
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
File: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft (raw, json)
Hash identifier: KpU+yAplufRsk9LOlW83IYUldD5Izi6ngLbZyWHt7AI=
Subject key identifier: 3D:AA:60:50:7F:5A:AF:2B:3A:9D:F3:51:95:38:2C:8E:43:E9:F6:6D
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Certificate issuer: /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial: 75D01F14795872869910424AE50628DC37BE234C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 16:49:40 +0000
Manifest this update: Tue 16 Jun 2026 16:44:40 +0000
Manifest next update: Wed 17 Jun 2026 18:21:40 +0000
Files and hashes: 1: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: dBBC9Ld8u7gkoTo/g/PxsRZ0jIN5riREG0FHLcyqmts=)
2: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: m44IQsih+GAEYeNlxdOnRw3U6wKDlFyxDmcm/uil4os=)
3: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: sVWZtsjpcpezFv1cmO31cy7yxR6Y49KAqemmha7HUbc=)
4: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: pjt/PoMD2rISkjEBbEVdFpq3Lfkti0ImQZr5UDhsxdI=)
5: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl (hash: dDHsIUcPRcktvox01kIn2cTdaG3FElmtz85ZQGN0zZA=)
6: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: S7UAzIZzLebBGoPx8HW74rT6/bn+VmPadNNYeTv3kZU=)
7: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: y0vf+b+WaxpgW62iYyK78WU25GzF5XHO+ZNE1qslKzM=)
8: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: RFsABZwQUKrnFL3kGb4LQCkeg8Y7lRmJ8snepdRl5LE=)
9: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: 2RPhLvFo9neTmfPqwsVlBCVEW/vWAuk44bCI72x1cVc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d0:1f:14:79:58:72:86:99:10:42:4a:e5:06:28:dc:37:be:23:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Validity
Not Before: Jun 16 16:44:40 2026 GMT
Not After : Jun 17 18:21:40 2026 GMT
Subject: CN=3DAA60507F5AAF2B3A9DF35195382C8E43E9F66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:41:2e:ab:3b:df:f0:56:3c:f0:ba:ae:ec:
51:6c:b4:56:ee:c9:85:ea:b9:05:4d:09:c0:5e:17:
74:2e:96:92:7b:2a:9b:1e:55:4d:9e:c3:22:64:2f:
53:20:79:f3:12:6a:53:9a:4e:50:1d:50:39:91:0f:
42:a5:72:e4:eb:d4:94:52:de:ac:65:83:9c:f5:f0:
d7:f4:da:7f:e2:67:43:71:d1:b1:c0:8f:61:75:45:
f1:f0:86:6c:55:93:8d:a8:9f:e3:eb:99:c5:cf:dd:
81:28:8c:07:cc:11:ee:f1:14:ee:67:2a:bc:ba:90:
26:69:fc:f9:3d:5f:44:ca:35:24:88:fa:c7:0f:87:
77:93:8c:91:7e:91:b1:ec:c4:d5:1d:80:f3:fe:9c:
f1:5c:b9:c0:85:44:08:0a:74:8a:36:36:19:e4:0c:
5e:97:80:59:e5:e7:ff:a5:c7:3a:c4:b1:1f:23:0d:
61:7e:72:aa:9a:a9:34:6d:5d:2f:ad:e9:f8:0c:bf:
d2:b4:04:59:dd:3b:6d:19:63:7f:6f:ea:1f:f4:f7:
0d:76:e7:cc:c7:9c:1c:a1:13:5f:18:11:5f:97:06:
13:ad:f2:67:eb:08:d8:7e:dc:f0:fc:a5:ae:02:12:
60:cc:31:cd:e1:8c:ae:2b:86:d6:99:29:61:47:ff:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AA:60:50:7F:5A:AF:2B:3A:9D:F3:51:95:38:2C:8E:43:E9:F6:6D
X509v3 Authority Key Identifier:
keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fc:7f:0f:28:9c:52:b3:bd:37:70:aa:af:93:8b:8d:28:49:
42:db:8f:0a:df:71:f6:7e:c5:e8:cb:be:bf:68:20:b9:d6:3f:
68:a4:91:b2:9c:a3:be:8d:aa:80:ba:5b:56:44:28:80:cd:68:
95:fe:03:a9:af:69:a4:d9:38:e1:df:42:ac:d4:7c:6e:33:fc:
d5:f5:1b:8d:b9:ab:25:9f:61:fe:8d:49:2d:99:70:30:03:f3:
89:6c:cc:a2:90:22:88:6a:46:b9:cc:82:bc:cd:46:7e:b2:27:
77:0b:8f:7c:25:4f:33:07:41:13:fc:7f:b2:c6:1b:51:b2:c1:
08:dc:1a:00:39:7a:e1:6d:b0:6b:81:fd:89:75:66:4a:3a:ec:
f9:5e:50:5a:d6:18:3f:5d:06:26:82:8f:51:29:08:bc:d3:d1:
bf:71:87:89:dd:03:fa:a9:2c:03:d8:40:a1:23:b8:11:97:fc:
02:7a:d2:2d:e4:6d:6a:bf:ec:05:72:6a:6e:e9:94:9a:dd:86:
b2:d6:0f:5a:bb:e7:47:ce:a3:c6:6e:f9:e5:33:f3:4a:18:e6:
2a:8e:2d:51:8d:54:ab:f0:81:32:90:1b:a9:3f:f2:5c:49:ad:
7d:9a:94:39:67:4e:bb:54:49:65:d9:00:8a:08:e1:21:10:11:
99:0f:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:50:39 2026 by rpki-client