
$ rpki-client -vvf rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
File: 6D171A25D57FF823724FB6208343D200F64CBBB9.mft (raw, json)
Hash identifier: ZPosbum54xcavp3NBdYogh+BgCh+8YJCGWIBfU2AntM=
Subject key identifier: 2B:D4:4D:CA:CF:91:3D:E9:9F:81:5C:94:5F:C7:1F:B3:12:CA:F5:ED
Authority key identifier: 6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9
Certificate issuer: /CN=6D171A25D57FF823724FB6208343D200F64CBBB9
Certificate serial: 657C2252DF9684F4BFDB5FAFCD84F3CD3075725F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 14:54:54 +0000
Manifest this update: Tue 28 Jul 2026 14:49:54 +0000
Manifest next update: Wed 29 Jul 2026 16:39:54 +0000
Files and hashes: 1: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: opRYiyX8Gzxcov3p6XrBWNKwC4F/IpDzv8/YLsBUDfE=)
2: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: 2UjxxTGC1nNXBGbq1J0Vw32Q3bb9jyytfhNHGdS8EJk=)
3: 6D171A25D57FF823724FB6208343D200F64CBBB9.crl (hash: KtmQvOLc1YFu21Rw63jW7RwAXG9zgc+UJUiaLOUJI94=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl
rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:7c:22:52:df:96:84:f4:bf:db:5f:af:cd:84:f3:cd:30:75:72:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D171A25D57FF823724FB6208343D200F64CBBB9
Validity
Not Before: Jul 28 14:49:54 2026 GMT
Not After : Jul 29 16:39:54 2026 GMT
Subject: CN=2BD44DCACF913DE99F815C945FC71FB312CAF5ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:47:26:81:c3:d0:90:46:b0:24:4b:8f:01:
d8:17:20:37:60:97:22:da:52:0e:b4:d4:5d:77:81:
4d:fb:b0:e2:b1:68:26:3a:28:fb:b1:8a:4a:17:1c:
e5:40:3c:a3:26:b2:2e:eb:45:1c:9d:de:50:40:a8:
a4:84:50:2a:34:ae:0f:d8:44:0b:44:84:c4:7a:0c:
ac:ac:7a:2f:05:2a:1a:40:5d:0f:28:53:ae:43:85:
8a:6b:7b:cf:cd:db:f7:f1:71:ca:a2:fa:27:1c:07:
79:54:ee:29:9a:3e:8d:e4:3b:92:59:62:ca:d4:2a:
46:bb:9c:b9:25:10:ff:6f:ab:34:cd:b5:b2:31:01:
d5:10:b4:2e:aa:64:85:79:c8:e1:2e:aa:55:8a:d2:
07:67:94:1f:f8:e7:26:be:a8:7a:5f:75:4c:98:25:
43:9e:7b:ff:af:ed:a4:89:be:02:9f:ec:b2:b1:e1:
a3:e3:e9:e4:a6:ef:da:e7:79:43:ae:50:c8:a9:d1:
df:88:2b:f2:e4:a2:14:8a:21:2b:0d:6b:f2:3c:c5:
37:7c:fd:da:70:46:ee:7f:fb:9b:89:24:0b:35:05:
a9:e9:a6:aa:1a:76:ac:28:58:16:1d:42:01:8c:7e:
96:f7:fa:fe:df:5c:f3:8d:6e:be:fc:1e:47:06:97:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D4:4D:CA:CF:91:3D:E9:9F:81:5C:94:5F:C7:1F:B3:12:CA:F5:ED
X509v3 Authority Key Identifier:
keyid:6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:55:f0:6c:53:a9:a7:42:46:40:28:15:f9:5d:ed:53:be:4f:
4b:9e:d4:01:c6:40:2c:dd:ad:b7:20:a8:1f:a8:1e:e4:d6:9f:
44:4d:07:bb:58:e8:fe:24:25:bd:28:cb:fc:f7:6a:83:36:f4:
8e:94:30:01:76:e7:a2:38:eb:2a:40:39:0b:41:9f:21:ba:8c:
c5:16:87:8a:89:fc:b1:ab:61:4a:00:6b:cb:d6:63:87:c2:f5:
f6:b7:fe:ab:a9:f2:a4:e0:16:64:c4:78:e8:f4:1a:d2:7d:78:
07:25:48:fe:c2:2f:bc:20:6b:00:7d:1a:75:ee:be:e7:e6:3b:
6d:30:92:d9:67:89:73:68:45:25:01:4a:6e:a6:eb:9e:a5:26:
c6:e9:94:11:3c:ef:40:62:e3:30:ca:ae:25:9c:b5:73:ef:82:
c5:c6:f3:0c:b6:e0:18:41:ff:97:4e:8c:72:1e:08:65:5c:db:
49:88:34:13:f0:bc:31:47:ca:f0:ee:c9:51:3c:fe:6a:fd:76:
14:b2:06:08:b3:ca:01:9b:f9:76:c8:fe:f0:e0:b9:41:20:f2:
af:c0:9d:5e:d8:23:ee:df:8f:21:3f:d6:b1:61:8b:4e:12:7f:
15:7e:4f:b5:27:2b:2e:a3:e9:c1:8d:f0:9f:27:1c:7a:6f:52:
54:d5:b4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:06 2026 by rpki-client