
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft
File: 6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft (raw, json)
Hash identifier: C4wABXiWv4vlSmwQaDhsULr788uM1NpP0Qn53baUePM=
Subject key identifier: FA:67:E3:40:8E:11:D9:03:71:D1:88:0A:0F:CE:80:7D:4D:57:43:BF
Authority key identifier: 6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9
Certificate issuer: /CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
Certificate serial: 75B54BAD46DE78D73A90351996C6B3A667699C7C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft
Manifest number: 6D
Signing time: Thu 23 Jul 2026 23:48:56 +0000
Manifest this update: Thu 23 Jul 2026 23:43:56 +0000
Manifest next update: Fri 24 Jul 2026 23:55:56 +0000
Files and hashes: 1: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (hash: 9uJvmK0FEVjdzGyh4dQe6BsAkTDpNstIPHLao/5zXyU=)
2: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (hash: hGcThccPbRGAGg17WeoAE2cy8dF6FfNo3FqZCcptl04=)
3: 3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (hash: vn6fDh5P+Nx59npDGlgkHszkp/jNfWKmlW62yBSFpu8=)
4: 3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (hash: mxX69NxkQDSLUTtAEZdfQh+amukj4aw1fdKwNMn1bzo=)
5: 6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl (hash: pTYTZpWsRYdKJEV6o5B57WtTohgdzLV4s4pW4D+KyHY=)
6: 323430323a613130303a3a2f33322d3332203d3e203435323839.roa (hash: XiVsdam82vnDzv3JMHx/F/L9OyD20RlHDfFmGKOXSAk=)
7: 3132302e38392e38392e302f32342d3234203d3e203435323839.roa (hash: OKpuxVQGY6BsX3athPfFW58QS54IISfKzcjxg/HXJIw=)
8: 3130332e332e35392e302f32342d3234203d3e203435323839.roa (hash: gYR/crxSzk7AQwYudgq7gQ3UPT8cduEgo5awnIlpiZ4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl
rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b5:4b:ad:46:de:78:d7:3a:90:35:19:96:c6:b3:a6:67:69:9c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
Validity
Not Before: Jul 23 23:43:56 2026 GMT
Not After : Jul 24 23:55:56 2026 GMT
Subject: CN=FA67E3408E11D90371D1880A0FCE807D4D5743BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:cd:fa:08:2a:73:06:fa:22:90:5e:74:6d:
cd:c6:20:fc:eb:40:6a:0d:fb:11:a7:bf:ee:f8:23:
27:58:87:e7:f6:ea:07:df:82:91:96:21:6d:b9:a0:
af:94:5b:50:20:62:c1:e9:72:29:0c:4c:24:d5:d1:
45:1f:2e:04:d9:a1:bf:6b:4d:72:d9:27:a1:08:75:
7f:20:f7:3d:31:56:e0:46:75:dd:c0:45:69:c6:d1:
e7:3e:e4:23:03:78:9e:e2:7d:15:83:70:4a:05:85:
df:a4:4e:7f:2b:4b:6a:1d:4b:66:dd:f2:b8:6b:d9:
de:76:ca:57:d0:a0:42:8e:d2:08:48:3d:cc:be:71:
96:1d:78:32:ad:78:e6:e4:69:1a:82:fd:66:d5:de:
bc:d7:b8:97:dd:67:88:c2:a0:7c:7d:a2:cb:e6:2f:
dd:a3:72:2c:03:ca:a8:75:13:13:5d:e5:78:1b:02:
d6:21:bd:fc:1a:65:37:a5:86:ba:9a:31:19:4d:e4:
94:5e:d1:e8:54:29:5f:ff:f9:96:06:e2:ef:88:43:
3a:be:20:66:fa:59:cc:b0:91:75:58:9e:76:71:7e:
ee:09:c0:97:77:66:3d:f8:11:58:b3:91:00:01:78:
de:d4:ad:a0:f9:fc:06:86:10:ad:8c:e7:24:49:59:
5d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:67:E3:40:8E:11:D9:03:71:D1:88:0A:0F:CE:80:7D:4D:57:43:BF
X509v3 Authority Key Identifier:
keyid:6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:35:2e:d4:ff:6b:9e:87:38:0e:d4:c2:22:d9:5e:f8:70:af:
c4:85:0b:6c:bb:5d:10:19:14:78:81:41:9a:c5:ed:cb:62:af:
a5:17:45:fb:4b:c3:1f:7a:19:5b:22:48:4a:b2:38:37:8b:0e:
82:f8:ed:4d:45:e8:be:f1:2e:50:c7:7b:78:d5:f5:a7:e1:47:
51:a1:58:e6:b8:73:62:ec:58:5b:3b:b0:f8:2e:84:19:30:df:
75:3b:c3:21:58:0d:e3:07:53:dd:d5:fe:7f:97:90:1e:60:76:
32:29:2b:b8:aa:4c:f7:af:01:e1:52:3b:14:ac:f3:f8:e8:75:
d6:06:c8:e5:06:4f:28:f5:ab:b0:9d:d4:c5:08:b3:e4:74:18:
e9:ca:bc:ca:ce:8c:81:fc:cb:3c:4d:86:e9:43:02:20:8e:86:
73:e3:8b:dc:7f:ae:16:a4:20:44:69:8f:88:f3:2c:89:0d:01:
b9:d7:27:26:b4:44:5e:99:97:14:2f:c2:0d:58:10:49:a2:39:
42:ef:2e:50:82:47:42:1a:45:cf:c5:39:69:79:5b:a2:6a:93:
37:4e:54:34:ce:e3:d9:cc:5a:9e:fc:29:2e:ba:27:12:4a:60:
00:00:50:22:23:94:6c:22:12:0d:47:ad:0b:95:a8:3a:41:01:
eb:80:f6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:05:22 2026 by rpki-client