
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
File: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft (raw, json)
Hash identifier: rPnf+fKgkM1zdPaOormVU4wHQtXFX3eGRrgZNeO5Uyg=
Subject key identifier: 41:FB:0D:B7:6D:B8:7A:9C:F1:65:20:5F:B9:89:2A:AD:C2:4D:1B:C2
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Certificate issuer: /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial: 3752115C7D61B87A41D92761F6F7D592E166575A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 16:10:47 +0000
Manifest this update: Tue 12 May 2026 16:05:47 +0000
Manifest next update: Wed 13 May 2026 19:38:47 +0000
Files and hashes: 1: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: pjt/PoMD2rISkjEBbEVdFpq3Lfkti0ImQZr5UDhsxdI=)
2: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: S7UAzIZzLebBGoPx8HW74rT6/bn+VmPadNNYeTv3kZU=)
3: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl (hash: rbhQ7uWsw7pQePSmHw5re6dF5cp/1YmqYghFf2wT28Y=)
4: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: y0vf+b+WaxpgW62iYyK78WU25GzF5XHO+ZNE1qslKzM=)
5: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: RFsABZwQUKrnFL3kGb4LQCkeg8Y7lRmJ8snepdRl5LE=)
6: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: sVWZtsjpcpezFv1cmO31cy7yxR6Y49KAqemmha7HUbc=)
7: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: dBBC9Ld8u7gkoTo/g/PxsRZ0jIN5riREG0FHLcyqmts=)
8: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: 2RPhLvFo9neTmfPqwsVlBCVEW/vWAuk44bCI72x1cVc=)
9: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: m44IQsih+GAEYeNlxdOnRw3U6wKDlFyxDmcm/uil4os=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:52:11:5c:7d:61:b8:7a:41:d9:27:61:f6:f7:d5:92:e1:66:57:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Validity
Not Before: May 12 16:05:47 2026 GMT
Not After : May 13 19:38:47 2026 GMT
Subject: CN=41FB0DB76DB87A9CF165205FB9892AADC24D1BC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:5a:67:0a:aa:47:e6:ec:be:7f:04:cf:fe:
d1:09:e3:12:e3:68:89:23:3a:30:13:88:8d:e8:9b:
80:61:6f:ba:fa:5e:75:a4:68:57:a3:94:47:1c:b7:
99:f6:56:af:59:7c:a3:d7:07:ff:9d:52:69:81:60:
fc:e2:2b:dd:c4:98:91:93:34:3d:bf:eb:b0:42:4d:
67:ea:84:5d:cc:bd:00:10:05:14:64:b8:82:e6:d4:
e0:13:7e:02:1e:70:78:e6:b7:a6:e1:9b:1c:a1:e0:
ae:50:8a:bc:21:1a:68:18:14:19:da:01:56:b4:e3:
bf:86:8e:18:b9:13:f8:51:a7:52:bf:d6:5b:61:40:
17:b7:7d:5e:7f:2a:22:05:b2:06:67:cd:c4:3a:15:
ab:2f:2c:36:46:6a:40:06:c4:6b:6d:92:71:22:8a:
70:bc:8b:3d:e5:57:fd:6d:2e:d4:1e:e3:0f:eb:eb:
92:32:71:b5:c0:48:79:e0:dc:35:6d:35:3b:70:79:
8f:83:6f:24:49:e0:c2:08:03:f0:5d:26:0e:74:6f:
b3:3b:4a:4b:84:ec:a7:00:aa:da:8c:0b:6e:70:ec:
db:a0:74:27:f9:45:83:17:8b:3d:6f:9f:55:bf:f2:
98:23:a3:a7:66:15:e1:fd:07:b0:29:92:99:93:92:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FB:0D:B7:6D:B8:7A:9C:F1:65:20:5F:B9:89:2A:AD:C2:4D:1B:C2
X509v3 Authority Key Identifier:
keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f7:0e:49:44:e3:9a:5d:ab:8d:13:07:94:8a:15:fe:25:a3:
e5:88:5c:35:8a:3a:33:fb:fd:3f:a1:fe:b1:b1:05:f8:e5:a8:
79:34:e1:eb:95:c0:42:fe:ca:41:ef:bd:f8:af:fa:d7:9c:16:
a2:51:fc:65:3b:fa:eb:1e:cb:5c:cd:5b:a5:ea:06:e6:03:4c:
b4:43:c2:22:ad:cf:b0:83:e6:ca:05:5c:6f:fd:15:2e:04:e2:
5f:2c:e5:6a:aa:e9:c3:d9:1f:61:d5:e0:eb:66:3a:5c:5b:75:
1b:df:57:57:f9:b8:3c:c4:ed:45:2e:a6:df:5d:cd:95:6a:27:
3c:0c:d0:9d:c2:75:a2:0e:09:d4:ee:1f:13:a7:b9:5e:63:bf:
28:6b:73:26:29:d2:d8:38:95:60:f0:10:4c:fc:be:7a:68:9b:
f9:20:ea:03:e3:42:84:9e:13:c5:77:53:7c:31:4b:18:ab:e2:
3f:c1:1c:a9:f9:a5:42:ae:33:6b:6d:e5:a7:9b:9c:35:8b:5d:
f2:e3:38:e1:7e:14:72:47:df:d3:13:89:25:94:22:cc:ce:99:
51:93:ad:96:7a:17:a7:da:92:b6:59:96:b6:e0:62:2e:b8:fd:
3b:e2:7e:23:3d:fb:c2:52:d0:77:a1:a7:91:30:c9:a1:2d:25:
e2:38:20:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:40 2026 by rpki-client