
$ rpki-client -vvf rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft
File: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft (raw, json)
Hash identifier: SR7kwRpDkzSV/qWcp4l1snDS5CYCM+LLASbaz5oG76A=
Subject key identifier: 02:E5:04:74:D9:F1:42:0F:2F:FD:36:ED:07:34:30:6A:48:AF:81:A2
Authority key identifier: 6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9
Certificate issuer: /CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9
Certificate serial: 1C9F76CDC1134438EF39F1AF122C1887DCE881F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 12:37:16 +0000
Manifest this update: Tue 28 Jul 2026 12:32:16 +0000
Manifest next update: Wed 29 Jul 2026 16:15:16 +0000
Files and hashes: 1: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl (hash: xo6M4+IdkGL5R/LqxXLSKACDf3gQ9qu/5ufSXNvS2SU=)
2: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: OV4p4rnl3XvhRMGFlNaAAWATNpns5GqM8EL2+7mTgLw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl
rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:9f:76:cd:c1:13:44:38:ef:39:f1:af:12:2c:18:87:dc:e8:81:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9
Validity
Not Before: Jul 28 12:32:16 2026 GMT
Not After : Jul 29 16:15:16 2026 GMT
Subject: CN=02E50474D9F1420F2FFD36ED0734306A48AF81A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:30:39:ed:1c:57:75:ee:f6:d4:8a:e7:16:
76:30:29:18:a4:37:35:ff:3c:8f:d4:5b:91:2d:15:
37:3e:d6:53:8d:f5:84:5e:62:c8:a2:42:bd:56:c6:
8d:e7:a3:42:1d:07:f2:0a:99:32:4a:57:09:0f:03:
48:66:b3:18:76:a0:31:ac:f4:19:35:34:58:86:44:
46:5d:32:7b:a2:3e:7e:c9:00:8d:81:33:13:b0:7f:
7a:6f:57:46:f0:87:ff:8e:c9:60:dc:17:b1:b8:07:
41:8e:ee:7b:18:44:99:33:56:0c:57:ec:a5:5a:16:
80:f4:d9:f8:b8:20:18:32:38:4a:97:99:3e:32:5f:
5d:9d:27:32:1b:bb:ad:24:92:75:1e:7c:fc:6e:51:
e2:3a:ce:ed:57:23:53:43:4a:9d:80:d4:49:95:50:
c6:2c:d4:8e:23:23:11:36:a8:6a:19:e6:66:e7:61:
b2:cf:0a:90:85:0f:7b:f5:6c:65:99:69:ca:2c:c5:
75:45:e0:80:d9:ac:b1:fe:aa:fa:7a:5f:f6:a8:55:
9c:9b:bc:d9:b1:c2:de:cd:7e:48:d2:06:1e:db:d3:
19:39:72:e7:86:3a:e6:84:e7:08:af:6b:3e:cb:5f:
19:43:16:33:94:50:c9:80:f4:57:e7:15:06:ad:f5:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E5:04:74:D9:F1:42:0F:2F:FD:36:ED:07:34:30:6A:48:AF:81:A2
X509v3 Authority Key Identifier:
keyid:6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ef:21:1e:ba:29:4d:61:9a:20:c3:47:cb:47:aa:38:7f:24:
58:03:0e:a3:5d:61:bf:3b:55:7e:13:6b:3e:74:5e:96:b8:29:
e8:cc:2b:3e:6c:ec:15:76:74:91:a8:6d:b4:cf:c7:08:cd:45:
bc:e5:4d:d5:4b:10:c2:38:fb:26:a4:86:c8:cc:fa:a9:9e:2a:
84:76:f5:43:8d:f4:ef:f2:6f:f2:b9:82:1b:5c:42:ff:c3:c6:
d9:34:ee:af:a0:ae:81:87:23:49:8e:e7:0e:ad:18:a0:64:a1:
76:53:26:34:f1:90:86:41:7b:97:b7:09:87:94:30:48:2a:28:
51:52:64:4e:53:1f:0d:77:fa:4c:f4:0b:5a:07:f1:0e:cd:66:
cf:a4:65:84:b5:d4:fc:04:01:af:b2:c4:5a:64:49:f0:e6:88:
ca:4e:42:22:e5:ae:95:44:17:a9:1e:df:ac:89:a2:bb:9a:d7:
c5:5b:d6:06:c5:1c:96:40:a2:0a:f1:38:d5:97:71:9b:8a:0d:
c3:bb:14:df:b7:d5:18:fd:6e:5f:7f:33:b6:68:43:8d:64:50:
3a:2e:24:5e:ae:d6:99:d1:b2:4f:4a:45:37:fc:2f:27:00:08:
94:10:73:e9:ca:ec:ec:2d:32:12:05:2c:08:16:9c:88:b1:c6:
60:66:5e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:53:02 2026 by rpki-client