
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
File: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft (raw, json)
Hash identifier: eD6SYtDXDe/1vapwgDasXhZliVodxMsuDp9z0mthQAI=
Subject key identifier: 52:37:B8:EA:42:9F:01:0C:BB:4C:00:FA:F8:EA:60:41:0F:91:0F:1A
Authority key identifier: 6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B
Certificate issuer: /CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
Certificate serial: 2680EF69AA543400A4BB2E97B169F2A82D303C10
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
Manifest number: 022E
Signing time: Sun 01 Mar 2026 16:12:29 +0000
Manifest this update: Sun 01 Mar 2026 16:07:29 +0000
Manifest next update: Wed 04 Mar 2026 19:05:29 +0000
Files and hashes: 1: 3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa (hash: 9yEpf7UptHKPtJGMSNZGjTG/u5N0H8I6F7MGckJB2CA=)
2: 6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl (hash: 51iWIjdSMzdVSvbAkY2S3ayWU+1rAzL+H9QozfguiwU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl
rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 19:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:80:ef:69:aa:54:34:00:a4:bb:2e:97:b1:69:f2:a8:2d:30:3c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B
Validity
Not Before: Mar 1 16:07:29 2026 GMT
Not After : Mar 4 19:05:29 2026 GMT
Subject: CN=5237B8EA429F010CBB4C00FAF8EA60410F910F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2b:b2:ec:66:cb:35:0c:3f:fe:5f:a4:f1:bd:
7d:21:f0:5e:ec:1f:8c:50:0b:ca:19:a2:3c:24:dc:
a1:ee:41:83:19:a0:f3:78:d0:8d:f5:d0:f4:6a:18:
1a:a1:9c:55:3c:01:7f:23:4e:28:ce:47:56:a0:4f:
6e:f8:34:3a:c2:3a:a0:1a:1b:1f:45:b0:a8:50:89:
02:0c:79:18:d3:34:57:6b:c7:28:49:bd:9c:94:5e:
bc:62:bf:f9:04:7c:b8:38:c7:4c:98:36:d4:56:41:
f7:77:07:f7:ea:5c:0f:4c:96:ac:75:b7:15:b6:6b:
79:6c:fe:81:45:09:4a:3f:c2:55:21:75:c7:13:dd:
ae:bc:e8:09:1f:00:6c:7b:6f:df:bf:86:90:d1:46:
69:65:85:00:16:fa:a1:dd:f4:bb:d4:29:58:f8:78:
61:45:4c:c5:af:49:ee:8f:a8:fb:c6:53:1c:e8:4d:
ab:29:b4:ac:a7:fa:1b:32:46:36:57:66:be:2f:6a:
5a:4c:2b:a5:c6:fe:87:88:f1:ca:e8:d7:9e:de:f3:
14:3c:9f:16:01:da:34:4b:01:70:7d:d1:64:63:0a:
de:54:20:05:93:29:2a:be:0b:38:45:8c:82:31:92:
9e:b2:65:5e:ee:6d:62:90:9c:c9:ed:1e:b5:a2:40:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:37:B8:EA:42:9F:01:0C:BB:4C:00:FA:F8:EA:60:41:0F:91:0F:1A
X509v3 Authority Key Identifier:
keyid:6A:C5:8D:24:85:5E:7F:E2:4A:C4:52:B7:D0:FD:DB:9B:D9:00:3A:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/6AC58D24855E7FE24AC452B7D0FDDB9BD9003A8B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ed:7e:ac:df:e9:27:53:c4:c2:70:68:4c:e4:86:92:50:d4:
6e:25:f8:25:5f:ba:3c:3c:e4:17:6f:00:5f:83:77:fc:14:92:
d8:dd:ee:a8:30:21:fe:c0:18:12:8e:44:54:e1:77:38:47:f5:
e2:d3:85:f2:08:8a:0b:20:b3:0e:8e:76:20:31:87:d5:58:fd:
53:d6:fc:ff:a0:f1:7d:fd:8a:91:35:7f:4e:d6:e6:ce:19:56:
1e:46:3b:14:2f:a7:32:4c:a8:21:e6:78:82:84:ab:d4:13:e0:
e1:f6:3a:b0:1c:20:21:da:42:98:6f:4f:29:39:e9:50:68:a5:
22:be:a0:0e:7e:ae:79:57:c9:bc:7e:5a:12:87:96:5d:3a:ca:
7a:bd:07:09:b0:37:00:cf:9f:52:c2:ed:3e:0a:0e:cc:7c:0c:
dc:8f:6b:0b:b9:85:ff:e6:63:c0:9e:29:5a:61:9b:0c:4c:10:
12:7d:11:a0:df:e4:6e:f8:0b:cf:62:98:aa:09:84:da:cd:af:
2a:90:d6:d4:d6:ff:6b:37:24:3c:e6:32:4c:d2:73:25:65:9a:
b0:b3:9a:e1:8a:ff:e3:68:7d:06:22:d2:2c:80:0f:22:1c:c4:
ff:ab:a9:93:5d:c2:8c:41:b8:f4:93:b4:5c:52:6e:f1:b1:8b:
b9:c4:cc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:55 2026 by rpki-client