
$ rpki-client -vvf rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
File: 6F45041EB7929E02B86768C39A786F570301BD76.mft (raw, json)
Hash identifier: 434l/FQwYNzOzOQSWO6vWHbcdBlOBGSx9psZiu3/sII=
Subject key identifier: 72:5C:2B:E1:B3:72:F1:19:17:AB:F5:02:38:A0:05:64:B6:53:BA:BE
Authority key identifier: 6F:45:04:1E:B7:92:9E:02:B8:67:68:C3:9A:78:6F:57:03:01:BD:76
Certificate issuer: /CN=6F45041EB7929E02B86768C39A786F570301BD76
Certificate serial: 436F823F5A026792828B6F4518D31F520E2180E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 03:18:05 +0000
Manifest this update: Sat 13 Jun 2026 03:13:05 +0000
Manifest next update: Sun 14 Jun 2026 06:19:05 +0000
Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: MoKOK1axg8ykdgPvCQ12UuAuHp6wG4DqBfh3f87ints=)
2: 6F45041EB7929E02B86768C39A786F570301BD76.crl (hash: 7w2d9peof6n6u1pVYWN9nc1b6WxhzegZhVproyeRDdo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.crl
rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 06:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:6f:82:3f:5a:02:67:92:82:8b:6f:45:18:d3:1f:52:0e:21:80:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F45041EB7929E02B86768C39A786F570301BD76
Validity
Not Before: Jun 13 03:13:05 2026 GMT
Not After : Jun 14 06:19:05 2026 GMT
Subject: CN=725C2BE1B372F11917ABF50238A00564B653BABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:5d:d1:7d:cc:cd:70:43:d6:dc:2d:63:b8:
5a:d7:b4:c6:5c:84:4e:c5:f9:bc:0c:15:e1:6f:6b:
a9:8a:f5:f5:d4:80:d4:26:3d:99:27:47:0a:63:b3:
36:1c:05:12:73:72:c1:19:b3:01:bc:77:15:53:52:
12:eb:64:78:99:0c:d9:0a:f2:b9:80:38:a5:34:f9:
48:46:d8:48:8b:34:da:0b:55:43:a3:c3:bc:7b:cc:
fe:23:45:65:b4:b2:ae:af:d9:30:7f:9e:41:73:de:
90:2c:29:73:9a:6f:5b:b2:ca:c9:0a:e5:6f:39:23:
65:2e:4f:da:02:20:ae:a9:d8:13:fb:34:93:c9:5e:
7f:47:3a:02:ef:17:2f:99:b0:c7:f0:43:32:2e:7d:
ee:51:a9:c1:fe:ea:ef:f3:0b:b8:21:2b:65:46:0a:
df:6b:55:48:83:4b:e3:be:10:67:6b:e4:36:fd:cf:
a1:01:a3:26:9d:d3:7e:9d:02:b4:45:be:ef:08:82:
ae:0e:10:fa:53:78:1e:b2:ae:8a:e4:5e:ae:c1:64:
9e:5e:24:10:2d:70:f4:8a:cc:1d:89:4f:10:0b:b6:
38:e4:a8:aa:ca:82:b3:2f:33:60:44:10:60:1b:bf:
f0:61:5e:e9:3b:25:4c:5d:49:55:4e:34:28:4c:1f:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5C:2B:E1:B3:72:F1:19:17:AB:F5:02:38:A0:05:64:B6:53:BA:BE
X509v3 Authority Key Identifier:
keyid:6F:45:04:1E:B7:92:9E:02:B8:67:68:C3:9A:78:6F:57:03:01:BD:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F45041EB7929E02B86768C39A786F570301BD76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/6F45041EB7929E02B86768C39A786F570301BD76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4d:65:13:e1:e3:ee:b3:f6:9c:34:06:2d:d1:fe:0d:16:74:
5f:96:e8:2f:db:30:61:23:3c:bd:ec:bd:a8:1e:10:2c:bc:62:
bd:5a:3d:75:22:2b:c3:de:27:c0:7e:f3:85:c3:e6:af:18:2a:
7a:92:77:fa:c1:a9:5d:25:51:e8:70:0d:0b:1d:6f:97:05:38:
14:ef:fb:aa:15:ea:05:30:93:59:5b:f5:28:41:27:be:86:b6:
6d:f8:7d:1e:6f:c0:04:e4:28:2b:06:d0:05:8a:f4:35:92:fd:
5d:25:ef:59:b6:78:f8:07:5f:36:09:7d:fd:19:4d:d8:1a:0d:
7a:89:55:8d:2d:fd:e1:01:6f:59:95:37:66:c1:b2:b5:fe:93:
07:19:95:10:68:79:f2:80:e5:04:92:0f:21:c7:68:44:9c:8e:
1d:e3:4a:45:66:3a:dd:42:ef:24:a2:f7:48:27:22:e7:ef:e5:
07:e4:6c:79:fe:e4:58:ad:a2:b5:f8:09:6c:f5:a9:22:65:d5:
b5:4e:4e:88:a8:b5:42:94:be:7d:02:6b:df:f2:ad:f9:70:79:
1a:74:b2:9d:fa:9a:3c:03:0e:1f:f6:fb:c2:00:16:af:10:07:
04:87:c9:19:85:be:18:8b:c9:62:2c:d3:50:cd:57:a2:0c:53:
3b:78:6a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:32 2026 by rpki-client