
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft
File: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft (raw, json)
Hash identifier: IEgNsJ1yBEToZ0yiudwG6UxJ5PshhiFfXTuBRJ5Oh/8=
Subject key identifier: 4C:D9:0E:0F:0B:9C:33:E5:18:40:DE:12:8F:A5:10:94:17:12:7C:79
Authority key identifier: 6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC
Certificate issuer: /CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC
Certificate serial: 6AA59A527FDD1C203C9DED3DE94F7874370ED1F7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft
Manifest number: 38
Signing time: Fri 12 Jun 2026 17:36:40 +0000
Manifest this update: Fri 12 Jun 2026 17:31:40 +0000
Manifest next update: Sat 13 Jun 2026 20:44:40 +0000
Files and hashes: 1: 3130332e3132392e342e302f32332d3234203d3e20313335343738.roa (hash: JPVutpb2XwCsO88296+IeYMvqUecuYWuKlBQq43d27Y=)
2: 3130332e3132392e362e302f32332d3234203d3e20313335343738.roa (hash: qG2bUOWwTNZiIfdaTpDPVpMrBFbrT7QpU559kWrN28I=)
3: 6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl (hash: ZMgjjeMKQQMdBdt92leFCr8xpmnub+jG7ccXNQQnWOQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl
rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 20:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a5:9a:52:7f:dd:1c:20:3c:9d:ed:3d:e9:4f:78:74:37:0e:d1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC
Validity
Not Before: Jun 12 17:31:40 2026 GMT
Not After : Jun 13 20:44:40 2026 GMT
Subject: CN=4CD90E0F0B9C33E51840DE128FA5109417127C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:20:ce:ff:3d:ef:3b:80:9a:95:aa:15:47:46:
13:c7:1a:24:36:24:b0:51:a0:e5:c0:d8:72:d5:c4:
1f:64:c0:d0:32:9a:db:40:4d:06:19:7a:db:d0:38:
af:2d:f8:c9:d7:00:bc:dd:24:8a:04:bc:04:fa:39:
c6:ce:57:e9:99:7e:41:4f:cc:de:38:5e:9d:19:3f:
94:63:18:d3:0e:6b:44:8b:21:5d:51:64:79:8a:ca:
7b:55:96:b4:ba:62:44:5b:2b:06:74:02:a6:d0:18:
4c:34:29:0a:0f:df:97:1a:60:b9:09:53:a8:2a:32:
0f:c0:bd:46:6e:d7:8f:ea:42:80:75:84:37:3f:31:
41:49:6c:9d:7d:a2:09:13:d0:e0:73:25:aa:99:ac:
a5:ff:37:ba:77:75:07:e4:4c:08:84:5d:38:2a:5f:
3b:8e:9d:c2:1d:65:7a:62:aa:1f:42:18:fd:73:50:
a7:07:dc:1b:10:e1:b9:59:1a:c5:41:8f:39:08:05:
8a:08:cd:27:8f:72:3e:db:4d:b6:85:a0:ba:61:30:
c6:ce:49:5b:8f:65:cf:ca:6d:73:e8:77:63:6c:0a:
96:36:d5:09:40:c4:e2:17:bd:0f:eb:5e:35:e6:1e:
19:15:3d:3a:25:5b:b5:6e:5c:06:f6:56:83:52:04:
76:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D9:0E:0F:0B:9C:33:E5:18:40:DE:12:8F:A5:10:94:17:12:7C:79
X509v3 Authority Key Identifier:
keyid:6E:DD:27:6E:58:0F:40:13:9E:0A:FA:4A:1F:AB:27:56:B7:FA:10:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c64b20d8-591b-4152-9768-9c42b06c2fe2/0/6EDD276E580F40139E0AFA4A1FAB2756B7FA10BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:16:b0:23:5a:c1:f1:dc:87:b7:e2:10:2c:b1:87:16:3c:eb:
15:e6:3a:f7:fb:3a:0c:ee:53:cc:84:1e:2b:84:bc:ca:29:76:
d7:b2:af:f3:d8:af:8d:34:3b:14:77:7b:a6:3b:d0:46:73:47:
bb:2d:40:c0:5f:9f:f1:98:d7:9d:53:cd:c6:16:27:b6:4c:6e:
f1:b8:29:a7:fb:12:bc:6e:a2:fd:08:3c:a2:c1:53:1c:1f:d1:
55:5b:c4:a9:f9:a8:5c:bd:dd:1d:32:47:5c:47:18:28:39:2e:
bd:30:ab:2a:6c:57:8a:36:9d:02:54:89:fa:f7:46:e0:98:b6:
a0:84:1d:71:90:44:1e:0f:5e:ac:a8:e4:03:1f:b5:db:f7:7d:
7f:6b:22:ec:d1:98:e7:50:db:56:c0:cb:39:01:6b:8d:7f:d3:
b1:b7:33:d8:26:86:c8:9a:79:3e:14:ac:11:1d:c2:87:4c:91:
d6:7a:4f:19:89:3e:db:58:b6:e2:90:1e:99:e2:da:f2:02:e7:
19:91:2a:27:11:65:93:6c:c3:a7:32:30:a4:96:cf:f3:64:fd:
0a:ac:6c:69:80:b3:bc:0f:a6:95:5e:e4:0c:b1:bd:50:3f:59:
4f:c1:8f:db:e9:67:56:67:9c:9f:a3:53:5e:72:35:c8:ac:da:
f4:3c:a5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:01:14 2026 by rpki-client