
$ rpki-client -vvf rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
File: 6F45041EB7929E02B86768C39A786F570301BD76.mft (raw, json)
Hash identifier: 0k2oKoYSgawtc9VOu4V0x5ZOdiKpa0CVDN9CivFl3hI=
Subject key identifier: 97:16:DA:C2:2D:99:EC:A5:83:C4:09:52:03:DA:1C:24:93:D7:F3:37
Authority key identifier: 6F:45:04:1E:B7:92:9E:02:B8:67:68:C3:9A:78:6F:57:03:01:BD:76
Certificate issuer: /CN=6F45041EB7929E02B86768C39A786F570301BD76
Certificate serial: 2ED93EB107984FEB42E0FCFABE63AA640D67BD23
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 18:44:56 +0000
Manifest this update: Tue 28 Jul 2026 18:39:56 +0000
Manifest next update: Wed 29 Jul 2026 19:26:56 +0000
Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: MoKOK1axg8ykdgPvCQ12UuAuHp6wG4DqBfh3f87ints=)
2: 6F45041EB7929E02B86768C39A786F570301BD76.crl (hash: x7iHtK4Chg9HK9EvvROe5i/FJI3TRCSBodA/Xf93tKo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.crl
rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 09:55:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d9:3e:b1:07:98:4f:eb:42:e0:fc:fa:be:63:aa:64:0d:67:bd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F45041EB7929E02B86768C39A786F570301BD76
Validity
Not Before: Jul 28 18:39:56 2026 GMT
Not After : Jul 29 19:26:56 2026 GMT
Subject: CN=9716DAC22D99ECA583C4095203DA1C2493D7F337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:a0:65:26:18:27:79:3d:6e:4f:93:e4:a6:
b2:c8:d5:4a:b9:df:d5:b8:1c:17:0b:da:75:44:e2:
bc:8b:2e:f5:31:5d:6b:78:d4:f1:54:25:45:af:39:
ca:c1:36:9c:f6:b8:88:03:81:11:30:7a:f2:b4:1f:
f9:01:db:8a:e0:55:20:9e:02:28:88:7f:e5:2b:56:
45:c5:c1:7a:68:dd:2e:6e:05:5b:2e:ed:8a:73:d7:
7b:71:10:a4:f2:17:50:8e:91:78:79:93:ad:96:23:
87:ed:4c:96:05:79:0c:7c:4d:d5:d0:51:84:3e:ac:
5c:4f:e3:6e:cb:48:54:c1:c2:b6:b0:31:79:b2:6e:
f2:ca:d3:04:2b:08:41:1b:f8:ec:3c:10:13:ce:d3:
fd:d9:07:71:c9:af:06:3d:98:21:da:42:28:b1:43:
85:c0:c1:9e:e3:87:c0:00:df:38:7b:70:49:f5:58:
b9:34:56:ff:e3:14:49:f5:17:75:42:41:14:ec:a1:
41:4a:0a:64:16:cd:c3:e5:fa:2b:45:66:f6:92:69:
8c:51:87:84:33:0e:9c:92:ec:5c:3b:54:11:6b:d0:
e1:53:58:ba:73:02:8f:e3:62:e2:a5:4e:5d:61:08:
af:2b:e9:cd:c3:12:58:b0:6b:58:59:03:2a:0d:e5:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:16:DA:C2:2D:99:EC:A5:83:C4:09:52:03:DA:1C:24:93:D7:F3:37
X509v3 Authority Key Identifier:
keyid:6F:45:04:1E:B7:92:9E:02:B8:67:68:C3:9A:78:6F:57:03:01:BD:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0b:66:50:21:39:3f:d2:41:a6:9f:6c:3e:62:c9:58:02:52:
9c:c8:3e:a5:c9:43:fb:2b:cf:56:dc:37:2d:ef:7a:c2:c3:8b:
a1:e0:3b:f0:d9:0b:fc:4b:10:52:62:a0:4f:d5:d9:a4:76:02:
fe:23:d3:63:67:4b:00:e7:c8:c3:06:dc:97:7a:23:11:7f:ba:
95:a5:d3:7d:55:85:33:29:39:6b:63:04:b0:8b:c6:9e:57:ea:
12:1d:ca:f5:d1:59:d6:4c:5b:de:86:d2:38:53:0a:c7:58:57:
ce:2f:7b:98:8c:9d:35:fc:ec:bf:03:90:71:45:4b:3a:82:66:
12:71:99:c5:6e:9c:71:60:4b:e1:69:b4:64:8d:34:c0:fe:ff:
b5:30:3b:99:87:de:64:5d:78:13:20:e6:16:4f:0b:9f:30:30:
f2:2d:70:c1:92:53:a1:41:9d:fd:8d:4a:66:b5:74:e0:87:2e:
d3:d7:69:59:37:50:39:3d:97:8c:ce:d1:29:8c:ff:ee:12:72:
0c:30:f9:56:14:cc:af:5f:fa:90:bd:3f:48:4e:55:bb:8d:11:
29:55:13:f2:75:2a:27:03:99:84:cf:00:c6:64:b1:ff:e0:75:
28:c9:e0:da:47:23:56:f0:3b:ad:d2:29:d5:99:1c:b5:b7:24:
d0:82:a9:d6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULtk+sQeYT+tC4Pz6vmOqZA1nvSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY0NTA0MUVCNzkyOUUwMkI4Njc2OEMzOUE3ODZGNTcw
MzAxQkQ3NjAeFw0yNjA3MjgxODM5NTZaFw0yNjA3MjkxOTI2NTZaMDMxMTAvBgNV
BAMTKDk3MTZEQUMyMkQ5OUVDQTU4M0M0MDk1MjAzREExQzI0OTNEN0YzMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkl6BlJhgneT1uT5PkprLI1Uq5
39W4HBcL2nVE4ryLLvUxXWt41PFUJUWvOcrBNpz2uIgDgREwevK0H/kB24rgVSCe
AiiIf+UrVkXFwXpo3S5uBVsu7Ypz13txEKTyF1COkXh5k62WI4ftTJYFeQx8TdXQ
UYQ+rFxP427LSFTBwrawMXmybvLK0wQrCEEb+Ow8EBPO0/3ZB3HJrwY9mCHaQiix
Q4XAwZ7jh8AA3zh7cEn1WLk0Vv/jFEn1F3VCQRTsoUFKCmQWzcPl+itFZvaSaYxR
h4QzDpyS7Fw7VBFr0OFTWLpzAo/jYuKlTl1hCK8r6c3DEliwa1hZAyoN5fW9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlxbawi2Z7KWDxAlSA9ocJJPX8zcwHwYDVR0j
BBgwFoAUb0UEHreSngK4Z2jDmnhvVwMBvXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTBhODU5MGUtZTRkYy00NDE2LWE2ZmEtZmI3OGQ2ZGQxMmQ3LzAvNkY0NTA0MUVC
NzkyOUUwMkI4Njc2OEMzOUE3ODZGNTcwMzAxQkQ3Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82RjQ1MDQxRUI3OTI5RTAyQjg2NzY4QzM5QTc4NkY1NzAzMDFC
RDc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2
ZmEtZmI3OGQ2ZGQxMmQ3LzAvNkY0NTA0MUVCNzkyOUUwMkI4Njc2OEMzOUE3ODZG
NTcwMzAxQkQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFoLZlAhOT/SQaafbD5iyVgCUpzIPqXJQ/sr
z1bcNy3vesLDi6HgO/DZC/xLEFJioE/V2aR2Av4j02NnSwDnyMMG3Jd6IxF/upWl
031VhTMpOWtjBLCLxp5X6hIdyvXRWdZMW96G0jhTCsdYV84ve5iMnTX87L8DkHFF
SzqCZhJxmcVunHFgS+FptGSNNMD+/7UwO5mH3mRdeBMg5hZPC58wMPItcMGSU6FB
nf2NSma1dOCHLtPXaVk3UDk9l4zO0SmM/+4Scgww+VYUzK9f+pC9P0hOVbuNESlV
E/J1KicDmYTPAMZksf/gdSjJ4NpHI1bwO63SKdWZHLW3JNCCqdY=
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:26 2026 by rpki-client