
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft
File: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft (raw, json)
Hash identifier: arCgFGtRYNF461vyXsnyIaC4J50evwrAk/8Y7TQ+R4Y=
Subject key identifier: F8:5C:EB:DB:AF:27:64:58:C8:4E:1B:19:41:AC:66:EA:60:98:FF:A9
Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31
Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31
Certificate serial: 0C784806472ED8309D1FFE0C57C0843E238FD794
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft
Manifest number: 0122
Signing time: Fri 17 Apr 2026 04:30:58 +0000
Manifest this update: Fri 17 Apr 2026 04:25:58 +0000
Manifest next update: Mon 20 Apr 2026 12:52:58 +0000
Files and hashes: 1: 6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl (hash: mO/HDQGJ9qUFZZooLzOwdOvmWGn79KxdwADhi/SMxso=)
2: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (hash: 9S29qFeJZloki9PWW9tdgsR5Hw2QfhcPZXeZtm9LI8o=)
3: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (hash: pTegOhD4z3Faaf9uEY5aINqGFpg8v+KgvZMxN268mY4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl
rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 12:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:78:48:06:47:2e:d8:30:9d:1f:fe:0c:57:c0:84:3e:23:8f:d7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31
Validity
Not Before: Apr 17 04:25:58 2026 GMT
Not After : Apr 20 12:52:58 2026 GMT
Subject: CN=F85CEBDBAF276458C84E1B1941AC66EA6098FFA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ca:5c:40:27:5b:5b:c0:a7:3f:33:94:1c:b5:
42:84:b6:75:2b:a5:5a:14:fb:75:ab:85:07:29:fa:
ca:8d:11:f9:23:8b:c7:b5:2c:ef:c5:e1:26:90:0e:
65:88:a3:47:bd:9b:21:d4:c2:f4:73:fe:03:72:bc:
03:11:32:b1:20:00:01:85:6c:20:40:40:28:6b:a9:
22:09:46:e0:fe:aa:6e:57:1c:db:9a:86:92:f0:d5:
f8:b0:bb:44:ef:cf:d1:cf:86:12:10:40:02:86:21:
34:56:b2:8f:9d:3c:c9:51:fa:f0:b4:7a:88:fe:a5:
07:5b:2c:83:13:a0:f2:72:27:e2:78:13:b5:57:27:
b3:dd:1c:91:36:70:aa:2a:e2:b3:e3:18:4d:c9:e3:
fd:16:70:e8:f8:91:6e:f4:6e:85:9f:7f:8e:a7:48:
4e:3b:98:2e:89:3f:c2:ef:3c:c3:06:e9:bc:9e:e5:
25:ab:6c:d7:68:0f:24:35:1b:a6:b5:9d:ae:3b:2c:
e1:96:98:21:b5:9b:e6:1f:e7:14:75:b7:7c:d5:df:
0b:82:02:40:f6:53:27:87:21:9d:9c:05:ca:b9:52:
17:14:be:c1:c6:a0:63:b7:fa:0d:87:b5:bc:61:72:
76:2f:c3:0b:62:d9:11:b1:58:42:3d:44:88:17:a5:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5C:EB:DB:AF:27:64:58:C8:4E:1B:19:41:AC:66:EA:60:98:FF:A9
X509v3 Authority Key Identifier:
keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:39:b7:89:92:4a:04:8a:52:e3:dd:b3:b6:e3:1b:29:5f:94:
b3:e2:0b:f2:af:26:30:44:49:77:cd:4b:cf:67:60:61:36:6f:
17:38:ad:46:6a:df:af:ac:ab:86:d7:5e:a8:89:41:38:85:d9:
23:1e:35:2c:78:48:a3:ba:b5:cc:96:65:07:da:e0:a8:eb:26:
1f:6b:47:7f:dc:af:9d:fb:ce:1c:41:4b:27:d6:0b:0a:8a:06:
04:a9:b8:3a:b7:ac:74:b1:ce:f9:4f:5f:ae:43:6b:d9:3a:a0:
79:8e:0c:8a:4c:e5:3f:94:24:93:00:4c:79:89:66:52:d5:02:
90:c8:a9:bf:80:4e:69:8a:d6:dd:37:5f:a2:96:b8:54:d4:55:
b2:ad:61:84:35:c0:e2:55:0c:39:5a:3b:51:71:eb:38:1a:b4:
4f:70:da:93:2c:a1:35:0c:e1:af:f6:c4:06:b1:b3:04:29:8b:
f3:1c:44:0b:41:7b:e5:bd:cf:d9:e6:c3:b6:9b:74:48:ca:4b:
5c:83:51:ed:89:fc:4b:d3:58:46:e9:90:57:3f:d2:06:bb:8e:
47:2a:76:b6:0d:48:b9:32:5b:0e:fd:b0:39:ce:2f:c7:9c:32:
1a:24:0b:86:4d:36:ac:4f:04:53:37:03:40:41:2b:1f:08:67:
39:92:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:44 2026 by rpki-client