
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
File: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft (raw, json)
Hash identifier: qzsZ4H+yjF9tKp39WbTZqpx/QOgYrA//5LZ2QrBZyi4=
Subject key identifier: D4:35:6A:BA:1C:41:26:18:5E:B6:F2:A1:79:6A:E8:83:32:9A:2A:72
Authority key identifier: C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7
Certificate issuer: /CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7
Certificate serial: 4E9AA3770078B50D94B145833DBE7F30AFE35949
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
Manifest number: 0157
Signing time: Sat 28 Feb 2026 22:21:11 +0000
Manifest this update: Sat 28 Feb 2026 22:16:11 +0000
Manifest next update: Wed 04 Mar 2026 09:59:11 +0000
Files and hashes: 1: 3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (hash: V1YXnZ8RaD7jZMTPv9sl3RlMQ1DjfCA6C5B7VF3kpxc=)
2: C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl (hash: qbbnq5Fk+UCgJoL7Q8JGg3FPaFaFk8LHWi1hRT3B2VI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl
rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 09:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:9a:a3:77:00:78:b5:0d:94:b1:45:83:3d:be:7f:30:af:e3:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7
Validity
Not Before: Feb 28 22:16:11 2026 GMT
Not After : Mar 4 09:59:11 2026 GMT
Subject: CN=D4356ABA1C4126185EB6F2A1796AE883329A2A72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:01:d9:6d:92:61:3c:81:c4:05:63:5b:ac:
2d:9c:31:7b:23:a7:ab:32:a2:2a:43:49:8b:82:ca:
09:92:aa:b5:57:5a:b8:5e:b5:0f:28:60:50:53:fe:
1c:10:96:68:f7:54:c9:bb:bc:00:2b:0d:c0:2b:71:
5f:0a:d6:9b:b4:2f:1d:cb:32:22:47:ae:2c:b7:a5:
33:13:ef:26:a8:50:54:a7:11:3a:3e:9a:c8:45:f4:
17:91:75:98:97:d5:9f:a4:f1:59:6d:22:91:62:01:
a6:80:53:d5:94:7e:22:b6:e1:89:bf:97:f3:d6:02:
3e:64:da:8b:50:9d:e8:97:49:6b:00:4a:9c:75:6a:
e5:72:41:09:fa:3c:39:a1:5a:de:17:58:7d:5c:e9:
42:ec:45:b4:b9:95:28:ca:9a:fd:26:64:37:66:eb:
5c:2d:35:80:5c:c4:30:4a:c3:22:d1:bf:8c:a4:2d:
ef:1b:b2:50:87:a4:d1:43:3e:ea:d4:a2:ef:e6:6c:
52:9a:f4:a6:3b:7c:31:1d:76:a0:8d:e2:4b:f7:22:
4f:09:62:2d:f2:96:0b:6f:6d:b9:d9:90:92:97:e9:
8f:98:70:9f:3c:f4:ec:bf:e3:40:74:95:f8:f4:54:
43:ad:d6:3e:9f:4d:f5:e9:0a:8f:83:45:c5:4b:98:
25:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:35:6A:BA:1C:41:26:18:5E:B6:F2:A1:79:6A:E8:83:32:9A:2A:72
X509v3 Authority Key Identifier:
keyid:C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0e:37:22:2f:69:97:39:56:53:89:e5:f0:b7:33:cc:72:b6:
7c:86:07:9a:57:77:11:ba:3f:65:c9:e5:7a:2b:be:18:49:e8:
89:96:ec:25:b2:14:27:13:49:40:53:91:b9:5a:46:3e:ef:46:
8d:61:15:67:08:d8:55:26:37:b7:a7:01:a1:58:9f:81:e8:f3:
59:a3:f9:0a:1b:93:8b:fd:2c:db:5c:34:c3:c4:14:0f:fa:40:
d4:8a:18:ab:96:88:ab:44:cc:0c:22:d0:dc:79:c5:bd:e3:0d:
1a:61:ff:fd:11:0d:96:5d:4b:9f:05:b1:96:c4:ed:03:a5:a6:
b6:b3:a5:8d:38:ef:5d:e5:f7:26:84:a2:2d:21:c8:ba:3b:20:
59:75:b2:f4:6a:32:da:d9:3d:d8:8e:cb:9c:e3:6c:17:4d:02:
1a:2b:cd:9b:71:75:48:cd:eb:71:bf:2a:9e:0a:9b:63:47:20:
c7:7a:91:96:3b:93:38:39:63:df:a0:b3:32:25:38:e3:ac:55:
8f:47:2f:a6:36:b5:8d:a3:55:5b:9c:a5:ea:3a:57:49:49:46:
33:29:90:b2:d5:da:8a:73:bb:99:16:8b:c0:26:d6:c5:1d:1e:
c5:5c:42:0b:6b:5c:44:94:f6:8e:10:0a:ea:87:4b:3d:f2:e0:
04:5f:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:23 2026 by rpki-client