
$ rpki-client -vvf repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft
File: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft (raw, json)
Hash identifier: AsBQOk4aFpbUvZ9+PLOdKyFV9Y0Gn9j22Wq5BGczOIs=
Subject key identifier: 57:BD:7B:58:0B:C5:E6:70:02:AE:2F:90:73:03:4A:25:A5:55:78:BA
Authority key identifier: 6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF
Certificate issuer: /CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF
Certificate serial: 2C73B41E878F3E839F9D63EA478895A2E4FC796E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft
Manifest number: 03C5
Signing time: Sun 01 Mar 2026 13:11:59 +0000
Manifest this update: Sun 01 Mar 2026 13:06:59 +0000
Manifest next update: Wed 04 Mar 2026 14:27:59 +0000
Files and hashes: 1: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: /EB5uVPByNIi8kXY9MVULDEpqEYMsLoCXri+MR4evTc=)
2: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl (hash: iIRrcYheD/WXBbTOSM3pOk6C+WZKt/e/6CVtVBMKb74=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl
rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 14:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:73:b4:1e:87:8f:3e:83:9f:9d:63:ea:47:88:95:a2:e4:fc:79:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF
Validity
Not Before: Mar 1 13:06:59 2026 GMT
Not After : Mar 4 14:27:59 2026 GMT
Subject: CN=57BD7B580BC5E67002AE2F9073034A25A55578BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:47:96:7e:94:85:9c:4e:82:a9:45:a0:dd:
aa:1f:2e:af:b2:6c:70:28:a7:f5:40:0d:67:60:1e:
6f:fa:a4:93:24:7b:e0:94:a4:66:ce:f6:26:fc:9a:
b5:73:fe:5c:34:f6:6e:d6:3f:5c:49:06:bc:26:75:
80:66:2d:61:85:f5:db:93:e1:b5:50:cc:f1:4a:4f:
44:91:a7:65:09:f2:c4:f0:c5:5c:f6:4d:ba:d6:3e:
46:02:06:fe:0b:51:ad:c7:3e:c0:b3:55:ae:1d:ac:
c6:36:85:58:2d:6a:26:21:24:8c:98:9a:39:0d:bf:
3e:1d:ea:86:41:4a:d8:34:09:f8:88:cf:af:ee:34:
8c:e2:ce:72:63:8f:b0:a2:4f:80:05:22:14:1e:db:
8a:38:b3:38:fb:3b:3c:a9:09:ad:34:f8:4c:6a:b7:
18:01:73:26:99:94:ec:4f:bc:4b:bc:69:3e:81:4b:
0d:2e:0f:33:21:cc:75:91:d0:f4:fb:ae:a9:97:dc:
8b:64:49:95:42:b3:ef:18:25:e8:6e:4f:b1:ea:15:
04:8d:bc:d1:00:ff:ad:f0:4a:31:13:f6:be:ad:65:
b9:07:a3:56:f9:39:0e:a4:6f:c4:82:9d:90:2f:0f:
eb:ef:67:7d:f6:01:8e:2a:24:ee:4f:79:f6:5a:9b:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BD:7B:58:0B:C5:E6:70:02:AE:2F:90:73:03:4A:25:A5:55:78:BA
X509v3 Authority Key Identifier:
keyid:6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c5:e9:9c:58:97:25:8c:9e:c8:ab:1a:16:dc:22:05:bd:e6:
05:9c:7c:3a:e2:98:08:39:fa:ea:9c:65:50:b3:02:8d:f2:6d:
02:ad:53:d2:17:27:65:89:80:42:d5:22:34:7f:25:06:a4:64:
f1:3c:1f:39:ea:66:2f:90:fd:85:02:64:32:ef:14:4d:bd:92:
5c:d7:46:30:ec:ae:77:4b:13:5d:46:25:1b:d8:d7:da:99:9d:
e0:66:0e:a3:19:49:07:0d:7a:14:9b:fa:e4:26:75:e9:b5:ac:
2d:15:f4:e3:02:de:ed:2b:fc:50:58:f9:b9:1a:a9:ec:de:c9:
e1:23:44:b0:60:3a:6d:62:bc:a1:9c:04:d2:75:6c:89:5a:ce:
55:0a:ce:02:a6:81:00:9d:49:2a:31:38:a5:e7:b7:cd:4c:3b:
35:d8:c4:9e:49:76:8b:34:4a:03:67:70:31:de:9e:12:c0:d8:
84:dd:ba:b6:c0:f9:cb:40:7c:6f:92:c9:ec:8e:a1:bd:d4:14:
56:20:77:42:c7:32:a1:2c:23:ff:91:64:7d:ff:bf:d3:f2:3c:
e0:7b:9e:14:9d:6e:84:32:16:c9:25:dc:5c:c9:a7:cb:a1:ad:
9f:ef:dd:e2:bd:c5:40:e8:58:12:25:75:c7:a8:34:5e:e2:05:
f7:cc:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:15 2026 by rpki-client