
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft
File: 657097DED993749F454B2CB2980019AC9335E3AD.mft (raw, json)
Hash identifier: oxBid4y/ki/E/PS3KXJqqVs4zkZvPd8a97QvG0akLv4=
Subject key identifier: F0:35:37:12:71:87:40:30:B6:D7:2E:97:84:63:D0:E7:7E:05:28:D6
Authority key identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD
Certificate issuer: /CN=657097DED993749F454B2CB2980019AC9335E3AD
Certificate serial: 4D3BED8637C01E13ABEADA815C3EA40A54EC319D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft
Manifest number: C6
Signing time: Sun 27 Sep 2026 03:54:03 +0000
Manifest this update: Sun 27 Sep 2026 03:49:03 +0000
Manifest next update: Mon 28 Sep 2026 04:19:03 +0000
Files and hashes: 1: 657097DED993749F454B2CB2980019AC9335E3AD.crl (hash: 9R8WjQg9zXvFBzkWhUkFY0ozVAXnfVD4jzAIIjDweqo=)
2: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: je0fW/T+7CeDw/BD58L4wbwCS+OqE/uQcMZPbWUcwBw=)
3: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 0jC3KwRI9r1ivA5GrXfbobGO1Ve7iEJj8iR97yMbeBk=)
4: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: QHrcU8/Y1C7fxNPrmLufpFIhIro1O+9k0qozDOyT2no=)
5: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: eJ1BYbsJGJ2bGSK9jVV+Gd+vXCEbHNqHyQWyZRyuJo0=)
6: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: hHvYrx/Q2c2wL+t/Mvndx8RZ1B96+Yi4bVgwQw+Eax8=)
7: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: OIuTP91/14M0E047uX/8jj8cJw1PhQi/jIKe8uO7ED8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl
rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:3b:ed:86:37:c0:1e:13:ab:ea:da:81:5c:3e:a4:0a:54:ec:31:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657097DED993749F454B2CB2980019AC9335E3AD
Validity
Not Before: Sep 27 03:49:03 2026 GMT
Not After : Sep 28 04:19:03 2026 GMT
Subject: CN=F035371271874030B6D72E978463D0E77E0528D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:09:40:36:5c:9d:1d:ce:34:8c:d5:12:00:
72:ec:d8:33:2d:03:16:47:15:b4:2f:32:e5:4f:ea:
1c:4f:61:ff:3f:fb:6e:c8:a9:79:4f:32:06:f0:2d:
5e:4a:aa:fc:0b:b5:07:89:30:a3:75:41:f4:b4:a8:
69:7c:80:a3:71:18:cd:02:18:cf:56:47:34:44:84:
3b:02:8e:95:04:1c:96:0e:68:3f:34:44:74:90:c4:
8f:9c:99:31:19:ca:4e:03:02:ff:27:4a:07:f4:68:
38:b7:5c:c5:49:bc:08:8a:ac:bc:8d:dd:0d:9b:8b:
4d:e6:65:07:44:49:cf:b1:e5:6b:ff:5e:ca:55:db:
10:40:dd:0a:d4:b9:68:bc:51:c0:f2:6b:a5:ed:4f:
01:5a:1a:80:88:5e:dd:53:97:ec:45:14:3d:88:a2:
fe:64:a5:3f:ef:b8:6d:d3:9c:48:c6:ec:50:35:b0:
b6:b8:32:3c:bd:6f:4f:f7:e7:a9:6d:96:72:0d:dc:
67:cb:da:2b:e5:5b:e2:43:28:ff:9c:db:11:65:14:
10:9c:a6:7f:b3:00:7d:d1:0b:9f:be:e3:4c:86:ad:
5e:d2:36:b0:9b:80:4e:29:12:3a:7e:8b:f9:fe:7b:
a9:14:af:6e:b3:b6:56:15:d6:a3:c0:de:1e:90:07:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:35:37:12:71:87:40:30:B6:D7:2E:97:84:63:D0:E7:7E:05:28:D6
X509v3 Authority Key Identifier:
keyid:65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d8:9d:a1:83:ee:9e:8f:39:c1:45:a8:17:e8:10:30:c9:7f:
2e:2a:5a:ed:d0:fc:21:48:55:c6:f1:17:f1:28:3a:eb:a1:19:
a1:78:b6:2d:0c:42:18:62:fe:56:60:ad:2b:0d:80:4f:89:a8:
6a:39:e0:ee:bc:1a:de:8d:df:28:7e:16:cf:fb:54:eb:40:31:
bb:50:90:aa:7d:7e:0d:74:f0:8f:62:fd:70:f7:c9:53:7d:1c:
cb:2d:cd:45:68:0d:4f:86:0d:6a:91:45:bd:f4:4c:1c:07:04:
15:a0:09:9a:d5:9e:d6:d9:40:7b:31:39:22:56:7d:53:ae:ba:
2f:e1:28:f9:ca:71:d8:b4:6c:01:fc:1c:74:db:91:29:04:47:
5d:0a:51:74:8f:f5:8d:ff:42:80:01:d8:8a:40:2b:e2:f0:d1:
2a:05:a1:8d:db:f6:ec:1c:d4:42:95:1f:9e:ea:6c:c3:e5:78:
a2:ce:37:34:09:ce:5e:86:e5:e9:d3:d5:83:2c:c3:35:73:96:
15:ba:71:9a:ac:b8:16:fd:a9:7e:44:bc:38:a7:d1:7f:06:c7:
0f:9b:3f:b8:4a:39:10:ac:a6:8e:36:fc:92:eb:f5:66:00:32:
68:e7:35:f9:e3:fc:bc:fa:3e:e7:c1:74:bb:69:79:a2:a4:96:
9d:25:1d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:48:53 2026 by rpki-client