
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft
File: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft (raw, json)
Hash identifier: WUpb+LRpWMnBjXY14ambXs2+KMyu2dhkNxTtNxLDUEk=
Subject key identifier: 74:70:77:18:C4:90:B6:EA:10:16:AA:A2:85:DE:FD:CB:F8:48:C5:91
Authority key identifier: F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F
Certificate issuer: /CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F
Certificate serial: 24872E19B1918A4E5ED19149244EAFCFED896168
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft
Manifest number: 0105
Signing time: Sat 14 Nov 2026 07:54:08 +0000
Manifest this update: Sat 14 Nov 2026 07:49:08 +0000
Manifest next update: Sun 15 Nov 2026 08:47:08 +0000
Files and hashes: 1: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl (hash: 776M5AgSP+usVucvJ7j/3Pm4/E+86ddUu3i7i4sUEXU=)
2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: l/JxszKitcaLUbjYnu5Z5o+X75HkVNIcWyDMcKUckc8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl
rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 08:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:87:2e:19:b1:91:8a:4e:5e:d1:91:49:24:4e:af:cf:ed:89:61:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F
Validity
Not Before: Nov 14 07:49:08 2026 GMT
Not After : Nov 15 08:47:08 2026 GMT
Subject: CN=74707718C490B6EA1016AAA285DEFDCBF848C591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:e2:a3:2e:20:b0:f3:45:f9:19:e9:e4:39:
4a:ee:fc:82:e7:0b:05:a1:0d:2b:24:05:22:86:0c:
8d:a0:a5:6a:5a:ae:86:f2:a0:5b:65:3a:8a:13:1e:
af:c9:4b:6d:5b:c6:70:95:ac:ff:cb:f2:ad:d8:67:
3f:e1:24:60:ce:b1:a6:01:b0:d6:25:ba:eb:07:6b:
f4:f0:7e:b9:04:56:39:d0:40:77:f5:bc:0f:8c:51:
8c:bb:2f:02:19:25:d6:4a:d3:92:3b:a2:89:3e:06:
28:f3:38:66:9a:cc:33:73:63:7d:c4:12:3d:5e:ea:
23:bd:1b:ba:12:bf:98:e4:ab:09:c5:06:ba:4b:0a:
9d:d4:d3:9c:ed:75:6b:3c:e8:3a:85:7a:25:ea:f8:
0b:66:c1:87:6a:64:1a:78:5d:a3:13:08:e5:f4:c8:
1b:98:49:56:6a:88:c1:63:21:7d:08:b0:99:05:b9:
3b:9e:f0:d6:cf:c4:b9:80:ca:61:94:16:3c:1b:8a:
df:ab:c0:08:a9:cf:1d:ff:0d:cf:b2:a6:26:6e:56:
74:83:dd:03:16:b1:5e:1b:6e:bd:03:49:78:b4:7f:
25:fa:97:d8:47:5b:29:bb:35:88:10:80:28:75:3b:
dc:3b:40:16:c6:04:be:c0:f4:5f:65:3e:de:c5:81:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:70:77:18:C4:90:B6:EA:10:16:AA:A2:85:DE:FD:CB:F8:48:C5:91
X509v3 Authority Key Identifier:
keyid:F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:49:91:69:0b:6f:e0:52:3f:92:01:c3:92:e8:32:99:46:d8:
73:25:c4:c3:e0:cb:11:1a:47:e6:38:79:a9:0f:1a:70:e2:e7:
55:a8:9c:ce:94:e8:a4:54:e8:aa:f2:90:2b:81:5f:2a:d7:42:
71:7e:9f:3e:18:f1:7e:12:72:39:76:e8:c0:ca:b5:5d:e5:04:
12:6f:5e:93:07:cf:1d:cd:c8:e1:d0:49:e9:a1:68:17:40:31:
8b:37:58:49:ae:a1:95:f7:a1:91:fb:e1:92:b0:89:50:9b:80:
78:3e:f9:c9:59:dc:26:ca:8f:70:b8:a5:90:b3:d6:07:fe:5b:
93:ea:6e:7e:83:e5:52:f9:f2:d0:1d:ad:f2:aa:55:2f:48:67:
37:1a:ec:6b:eb:f9:06:3d:4b:c0:6f:58:81:cb:ac:b1:03:79:
8b:db:4c:9a:bd:86:cd:ad:b9:2b:05:06:3c:c4:1d:20:2f:6d:
ab:13:82:ce:18:1f:c9:d4:06:12:67:7e:17:5c:4c:58:56:1a:
ff:91:48:70:c8:f2:14:ef:18:d6:9a:ac:f3:22:8f:94:50:37:
be:fc:54:56:8a:c2:ac:3d:6c:01:cc:fd:0b:52:42:d7:c4:84:
85:42:24:17:aa:20:f6:ef:4a:ca:b4:c5:22:a6:9e:89:4c:c6:
ea:72:13:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:23:50 2026 by rpki-client