
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft
File: 6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft (raw, json)
Hash identifier: ZCzsrzyd4eJTZXKkFG2PbJz7dG2m0KkjJAxDlSKggnY=
Subject key identifier: 6D:61:06:7A:47:F6:96:16:8B:80:AB:A2:5D:54:4B:4E:5E:DB:7A:E1
Authority key identifier: 6D:00:F9:E4:E0:9C:A6:15:20:26:0B:EF:BC:9B:76:54:69:9D:17:43
Certificate issuer: /CN=6D00F9E4E09CA61520260BEFBC9B7654699D1743
Certificate serial: 3AD458BAAEAB3759301EE893DAE0FC728251C36D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D00F9E4E09CA61520260BEFBC9B7654699D1743.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 21:48:41 +0000
Manifest this update: Mon 21 Sep 2026 21:43:41 +0000
Manifest next update: Tue 22 Sep 2026 23:27:41 +0000
Files and hashes: 1: 3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (hash: D91F44iAtcWZE5ZPf8YuoNDIxLpGpmtmGkzs14Ogsnw=)
2: 6D00F9E4E09CA61520260BEFBC9B7654699D1743.crl (hash: /kDCXprdG03aqwAKEtPUh7v83BIygPEbdOCU6CI3Nsk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.crl
rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D00F9E4E09CA61520260BEFBC9B7654699D1743.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 23:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d4:58:ba:ae:ab:37:59:30:1e:e8:93:da:e0:fc:72:82:51:c3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D00F9E4E09CA61520260BEFBC9B7654699D1743
Validity
Not Before: Sep 21 21:43:41 2026 GMT
Not After : Sep 22 23:27:41 2026 GMT
Subject: CN=6D61067A47F696168B80ABA25D544B4E5EDB7AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:7a:8d:2f:d7:75:10:d6:62:67:21:ef:8d:
e9:82:cf:c2:a0:bb:0c:2a:c4:89:fd:46:0a:7a:f6:
0e:c8:91:5b:fa:5c:40:8f:5a:21:54:f1:85:a6:3d:
f1:4d:7b:20:d5:35:47:cc:18:da:33:06:61:85:98:
24:d9:80:9c:1c:60:6f:89:ac:62:42:1c:a3:03:9c:
31:09:34:66:e6:fe:10:4b:e4:6c:e1:f8:e7:ba:30:
76:94:9e:ac:3d:01:d3:13:aa:8c:5d:6f:62:7d:c2:
9b:d5:45:21:a3:c6:14:01:4b:38:9d:f4:df:27:31:
d4:85:e4:e9:5a:60:c5:dd:43:df:2e:6e:2d:dc:d4:
ad:46:a2:07:a0:af:bc:c2:44:29:68:18:81:62:e6:
7c:01:01:24:8a:21:7f:99:fe:05:bd:aa:e1:19:ee:
2d:41:d3:5e:2d:38:4c:43:32:75:94:c0:b7:28:b6:
d5:42:2f:0c:81:e7:d5:1c:59:43:84:c2:d4:9c:34:
3e:14:85:6d:c5:b6:66:bd:04:32:21:81:1d:79:7f:
a4:f6:24:f7:0b:03:63:22:bb:b1:a6:fa:1f:29:d5:
c6:9c:05:18:5e:22:17:7a:2c:d7:c1:4a:19:6d:1c:
1b:c8:ad:af:56:ca:dd:87:8e:aa:f5:11:91:77:a7:
35:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:61:06:7A:47:F6:96:16:8B:80:AB:A2:5D:54:4B:4E:5E:DB:7A:E1
X509v3 Authority Key Identifier:
keyid:6D:00:F9:E4:E0:9C:A6:15:20:26:0B:EF:BC:9B:76:54:69:9D:17:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D00F9E4E09CA61520260BEFBC9B7654699D1743.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/6D00F9E4E09CA61520260BEFBC9B7654699D1743.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8a:fa:07:15:1a:11:02:6f:6d:7e:7b:1e:07:2d:94:6e:52:
5d:36:e8:b0:a7:4b:66:a3:ed:6d:df:71:8f:2e:19:0f:25:d5:
bc:1a:36:eb:ec:8e:6c:50:9f:11:bc:68:c1:55:82:90:5c:36:
d3:32:8b:02:cc:c9:66:3a:3b:a9:40:d1:df:c6:9f:77:6b:05:
88:82:17:33:40:ca:56:15:a6:01:43:dc:08:04:34:1a:be:58:
4b:50:f4:27:37:a1:73:ea:9c:4b:37:a9:4d:5e:8c:86:dd:1c:
62:c6:34:42:5b:3a:5f:1d:ff:99:8c:1d:7b:c9:8e:9c:ca:ee:
4c:69:b6:f5:4e:94:3a:91:81:fd:01:2d:61:76:e9:fa:73:88:
b5:88:db:69:c0:55:e3:61:b8:a0:e9:4d:82:4e:f1:10:84:3e:
a8:6a:c8:7e:6e:dc:47:62:c5:53:38:5f:a2:21:fb:ad:10:d7:
7a:c8:b5:c2:24:5c:e6:d1:e9:1b:53:64:64:4b:a1:4d:44:8e:
4d:cb:87:9b:7c:9d:f2:66:57:01:24:7b:9d:2e:f6:f6:90:e0:
be:7f:61:26:ef:6a:b1:bb:2f:69:e6:51:0b:7e:8d:a8:c0:76:
4d:03:2e:34:48:36:f2:db:d0:59:ac:a5:ef:bb:20:6e:90:31:
00:16:e9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:58:00 2026 by rpki-client