f9:58:
b1:b3:34:34:22:0b:55:72:45:a2:68:02:6e:f9:b9:
d5:3a:f8:30:82:f5:05:25:94:aa:32:d0:17:c6:db:
eb:2e:bf:68:49:1d:f3:6e:fd:9d:4c:dd:bd:3f:d5:
6d:ba:00:2f:90:b5:56:ee:1d:71:31:3a:b7:dd:e8:
f7:e2:5d:f8:44:57:d8:f1:e0:9c:b4:32:a7:44:98:
18:46:81:32:b3:b7:5b:d8:a5:cf:3e:08:83:6c:85:
55:ee:90:4a:bc:1f:b7:73:e9:07:7d:fc:c5:66:be:
14:ce:50:7f:17:83:cd:87:9a:3c:b7:04:f0:26:3e:
4b:12:bb:06:fb:ad:c3:9f:df:f4:a8:80:34:38:b1:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AE:81:37:E4:9C:B8:D6:D1:AD:38:FB:48:18:99:AD:78:3F:61:46
X509v3 Authority Key Identifier:
keyid:6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2a:57:ad:66:c2:52:95:d5:53:2e:11:72:57:05:95:f8:4f:
70:07:6e:30:ec:1a:44:77:96:e5:7a:e2:b7:33:d3:9b:4d:8f:
40:81:0a:fb:d0:e6:fe:a9:86:01:f3:08:8a:88:8f:4d:0b:4f:
70:de:d6:e6:62:56:31:00:e7:00:6b:e0:19:2e:2f:17:5d:73:
bf:5e:c8:0a:dd:68:5d:a9:ec:6b:8f:f2:62:59:3c:38:f8:b3:
b4:a6:ed:ea:65:ef:3d:b6:3a:c1:be:cf:02:32:39:c7:b8:de:
6e:b9:16:db:20:f2:5b:05:93:2c:fd:c0:b7:bc:24:d6:61:c7:
e6:29:ae:1a:63:4c:23:64:ea:73:21:35:0b:6f:12:9d:15:cf:
d3:ab:d7:24:e1:8f:15:55:b9:69:0f:a2:a2:b0:6a:76:d4:a3:
66:b7:f4:74:ad:16:7f:eb:14:38:76:fa:cd:1d:2e:15:23:ec:
1a:d2:9b:c9:1b:f5:50:20:6f:91:8d:50:4a:70:1d:fa:33:d0:
b4:27:45:cf:e4:d7:b4:31:61:8d:61:c6:62:2f:2a:7a:ae:08:
9f:86:60:5e:41:af:bc:a6:d5:1b:4e:9a:6c:ea:a9:1f:65:0c:
22:16:59:1a:eb:4a:3d:8c:de:67:76:4c:6e:18:e5:ee:5f:e2:
49:e8:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:48:09 2026 by rpki-client