
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
File: 6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft (raw, json)
Hash identifier: 707Klc6iQRNcXiSwSH/Nl+iEAJDiykpyntc5GrHY6wg=
Subject key identifier: E7:AD:6F:F6:44:23:65:83:2F:A0:69:B3:D3:7A:F3:0E:17:21:D0:34
Authority key identifier: 6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24
Certificate issuer: /CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824
Certificate serial: 28017E18273EF55C33BE43DED814EB51502A538C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
Manifest number: C1
Signing time: Tue 22 Sep 2026 01:58:54 +0000
Manifest this update: Tue 22 Sep 2026 01:53:54 +0000
Manifest next update: Wed 23 Sep 2026 02:35:54 +0000
Files and hashes: 1: 3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (hash: /UiS0/YqAJP6vBXmUjstv/RqhsN7l6a5S8YjTvqIQ1U=)
2: 6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl (hash: YlnEBle8lLS4HKtM4CEpuvce6qItK7fTCmVCOHtd01Q=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl
rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 02:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:01:7e:18:27:3e:f5:5c:33:be:43:de:d8:14:eb:51:50:2a:53:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824
Validity
Not Before: Sep 22 01:53:54 2026 GMT
Not After : Sep 23 02:35:54 2026 GMT
Subject: CN=E7AD6FF6442365832FA069B3D37AF30E1721D034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:5a:d3:d2:23:cd:1b:cf:b5:af:cc:06:10:
61:a2:85:39:df:c5:b7:7f:b2:cb:a2:9d:ff:41:b0:
6c:ca:f3:e3:c5:6d:8d:2a:52:30:74:a2:38:0d:df:
7d:41:d8:ed:1b:bd:8a:b5:cb:69:f8:e5:16:e6:24:
64:c3:e4:31:c8:a4:19:17:25:58:27:e2:2c:6e:80:
ea:14:67:36:6a:ab:cc:60:29:8f:55:e1:08:c0:84:
53:43:63:05:60:ca:28:da:94:66:19:82:b4:d8:04:
7b:63:f4:e2:8c:22:a4:ab:e6:06:a2:74:52:10:43:
6c:c7:fe:0f:0d:9b:39:a1:33:dd:6c:b7:b3:51:90:
f5:26:f6:96:8e:b9:24:1f:90:a5:51:2d:e3:9a:f3:
61:44:15:3b:b3:fd:50:c5:c2:2c:c0:b5:0b:d1:38:
49:50:a8:bf:26:a0:b8:fb:e6:16:fc:fc:66:21:7a:
93:69:df:5d:1a:ac:0a:f9:cb:07:43:42:24:a0:1f:
be:c4:d7:b2:c2:72:28:71:a0:66:01:94:e0:da:83:
04:60:63:8b:df:b3:7c:74:ad:47:d2:2f:d4:0e:30:
3d:35:9f:53:c9:5b:ba:27:d1:27:bc:14:96:2a:10:
f7:f5:e4:6c:f3:e9:7a:05:d1:c2:0c:29:c1:aa:99:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:6F:F6:44:23:65:83:2F:A0:69:B3:D3:7A:F3:0E:17:21:D0:34
X509v3 Authority Key Identifier:
keyid:6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cd:55:e2:37:62:3d:23:9e:0b:0c:2f:23:99:6c:9d:68:88:
38:ee:12:a5:b6:79:da:71:c6:ce:1b:3d:ff:e8:89:3f:9f:6b:
77:74:d2:be:6d:43:78:a9:ad:d6:05:75:87:30:98:76:9c:72:
ae:2e:3d:07:b3:9b:60:9d:78:63:56:90:e8:48:8f:b0:f5:f7:
68:6e:80:6d:c3:4a:9c:7b:39:38:95:4b:14:d5:00:8d:be:11:
94:46:60:03:c0:76:18:41:49:dd:31:3d:ea:9d:a5:8d:73:86:
43:86:60:e2:30:8a:23:f4:ee:52:ae:f2:eb:9d:b8:ab:c8:a2:
78:9c:48:50:ce:da:ab:a6:c0:27:17:72:be:2a:7e:71:ed:c7:
88:95:db:25:bb:ca:aa:8f:22:99:df:1a:32:d9:04:4e:8a:c6:
c6:d5:08:f8:1b:b8:6a:8b:3d:01:46:a2:2f:f0:e3:bf:58:b8:
21:13:91:04:61:bb:db:db:c9:9b:2a:b0:fd:93:ba:47:db:63:
ae:46:51:fb:ac:09:a9:a3:10:2f:50:d5:fa:53:e8:4d:19:ac:
fa:27:9e:ce:53:7d:cb:d7:30:d4:aa:f1:f4:e4:25:96:1c:f4:
53:94:5a:cb:0a:a6:3b:7d:db:23:93:75:8c:98:f8:f1:3f:bf:
95:2a:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:37:52 2026 by rpki-client