
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft
File: C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft (raw, json)
Hash identifier: m1zpUaTcGIFqu5Hv2KBcKSy13GeRKhZuKK1yZrvQie0=
Subject key identifier: EF:86:45:82:96:A2:86:52:73:3E:F5:E4:1A:C8:85:66:7A:D2:6A:BE
Authority key identifier: C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3
Certificate issuer: /CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3
Certificate serial: 60BBE626632DE6E860BDF22D9799C3AFB2B556A6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:09:49 +0000
Manifest this update: Tue 16 Jun 2026 21:04:49 +0000
Manifest next update: Wed 17 Jun 2026 22:30:49 +0000
Files and hashes: 1: C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl (hash: E4732KfKovotZCJIx2orXtFQwH0yaO5vqNZuMpfCujg=)
2: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: hgg/QP+dSLFLOsjRg4tQEaQYc48Rb+WtJWuacTUuK2I=)
3: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: yO2cOBfHPv3C/4uaJ55DoJTVwS5Sx/sjk03JxEGguBI=)
4: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: 0VUfdAAfFEuToJwbRstnJ6dFxvse7EJ2ZUiWvgUCNNM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl
rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 22:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:bb:e6:26:63:2d:e6:e8:60:bd:f2:2d:97:99:c3:af:b2:b5:56:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6FFE1E58438BC5B357239104B53DBD6B69AF9D3
Validity
Not Before: Jun 16 21:04:49 2026 GMT
Not After : Jun 17 22:30:49 2026 GMT
Subject: CN=EF86458296A28652733EF5E41AC885667AD26ABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:a1:d6:2f:aa:a1:ef:d7:ef:81:43:e2:9e:
0d:cc:8a:fc:c6:81:0c:bc:e8:0d:e8:e0:82:ef:4a:
68:43:bc:5c:d3:f4:2e:a5:d4:4e:76:9b:f9:47:c7:
c1:ab:07:a2:d5:8d:67:e6:d1:83:a6:13:65:c7:a1:
e1:c4:32:fc:8d:b9:da:66:0e:d0:4e:14:e2:90:0f:
0e:8b:85:2a:88:ae:0f:29:fe:cd:70:10:c4:3c:00:
48:d3:58:bb:2b:7d:20:3d:8b:24:4b:1d:5b:cb:48:
5e:82:08:53:09:18:05:01:ad:28:95:d4:eb:c6:12:
23:ac:5b:a4:72:ef:67:e6:7c:ca:fd:92:0f:99:e2:
f6:51:c8:8a:0a:f5:de:a0:9d:71:1f:c3:56:76:d1:
c5:ed:fc:b1:9d:eb:5c:f2:db:83:10:46:49:9d:61:
7d:bd:65:63:12:a4:e5:64:9f:25:2b:33:2c:e4:28:
7b:85:93:97:7b:eb:41:b1:32:8d:78:eb:0e:16:bb:
6e:42:84:7c:45:f8:73:08:e1:bb:f5:99:d8:e0:f6:
35:03:e4:53:a8:ae:73:c0:30:23:bd:44:ce:7f:6a:
3c:88:17:d6:12:8a:f9:07:c0:da:f5:85:ce:d1:e2:
67:cf:1b:38:a7:fd:8a:9c:c9:1d:85:7e:5d:14:96:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:86:45:82:96:A2:86:52:73:3E:F5:E4:1A:C8:85:66:7A:D2:6A:BE
X509v3 Authority Key Identifier:
keyid:C6:FF:E1:E5:84:38:BC:5B:35:72:39:10:4B:53:DB:D6:B6:9A:F9:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/C6FFE1E58438BC5B357239104B53DBD6B69AF9D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0e:2e:9d:38:51:03:11:79:24:bf:9b:81:78:81:1f:37:01:
8a:72:44:dd:14:d4:d6:d0:3c:84:93:d2:28:23:e6:77:0b:b7:
e4:b1:c4:aa:1c:7f:1b:4d:eb:7f:9a:45:dd:78:71:4b:5b:80:
78:73:bb:39:c4:e8:e5:46:41:00:d6:69:f9:1f:56:4b:ad:58:
89:51:24:b4:fa:f7:0f:3d:60:79:ae:30:1a:ad:3b:6d:f9:76:
ec:26:f5:9e:9e:5c:1f:06:8e:0a:14:c4:20:2a:70:52:fd:6f:
f5:76:52:8e:62:6b:c8:64:25:77:37:26:55:0a:30:71:f6:50:
00:d4:1e:a7:e2:96:15:57:67:1d:11:40:c1:5f:a8:df:cc:45:
37:2a:53:56:07:92:0b:56:02:84:39:9f:18:80:ae:75:ad:65:
f2:8a:7b:b0:28:9b:17:20:3a:91:14:9d:00:2a:82:84:6e:86:
56:8b:82:6b:4b:e3:61:cb:6f:2e:0f:02:9c:6c:6d:d6:4d:18:
4a:7c:78:89:91:fb:6b:88:72:0f:96:ff:48:51:7a:e7:4e:d6:
fb:f7:64:aa:a1:22:58:64:94:6e:bd:be:9d:ab:e6:cd:c8:93:
0e:3b:9f:76:19:86:98:45:84:1b:c5:da:26:cd:de:5f:22:ba:
86:d0:19:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:30 2026 by rpki-client