
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
File: A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft (raw, json)
Hash identifier: h9DuXAt2bobkJmqUZYqfwXXE8rGfOl52wEJFcriz2rE=
Subject key identifier: DC:B1:2D:06:86:70:C0:CD:26:51:F4:16:6E:D5:72:92:09:61:58:DD
Authority key identifier: A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4
Certificate issuer: /CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
Certificate serial: 67B533CE80A69FAD5A252F70533C2EB94BC6B26D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 10:39:43 +0000
Manifest this update: Tue 22 Sep 2026 10:34:43 +0000
Manifest next update: Wed 23 Sep 2026 11:21:43 +0000
Files and hashes: 1: A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl (hash: m/ZsUNcYOqQL602i+2+FhlLKvX5Ef/XyOfe/3A8SFPc=)
2: 3130332e3137382e322e302f32332d3234203d3e20313431303737.roa (hash: s+sTY2aYtG/SFja7fxXnQbGi+haO9AYfperyGy23oaM=)
3: 3130332e3137382e322e302f32332d3233203d3e20313431303737.roa (hash: xGJx+r1ntKLFX7/fs8KLZEY5oObqr/E40CahT7/MaA0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl
rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 11:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b5:33:ce:80:a6:9f:ad:5a:25:2f:70:53:3c:2e:b9:4b:c6:b2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6E683651BBB97D321A42D48AA16ED775E81B1C4
Validity
Not Before: Sep 22 10:34:43 2026 GMT
Not After : Sep 23 11:21:43 2026 GMT
Subject: CN=DCB12D068670C0CD2651F4166ED57292096158DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:f2:37:59:b8:52:2a:e5:ff:62:e3:12:00:
5e:bb:bc:16:dc:84:2d:f1:10:e0:5d:e4:20:1b:1f:
60:17:53:9e:f7:7e:b8:22:f3:df:e7:a2:d0:2d:ad:
69:ca:fc:bd:59:1d:bf:61:7b:06:be:c7:27:ab:a5:
25:fe:30:07:3e:be:48:5c:06:e9:76:e8:cc:28:c1:
41:29:ce:4a:97:f0:2f:f2:03:5d:8e:3b:ac:9e:bd:
f3:e8:c1:09:c4:ff:7e:a4:65:2a:04:a5:af:5b:d4:
67:99:c8:6a:5d:95:09:c5:79:e4:f7:15:dd:a5:7c:
23:77:48:8d:b5:a1:ef:a6:6c:67:37:67:1e:54:a7:
7a:55:ed:11:c2:70:5a:1c:34:63:45:cf:6d:25:1a:
04:31:e5:6f:a1:dc:c7:fb:99:36:c2:3a:aa:a3:ed:
3b:7f:d3:17:4f:97:cc:f9:a9:62:45:ad:8e:98:77:
71:00:15:43:2c:35:6b:30:0a:54:10:4e:4f:2a:01:
23:2a:7b:c5:ac:73:f4:6f:b9:33:ae:97:5b:ad:b8:
fd:b9:e9:9a:f2:61:f6:93:3b:78:11:70:04:f1:59:
48:56:83:24:7b:6c:eb:df:1c:b6:a5:11:2c:7f:9b:
7d:93:3e:9c:60:13:8a:ee:db:f4:e9:12:4b:0e:97:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B1:2D:06:86:70:C0:CD:26:51:F4:16:6E:D5:72:92:09:61:58:DD
X509v3 Authority Key Identifier:
keyid:A6:E6:83:65:1B:BB:97:D3:21:A4:2D:48:AA:16:ED:77:5E:81:B1:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6E683651BBB97D321A42D48AA16ED775E81B1C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/A6E683651BBB97D321A42D48AA16ED775E81B1C4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fe:bf:25:4b:c0:6b:dc:37:85:62:c2:30:25:fc:3c:ca:fc:
c9:29:45:e6:28:80:dc:58:4d:67:a2:21:6b:e9:3e:dd:f9:63:
ac:7a:7f:48:ab:fd:0f:62:ce:02:d4:e0:88:3b:51:7f:40:63:
00:52:c7:a7:34:aa:46:cd:7f:33:0b:62:da:ce:f8:6d:1d:9b:
43:0f:31:46:5b:e9:3b:05:20:23:16:10:1e:65:51:61:16:77:
c6:70:a9:da:d9:cf:ad:5b:98:be:b5:f8:39:4e:6e:ef:7a:26:
bf:83:a5:f3:00:c1:18:9f:24:28:90:4e:bb:99:27:1d:88:1f:
37:76:79:2f:e4:b0:63:79:a9:86:09:a3:17:73:2e:5c:fd:68:
fe:a2:a2:2e:e1:96:2b:fa:69:e3:57:13:70:bc:c8:ab:46:96:
34:74:42:70:8e:1e:ba:e0:f2:ca:19:a5:67:51:fe:6e:77:a7:
68:3a:b5:06:72:eb:5b:0f:be:77:02:e5:e3:05:a7:20:16:49:
22:ca:90:99:22:64:33:c3:01:46:5a:54:39:a1:b0:a6:30:22:
f7:e7:b1:b6:60:42:da:10:57:32:a7:38:e8:1a:dc:d0:c2:f5:
0c:7d:ca:72:6e:72:49:c6:bd:dd:12:3a:0f:b6:e5:b8:8c:e5:
f8:77:5b:76
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ7UzzoCmn61aJS9wUzwuuUvGsm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZFNjgzNjUxQkJCOTdEMzIxQTQyRDQ4QUExNkVENzc1
RTgxQjFDNDAeFw0yNjA5MjIxMDM0NDNaFw0yNjA5MjMxMTIxNDNaMDMxMTAvBgNV
BAMTKERDQjEyRDA2ODY3MEMwQ0QyNjUxRjQxNjZFRDU3MjkyMDk2MTU4REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFMvI3WbhSKuX/YuMSAF67vBbc
hC3xEOBd5CAbH2AXU573frgi89/notAtrWnK/L1ZHb9hewa+xyerpSX+MAc+vkhc
Bul26MwowUEpzkqX8C/yA12OO6yevfPowQnE/36kZSoEpa9b1GeZyGpdlQnFeeT3
Fd2lfCN3SI21oe+mbGc3Zx5Up3pV7RHCcFocNGNFz20lGgQx5W+h3Mf7mTbCOqqj
7Tt/0xdPl8z5qWJFrY6Yd3EAFUMsNWswClQQTk8qASMqe8Wsc/RvuTOul1utuP25
6ZryYfaTO3gRcATxWUhWgyR7bOvfHLalESx/m32TPpxgE4ru2/TpEksOlwkDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3LEtBoZwwM0mUfQWbtVykglhWN0wHwYDVR0j
BBgwFoAUpuaDZRu7l9MhpC1Iqhbtd16BscQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2JmYWU1NjUtNDExNC00NDM0LTk0MGQtN2MwMTkyOGM4YWIxLzAvQTZFNjgzNjUx
QkJCOTdEMzIxQTQyRDQ4QUExNkVENzc1RTgxQjFDNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNkU2ODM2NTFCQkI5N0QzMjFBNDJENDhBQTE2RUQ3NzVFODFC
MUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2JmYWU1NjUtNDExNC00NDM0LTk0
MGQtN2MwMTkyOGM4YWIxLzAvQTZFNjgzNjUxQkJCOTdEMzIxQTQyRDQ4QUExNkVE
Nzc1RTgxQjFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIf+vyVLwGvcN4ViwjAl/DzK/MkpReYogNxY
TWeiIWvpPt35Y6x6f0ir/Q9izgLU4Ig7UX9AYwBSx6c0qkbNfzMLYtrO+G0dm0MP
MUZb6TsFICMWEB5lUWEWd8ZwqdrZz61bmL61+DlObu96Jr+DpfMAwRifJCiQTruZ
Jx2IHzd2eS/ksGN5qYYJoxdzLlz9aP6ioi7hliv6aeNXE3C8yKtGljR0QnCOHrrg
8soZpWdR/m53p2g6tQZy61sPvncC5eMFpyAWSSLKkJkiZDPDAUZaVDmhsKYwIvfn
sbZgQtoQVzKnOOga3NDC9Qx9ynJucknGvd0SOg+25biM5fh3W3Y=
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:46:39 2026 by rpki-client