
$ rpki-client -vvf rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft
File: 6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft (raw, json)
Hash identifier: 5Z608ISRkGsm/Ia21n4ASefbQDnrIyBCCoxORRuplxA=
Subject key identifier: A6:89:ED:D8:C4:A4:CA:82:C7:24:E5:16:69:A3:D8:E1:AA:98:C8:60
Authority key identifier: 6D:4E:1B:3F:92:4B:DE:79:ED:AF:C6:28:17:3F:AD:26:DE:B7:2C:E1
Certificate issuer: /CN=6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1
Certificate serial: 2CE58F71174A74EE3B201D2618B4DEDA4F9F6319
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 19:27:36 +0000
Manifest this update: Tue 16 Jun 2026 19:22:36 +0000
Manifest next update: Wed 17 Jun 2026 23:17:36 +0000
Files and hashes: 1: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: 1yZQJfUMIdupzXA1ljHpU5mWQfYGWg8xMYH2Yx/jRFc=)
2: 6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl (hash: 0Zlju72CVLYOBxdG/98nWUKtTcgKh7GBmz3+33evbhU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl
rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 23:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e5:8f:71:17:4a:74:ee:3b:20:1d:26:18:b4:de:da:4f:9f:63:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1
Validity
Not Before: Jun 16 19:22:36 2026 GMT
Not After : Jun 17 23:17:36 2026 GMT
Subject: CN=A689EDD8C4A4CA82C724E51669A3D8E1AA98C860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:1b:b1:80:10:7c:0a:1e:6e:b8:d9:2d:72:
47:b7:44:5c:69:0b:1a:d6:22:d7:4c:a0:69:1f:d3:
10:33:bd:b3:42:8f:7a:97:a3:8d:a4:ee:bc:fe:c8:
f2:9c:09:4a:b4:87:7e:27:77:e6:4a:c5:af:f3:bb:
30:0b:b9:fd:13:75:9c:32:dd:24:96:45:69:6a:2f:
39:10:96:bf:8d:10:4f:73:54:07:99:07:61:bd:25:
ed:8b:43:ae:c5:9b:41:40:d5:2d:1d:49:af:3f:b5:
b8:9e:51:38:49:10:fc:54:3e:e7:e8:c1:b7:b7:0c:
e0:73:4c:86:42:26:8b:c9:c9:55:dc:2d:6e:5f:2b:
66:b2:9a:71:b7:2f:11:1d:16:52:a3:20:9c:b8:9f:
d1:80:f3:e4:81:84:a8:e2:98:eb:2b:c7:ab:f8:e7:
6f:56:33:88:51:cf:b6:57:7e:53:5d:da:0c:78:b3:
2f:c8:fd:fe:a6:93:69:f3:dd:87:75:8b:c1:89:a0:
f0:6e:2d:5c:54:d3:e0:f7:2a:b7:69:14:73:c8:81:
d3:ea:59:ce:a6:b7:40:eb:ad:72:55:df:08:82:9c:
88:2f:5a:d1:6d:b8:21:c7:79:d4:16:df:a7:ba:e6:
42:07:c4:bc:1a:0d:91:7d:6a:07:01:36:4a:28:a0:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:89:ED:D8:C4:A4:CA:82:C7:24:E5:16:69:A3:D8:E1:AA:98:C8:60
X509v3 Authority Key Identifier:
keyid:6D:4E:1B:3F:92:4B:DE:79:ED:AF:C6:28:17:3F:AD:26:DE:B7:2C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/6D4E1B3F924BDE79EDAFC628173FAD26DEB72CE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:56:b8:e1:00:f4:1a:08:29:21:58:dc:f2:f5:25:4a:93:b0:
a2:17:bf:04:7c:8f:46:68:19:8b:48:cb:72:2d:06:c1:ee:d6:
4d:4c:67:54:44:3c:68:0b:33:e1:b5:b8:ad:58:ce:c3:43:61:
97:b0:27:59:80:bd:97:ad:d6:99:4b:6e:54:78:cd:75:cf:ef:
91:91:23:a0:19:29:48:12:af:c0:be:98:fa:34:32:35:cb:ed:
a7:f7:c6:ed:09:73:c3:14:ce:79:72:dd:00:c4:5e:55:a5:bb:
b4:a8:55:0b:d2:d6:09:1a:e5:5b:ec:d5:73:16:0d:b1:77:59:
32:a1:17:98:49:b1:bd:6f:e6:c4:08:d0:46:53:0c:35:f5:c4:
92:5d:2f:6e:40:2e:e3:3e:ca:2d:5b:c8:3e:d7:80:ae:67:f7:
03:ed:8e:08:32:44:6e:57:da:5f:73:51:4f:0c:22:e4:aa:a1:
91:8c:6d:cc:c8:2b:96:3b:d4:63:13:ca:0b:40:44:c1:08:7c:
7f:fc:93:d7:01:f6:6e:c7:f5:21:a0:a3:4c:ce:39:46:55:e0:
00:92:f6:ec:25:04:f0:c3:b3:5e:6b:bc:0f:4a:44:03:7b:18:
4e:1b:af:e8:a5:b4:17:84:2d:97:bc:95:0a:bc:db:5b:de:02:
54:a9:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:55 2026 by rpki-client