
$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
File: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft (raw, json)
Hash identifier: EtwJJceV+mbVFPOPZFbrlyvfsMLD81+6iXR6ZNJXuAE=
Subject key identifier: 03:47:6B:AD:13:0F:20:63:7F:C7:66:60:1D:90:11:44:A4:9F:15:BA
Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
Certificate issuer: /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
Certificate serial: 57216876BD380ED3DBD502157E1F02DED9F1E2D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
Manifest number: 03EB
Signing time: Sun 02 Nov 2025 23:02:01 +0000
Manifest this update: Sun 02 Nov 2025 22:57:01 +0000
Manifest next update: Thu 06 Nov 2025 08:39:01 +0000
Files and hashes: 1: 3130332e3132302e36342e302f32342d3234203d3e20313337333733.roa (hash: pCJYjvXonKex+skSqmImkbu4oPl5fBK9Q5SIxdeC0qw=)
2: 3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (hash: 8JbwHHtI2+x8Q7Ly9bJcp9ZLV+q/WXTIRy0nL9ot5M8=)
3: 3130332e3132302e36372e302f32342d3234203d3e20313337333733.roa (hash: IzbXTMVKVDEB9rg5msnU2DpFCw8NlvM8m/tSeauJb7M=)
4: 323030313a6466363a3930303a3a2f34382d3438203d3e20313337333733.roa (hash: RtKaOt0QVcUfg/opcNyngIYtGMAYjqUtlrzDiVJb3H0=)
5: 3130332e3132302e36352e302f32342d3234203d3e20313337333733.roa (hash: /QE3JbQC9fGdo5sebo5tYuWfdXhEXpRAxCPxewOPZfY=)
6: 6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl (hash: I2Vfp44ZUU3BTmkNjvp36Wo7FESkuYryKMh/Rt8Hi/4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl
rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 08:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:21:68:76:bd:38:0e:d3:db:d5:02:15:7e:1f:02:de:d9:f1:e2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
Validity
Not Before: Nov 2 22:57:01 2025 GMT
Not After : Nov 6 08:39:01 2025 GMT
Subject: CN=03476BAD130F20637FC766601D901144A49F15BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:c5:c3:74:16:31:bc:48:91:25:98:45:bd:
af:29:bb:f5:ba:ca:b7:94:1d:a5:4c:8a:7e:fa:99:
3d:6c:c0:0c:94:17:3d:78:34:37:d3:05:47:db:12:
7d:fb:e4:ef:1b:53:96:86:10:85:31:2d:2d:26:96:
ab:ad:8f:37:54:30:d6:19:b1:62:2d:8f:d1:3a:97:
e8:3b:ae:7b:b8:c0:71:78:22:a3:6d:28:9f:cc:a2:
d0:c2:b4:b5:1b:ee:ef:ce:fe:91:97:6c:ae:1b:0b:
7a:0b:24:c3:77:fb:8c:f4:a1:ce:59:12:8d:e0:9e:
7d:d7:6d:15:43:7a:8b:0b:4a:fd:01:cf:68:bb:74:
d3:1e:08:2f:bb:e3:c9:87:f7:08:94:7a:23:55:31:
5d:35:08:a4:52:ce:22:93:35:00:f3:67:6b:82:41:
b8:68:bc:cf:fb:c3:24:be:75:0c:82:1e:c2:a1:0a:
96:21:40:b2:0b:9a:d1:f1:eb:d7:a6:2a:8a:9a:4a:
90:c9:a6:57:a5:d2:73:8b:e8:a2:2e:36:0a:cf:3a:
ad:3b:52:91:5f:53:9e:f3:4c:e1:94:c6:33:28:a0:
7c:7a:04:8c:f0:46:e0:20:8c:46:58:0d:e4:09:75:
a0:b0:92:14:a9:14:43:d1:12:9e:4a:a8:68:0e:82:
3a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:47:6B:AD:13:0F:20:63:7F:C7:66:60:1D:90:11:44:A4:9F:15:BA
X509v3 Authority Key Identifier:
keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:51:d5:10:a3:76:89:e5:3e:95:a3:87:3d:76:fe:a2:51:de:
20:1e:93:0f:f5:d1:fa:68:85:8a:c4:ed:0c:8c:3d:8e:cc:93:
ab:e5:37:4e:e3:28:27:0a:81:84:0b:f9:fb:76:b1:b6:d2:a6:
ec:3c:d2:ef:84:83:ec:c5:38:7c:fc:bf:46:c5:1b:a5:e4:19:
0c:2d:be:2a:e5:5c:fc:d5:96:d8:05:80:f2:75:a5:75:74:9e:
b7:8d:e4:5e:56:ff:06:08:4e:04:e0:d5:e4:d1:99:c1:76:20:
dc:81:32:30:7e:ba:dc:1d:74:f9:b4:01:15:21:fb:f5:98:0d:
73:7c:9c:62:f2:57:4f:c9:cd:cf:0c:78:1a:32:78:f3:1e:b7:
43:54:aa:a5:6b:12:9a:b9:fa:ff:67:44:b9:e2:1f:77:7d:87:
7b:50:a4:a4:c0:12:e5:47:4d:9c:0b:82:5e:be:1f:1a:f8:62:
71:7a:d5:c8:79:9d:08:f5:9f:44:70:91:31:98:66:d9:21:bc:
12:7d:07:21:80:0f:a6:58:db:3a:1e:39:6d:c6:dc:b9:bc:ab:
8c:be:f1:b1:a1:9d:03:48:4f:b6:ee:f0:1e:3d:ec:e4:0a:28:
69:ab:3e:e4:76:1e:97:36:86:e7:d7:ea:19:3f:c1:22:d5:be:
1f:aa:53:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:53:14 2025 by rpki-client