
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft
File: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft (raw, json)
Hash identifier: m4i3sgM/Kl4TtBdrblO+uyLNhPgzGhfTvTgxIbJYIJI=
Subject key identifier: 04:28:70:3E:2A:33:24:63:38:20:7E:68:BD:D3:D6:B4:5F:FB:91:4E
Authority key identifier: 6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD
Certificate issuer: /CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD
Certificate serial: 5B0F217B086A8C97FD5AD83B936C84B6ED875A44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 15:25:01 +0000
Manifest this update: Tue 12 May 2026 15:20:01 +0000
Manifest next update: Wed 13 May 2026 16:30:01 +0000
Files and hashes: 1: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (hash: E+hRgGJJ8C/Srz5/ghgOOJ3QwYrgYhMnvxLJoD14unU=)
2: 6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl (hash: em48oHMXXxsijdpfoi5WVyMWu820ti1mk22SaJO9tRE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl
rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:0f:21:7b:08:6a:8c:97:fd:5a:d8:3b:93:6c:84:b6:ed:87:5a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD
Validity
Not Before: May 12 15:20:01 2026 GMT
Not After : May 13 16:30:01 2026 GMT
Subject: CN=0428703E2A33246338207E68BDD3D6B45FFB914E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:fe:57:88:f1:2d:68:97:66:41:2e:48:6f:
87:2e:d9:9e:61:00:45:13:99:3c:28:65:86:d2:04:
0a:26:97:31:d3:89:63:4c:fe:dc:70:18:05:3e:2b:
82:3e:d3:df:f6:8c:0e:e0:e6:3b:cd:97:ff:af:85:
10:c2:38:91:d1:88:0c:88:ee:8d:1c:aa:0a:40:98:
eb:39:b2:25:ad:7e:99:da:5d:9b:f6:ea:59:c8:a1:
a7:f1:d3:a4:d1:79:f9:9b:35:fb:35:5c:60:35:7b:
f5:e3:ee:2f:40:02:9b:03:82:d4:a3:f2:45:08:66:
6f:0a:78:a9:e8:06:31:cc:e2:e9:9a:b9:80:49:76:
24:72:1e:45:2c:a4:1b:ce:9c:2b:cb:51:df:7b:d2:
a0:71:9e:1d:e3:1e:2d:da:00:98:a1:f6:8a:f7:b2:
fa:e8:46:8d:18:4d:a2:0d:17:9e:49:f6:4e:33:bb:
0e:1f:e1:fd:f9:10:e8:84:93:48:e1:f0:f0:09:f0:
e1:22:fc:d3:e7:3a:81:04:fa:d8:98:99:7a:c8:b5:
72:fa:01:f6:81:c1:b5:58:9a:24:0a:2f:1f:b7:15:
74:f1:d9:94:64:88:b2:92:06:c2:02:37:d5:9b:2d:
c0:70:03:97:5a:87:18:54:23:f2:91:1c:70:12:71:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:28:70:3E:2A:33:24:63:38:20:7E:68:BD:D3:D6:B4:5F:FB:91:4E
X509v3 Authority Key Identifier:
keyid:6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:17:bb:39:fd:22:3f:0e:fe:dc:07:2a:ef:12:59:bd:4c:c5:
5d:42:e8:ab:18:cf:5f:31:02:20:34:48:d9:3e:95:60:11:5c:
5c:3d:43:ae:dc:99:51:16:85:80:50:e0:e2:e9:09:a8:02:04:
b2:09:6f:15:42:99:dc:c3:c0:09:29:c4:2c:6d:6d:a4:f1:1c:
65:97:da:dc:91:b7:5b:53:32:2a:11:13:92:1d:1a:59:a6:7d:
13:77:78:30:84:b2:06:5d:73:ed:03:b8:78:c2:9e:a7:f1:52:
1b:99:fa:12:2d:70:96:04:f2:37:b5:43:ef:60:6d:c6:00:d8:
7f:3d:77:06:01:cd:09:3c:72:3f:53:65:46:b4:5b:7a:2a:84:
d6:cd:29:9f:1d:15:64:97:7f:29:58:fe:6f:d8:aa:79:18:e3:
5c:04:15:76:66:fe:71:84:36:57:85:35:f2:b3:b7:ff:03:75:
c5:bf:5b:12:38:59:47:33:83:7f:9c:35:96:c5:6e:2f:52:40:
5f:99:f1:11:3a:41:94:54:cd:3a:98:bc:b2:19:e4:8c:e1:26:
22:8f:8d:f9:1f:eb:1f:c1:d5:5d:e7:32:df:7b:d3:97:dd:9e:
9c:07:41:f9:50:ae:1e:f8:49:70:1b:4f:10:2c:22:53:0a:7b:
18:77:e0:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWw8hewhqjJf9Wtg7k2yEtu2HWkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5
RTYzOUFDRDAeFw0yNjA1MTIxNTIwMDFaFw0yNjA1MTMxNjMwMDFaMDMxMTAvBgNV
BAMTKDA0Mjg3MDNFMkEzMzI0NjMzODIwN0U2OEJERDNENkI0NUZGQjkxNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2XP5XiPEtaJdmQS5Ib4cu2Z5h
AEUTmTwoZYbSBAomlzHTiWNM/txwGAU+K4I+09/2jA7g5jvNl/+vhRDCOJHRiAyI
7o0cqgpAmOs5siWtfpnaXZv26lnIoafx06TRefmbNfs1XGA1e/Xj7i9AApsDgtSj
8kUIZm8KeKnoBjHM4umauYBJdiRyHkUspBvOnCvLUd970qBxnh3jHi3aAJih9or3
svroRo0YTaINF55J9k4zuw4f4f35EOiEk0jh8PAJ8OEi/NPnOoEE+tiYmXrItXL6
AfaBwbVYmiQKLx+3FXTx2ZRkiLKSBsICN9WbLcBwA5dahxhUI/KRHHAScVlvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBChwPiozJGM4IH5ovdPWtF/7kU4wHwYDVR0j
BBgwFoAUbziDE0uux8EAyLKkk31T3p5jms0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmVkNzM2ZGMtZTVkYi00MzgxLTk3MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0
QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5RTYzOUFDRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82RjM4ODMxMzRCQUVDN0MxMDBDOEIyQTQ5MzdENTNERTlFNjM5
QUNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVkNzM2ZGMtZTVkYi00MzgxLTk3
MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUz
REU5RTYzOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ0Xuzn9Ij8O/twHKu8SWb1MxV1C6KsYz18x
AiA0SNk+lWARXFw9Q67cmVEWhYBQ4OLpCagCBLIJbxVCmdzDwAkpxCxtbaTxHGWX
2tyRt1tTMioRE5IdGlmmfRN3eDCEsgZdc+0DuHjCnqfxUhuZ+hItcJYE8je1Q+9g
bcYA2H89dwYBzQk8cj9TZUa0W3oqhNbNKZ8dFWSXfylY/m/YqnkY41wEFXZm/nGE
NleFNfKzt/8DdcW/WxI4WUczg3+cNZbFbi9SQF+Z8RE6QZRUzTqYvLIZ5IzhJiKP
jfkf6x/B1V3nMt9705fdnpwHQflQrh74SXAbTxAsIlMKexh34Bs=
-----END CERTIFICATE-----
Generated at Wed May 13 02:37:41 2026 by rpki-client