
$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json)
Hash identifier: TIdbv8NF4xIDQ6tlIVVNA2QhDjJQzGTu0i9GXUprcWc=
Subject key identifier: 55:30:F3:6D:07:3F:71:FB:1D:A7:EF:10:3D:FF:B6:74:8D:97:92:21
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial: 1475E3129EE0BBFE6D7DD22AAF3F4CAB360E3316
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
Manifest number: 0553
Signing time: Sat 28 Feb 2026 00:02:08 +0000
Manifest this update: Fri 27 Feb 2026 23:57:08 +0000
Manifest next update: Tue 03 Mar 2026 09:36:08 +0000
Files and hashes: 1: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=)
2: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=)
3: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=)
4: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=)
5: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: ia+vvIz00MCoirYgeJmfz78e4Xk8jVPnG9DyFWGCyNY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 09:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:75:e3:12:9e:e0:bb:fe:6d:7d:d2:2a:af:3f:4c:ab:36:0e:33:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Validity
Not Before: Feb 27 23:57:08 2026 GMT
Not After : Mar 3 09:36:08 2026 GMT
Subject: CN=5530F36D073F71FB1DA7EF103DFFB6748D979221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:9e:34:0d:2b:4b:11:ec:8b:a1:62:9d:72:
7f:89:51:6b:2c:e8:27:d3:e5:88:b5:6c:e5:69:01:
d0:0b:07:e2:3d:07:16:f4:b9:08:12:fa:82:ff:e9:
fb:e9:35:f9:32:91:f1:1f:70:3c:61:2d:dd:a2:48:
82:da:e4:f8:0a:00:7f:e4:10:e3:e8:19:2e:f2:e7:
04:de:d2:1f:44:33:9e:4d:65:62:38:65:4f:46:80:
03:16:ee:d4:f2:07:62:a8:5c:50:86:75:5e:96:42:
b4:4f:5a:28:8a:10:55:1a:20:0c:96:c2:9e:54:96:
a7:69:1a:8c:c4:c7:b0:ec:d2:62:8f:f8:01:bd:63:
72:43:3f:70:4d:95:1b:3c:36:10:a2:6a:d1:a3:7c:
67:8a:6a:1f:e3:01:c1:77:dd:ac:fa:b4:be:a3:71:
ce:99:cf:e3:0c:ab:5f:15:c2:4e:ed:47:f7:b9:41:
e4:07:4f:15:aa:af:fb:0f:ae:ef:da:19:c3:d9:cc:
f2:39:3d:dc:dc:d9:c5:b4:57:4b:5d:f3:c8:2e:e3:
7d:30:c9:a7:ed:6d:12:9a:50:ae:75:56:6c:4e:a8:
eb:70:3a:f8:1c:d2:94:e0:1e:5b:da:77:bc:fb:c3:
7c:df:ac:fd:c2:7f:c8:4e:cb:91:93:32:5a:f2:d5:
97:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:30:F3:6D:07:3F:71:FB:1D:A7:EF:10:3D:FF:B6:74:8D:97:92:21
X509v3 Authority Key Identifier:
keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b5:a4:23:8c:3e:43:0b:f9:ce:ac:f1:1e:9e:f4:ec:54:a6:
94:95:39:66:7a:2e:cf:8f:14:03:f9:38:62:25:59:c7:98:3d:
13:d0:dc:2f:aa:47:94:09:a0:3b:3d:bc:39:6d:17:9f:47:bd:
91:de:ad:1b:a9:33:69:b7:1e:14:be:87:49:57:00:43:eb:bd:
3a:c6:3c:91:12:e0:be:8c:f1:2f:b8:66:cf:f3:25:14:1d:e0:
78:ab:81:2a:9c:6c:da:0f:66:45:86:e5:a4:63:01:d6:fc:71:
a0:c1:29:70:5f:d1:0d:9f:01:95:89:9e:b8:c9:0b:10:7b:c8:
7a:86:23:51:bc:f0:66:8e:00:83:7a:cc:76:d8:a2:6b:87:c9:
66:76:fb:68:88:ab:89:ae:43:10:cf:3a:1f:19:15:60:6d:56:
b6:cf:ef:0b:37:ab:41:45:1a:da:3c:6e:8f:d1:62:8b:3d:85:
06:15:f3:5f:89:e8:2d:d7:2a:07:19:16:3e:31:a2:a0:95:2f:
18:68:89:cf:c6:a7:44:62:f0:b5:80:2a:de:12:f0:f2:68:11:
bf:0d:86:5c:ab:2c:01:4f:37:36:d8:43:68:d4:b6:86:ef:24:
41:50:03:18:01:d1:00:29:e3:7e:3c:f0:23:49:9b:d4:d7:91:
9e:2d:1f:09
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFHXjEp7gu/5tfdIqrz9MqzYOMxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3
MUQyRDEyMTAeFw0yNjAyMjcyMzU3MDhaFw0yNjAzMDMwOTM2MDhaMDMxMTAvBgNV
BAMTKDU1MzBGMzZEMDczRjcxRkIxREE3RUYxMDNERkZCNjc0OEQ5NzkyMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4B540DStLEeyLoWKdcn+JUWss
6CfT5Yi1bOVpAdALB+I9Bxb0uQgS+oL/6fvpNfkykfEfcDxhLd2iSILa5PgKAH/k
EOPoGS7y5wTe0h9EM55NZWI4ZU9GgAMW7tTyB2KoXFCGdV6WQrRPWiiKEFUaIAyW
wp5UlqdpGozEx7Ds0mKP+AG9Y3JDP3BNlRs8NhCiatGjfGeKah/jAcF33az6tL6j
cc6Zz+MMq18Vwk7tR/e5QeQHTxWqr/sPru/aGcPZzPI5Pdzc2cW0V0td88gu430w
yaftbRKaUK51VmxOqOtwOvgc0pTgHlvad7z7w3zfrP3Cf8hOy5GTMlry1ZfpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVTDzbQc/cfsdp+8QPf+2dI2XkiEwHwYDVR0j
BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB
MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy
RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh
ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB
RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGS1pCOMPkML+c6s8R6e9OxUppSVOWZ6Ls+P
FAP5OGIlWceYPRPQ3C+qR5QJoDs9vDltF59HvZHerRupM2m3HhS+h0lXAEPrvTrG
PJES4L6M8S+4Zs/zJRQd4HirgSqcbNoPZkWG5aRjAdb8caDBKXBf0Q2fAZWJnrjJ
CxB7yHqGI1G88GaOAIN6zHbYomuHyWZ2+2iIq4muQxDPOh8ZFWBtVrbP7ws3q0FF
Gto8bo/RYos9hQYV81+J6C3XKgcZFj4xoqCVLxhoic/Gp0Ri8LWAKt4S8PJoEb8N
hlyrLAFPNzbYQ2jUtobvJEFQAxgB0QAp43488CNJm9TXkZ4tHwk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:31:51 2026 by rpki-client