
$ rpki-client -vvf rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft
File: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft (raw, json)
Hash identifier: 6fITsszSEq5kk8Pzf20WMfoFHBxa+jtYLmoCtlZy3PM=
Subject key identifier: 56:59:86:8E:58:31:EB:92:DA:62:22:DC:6E:D0:49:6E:37:21:7C:6F
Authority key identifier: 6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9
Certificate issuer: /CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9
Certificate serial: 193C570A66737BFAD77AC5FF83AA32250F25FB52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 06:37:03 +0000
Manifest this update: Sat 13 Jun 2026 06:32:03 +0000
Manifest next update: Sun 14 Jun 2026 08:38:03 +0000
Files and hashes: 1: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (hash: OV4p4rnl3XvhRMGFlNaAAWATNpns5GqM8EL2+7mTgLw=)
2: 6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl (hash: uiLxpoMda9o7vXzlaE1AW4T6pngvynXKpTIjV5aA+No=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl
rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 08:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3c:57:0a:66:73:7b:fa:d7:7a:c5:ff:83:aa:32:25:0f:25:fb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9
Validity
Not Before: Jun 13 06:32:03 2026 GMT
Not After : Jun 14 08:38:03 2026 GMT
Subject: CN=5659868E5831EB92DA6222DC6ED0496E37217C6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:e7:4e:fa:aa:b4:59:0f:f7:09:cc:26:31:
56:f2:47:f2:fd:9d:32:ce:db:f4:fa:11:da:2d:b7:
c3:38:c9:d9:12:65:05:cf:32:6d:ae:f9:19:20:9a:
97:11:04:98:e7:b8:04:ca:31:51:bd:2c:5c:12:f5:
b0:a5:2f:fe:b6:9a:28:ce:db:41:2a:93:a4:e5:1e:
ea:7d:da:66:c8:e4:34:94:90:db:7c:17:da:86:f3:
97:eb:44:e2:f9:dd:15:b1:5b:ce:27:f3:79:37:6b:
fc:6e:0c:46:b3:73:7f:0d:9d:4b:49:7c:ae:b6:47:
77:b9:e4:fb:87:67:62:1f:65:a8:6a:c4:9e:01:4c:
9f:3a:18:3f:47:58:b3:79:97:27:d4:e1:ec:28:81:
d7:0b:52:84:51:48:90:05:5a:b7:84:d2:63:a2:a8:
2f:f9:66:95:2e:73:d1:d3:02:11:1c:0a:a7:e5:40:
81:77:d6:0b:dc:53:3f:ee:7e:c7:27:b9:57:9b:ed:
5e:12:2e:0e:16:17:54:0d:a0:54:b7:9e:54:1e:d4:
1b:85:af:9b:55:ce:88:8b:53:ad:a9:03:67:50:47:
72:a1:97:c7:36:6a:5c:ec:5a:b7:0a:e6:81:04:31:
e6:db:07:3d:08:43:7c:2d:63:89:d4:36:67:32:1c:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:86:8E:58:31:EB:92:DA:62:22:DC:6E:D0:49:6E:37:21:7C:6F
X509v3 Authority Key Identifier:
keyid:6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ef:92:f5:19:27:91:11:0e:ea:f3:94:fd:da:bc:1f:de:3b:
ef:b2:e8:eb:8d:7d:1d:fd:cb:be:a4:e9:6f:5b:a0:f2:24:67:
37:8e:b8:4b:ee:54:1f:02:59:a4:b8:7d:4c:30:ce:a1:12:f7:
12:42:b1:71:a2:e5:45:69:93:83:37:17:ab:60:e8:21:20:8f:
26:06:0d:97:1c:1d:bb:58:8e:8a:77:ef:05:dd:c8:ec:8e:25:
74:bc:3f:1e:a0:e1:8b:82:3b:10:25:32:2f:42:25:21:50:51:
d9:1f:ec:97:36:fc:ad:2e:cb:bd:32:52:9b:72:7d:bf:7e:12:
36:f2:11:00:05:c9:f5:5c:db:a8:cd:d6:52:01:f6:20:95:07:
c5:85:3c:c8:98:ce:7c:d6:41:54:46:e1:e6:d3:35:7a:e2:09:
3b:64:70:cc:ec:81:c5:e6:0d:3d:53:90:ac:e6:88:d7:9d:26:
79:5f:4d:32:e2:f7:b5:82:e5:28:a3:26:05:bc:fd:3c:4c:50:
07:ee:74:c4:c6:5e:bd:38:12:8c:ee:ff:2c:a3:fd:67:0a:35:
35:6b:13:e0:d9:64:f0:57:ed:83:65:8e:61:39:ac:bc:57:29:
db:4a:16:9e:63:5d:7b:35:a7:5a:95:09:fc:f9:ec:a4:e7:bc:
04:73:89:40
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGTxXCmZze/rXesX/g6oyJQ8l+1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFF
RjI1QURBOTAeFw0yNjA2MTMwNjMyMDNaFw0yNjA2MTQwODM4MDNaMDMxMTAvBgNV
BAMTKDU2NTk4NjhFNTgzMUVCOTJEQTYyMjJEQzZFRDA0OTZFMzcyMTdDNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5oedO+qq0WQ/3CcwmMVbyR/L9
nTLO2/T6Edott8M4ydkSZQXPMm2u+RkgmpcRBJjnuATKMVG9LFwS9bClL/62mijO
20Eqk6TlHup92mbI5DSUkNt8F9qG85frROL53RWxW84n83k3a/xuDEazc38NnUtJ
fK62R3e55PuHZ2IfZahqxJ4BTJ86GD9HWLN5lyfU4ewogdcLUoRRSJAFWreE0mOi
qC/5ZpUuc9HTAhEcCqflQIF31gvcUz/ufscnuVeb7V4SLg4WF1QNoFS3nlQe1BuF
r5tVzoiLU62pA2dQR3Khl8c2alzsWrcK5oEEMebbBz0IQ3wtY4nUNmcyHOizAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVlmGjlgx65LaYiLcbtBJbjchfG8wHwYDVR0j
BBgwFoAUbsqak276gnbkQSXgtMe/Qe8lrakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODlkYWU5N2YtMWFkMS00YjM0LThmZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2
RUZBODI3NkU0NDEyNUUwQjRDN0JGNDFFRjI1QURBOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82RUNBOUE5MzZFRkE4Mjc2RTQ0MTI1RTBCNEM3QkY0MUVGMjVB
REE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlkYWU5N2YtMWFkMS00YjM0LThm
ZTktMWJjNjViMDkwOGYzLzAvNkVDQTlBOTM2RUZBODI3NkU0NDEyNUUwQjRDN0JG
NDFFRjI1QURBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFnvkvUZJ5ERDurzlP3avB/eO++y6OuNfR39
y76k6W9boPIkZzeOuEvuVB8CWaS4fUwwzqES9xJCsXGi5UVpk4M3F6tg6CEgjyYG
DZccHbtYjop37wXdyOyOJXS8Px6g4YuCOxAlMi9CJSFQUdkf7Jc2/K0uy70yUpty
fb9+EjbyEQAFyfVc26jN1lIB9iCVB8WFPMiYznzWQVRG4ebTNXriCTtkcMzsgcXm
DT1TkKzmiNedJnlfTTLi97WC5SijJgW8/TxMUAfudMTGXr04Eozu/yyj/WcKNTVr
E+DZZPBX7YNljmE5rLxXKdtKFp5jXXs1p1qVCfz57KTnvARziUA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:40 2026 by rpki-client