
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.mft
File: 6C6BB65D208DB84E3040D83D4AB33C89EC503472.mft (raw, json)
Hash identifier: BsryKE0nMZ/kfIXC4Hfye1CnfzuCObrfY1PTxu32XVE=
Subject key identifier: 3A:04:6A:FF:9C:20:12:26:F3:8B:E6:F5:9C:39:F5:4B:C9:06:C0:9E
Authority key identifier: 6C:6B:B6:5D:20:8D:B8:4E:30:40:D8:3D:4A:B3:3C:89:EC:50:34:72
Certificate issuer: /CN=6C6BB65D208DB84E3040D83D4AB33C89EC503472
Certificate serial: 419C9ACC9FF380229792619A1E94AA6D7DDC72EB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C6BB65D208DB84E3040D83D4AB33C89EC503472.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 13:52:26 +0000
Manifest this update: Wed 29 Jul 2026 13:47:26 +0000
Manifest next update: Thu 30 Jul 2026 14:50:26 +0000
Files and hashes: 1: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: sZkC84a9YYolXl/tnenD79SfiL0qXzxWoqE1JOJjvRU=)
2: 6C6BB65D208DB84E3040D83D4AB33C89EC503472.crl (hash: 65VZP/iV+FqLWyZXzveZh7CE0+2MWkhK6yIJtHSXtqE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.crl
rsync://rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C6BB65D208DB84E3040D83D4AB33C89EC503472.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 14:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9c:9a:cc:9f:f3:80:22:97:92:61:9a:1e:94:aa:6d:7d:dc:72:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C6BB65D208DB84E3040D83D4AB33C89EC503472
Validity
Not Before: Jul 29 13:47:26 2026 GMT
Not After : Jul 30 14:50:26 2026 GMT
Subject: CN=3A046AFF9C201226F38BE6F59C39F54BC906C09E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:f1:72:fb:f2:05:d2:cd:46:ec:31:4c:ae:
f2:ef:16:78:ea:14:43:0e:57:49:ba:f7:16:7f:dd:
b5:f2:a7:c0:a9:57:d6:72:dc:f0:19:de:4c:e8:bb:
53:40:14:83:ad:43:20:e6:b4:59:fb:36:59:62:d2:
56:d6:40:ce:98:d5:9a:16:78:2a:8e:bb:4f:f0:57:
fa:f1:ab:63:32:63:3c:88:f7:7b:32:a2:d6:ab:18:
d8:43:1f:1c:41:e6:6a:20:c9:c1:2c:17:1a:de:9e:
cb:d6:93:a1:4c:5e:b2:ee:58:1d:81:ed:c6:60:3d:
f1:a2:e1:8b:ce:e5:81:08:1a:f9:d9:b4:29:60:2f:
cf:ff:ad:b7:2b:f7:95:8e:66:55:0d:12:6c:5d:bd:
9e:a1:59:50:cf:e5:f3:5a:ad:1e:b9:62:90:aa:70:
ec:67:0d:fd:3e:a8:5f:fa:59:39:04:40:af:a4:78:
9d:9d:bd:a7:25:a3:e5:b4:0a:cd:1e:10:67:b7:77:
e8:aa:2c:c8:2a:3e:e6:f4:74:86:ac:83:66:a4:51:
25:19:46:f4:56:f8:5c:c4:b4:4e:f5:2f:ca:2f:a2:
28:82:8b:c8:41:81:4e:ca:51:da:30:31:a0:d7:db:
c2:e6:4a:d9:3c:89:02:d4:39:42:04:2d:c9:e6:aa:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:04:6A:FF:9C:20:12:26:F3:8B:E6:F5:9C:39:F5:4B:C9:06:C0:9E
X509v3 Authority Key Identifier:
keyid:6C:6B:B6:5D:20:8D:B8:4E:30:40:D8:3D:4A:B3:3C:89:EC:50:34:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C6BB65D208DB84E3040D83D4AB33C89EC503472.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a8:25:b5:52:45:9f:2d:51:c7:ba:78:5f:ba:28:e3:c9:8d:
c6:06:b5:2d:61:1c:24:ea:2c:96:3c:6e:8c:90:1c:fd:ab:f3:
42:e7:f7:d0:07:24:7f:be:c8:c8:ab:58:65:8d:31:1c:5f:e4:
03:6d:8b:88:9f:c6:00:e5:2c:d8:fd:67:0c:29:be:9c:86:a1:
03:f0:e4:43:a7:65:f5:77:05:f5:b0:e5:89:e1:63:1e:aa:2f:
8d:72:43:11:6d:70:6d:75:c0:f1:89:5f:21:f8:69:7f:55:ca:
46:5e:55:39:22:c7:a6:59:11:91:3a:c5:7a:74:42:e1:b1:e6:
1d:23:d2:5a:51:2a:e5:4d:fd:e8:af:39:c4:0b:27:91:48:de:
55:d6:69:7b:1c:b0:e9:c7:99:3d:ec:c7:9d:0e:db:3c:72:e3:
35:2e:8a:fb:f2:45:66:e5:8f:b5:01:db:32:db:9e:bf:b1:de:
ea:0f:12:75:b1:a2:78:2e:d0:c8:a4:19:8a:d1:2e:75:bc:9a:
ac:18:f8:c3:80:5a:e0:4b:70:17:f4:e3:5a:4a:13:6a:58:4e:
1e:e7:de:a8:66:1e:c0:fc:b3:1c:3c:38:49:c9:c2:48:2d:4b:
58:f7:ce:7b:72:42:50:7b:12:d4:53:ca:16:e8:fc:79:af:ad:
80:f3:25:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:56:06 2026 by rpki-client