
$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft
File: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft (raw, json)
Hash identifier: lnGO6EqsLx6VoLUIcJG061dMrcxiP/9vkRovzHHZMjw=
Subject key identifier: 94:4A:4D:05:F6:13:C3:B8:43:1B:55:10:7B:8D:35:87:91:A2:6A:50
Authority key identifier: 6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F
Certificate issuer: /CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F
Certificate serial: 5478855126A8853A5C38C0E19BEED8803F79486A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft
Manifest number: EB
Signing time: Mon 03 Nov 2025 03:31:11 +0000
Manifest this update: Mon 03 Nov 2025 03:26:11 +0000
Manifest next update: Thu 06 Nov 2025 07:23:11 +0000
Files and hashes: 1: 6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl (hash: 7oEdk4SknVUJDOy7rD6Q7IrDvkhjRXMwx32iTJGyi+U=)
2: 323030313a6466333a636634303a3a2f34382d3438203d3e20313532373536.roa (hash: EPGT5ryhDc35QQ+8DPj3Jot3CoQO1ERUPuwysJ3MS7U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl
rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 07:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:78:85:51:26:a8:85:3a:5c:38:c0:e1:9b:ee:d8:80:3f:79:48:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F
Validity
Not Before: Nov 3 03:26:11 2025 GMT
Not After : Nov 6 07:23:11 2025 GMT
Subject: CN=944A4D05F613C3B8431B55107B8D358791A26A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:6f:69:53:d6:a6:b8:16:53:45:31:30:f8:
15:70:f5:ea:99:b5:23:b8:da:5a:fb:76:13:84:8b:
a9:69:d4:53:c3:c4:98:e2:0d:7e:87:ae:9c:3b:03:
34:30:ad:a3:80:02:88:4f:62:a4:7b:c0:53:27:ee:
2b:4e:1e:c9:92:03:57:b0:7f:7a:6b:c8:10:2a:f4:
e9:de:19:4d:c2:d0:f3:e9:d2:90:7a:7c:7d:ca:96:
b5:26:0b:10:53:3c:47:27:a8:17:b5:c8:13:7f:ae:
0a:e0:7e:cc:25:8f:9f:52:f1:a7:77:08:ce:b2:c9:
8f:de:ac:c5:88:d2:4f:8e:19:cb:88:dd:22:83:2a:
41:48:55:42:9d:73:01:04:4c:43:34:a7:7f:fc:bb:
bd:37:df:98:fb:9f:63:d3:bc:e8:f0:cb:6a:0c:0c:
36:e8:12:3e:d3:4e:36:d7:21:c6:9a:23:4e:ef:a3:
f6:b7:78:55:41:c1:db:69:42:5c:d3:40:ee:61:2f:
fc:a6:d1:7c:d5:e7:70:36:90:92:79:32:eb:07:39:
72:bf:72:6e:d9:44:c6:d8:f9:74:fb:fc:8b:3d:5a:
05:0b:07:2a:9c:63:48:b1:be:d5:86:49:9b:b2:c1:
97:46:bc:25:5d:e5:7b:4e:2a:a8:77:a9:3f:4d:be:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4A:4D:05:F6:13:C3:B8:43:1B:55:10:7B:8D:35:87:91:A2:6A:50
X509v3 Authority Key Identifier:
keyid:6F:29:B5:AE:A0:FD:7E:C5:68:AA:45:A1:72:1D:8E:5D:EA:92:6C:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/1/6F29B5AEA0FD7EC568AA45A1721D8E5DEA926C0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4d:2d:28:2a:49:7a:0f:a9:f6:0d:d5:45:97:62:dd:d9:57:
09:07:0c:d0:43:66:1a:b6:da:e2:f5:b4:8e:ca:f7:ac:26:4f:
83:d9:33:50:d4:12:42:ed:1c:26:d3:2e:62:a6:b0:22:bf:41:
4b:c6:9d:8c:2e:3f:31:f8:8f:e3:18:59:bd:00:16:84:c4:eb:
92:b1:c7:94:6b:b0:72:c1:6d:72:62:1a:6f:dd:df:cc:bc:52:
43:33:b4:da:64:88:c3:53:a8:bf:cb:0a:e4:d3:43:51:e3:d2:
04:21:32:ce:40:3f:6d:1f:da:ad:f2:98:28:8b:36:c2:6d:79:
1c:ed:33:cd:34:97:83:a9:b7:bd:fe:ec:3f:36:eb:db:b5:03:
01:0e:14:53:33:48:22:96:b6:e9:58:f0:a4:67:32:32:bc:cb:
36:6b:1e:65:e3:b6:cd:eb:79:bc:9e:23:5d:d0:0f:73:70:59:
13:80:b9:76:1c:e1:40:aa:bc:3f:cd:60:df:d1:a4:46:ba:13:
bc:05:c8:86:70:fd:cd:d0:9d:0f:11:73:fb:59:6c:a5:40:0b:
1b:ad:82:ee:da:27:fb:43:3d:72:aa:86:07:e4:e4:14:e7:20:
e2:dd:21:c3:ef:d2:72:94:d5:28:1d:35:cd:59:44:15:32:c8:
63:ed:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:03:03 2025 by rpki-client