
$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json)
Hash identifier: 2eqTMN/k47bzJdZnd0qCX9YP0io2fFfmrT8U7jYlcjo=
Subject key identifier: F1:7A:5E:CE:AC:C0:01:72:18:63:29:91:35:14:D4:ED:9D:1B:18:33
Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Certificate serial: 58089A35DFACA16B4475D9003B97634E5A1B3F13
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
Manifest number: C7
Signing time: Sat 28 Feb 2026 12:42:34 +0000
Manifest this update: Sat 28 Feb 2026 12:37:34 +0000
Manifest next update: Tue 03 Mar 2026 15:37:34 +0000
Files and hashes: 1: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: H33ymI9ju2NfQ2pOTJN+8hPqJ6LyJFP7aCyIqWIccfg=)
2: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: jZM60p+ihsOsnG/o5i9hHgFmzFPD3WS1aTcQqe2yPLg=)
3: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: qZQ4FJYs46n/+hOc10zmPRfwJHK6+NPt/Sqykb6up2s=)
4: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: qHrXMqQTucTeofIinh+6AXijbtXSBcDb8eithAS0vbA=)
5: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: C4fOapPJWLfi5vxaAjPOQ5SsehDgJi6x81PpbGt0VGw=)
6: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: 2bo14asIeMFuulQFAuyOMWvwruZszgFyWNm1gWivGps=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 15:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:08:9a:35:df:ac:a1:6b:44:75:d9:00:3b:97:63:4e:5a:1b:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Validity
Not Before: Feb 28 12:37:34 2026 GMT
Not After : Mar 3 15:37:34 2026 GMT
Subject: CN=F17A5ECEACC00172186329913514D4ED9D1B1833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:a7:25:56:0d:56:cf:e3:f4:47:2b:b6:99:
13:76:82:c8:d1:4e:fb:27:ec:11:38:25:6d:b2:30:
e2:1e:b5:03:70:48:18:6e:f0:86:e1:03:52:5b:18:
d4:6a:67:eb:a2:d0:81:89:2d:90:f6:16:b6:9a:0a:
dc:6e:da:2a:84:33:3d:15:0e:7a:66:49:a4:db:b5:
1d:03:96:8f:50:55:0b:67:ee:ac:0d:6f:eb:99:9b:
6e:59:60:2f:c6:96:e7:8f:61:0d:d3:da:e8:7b:27:
e8:32:df:0d:78:45:97:b8:86:76:fc:c0:76:63:39:
53:1e:fb:d3:b7:f7:36:75:03:87:a7:d6:1c:a6:f9:
82:93:1b:84:b7:e9:10:b5:13:a1:42:ad:3f:5f:51:
85:5f:96:5f:d0:e1:a8:c5:5a:b4:a3:05:91:9c:2b:
3a:e6:19:ee:f3:f2:8f:9e:52:bd:68:57:a6:d5:36:
4e:3a:9e:72:76:eb:4c:23:6b:3d:02:82:4e:d7:59:
58:3c:54:5b:2a:79:0a:66:bb:c8:47:d3:b7:32:ff:
bc:09:47:97:bc:64:e9:d8:9a:98:35:58:a3:87:7a:
3d:e9:c6:86:1a:27:49:3a:78:54:4e:54:92:3a:b3:
fa:27:9d:a9:87:bf:8e:0d:aa:1e:e1:30:16:5f:39:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:5E:CE:AC:C0:01:72:18:63:29:91:35:14:D4:ED:9D:1B:18:33
X509v3 Authority Key Identifier:
keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:e6:7c:63:01:d3:8d:19:0e:c2:87:b6:85:7a:7c:b2:a1:
a7:9d:66:3b:2c:8a:a3:63:8c:0d:6a:d5:b4:74:9f:6d:9a:1c:
74:99:74:88:6c:6c:63:df:ea:d6:42:de:66:11:7c:2d:c3:b1:
60:3f:4d:00:62:e9:29:56:b9:c5:6b:bb:ee:51:ea:92:dc:c4:
b8:2d:f1:6a:03:1a:f3:2d:a7:a2:ec:f3:0c:4b:e6:6d:76:dd:
30:5c:8e:a9:13:8f:fe:96:33:fa:b6:dd:e1:ed:db:ef:4a:84:
3b:b1:dc:07:fb:e7:14:db:78:ed:24:05:a5:a5:47:61:b5:43:
bd:eb:af:2d:89:29:32:7f:ed:29:3a:44:ed:1a:11:d6:6c:07:
7f:b5:11:ee:2d:99:32:0b:87:dc:5c:90:23:4d:99:12:32:98:
47:bf:5c:73:b1:b4:94:09:c8:a3:0c:b8:f9:51:a6:aa:e4:ed:
b1:61:4e:66:61:99:36:17:d4:b6:eb:b3:94:48:5a:a2:51:07:
58:32:74:76:c6:fd:b6:9b:09:ed:e8:59:37:91:dc:ad:1d:1d:
7a:28:ce:4c:f3:9b:4f:e1:42:c5:90:e9:84:20:bf:79:e8:16:
f4:7a:16:f0:4a:94:c2:1d:e5:c5:4d:34:4b:2d:66:05:a9:c2:
45:4d:98:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:51 2026 by rpki-client