
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
File: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft (raw, json)
Hash identifier: qFWsIEHT3bhtc6xMM4AX3FV43UmwobGYP/UU1Ov4ISs=
Subject key identifier: 37:0E:63:B6:FA:A9:87:57:BA:2F:3F:DE:4F:32:0F:6E:CB:AA:19:32
Authority key identifier: 6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6
Certificate issuer: /CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6
Certificate serial: 0AD605325B948DBD87DB2BDA1455D9973F0D0D4B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:48:02 +0000
Manifest this update: Tue 12 May 2026 20:43:02 +0000
Manifest next update: Wed 13 May 2026 22:01:02 +0000
Files and hashes: 1: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (hash: hHnDBBqlNlJkiM3kC0egNr5SgsQ3bN7kXgKmTLM7WAQ=)
2: 6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl (hash: Xh3JIuMdEGG/IH44+jJQbAnl2AQQ2hBXVgAhC6EwI3E=)
3: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (hash: ap5cL+dJSygyHy3JSYMtq1KZaapKag3yb69415WykFA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl
rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d6:05:32:5b:94:8d:bd:87:db:2b:da:14:55:d9:97:3f:0d:0d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6
Validity
Not Before: May 12 20:43:02 2026 GMT
Not After : May 13 22:01:02 2026 GMT
Subject: CN=370E63B6FAA98757BA2F3FDE4F320F6ECBAA1932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:65:b8:24:8c:73:5a:0c:5f:0e:d5:f7:59:
4a:84:2a:8d:96:d2:74:ca:37:5e:e9:02:5e:09:4d:
4c:48:f4:1e:34:be:b6:35:42:e2:3a:35:73:97:77:
3b:58:b2:49:2a:59:bd:78:05:a2:60:6c:fd:1b:4d:
7f:1a:41:9d:92:7a:d2:d3:86:68:ac:99:ac:c4:32:
ff:2c:d8:96:00:49:38:09:23:44:2a:2c:3e:89:dd:
2d:6f:e2:ee:5a:8b:43:64:6a:d6:0c:ce:de:04:2c:
18:ef:72:c5:6f:31:54:2b:8b:c7:45:ff:e7:1a:6e:
39:9a:74:14:90:c2:fd:29:ad:0c:a0:b2:39:03:77:
e0:fd:ce:35:c7:92:1a:54:59:83:20:7e:66:78:ec:
45:46:74:63:6b:84:bf:ad:82:44:9b:61:6a:99:5a:
10:57:65:f5:61:13:bd:04:62:07:3f:f7:69:e9:e3:
b7:0e:d5:e5:0b:1e:13:ac:e1:ea:97:29:45:9a:ba:
61:2d:3d:60:22:e5:54:e6:4d:07:81:aa:c1:d6:6a:
64:21:b6:8a:51:31:7c:30:3b:f7:14:52:7e:80:fc:
90:3f:5c:e8:08:e0:92:40:29:83:53:4a:80:ca:1f:
8c:28:37:ef:5e:19:f9:37:f6:6f:bb:80:f0:a7:f2:
7d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0E:63:B6:FA:A9:87:57:BA:2F:3F:DE:4F:32:0F:6E:CB:AA:19:32
X509v3 Authority Key Identifier:
keyid:6E:65:C4:E0:43:F0:4A:81:5F:83:77:E5:AD:2C:02:BF:2A:F7:9B:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/6E65C4E043F04A815F8377E5AD2C02BF2AF79BF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6c:e8:4b:14:5b:d0:02:72:f1:68:f7:01:5f:91:b7:80:6f:
f3:e7:76:d0:cd:d6:bb:b3:54:64:59:0e:1f:94:c5:59:46:0b:
73:fa:aa:40:63:b3:93:40:5c:df:2e:81:68:23:03:04:67:17:
9d:9a:51:31:3f:1d:96:55:a0:4c:7e:0e:92:a6:a0:1d:15:50:
56:70:d8:d7:4d:7b:08:0a:fc:c1:f0:bd:25:64:99:0e:dc:ce:
7b:f1:90:5e:07:f1:18:2d:96:d2:b5:3c:ca:f1:8f:b6:dd:4c:
ba:a3:bb:63:f0:4f:3e:4a:0e:34:9b:9b:84:a0:a8:c1:4e:52:
94:8c:d9:12:1e:48:1f:04:3c:46:67:ec:fd:ae:7f:91:a4:0b:
aa:18:3f:13:1c:fb:7c:4c:2a:94:e6:c8:4b:e2:24:a1:c8:60:
ca:e4:e3:1f:01:a9:36:ad:d1:4d:e4:fe:58:6c:28:41:cf:90:
3e:bb:d3:02:b7:e4:0c:98:06:d5:83:f6:39:e3:64:b8:0c:e5:
14:78:26:9d:e3:7b:de:25:e9:d7:5e:f5:04:a5:79:d5:af:33:
e8:6b:3e:e7:a7:74:eb:33:41:fa:ce:20:28:81:7f:55:ce:8a:
a0:e4:be:a6:cf:55:b6:2c:2f:64:3a:bd:25:f2:72:2b:09:a0:
60:ef:ac:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:45:47 2026 by rpki-client