
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft
File: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft (raw, json)
Hash identifier: wvg6eVVD+mzTnr1NSZE+LSfatxF5BdKALN0EYMEanjA=
Subject key identifier: F3:A3:93:65:D8:EC:47:FD:36:55:A3:38:34:9E:45:C1:B1:85:BB:E1
Authority key identifier: F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F
Certificate issuer: /CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F
Certificate serial: 54CC814254706305D027F728D9284572271A857B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft
Manifest number: 75
Signing time: Wed 29 Jul 2026 00:26:45 +0000
Manifest this update: Wed 29 Jul 2026 00:21:45 +0000
Manifest next update: Thu 30 Jul 2026 04:01:45 +0000
Files and hashes: 1: F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl (hash: GUoIwcokbug1YCee9QEck1ABpFPuOCuUid9jdgQuEg0=)
2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: l/JxszKitcaLUbjYnu5Z5o+X75HkVNIcWyDMcKUckc8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl
rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:cc:81:42:54:70:63:05:d0:27:f7:28:d9:28:45:72:27:1a:85:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F
Validity
Not Before: Jul 29 00:21:45 2026 GMT
Not After : Jul 30 04:01:45 2026 GMT
Subject: CN=F3A39365D8EC47FD3655A338349E45C1B185BBE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:77:41:68:26:ef:df:4c:fe:93:54:77:cc:
c4:2b:69:4e:b0:97:82:99:20:14:bb:d2:31:96:de:
10:6c:6b:69:55:ff:7e:69:a9:ed:5d:a5:92:d8:5c:
ca:80:cb:0c:cd:58:5e:78:2f:af:1a:a9:61:45:30:
9a:00:53:bb:30:27:46:7c:4d:18:44:4d:ae:18:5a:
94:b4:53:b5:a3:16:d6:7e:6e:b4:25:bb:12:81:2d:
de:cd:62:5d:9d:11:5c:bc:f5:dd:08:0f:37:7f:a2:
1e:cf:7f:f7:c8:3f:03:3c:93:35:54:ac:b5:99:7f:
fc:4d:c2:7e:4e:9c:3e:51:e4:f8:f9:de:30:06:08:
51:64:8e:03:d2:03:cd:be:85:42:16:4b:e4:f4:b2:
13:f0:c4:83:61:cd:f4:40:54:67:91:f2:92:82:dd:
f5:e7:de:48:d3:ca:79:e2:3a:c8:0c:5e:71:d1:c0:
c8:2d:3a:0b:00:71:98:85:b8:19:7c:c1:66:d2:5a:
de:ee:a3:19:bc:f6:f0:8b:67:19:b4:d8:4f:52:12:
fe:ee:70:02:da:77:ed:78:cc:0a:94:ff:4d:98:97:
29:18:48:ba:68:e1:cc:6d:c1:da:2c:e7:d3:2e:42:
0b:38:f1:1f:a8:46:d1:6e:43:be:6b:78:a7:4b:01:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A3:93:65:D8:EC:47:FD:36:55:A3:38:34:9E:45:C1:B1:85:BB:E1
X509v3 Authority Key Identifier:
keyid:F6:B8:6F:E2:0E:73:A2:2D:9A:35:3C:C9:2E:D8:DB:F9:D2:21:F9:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/F6B86FE20E73A22D9A353CC92ED8DBF9D221F96F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5a:f7:75:ae:ba:dd:16:63:03:9e:87:61:4e:05:a1:5c:d3:
fb:65:00:45:f0:2d:d4:8a:8d:66:9a:9d:f6:c3:c9:3a:3d:d3:
69:8c:61:8f:37:c1:d8:11:9e:d5:10:0f:7b:03:54:10:36:fe:
53:ef:d9:39:6f:61:56:d1:f3:a8:2c:b4:9a:a0:ed:bc:9e:7c:
ea:06:ba:1a:7c:fe:51:48:ab:16:0a:3b:23:e3:06:6a:1f:84:
e9:95:28:8a:31:16:0c:57:94:0e:46:c2:52:53:47:47:ab:d2:
28:19:ae:ba:65:2e:8b:81:a2:ab:fa:67:68:d6:15:ac:2c:a0:
59:e5:f6:66:c4:96:98:88:a1:ca:d2:3d:79:3a:30:29:6b:c1:
ee:9b:ce:4a:58:a9:46:25:cd:d4:58:8e:88:ba:2c:93:bf:ba:
3c:bc:bc:d1:38:d6:2c:a3:b8:8e:1b:f4:fb:47:a1:9f:8e:a9:
1f:8e:28:9d:73:4d:9d:f7:95:29:7f:ff:54:62:0e:8d:50:1a:
73:1b:e6:02:47:b8:a5:2c:8e:6f:c9:91:9a:fa:8e:c7:7d:ad:
5f:04:2c:5f:65:87:e4:8c:e5:d7:1f:22:ca:16:04:37:78:d6:
a3:4d:35:bc:e9:83:33:d4:ac:40:3d:a1:b9:2d:6b:a0:50:b2:
05:b6:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:16:46 2026 by rpki-client