
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft
File: 6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft (raw, json)
Hash identifier: PutPuXhHDYvnXP2l6q+chfw712XN3/GasVKZO8cpPlg=
Subject key identifier: 7A:29:79:93:DC:82:A5:03:B3:D2:CD:4D:6A:93:6F:C0:CA:71:EE:D8
Authority key identifier: 61:77:E9:D3:DB:AB:63:EF:6C:BB:43:6C:90:6D:5C:5F:75:35:56:FE
Certificate issuer: /CN=6177E9D3DBAB63EF6CBB436C906D5C5F753556FE
Certificate serial: 35E8A1FDD967E594EC4EB7FA6AA4588A71C41F97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 23:52:54 +0000
Manifest this update: Tue 16 Jun 2026 23:47:54 +0000
Manifest next update: Thu 18 Jun 2026 01:18:54 +0000
Files and hashes: 1: 6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl (hash: pHKknUCGfuN5REkCpz9QRjwNs1n/B87Dje+zhRVXEk0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl
rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e8:a1:fd:d9:67:e5:94:ec:4e:b7:fa:6a:a4:58:8a:71:c4:1f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177E9D3DBAB63EF6CBB436C906D5C5F753556FE
Validity
Not Before: Jun 16 23:47:54 2026 GMT
Not After : Jun 18 01:18:54 2026 GMT
Subject: CN=7A297993DC82A503B3D2CD4D6A936FC0CA71EED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:65:58:ae:d3:54:38:59:1c:11:bb:03:88:
9c:90:78:71:79:dc:c7:03:4d:20:fc:ca:94:e1:19:
dc:5a:7c:ad:bb:af:f7:48:44:07:a8:e0:61:f6:40:
1f:4e:86:8f:c7:44:da:da:a6:a8:89:2a:e0:9c:fc:
3c:73:16:87:3b:4f:52:e4:4b:c1:15:32:64:26:1b:
1d:e0:b9:b4:06:f6:cf:b3:d8:08:99:53:38:b7:cc:
45:d9:25:74:6c:5b:cd:79:db:a4:5c:91:64:48:45:
97:08:fd:05:dd:11:0a:9c:f2:e5:27:bb:e1:f0:61:
1d:30:92:6f:eb:d0:9f:3c:9f:d9:1f:1b:7d:0e:93:
aa:33:58:be:91:fe:fa:f3:76:88:ae:12:76:20:c6:
ca:01:ec:80:68:43:97:80:ce:17:86:74:83:a4:2b:
09:1a:86:5d:97:b9:c3:fb:a8:7e:92:54:df:96:07:
35:2e:63:22:f8:0c:5e:2f:a4:b5:48:8b:a3:2e:4b:
f3:d1:bb:f1:3f:92:79:ab:01:3b:ec:9c:28:5e:8c:
11:e2:74:d6:66:a8:25:e9:98:78:df:b2:d1:07:8f:
9d:b2:d5:ef:ec:6f:c6:62:dd:d6:8d:bb:71:36:70:
dd:86:56:79:cb:da:1b:3d:32:74:27:02:d2:45:01:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:79:93:DC:82:A5:03:B3:D2:CD:4D:6A:93:6F:C0:CA:71:EE:D8
X509v3 Authority Key Identifier:
keyid:61:77:E9:D3:DB:AB:63:EF:6C:BB:43:6C:90:6D:5C:5F:75:35:56:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/6177E9D3DBAB63EF6CBB436C906D5C5F753556FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:8b:8f:40:7a:40:a6:fa:03:78:e4:53:ae:6f:55:27:58:2d:
0f:da:e9:c4:9e:d7:8d:ee:13:0d:cf:2f:96:39:ee:09:68:db:
2d:8d:85:80:7c:54:74:38:e2:ef:3a:ad:bb:5c:26:fd:2f:cc:
b4:03:b8:50:c2:34:e0:8c:ac:3b:06:9d:ba:89:07:59:2f:c0:
ec:99:a2:6c:68:2d:40:fc:76:eb:9f:dc:37:9a:9d:28:c7:de:
47:76:c7:60:d9:2a:13:97:06:fa:db:06:b4:42:16:9b:96:ff:
58:ef:d5:7a:ee:19:7c:0a:14:6d:55:bf:1d:9b:74:a6:cc:82:
cc:98:d7:89:19:b5:04:86:6f:1e:ac:f5:18:f1:41:c8:79:01:
e4:72:c6:c0:e1:14:8e:12:86:1a:d9:75:47:9c:59:eb:fb:3c:
34:9c:32:42:c1:1a:46:e0:27:9c:08:e3:21:91:9c:5e:63:6e:
14:29:56:bf:eb:6c:ea:7e:fc:91:08:ef:bf:ec:96:f0:d8:3d:
88:3e:9c:4d:1f:4c:5b:07:df:9a:46:b2:27:37:63:6e:02:25:
d0:3d:d9:2f:c5:d5:68:25:8c:52:19:86:ba:60:d2:45:06:44:
6e:75:2d:9d:31:72:62:f4:8f:91:c9:52:39:1c:38:30:0f:41:
0f:a2:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:17 2026 by rpki-client