
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
File: A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft (raw, json)
Hash identifier: PUi89rN0KEfyFYtFb3szZrTA2byof0miK5+XQZN13B8=
Subject key identifier: 2B:5A:AB:34:99:9B:66:57:EC:9A:80:68:05:41:8B:B1:B2:85:A2:A7
Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
Certificate issuer: /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Certificate serial: 443A5525939BDEDC407954808FA3049C00084C7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 08:58:53 +0000
Manifest this update: Wed 17 Jun 2026 08:53:53 +0000
Manifest next update: Thu 18 Jun 2026 10:08:53 +0000
Files and hashes: 1: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: y/B5rdY50adVs0er15Ug7P5cwgk8KxerWANg5QHwyDQ=)
2: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: HE8Pj52+IZhV7TEkL1SN8xO4SlYdr60vODvajC36cyk=)
3: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: oQq+nr1R3/LIq3FYUPDo+7lWe378qim9S5GBtc/7+XI=)
4: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: g9UTMN38ofb78nZGj/6EE+B5/x+vpqW+tFIfQppedNY=)
5: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: iYrGJJ9iIv+cRwIblIq+9q3Q7tv/1rCHNku1x0uMX3o=)
6: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: qIa6emmkoMA4lane7jyL1Uz074v6ftwy/PmbugIuJLI=)
7: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: uZzBwW9d4r/pMm/O/U0uE2dQ0H137+IT+iWRLJXsbtU=)
8: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: mLD+GhO1xXk2PTbUDcTfshDEYKPNXgJniWHXGxp+RlI=)
9: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: cBuCEcM59m7bokueA5utqjCb5MDgTJH77vwBhsI0byM=)
10: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: smvcSJU7arKg9wwHjFpQV6E26iIrv2S+SKozwQ9k4AA=)
11: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: ZpP6fFTVzHg2TsrE8eBvLbSiODy4VISVHgrK1I2J8vE=)
12: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: YctTfX6DGOTRKPoRHGUwycW4/Zl5+c5Mmaff4w6V6rg=)
13: A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl (hash: OWCXyJ9RrtscSHYGi0fW4gi4LaUbjmNpt0jOCFxKcjA=)
14: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: 1sjbDI9dhuriYC2cGKfsX3Esj0PZpCf3CbJjOgUfU5k=)
15: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: S8Ek9RlB50nYWIYGV3GDgnzVz7pzb0Rv9NpPnpubFVA=)
16: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: IgDS+soANP3J3I/M4lqmTWHqHF/CWw4GOux2+pU3uZk=)
17: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: wOk7wCCxqtS7Iv5pVlomQKnIoRly1bMRWor8VmTMwhc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:3a:55:25:93:9b:de:dc:40:79:54:80:8f:a3:04:9c:00:08:4c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Validity
Not Before: Jun 17 08:53:53 2026 GMT
Not After : Jun 18 10:08:53 2026 GMT
Subject: CN=2B5AAB34999B6657EC9A806805418BB1B285A2A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:ac:52:82:f8:c9:17:80:5f:b1:5b:6a:ca:
28:2e:c2:9b:ec:e7:73:3d:60:fa:68:b9:e5:f8:ba:
b8:0d:d3:7f:84:a7:ca:51:61:3e:b6:14:27:33:b7:
1e:fb:4f:d0:9c:d7:c6:1d:a2:8c:b6:95:08:63:d3:
84:c2:db:65:97:c8:d4:a0:a1:61:11:fb:6b:a2:c5:
23:f9:f3:9d:d8:a9:ad:00:0e:fc:29:7d:94:da:6d:
9c:36:85:ff:80:5d:9e:07:c5:e3:29:67:b8:2a:62:
d1:20:10:9f:a0:a3:41:ee:9d:f0:77:d1:3c:d3:02:
6c:01:2c:ff:bf:5e:48:e0:45:51:1f:8e:34:74:fd:
75:b1:01:02:cb:69:d3:40:da:67:a8:c7:27:fc:ef:
92:f1:d2:c3:7a:70:cd:d0:46:ac:aa:8d:10:19:46:
ea:e4:f4:f2:5b:90:01:83:51:f1:c2:b5:e4:ac:f6:
ee:71:f5:6f:0d:d0:ce:02:3a:98:f2:cd:31:0c:50:
ee:7f:34:21:5a:9c:cd:0c:76:23:fe:cc:b9:0d:da:
a4:b0:e4:f2:2c:cc:16:b0:dc:72:6b:f5:9a:e6:b9:
cd:ea:ab:be:22:45:78:31:35:25:96:ce:c2:ec:ab:
a0:23:c4:d1:02:a3:a7:f8:4b:82:63:c3:97:8d:51:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5A:AB:34:99:9B:66:57:EC:9A:80:68:05:41:8B:B1:B2:85:A2:A7
X509v3 Authority Key Identifier:
keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3a:ad:61:e2:9d:d3:77:25:b2:38:f7:08:4c:91:9c:d9:e9:
40:b2:63:bc:99:ab:96:69:d4:6e:ef:5e:ce:0b:f6:82:38:98:
1e:33:cc:4a:96:8d:10:90:43:e8:15:8b:40:27:c7:69:92:2b:
54:a9:58:e2:37:f4:26:11:8a:55:c5:59:96:56:d1:d5:2b:29:
46:fd:d5:1d:9d:68:f0:f8:7b:7a:92:91:a3:41:6b:b8:1a:45:
52:09:fd:00:96:9a:ea:6b:81:99:28:b9:8c:9f:6f:73:39:96:
6e:08:fd:62:0f:98:3a:c6:e1:41:66:ef:37:5a:27:8a:21:bf:
25:93:d6:93:c9:5d:ad:c3:23:6a:2d:8c:b5:5f:67:40:e2:7c:
fb:af:39:1e:1b:71:d7:4c:05:ba:00:59:17:bc:4e:8e:3e:78:
15:cf:3f:68:0a:71:3e:41:c7:f1:a6:98:66:ea:f8:ff:f0:fd:
08:5c:79:0b:14:e8:44:5f:fb:80:cc:94:0f:34:70:a5:f7:67:
fc:51:16:53:5b:50:d9:05:69:8e:d3:aa:ab:ba:4c:df:3d:58:
d8:20:9e:04:c6:9e:42:a2:fe:fc:35:73:0b:f7:4a:de:62:90:
f1:49:14:50:f5:b6:2a:35:a8:64:6c:21:df:da:74:f4:74:83:
16:8e:cd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:32:41 2026 by rpki-client