
$ rpki-client -vvf repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft
File: 6189E4F67BE53DF65282F8E1BB63165CCA784862.mft (raw, json)
Hash identifier: sHkxgD1WNgOBR8sTPbP1F7VYxmi01XzrPPN2xprsBnU=
Subject key identifier: 28:2C:FA:0A:55:D6:10:BA:BE:FA:E3:49:A3:84:82:CF:97:1D:BF:68
Authority key identifier: 61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
Certificate issuer: /CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
Certificate serial: 2DDD55D4D4257C4F54CD3C1655D937902B770E8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft
Manifest number: 01C6
Signing time: Sun 01 Mar 2026 21:12:24 +0000
Manifest this update: Sun 01 Mar 2026 21:07:24 +0000
Manifest next update: Thu 05 Mar 2026 05:45:24 +0000
Files and hashes: 1: 3130332e37302e39322e302f32332d3234203d3e20313338303634.roa (hash: TA4sXIkX/1vgSRuW9l2sSfoKt1o5FCsmy++oilBd+h0=)
2: 6189E4F67BE53DF65282F8E1BB63165CCA784862.crl (hash: t34PdmkQ7H+tY9FtmaJ42rPJCwDdTw895eRpu8kYkiA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl
rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 05:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:dd:55:d4:d4:25:7c:4f:54:cd:3c:16:55:d9:37:90:2b:77:0e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6189E4F67BE53DF65282F8E1BB63165CCA784862
Validity
Not Before: Mar 1 21:07:24 2026 GMT
Not After : Mar 5 05:45:24 2026 GMT
Subject: CN=282CFA0A55D610BABEFAE349A38482CF971DBF68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:20:19:e9:0e:07:d0:36:46:f0:ac:98:7f:
d1:5f:ee:5e:1a:c9:11:3d:a8:02:99:dc:28:9c:54:
a3:cf:e6:3a:f5:14:6f:da:51:eb:58:ae:6e:00:4e:
d9:8b:dc:e8:46:39:11:02:83:9b:53:65:79:78:e2:
ee:0f:af:f7:a9:53:18:2b:4f:48:97:57:35:7f:92:
92:0f:0d:60:64:91:3b:5e:fe:8e:78:4f:f6:59:d7:
be:bc:18:71:da:ff:60:77:f9:64:ba:95:6f:05:47:
32:bf:34:6d:6c:be:62:c8:1e:6a:48:f1:24:31:32:
3b:85:01:db:b3:02:72:e0:54:57:58:3e:51:73:d9:
17:fa:8f:34:c1:a1:22:9c:42:6a:24:6e:ec:2a:6e:
b7:b2:41:53:c8:27:6c:68:4e:8f:72:17:2f:fe:62:
80:e5:df:ac:d5:f8:b0:39:00:48:27:92:a4:2e:ed:
16:7a:11:46:4b:29:99:ee:73:f0:bd:d3:43:24:42:
3e:ea:49:0b:3d:f0:d2:6d:e8:83:9d:fe:ed:d2:11:
3d:ad:d8:db:d7:4e:02:7e:f4:a0:80:af:94:ca:0e:
ac:f9:49:91:68:18:5c:cd:9d:7e:62:75:ba:9a:55:
57:53:bc:50:06:e8:9d:b1:76:12:ba:98:a4:69:28:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2C:FA:0A:55:D6:10:BA:BE:FA:E3:49:A3:84:82:CF:97:1D:BF:68
X509v3 Authority Key Identifier:
keyid:61:89:E4:F6:7B:E5:3D:F6:52:82:F8:E1:BB:63:16:5C:CA:78:48:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6189E4F67BE53DF65282F8E1BB63165CCA784862.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3589f643-37bc-4ffb-9529-401e4b6ef675/0/6189E4F67BE53DF65282F8E1BB63165CCA784862.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b6:06:e9:6f:ce:01:a0:66:c0:b6:2a:da:3a:e4:15:76:25:
13:18:e2:47:77:dc:df:7d:70:f3:4b:26:fb:f9:2b:fa:a3:23:
2d:42:08:7f:ea:bc:a0:98:ed:02:1f:0d:1e:1b:0e:fd:6d:47:
68:73:2b:b3:30:3e:d9:15:ac:a1:91:bd:9c:84:43:85:50:2d:
56:63:02:7c:00:83:2a:4a:d7:17:61:55:ce:28:3e:89:65:0a:
18:07:21:ab:db:a2:de:60:d3:e7:c9:b2:34:4d:a0:ce:b2:2c:
32:af:2d:d0:9f:0e:95:cb:4d:60:19:63:d6:31:7f:e8:e1:5b:
a9:7f:43:0e:38:e4:6d:70:df:76:67:6d:b7:bf:76:02:0d:63:
ae:07:5d:64:67:6f:0c:3b:5b:e2:14:1f:34:51:db:96:97:5d:
37:d3:47:83:3d:a4:6f:48:1d:10:ed:62:fe:4d:a3:f9:5e:82:
1f:59:a7:af:a4:b3:46:82:31:da:2a:2c:7c:4a:be:84:8f:04:
2a:f8:aa:8c:c1:e0:44:e2:bf:94:03:5a:de:93:6d:2d:75:c0:
cc:d5:b2:a2:34:9e:9f:8f:e8:60:7e:0f:aa:be:b1:ed:3a:7b:
c2:b8:10:04:18:a7:1b:15:35:21:88:8d:b3:2b:a3:19:c5:7c:
63:fa:84:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:41 2026 by rpki-client