
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
File: 6D171A25D57FF823724FB6208343D200F64CBBB9.mft (raw, json)
Hash identifier: 3Jbn/bCWUBpoYQienDzUY+JHpFrC7P0rSonN+QRv1XI=
Subject key identifier: 62:E6:8B:C2:45:90:6B:7F:B4:C9:5E:36:F9:D2:C6:6E:19:53:B9:0B
Authority key identifier: 6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9
Certificate issuer: /CN=6D171A25D57FF823724FB6208343D200F64CBBB9
Certificate serial: 319FA3B192658BAE08B14DCC362AD62C16B57D8C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 15:09:51 +0000
Manifest this update: Wed 23 Sep 2026 15:04:51 +0000
Manifest next update: Thu 24 Sep 2026 15:28:51 +0000
Files and hashes: 1: 3136302e31392e31362e302f32342d3234203d3e20313532303733.roa (hash: opRYiyX8Gzxcov3p6XrBWNKwC4F/IpDzv8/YLsBUDfE=)
2: 6D171A25D57FF823724FB6208343D200F64CBBB9.crl (hash: hqcUeujdj2b9F+TF2ijaGnc1aQgnoq9dBrk3IvjbTeY=)
3: 3136302e31392e31372e302f32342d3234203d3e20313532303733.roa (hash: 2UjxxTGC1nNXBGbq1J0Vw32Q3bb9jyytfhNHGdS8EJk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl
rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 15:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9f:a3:b1:92:65:8b:ae:08:b1:4d:cc:36:2a:d6:2c:16:b5:7d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D171A25D57FF823724FB6208343D200F64CBBB9
Validity
Not Before: Sep 23 15:04:51 2026 GMT
Not After : Sep 24 15:28:51 2026 GMT
Subject: CN=62E68BC245906B7FB4C95E36F9D2C66E1953B90B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:a2:83:67:81:cc:6b:96:88:1f:3e:4a:21:
4f:55:c0:6d:a4:4b:3f:dd:50:3e:7f:6a:43:51:2d:
f4:65:a2:cc:66:ba:f9:88:56:7c:ea:a6:7f:ab:4f:
e3:2e:ac:90:bb:34:b2:29:51:dd:55:42:77:34:e6:
79:31:30:da:71:ee:4f:2a:1c:88:0a:07:8a:b1:85:
c6:0e:2c:8e:b6:b1:25:19:2e:4e:fa:71:08:40:8f:
c6:48:8f:3a:57:c9:bd:92:3f:77:b8:92:f6:38:f0:
53:4d:11:34:d0:f8:ac:f4:06:f3:25:39:94:0b:da:
d7:37:e2:6b:fe:0a:94:df:4e:a4:4b:10:d5:ed:14:
77:fa:1b:a5:0b:6c:da:28:cc:9a:d9:84:c5:70:86:
ed:92:fa:b5:b1:97:3f:99:5a:29:1f:b7:02:dc:07:
84:2a:39:39:2e:a5:b9:a5:65:b4:ae:5e:0e:d9:28:
1c:03:ed:e4:52:91:a6:b1:de:1e:22:62:77:dc:48:
2c:1d:dd:c7:2c:d3:8d:41:9d:c7:54:47:8d:3a:09:
a4:7b:f2:89:17:c1:14:d4:46:1b:8b:f2:bf:94:47:
3c:8f:d5:b9:f1:1c:d2:46:f0:ce:ab:aa:be:2a:ac:
d5:66:f7:58:2a:e4:61:a7:2b:b9:f4:17:46:5e:3e:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E6:8B:C2:45:90:6B:7F:B4:C9:5E:36:F9:D2:C6:6E:19:53:B9:0B
X509v3 Authority Key Identifier:
keyid:6D:17:1A:25:D5:7F:F8:23:72:4F:B6:20:83:43:D2:00:F6:4C:BB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6D171A25D57FF823724FB6208343D200F64CBBB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71403409-bf04-42e9-9567-b06ec823d901/0/6D171A25D57FF823724FB6208343D200F64CBBB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d8:b3:6f:7e:a6:cc:bc:f9:41:00:7b:8c:02:bf:b3:27:56:
73:8a:28:b2:7e:1d:fb:66:c0:af:32:59:ae:af:ab:84:6b:48:
ac:b7:95:17:bb:ac:15:68:c7:d9:2a:cf:31:0e:c1:05:9f:ff:
7a:1c:c6:13:27:1f:f7:62:2d:60:c8:eb:67:16:e8:7e:0a:e5:
90:03:81:4e:78:c2:f5:d0:d9:26:c4:1c:11:88:25:89:78:ea:
51:d6:54:e6:63:aa:ca:02:87:21:32:de:52:c9:a0:7d:ee:8d:
3b:2c:c9:55:de:75:d0:16:12:60:67:87:a4:cd:6c:55:e8:92:
d5:91:c9:81:5f:1c:8d:5d:5c:50:e5:0b:05:1c:1e:7a:39:16:
9d:1f:08:16:6a:de:71:d9:5e:70:62:2e:2c:6e:b1:aa:ce:b3:
ff:59:82:04:6a:14:55:72:dd:3a:61:ce:d9:66:83:76:70:83:
e9:83:91:e0:62:aa:e2:df:b6:08:f0:0a:b7:bf:98:0c:d0:16:
5f:0e:49:7b:e3:c7:9c:df:97:c2:1a:37:d6:25:97:f1:8c:d9:
2c:8e:ee:56:5f:a7:12:a6:8a:81:b5:47:20:27:82:a0:49:a2:
7f:f7:2d:1a:54:7e:f5:f0:f8:1b:4d:37:4d:48:eb:44:45:06:
5e:d0:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:34:54 2026 by rpki-client