
$ rpki-client -vvf repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft
File: 6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft (raw, json)
Hash identifier: vd658ild0B2+jki6+IK3A4b6b2EVcaTcQJcvAyx5LY0=
Subject key identifier: 16:7D:2D:80:FE:EC:96:57:CB:FA:3C:FC:D1:B7:CA:1E:71:E0:01:F7
Authority key identifier: 6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6
Certificate issuer: /CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
Certificate serial: 6FE43C8F1A78A32B8F3C018399A3146823B7E150
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft
Manifest number: 0558
Signing time: Sat 28 Feb 2026 19:43:05 +0000
Manifest this update: Sat 28 Feb 2026 19:38:05 +0000
Manifest next update: Wed 04 Mar 2026 02:22:05 +0000
Files and hashes: 1: 34332e3232352e36342e302f32322d3234203d3e203538343935.roa (hash: nG5OqSEJiUSM53PY/eu6ZUUZVwxMF+jfL/QWVNc9tAM=)
2: 6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl (hash: UeHtSczx7uIMdw0JKNGnGxbYqVOvGilR+FccUwHviuo=)
3: 323430343a326638303a666630323a3a2f34382d3438203d3e203538343935.roa (hash: xKzGCbJVIAvbgJ/YtZICGoqvaDWaJ6OOYNUGjLwkNyY=)
4: 323430343a326638303a666630313a3a2f34382d3438203d3e203538343935.roa (hash: vSA2LZxmEu8vSGBuPQxlCFswIfefN/VFEzH511o1QAI=)
5: 3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa (hash: TYgLScTFuKC8omm7siiJ6BBmUOeK3WKjy8wvBn7N+2A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl
rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e4:3c:8f:1a:78:a3:2b:8f:3c:01:83:99:a3:14:68:23:b7:e1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
Validity
Not Before: Feb 28 19:38:05 2026 GMT
Not After : Mar 4 02:22:05 2026 GMT
Subject: CN=167D2D80FEEC9657CBFA3CFCD1B7CA1E71E001F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:21:90:44:a4:53:4d:5e:3d:94:3f:6b:20:
06:3c:5d:30:27:ed:df:c4:a3:18:9e:a2:5e:de:cb:
b1:ed:49:eb:f0:89:47:3c:4a:5b:1d:3e:5d:cb:e3:
84:8a:71:c9:e7:e9:51:1c:c0:f9:9a:c2:26:79:6b:
d7:ad:d3:d3:0d:ee:b7:b9:b9:50:4e:ec:59:63:13:
7f:f1:6f:ed:ff:35:56:28:df:5e:6d:40:f7:06:13:
b3:72:5d:fa:2d:70:2d:6b:f3:b5:2a:f6:7d:7c:06:
72:d4:43:b2:37:3d:6e:d7:49:7f:e7:6e:4d:7c:c4:
19:0b:3a:73:6c:3f:fc:69:30:b3:cd:ef:0a:60:1a:
0b:1a:05:74:9c:50:ec:56:23:76:1f:f0:a0:a5:68:
3c:44:9f:3d:14:1f:2e:bd:d4:73:45:69:a1:65:a7:
2c:27:da:d1:7f:96:5a:73:af:eb:69:2f:b6:fb:4a:
f9:c7:0c:40:ec:d7:d2:d1:62:08:ae:fc:56:78:17:
01:1b:77:05:ee:4e:c4:d4:45:4a:d7:f1:78:83:40:
9d:d3:2e:36:a3:41:f5:eb:bb:d0:1f:b6:50:3f:07:
58:f9:45:74:ab:5a:ac:79:a0:69:71:32:7a:bc:78:
5e:1b:d1:c1:64:8e:64:4d:6f:7f:09:1e:0d:d2:38:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7D:2D:80:FE:EC:96:57:CB:FA:3C:FC:D1:B7:CA:1E:71:E0:01:F7
X509v3 Authority Key Identifier:
keyid:6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:70:f5:1b:5e:5e:60:03:db:c7:5a:c0:e2:05:8d:46:6c:d0:
87:fd:98:7c:b7:5b:fa:6d:64:8d:b7:39:cf:11:83:3e:ba:71:
77:1e:84:07:b9:11:b7:0f:b3:27:6b:26:a3:a5:22:e2:13:38:
24:d7:8a:6f:f0:b8:2b:ce:61:0d:df:1e:e4:b6:65:34:51:0a:
42:a5:00:d5:e6:16:18:66:4e:c0:41:f5:5d:ff:1e:57:66:35:
5c:82:55:1a:f4:41:23:9d:2d:bc:4a:11:92:fd:d5:1c:6a:ef:
a5:60:5d:59:04:3f:68:85:ff:65:01:d9:f7:26:d1:6f:af:c3:
83:a0:3b:1f:75:65:33:92:4b:86:d0:58:d6:9e:82:be:c6:a2:
f4:54:45:cb:2b:10:08:8e:12:b6:ad:a5:37:13:eb:b2:e3:49:
42:48:8c:1b:da:e1:34:2a:6e:bf:d4:4a:f4:47:f6:2a:c5:45:
13:a3:2d:5e:89:73:be:08:4d:ee:89:70:5d:e3:0d:ec:2f:fa:
11:98:87:79:cf:b1:81:a7:e7:d1:74:f6:f3:34:51:af:f5:a3:
4c:f3:04:bf:78:da:6c:1d:44:a9:dd:cb:83:c5:a2:d5:52:ea:
d5:5a:5c:09:f3:c0:45:9c:fc:b8:32:9a:f8:d7:f6:ff:aa:c9:
e8:5c:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:15 2026 by rpki-client