
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
File: 6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft (raw, json)
Hash identifier: hmQS2Rs4I78++2fHMEp4HPYNS88gv30XJXyZdjXsfqs=
Subject key identifier: 61:C9:F0:CE:0D:B9:EF:96:43:F1:53:B9:43:A4:86:4C:5B:DE:BE:51
Authority key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
Certificate issuer: /CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Certificate serial: 21245C4527C8601E1239E0099343B86C746ECB10
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 17:23:13 +0000
Manifest this update: Mon 21 Sep 2026 17:18:13 +0000
Manifest next update: Tue 22 Sep 2026 18:25:13 +0000
Files and hashes: 1: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: ieaoOIKWcjfMopIKpCICGAmLYWwCSO+V3LkDuBSNkT8=)
2: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: Wvbg4+GD4iqvIQYlS3uoYOVUygK7AWNPw3RQRNj68WY=)
3: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: ysYXY8Og9pIRdS9Mximv3wY/d5ba67AO7yhPpTjNltI=)
4: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: G+y1F+6WafU6W/Chxw+c2cx5xyPCDvh0bU8Z2Hol69g=)
5: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: Z6QAti3PcHBV90jcJBYSuP5NzwSFPFHOvN09h9cPcv8=)
6: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: LAUJzImDyMcLaxvXOPu7YXEqU04fBD2R+B9Fx7oa3PI=)
7: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: ZPDwYO2P6k8WjawbES/6S1o1QZK3XoCLsSCHN9ik8MI=)
8: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: 7zhNfhcyJKgN7kaxC80uWUI6jRdb18+Z+fZTl9tGqDE=)
9: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: EnPb48KAH/rDHK4BXBIr8OrfPZBZCqfsFv/VR+LxTZA=)
10: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: SqRthFkIhavYM0HLmmT/c7rjyHQa7gUUZFkZYgMFOus=)
11: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: mLNvyo56xMvlY2ZSKvstmsPMbawgSec2YeBLS8bZ9sA=)
12: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: lJAR5H9EAjowki+F3wTub0E5xXRygZB7vWolMlHO9Ks=)
13: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: DePOqwtS+Yy/vwnGCfzYifsz/IKHcq1iOiguiAW2xIk=)
14: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: jCjqsNCdBEFIqMkeYj7DtRya4SyDxnX4Y5acueY82W8=)
15: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: gDi9lsZTgWpDsqBFFdEKjdwXfOikVjH6Fxotmc+Vgaw=)
16: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: kpDzav+NfWvWz3egyn4r8aVxx4KUoQ4n0QZWFhLvaI0=)
17: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: k9ygR7dcCcgQZcCVUZosJ0kFFCk6RTnOiQEs0TkSlyM=)
18: 6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl (hash: LFZEreuq/sxNf+Q648CCsx0SqB3QVXp3YD1TXtXTLOs=)
19: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: 72I3Y1PxU+BUnijfN48Lj2lvSmClHCbdAP1EdcsqnEY=)
20: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: s511aUhrDoqnfoWhUJdvzunShOrgJJ2eEdfvPOc7/iM=)
21: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: SkkIe4wvJDfaCFpHfpB2OtR1kDRXOa1S8sX9Q6iNz1o=)
22: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: QtJsRt2bJkV+pUkYXyZvp3UviU6T+E4EYmhQxwxw1j4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 18:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:24:5c:45:27:c8:60:1e:12:39:e0:09:93:43:b8:6c:74:6e:cb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Validity
Not Before: Sep 21 17:18:13 2026 GMT
Not After : Sep 22 18:25:13 2026 GMT
Subject: CN=61C9F0CE0DB9EF9643F153B943A4864C5BDEBE51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:79:99:0d:2f:ed:cc:da:60:75:f2:aa:89:78:
db:be:be:37:3e:82:0a:fd:fa:4b:dd:80:97:8c:2d:
4a:96:fe:3b:1d:f4:c5:34:39:ee:e8:51:a2:ae:db:
7d:1a:0e:08:a1:27:1c:48:c7:1d:fa:22:fb:8b:4a:
86:d4:d2:c1:2b:e4:a5:3e:52:81:52:7e:fd:55:db:
50:2f:f2:25:b0:3f:95:d3:da:3a:6c:49:b9:8b:29:
9e:1c:5c:2e:7c:84:41:47:de:d5:f0:49:e1:19:cc:
31:d2:9b:a1:12:27:2b:65:c4:73:b8:70:c2:fa:7c:
40:67:9d:d3:61:b5:9a:48:b3:8c:07:12:32:1f:cd:
7b:ff:d5:aa:9d:54:34:3e:f1:d6:50:14:fd:5e:9e:
2e:f8:c4:78:cd:56:ea:d7:be:12:e8:cc:fd:4c:cc:
11:db:62:50:ac:36:fa:b6:40:b6:9c:17:52:96:f4:
7f:41:1b:5c:33:f6:56:e4:9b:92:a4:51:35:14:74:
d3:e7:64:be:6c:a4:aa:b3:f7:1a:d8:b1:ab:63:50:
bc:fa:3b:6e:41:82:ec:c6:4d:41:ec:19:41:17:61:
a5:c9:42:7f:49:bc:8d:96:54:68:05:36:8b:27:30:
85:74:21:31:97:31:ab:e9:a5:9d:af:d3:65:9f:96:
78:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C9:F0:CE:0D:B9:EF:96:43:F1:53:B9:43:A4:86:4C:5B:DE:BE:51
X509v3 Authority Key Identifier:
keyid:66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0a:1b:b7:64:39:b3:f1:66:8a:1f:77:96:98:b7:9c:53:81:
d1:bc:18:39:2a:3c:24:6a:1a:89:ca:74:a5:d9:10:8a:8c:04:
e1:c8:48:72:80:a7:9d:d7:f2:41:9e:af:2a:57:19:7a:77:ad:
fa:3a:3f:71:88:e4:bc:c9:78:b9:43:fb:7a:a9:c9:db:17:19:
45:30:fb:2c:bf:be:95:1d:02:45:2e:43:e0:3c:8f:0a:97:a8:
8a:d3:56:ba:7e:61:c6:19:0c:53:4c:2e:41:d1:21:71:d3:4a:
d7:02:20:fa:8f:6b:0b:b1:d8:2e:bf:9d:58:d4:3f:27:20:cb:
67:9c:10:11:65:70:3d:62:ca:b0:d8:48:f4:87:3b:90:5f:0c:
fd:f4:7c:c6:16:dd:23:c2:7c:dd:90:12:de:20:04:67:a3:97:
c5:70:0a:62:66:fc:15:b0:e8:99:b9:87:8c:38:14:0c:8a:d9:
c7:b5:c1:08:e0:2c:87:68:b1:77:88:b3:ac:11:d4:b0:72:4e:
60:ac:1c:c4:8d:2a:f1:ff:15:c7:9b:71:43:42:b5:c0:c8:96:
44:11:4b:c1:6e:e7:47:8f:5a:e6:3b:84:b7:d8:a2:78:1d:a1:
3a:a5:55:13:54:41:a3:13:9a:a3:22:72:ba:55:c6:94:6d:38:
e8:3e:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:28 2026 by rpki-client