
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
File: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft (raw, json)
Hash identifier: vclJgfvuvD6u5n703J61L5JBaT0QayU8V9TQStf8IIQ=
Subject key identifier: CF:3C:59:83:8E:8D:88:3F:72:FE:0B:8A:50:0B:F2:CA:DC:6E:F8:A3
Authority key identifier: 6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
Certificate issuer: /CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Certificate serial: 12C4B1C3499915ABF45F7FB8DAC92A374275B14C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 01:53:08 +0000
Manifest this update: Thu 24 Sep 2026 01:48:08 +0000
Manifest next update: Fri 25 Sep 2026 02:17:08 +0000
Files and hashes: 1: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (hash: 2RPhLvFo9neTmfPqwsVlBCVEW/vWAuk44bCI72x1cVc=)
2: 323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (hash: y0vf+b+WaxpgW62iYyK78WU25GzF5XHO+ZNE1qslKzM=)
3: 6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl (hash: k2xC+D8VpCtVdeAZCkTu7M9VWoupWOh1hqSC945rJEg=)
4: 323430363a616563303a323a3a2f34382d3438203d3e20313431363735.roa (hash: m44IQsih+GAEYeNlxdOnRw3U6wKDlFyxDmcm/uil4os=)
5: 323430363a616563303a313a3a2f34382d3438203d3e20313431363735.roa (hash: RFsABZwQUKrnFL3kGb4LQCkeg8Y7lRmJ8snepdRl5LE=)
6: 3130332e3135382e32372e302f32342d3234203d3e20313431363735.roa (hash: pjt/PoMD2rISkjEBbEVdFpq3Lfkti0ImQZr5UDhsxdI=)
7: 3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (hash: sVWZtsjpcpezFv1cmO31cy7yxR6Y49KAqemmha7HUbc=)
8: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (hash: dBBC9Ld8u7gkoTo/g/PxsRZ0jIN5riREG0FHLcyqmts=)
9: 323430363a616563303a623a3a2f34382d3438203d3e20313431363735.roa (hash: S7UAzIZzLebBGoPx8HW74rT6/bn+VmPadNNYeTv3kZU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 02:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c4:b1:c3:49:99:15:ab:f4:5f:7f:b8:da:c9:2a:37:42:75:b1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D5E5420B4349DB7799574D1AA8EFA4234B0638E
Validity
Not Before: Sep 24 01:48:08 2026 GMT
Not After : Sep 25 02:17:08 2026 GMT
Subject: CN=CF3C59838E8D883F72FE0B8A500BF2CADC6EF8A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:78:a2:49:f1:4e:dd:76:dd:71:5a:51:b6:73:
84:b4:e6:38:bd:67:a7:71:0d:05:67:6c:1d:ce:66:
46:6f:1d:67:ab:f6:8f:7f:15:fd:9d:3d:d3:20:13:
a0:12:57:c5:c6:6f:c2:4c:2c:93:b6:39:d7:60:03:
a7:36:9e:4a:d0:7f:3c:f5:ba:f8:a5:01:27:8a:1c:
6f:17:bf:99:68:a9:1d:8f:5a:ab:78:28:7b:a3:f3:
e8:55:8f:a0:d5:e9:29:41:1b:56:0b:cd:a5:79:e7:
e8:5e:15:d8:7d:0d:3e:6a:95:bb:7a:c5:e1:31:00:
75:2b:51:59:dd:4c:ec:93:65:f1:6d:ea:65:f2:e3:
f9:e8:c3:53:ef:b5:6b:f3:9c:ee:93:8e:18:7e:1d:
8f:44:86:66:81:7c:25:9a:c0:92:dc:ee:d8:9a:2c:
d4:d3:6c:6d:2c:11:de:b6:fb:84:4e:7d:84:10:65:
83:96:4d:84:2f:01:28:d6:b6:de:1d:a8:13:5f:ca:
f1:02:61:59:43:1a:04:e4:10:92:aa:08:34:43:6d:
d4:3c:2a:02:d5:b4:cc:6d:f5:b8:4b:01:e1:de:71:
92:39:94:f9:6f:6d:ed:47:59:73:6a:2a:8d:87:fc:
57:45:d7:df:7d:cc:20:00:ba:47:30:b0:cf:93:d8:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:59:83:8E:8D:88:3F:72:FE:0B:8A:50:0B:F2:CA:DC:6E:F8:A3
X509v3 Authority Key Identifier:
keyid:6D:5E:54:20:B4:34:9D:B7:79:95:74:D1:AA:8E:FA:42:34:B0:63:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/6D5E5420B4349DB7799574D1AA8EFA4234B0638E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:94:c7:9e:9a:bf:86:01:35:f0:20:c5:f2:45:5b:48:da:94:
51:4e:0a:66:e0:7d:43:d0:5f:a0:e8:13:1a:ae:dc:b3:68:38:
73:f9:40:d3:03:a6:2d:9c:62:1a:6c:8e:e5:46:2e:aa:50:e6:
7d:d7:ce:87:27:1e:c9:a3:50:c2:81:1b:11:3e:a4:c9:cc:27:
1a:1a:33:51:71:dd:af:e8:36:de:0c:fc:61:05:c7:5d:3a:bb:
2c:6f:3b:54:b4:21:8a:35:73:68:0a:7d:e5:14:ac:8f:33:1a:
4c:0b:67:e4:a0:01:b3:d1:1f:ae:ec:fc:45:e9:17:ef:2e:77:
ea:8f:d1:fd:48:e8:62:74:cc:71:7f:13:b6:67:c5:90:30:48:
53:38:c6:e3:6b:69:8d:cb:dd:23:13:d1:a9:33:36:85:97:ae:
98:db:a1:6c:e3:13:ba:ad:b7:6d:95:1b:df:01:dd:97:4a:3e:
36:63:89:4a:f8:d3:b6:12:a8:11:04:9f:eb:65:ae:2d:93:15:
6e:77:0e:a4:b8:38:ca:79:f3:46:39:55:d9:13:38:c4:c4:c0:
7a:59:e0:ad:ee:b0:18:88:cb:d3:5b:5d:ff:c8:75:41:a6:c2:
31:46:69:f2:36:3c:48:67:53:12:e4:64:42:45:7e:1f:c4:64:
86:e5:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:58:05 2026 by rpki-client