
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.mft
File: 6C6BB65D208DB84E3040D83D4AB33C89EC503472.mft (raw, json)
Hash identifier: JiUGlbgQeTqhqj7m7zl/MdO8p/ihjNr/tN/Ui7Kjnk4=
Subject key identifier: D0:36:A5:00:97:5E:7D:F0:F4:CB:59:0F:BF:71:ED:4F:03:19:48:B0
Authority key identifier: 6C:6B:B6:5D:20:8D:B8:4E:30:40:D8:3D:4A:B3:3C:89:EC:50:34:72
Certificate issuer: /CN=6C6BB65D208DB84E3040D83D4AB33C89EC503472
Certificate serial: 13D6F5E8C675ED4A7DAD6283AD06710F442B4A18
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C6BB65D208DB84E3040D83D4AB33C89EC503472.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 22:04:07 +0000
Manifest this update: Sun 20 Sep 2026 21:59:07 +0000
Manifest next update: Mon 21 Sep 2026 23:51:07 +0000
Files and hashes: 1: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: sZkC84a9YYolXl/tnenD79SfiL0qXzxWoqE1JOJjvRU=)
2: 6C6BB65D208DB84E3040D83D4AB33C89EC503472.crl (hash: zrA927k/e/Sz1BI6Sc9c/7SddbCQeGg39TICC0xa99g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.crl
rsync://rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C6BB65D208DB84E3040D83D4AB33C89EC503472.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 23:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d6:f5:e8:c6:75:ed:4a:7d:ad:62:83:ad:06:71:0f:44:2b:4a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6C6BB65D208DB84E3040D83D4AB33C89EC503472
Validity
Not Before: Sep 20 21:59:07 2026 GMT
Not After : Sep 21 23:51:07 2026 GMT
Subject: CN=D036A500975E7DF0F4CB590FBF71ED4F031948B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:25:b9:b6:d9:d7:6e:f5:42:8b:15:74:b5:d0:
d4:90:38:95:9e:56:9a:fb:b8:cb:1f:15:00:e1:e1:
74:6c:60:4e:46:62:52:72:b9:ae:e1:81:3b:94:e3:
3b:d9:20:9c:e2:00:0c:ee:88:6f:65:70:78:65:d2:
58:7f:a7:b3:51:bb:51:b0:29:ad:22:3a:7a:3b:ad:
92:73:45:11:31:9c:d4:0c:5e:4f:09:16:b1:eb:f0:
07:b4:b3:47:da:c4:8b:5e:33:39:c4:8c:0e:82:29:
61:5e:13:e9:76:d1:cf:ec:8e:8b:5b:38:ed:fd:a5:
d1:6f:63:34:6c:d8:7a:b7:20:f6:e6:b5:6f:1e:c7:
96:15:b1:06:7e:c6:ff:af:c3:94:7a:0c:4f:4a:4f:
9d:c0:a2:b0:7e:5e:61:26:33:1e:8a:7b:2f:fe:ed:
68:be:9c:55:38:e5:b7:0f:0e:15:58:c6:a5:70:b6:
fe:b2:b7:a3:46:20:22:48:87:19:a4:dc:ba:d3:33:
13:ad:03:b2:04:18:ab:33:66:ee:0d:5a:fd:47:a3:
76:c1:6d:4e:78:48:bd:90:8a:25:6f:4a:77:7c:b8:
3d:d9:b9:a9:c2:81:71:29:e7:d7:9a:59:d9:f7:e1:
bc:c3:6b:d2:09:94:3c:d9:f8:76:fd:1a:23:66:b1:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:36:A5:00:97:5E:7D:F0:F4:CB:59:0F:BF:71:ED:4F:03:19:48:B0
X509v3 Authority Key Identifier:
keyid:6C:6B:B6:5D:20:8D:B8:4E:30:40:D8:3D:4A:B3:3C:89:EC:50:34:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C6BB65D208DB84E3040D83D4AB33C89EC503472.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/6C6BB65D208DB84E3040D83D4AB33C89EC503472.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7a:13:93:23:4b:51:0c:c0:1b:69:bc:37:6d:76:06:ab:a6:
34:7b:1f:37:85:c1:85:27:8c:f5:66:c5:6f:df:bc:11:ad:34:
6e:07:63:b5:de:59:4f:1b:86:9f:b7:c2:9e:41:04:c8:cd:30:
28:4b:92:ab:3d:ba:d5:e7:22:f7:ca:74:7d:4c:2e:11:05:10:
bb:cc:2c:fe:b9:ca:cd:af:3b:aa:48:15:10:ea:01:f4:fa:07:
20:4d:d5:00:40:3f:76:0d:72:9a:d9:1e:01:0f:78:55:3a:1c:
6b:f2:31:51:44:13:b5:2b:52:55:05:63:78:57:80:cd:75:ee:
7e:3e:07:75:1b:5e:9a:1e:24:58:2e:09:51:79:93:32:4e:b5:
b1:2a:9f:bb:a8:02:10:22:c3:a2:d3:ff:7f:61:98:26:87:63:
3a:71:34:e6:86:7b:11:e2:0a:c4:a8:8a:b6:44:bf:c9:fc:52:
22:d4:40:d9:b5:9f:3c:a3:c6:1f:37:c9:c7:1e:03:b3:a6:b8:
2c:39:df:6f:3f:3b:6d:ab:f5:61:18:17:67:83:ba:f4:4e:d6:
fc:55:4b:46:12:29:43:72:ef:18:ef:d0:08:4d:b5:5e:7c:56:
e9:93:77:69:d9:ae:1b:cc:cc:92:b6:8d:c6:15:73:13:1d:c9:
a2:69:1a:5d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUE9b16MZ17Up9rWKDrQZxD0QrShgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM2QkI2NUQyMDhEQjg0RTMwNDBEODNENEFCMzNDODlF
QzUwMzQ3MjAeFw0yNjA5MjAyMTU5MDdaFw0yNjA5MjEyMzUxMDdaMDMxMTAvBgNV
BAMTKEQwMzZBNTAwOTc1RTdERjBGNENCNTkwRkJGNzFFRDRGMDMxOTQ4QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoJbm22ddu9UKLFXS10NSQOJWe
Vpr7uMsfFQDh4XRsYE5GYlJyua7hgTuU4zvZIJziAAzuiG9lcHhl0lh/p7NRu1Gw
Ka0iOno7rZJzRRExnNQMXk8JFrHr8Ae0s0faxIteMznEjA6CKWFeE+l20c/sjotb
OO39pdFvYzRs2Hq3IPbmtW8ex5YVsQZ+xv+vw5R6DE9KT53AorB+XmEmMx6Key/+
7Wi+nFU45bcPDhVYxqVwtv6yt6NGICJIhxmk3LrTMxOtA7IEGKszZu4NWv1Ho3bB
bU54SL2QiiVvSnd8uD3ZuanCgXEp59eaWdn34bzDa9IJlDzZ+Hb9GiNmsZuJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0DalAJdeffD0y1kPv3HtTwMZSLAwHwYDVR0j
BBgwFoAUbGu2XSCNuE4wQNg9SrM8iexQNHIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzhlOGZmNDktZjcwYS00YjZmLWFhZTYtOGM3Nzc2OWM1ZGVlLzAvNkM2QkI2NUQy
MDhEQjg0RTMwNDBEODNENEFCMzNDODlFQzUwMzQ3Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82QzZCQjY1RDIwOERCODRFMzA0MEQ4M0Q0QUIzM0M4OUVDNTAz
NDcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh
ZTYtOGM3Nzc2OWM1ZGVlLzAvNkM2QkI2NUQyMDhEQjg0RTMwNDBEODNENEFCMzND
ODlFQzUwMzQ3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHp6E5MjS1EMwBtpvDdtdgarpjR7HzeFwYUn
jPVmxW/fvBGtNG4HY7XeWU8bhp+3wp5BBMjNMChLkqs9utXnIvfKdH1MLhEFELvM
LP65ys2vO6pIFRDqAfT6ByBN1QBAP3YNcprZHgEPeFU6HGvyMVFEE7UrUlUFY3hX
gM117n4+B3UbXpoeJFguCVF5kzJOtbEqn7uoAhAiw6LT/39hmCaHYzpxNOaGexHi
CsSoirZEv8n8UiLUQNm1nzyjxh83ycceA7OmuCw5328/O22r9WEYF2eDuvRO1vxV
S0YSKUNy7xjv0AhNtV58VumTd2nZrhvMzJK2jcYVcxMdyaJpGl0=
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:53:01 2026 by rpki-client