
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft
File: 6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft (raw, json)
Hash identifier: w2wzvmQYoX3uvLWtyKWTgg8dhWTXeMktinuxm1RDg8k=
Subject key identifier: 6F:23:43:48:CA:75:77:32:DC:61:A5:91:B6:80:1F:90:19:AD:C7:A0
Authority key identifier: 6B:9B:F1:E1:9F:7B:AA:8F:C4:BB:47:0A:E1:9E:C4:18:6F:6F:BB:BD
Certificate issuer: /CN=6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD
Certificate serial: 7EFCBF7A9334893707D5837ED6D8B13F29F028DC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft
Manifest number: BE
Signing time: Tue 22 Sep 2026 06:49:58 +0000
Manifest this update: Tue 22 Sep 2026 06:44:58 +0000
Manifest next update: Wed 23 Sep 2026 08:29:58 +0000
Files and hashes: 1: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (hash: Td28/CJkhSrDBpr5GMD46a5qt8s5yGrgfbAD8PtUEzk=)
2: 6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl (hash: 4tPdtuXAS07OZK9FQKHWZ7liUoQgSjO1PC53Z2zcTGE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl
rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 08:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:fc:bf:7a:93:34:89:37:07:d5:83:7e:d6:d8:b1:3f:29:f0:28:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD
Validity
Not Before: Sep 22 06:44:58 2026 GMT
Not After : Sep 23 08:29:58 2026 GMT
Subject: CN=6F234348CA757732DC61A591B6801F9019ADC7A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7a:fc:e2:61:dc:17:cb:3c:b4:be:f3:8c:3a:
c0:00:4c:4a:a5:d3:a8:09:7d:3c:4b:31:9c:a0:30:
38:8a:48:f5:1f:f3:d2:1c:33:cb:93:53:1f:dd:49:
69:63:57:eb:70:e7:30:aa:30:6f:58:ed:0c:34:f3:
2a:29:bf:99:98:de:73:7e:87:99:0e:c2:20:9d:e0:
1c:32:9a:0e:69:f9:30:d5:fb:db:fc:a8:52:bb:e0:
1e:d0:45:30:a1:04:07:46:28:22:5a:7d:f0:5d:09:
28:ec:ba:25:73:32:f8:50:d0:00:f2:e3:35:89:f3:
66:5b:e1:3f:34:43:f3:19:94:48:42:06:d1:9c:d3:
a4:59:8b:66:af:77:b3:7d:8d:2f:67:41:0a:9a:ba:
ea:24:08:36:f9:69:04:7d:15:5c:b6:0b:19:0a:ae:
d3:71:76:92:bb:1b:3b:94:75:b7:b7:33:cb:22:48:
23:08:9b:a5:90:c9:2d:3c:36:18:fa:7c:f0:5b:fa:
ec:75:e6:a6:b8:fd:b0:a9:b5:c1:a1:da:b7:74:92:
ea:c4:86:23:6b:5e:ef:3c:6e:5e:ff:1e:af:f4:fc:
7f:2b:78:1e:f9:71:ad:0e:fa:9c:29:8f:e3:27:e4:
16:40:ae:a9:71:dc:97:90:3c:28:b2:27:3d:cb:d3:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:23:43:48:CA:75:77:32:DC:61:A5:91:B6:80:1F:90:19:AD:C7:A0
X509v3 Authority Key Identifier:
keyid:6B:9B:F1:E1:9F:7B:AA:8F:C4:BB:47:0A:E1:9E:C4:18:6F:6F:BB:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:db:23:1b:89:88:7c:26:10:8b:52:b6:99:05:11:52:ae:70:
53:5e:72:57:05:66:9d:97:10:1f:11:e0:dc:e7:b6:d1:6c:0a:
d4:a6:64:6a:f6:87:c1:d1:22:f5:39:7e:cc:d0:8c:84:58:d1:
98:3f:39:bb:e9:93:a9:da:43:5e:ec:3c:b9:df:f4:79:67:35:
85:2b:81:7a:63:58:cf:70:d3:d8:07:a4:cd:72:ec:a5:27:e8:
cf:2a:ca:ad:d9:12:ae:28:5e:33:74:f3:af:82:01:46:21:58:
06:9e:ca:e1:91:c1:e9:b7:69:bf:f0:e0:3c:9e:32:1f:aa:5c:
3a:fa:49:e6:f3:8c:dc:92:e9:a8:81:b1:6f:28:ab:36:a1:03:
98:cc:8b:2d:f1:79:b8:4d:9c:1f:93:87:20:84:20:ed:dd:55:
6f:94:22:5f:3d:b7:25:31:5c:40:83:7a:9f:45:80:45:e8:6a:
29:c8:10:77:0e:cc:e7:8d:02:98:05:f5:19:d6:7c:79:c1:31:
62:78:11:25:8a:a7:3c:c3:66:5d:9a:9f:bb:5f:f7:f8:90:f4:
f6:ef:15:a7:ab:7a:2b:85:47:34:16:25:4b:e3:dd:8e:8a:7b:
4f:ae:16:5d:e0:37:16:f3:ec:b9:9e:ee:1f:78:12:d1:ca:03:
44:fc:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:44:40 2026 by rpki-client