
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/6762769ECF2C909C26366B9D9DD5878F3A40A2AD.mft
File: 6762769ECF2C909C26366B9D9DD5878F3A40A2AD.mft (raw, json)
Hash identifier: OXXpl11AT4RrqZao/N8FcipaWGnIYqDONC3Kaj3Rn3U=
Subject key identifier: AA:D2:5D:4E:E2:25:41:91:D8:F5:18:0D:15:9B:D7:BC:11:23:2F:79
Authority key identifier: 67:62:76:9E:CF:2C:90:9C:26:36:6B:9D:9D:D5:87:8F:3A:40:A2:AD
Certificate issuer: /CN=6762769ECF2C909C26366B9D9DD5878F3A40A2AD
Certificate serial: 2FD440E8EFB9BF476DF7FA077496A3FB6D8D231D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6762769ECF2C909C26366B9D9DD5878F3A40A2AD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/6762769ECF2C909C26366B9D9DD5878F3A40A2AD.mft
Manifest number: BD
Signing time: Mon 21 Sep 2026 06:24:35 +0000
Manifest this update: Mon 21 Sep 2026 06:19:35 +0000
Manifest next update: Tue 22 Sep 2026 10:12:35 +0000
Files and hashes: 1: 3130332e3136392e3132382e302f32332d3234203d3e20313432333432.roa (hash: +kNxWxLOhoGk84Jk4YTYvL8/cD9b4IuN07WY2O/EUDY=)
2: 6762769ECF2C909C26366B9D9DD5878F3A40A2AD.crl (hash: TYH4JXd324YI12o2HrJ1khXr17TPnbtbb1d/B+BhrCE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/6762769ECF2C909C26366B9D9DD5878F3A40A2AD.crl
rsync://rpki-rsync.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/6762769ECF2C909C26366B9D9DD5878F3A40A2AD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6762769ECF2C909C26366B9D9DD5878F3A40A2AD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d4:40:e8:ef:b9:bf:47:6d:f7:fa:07:74:96:a3:fb:6d:8d:23:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6762769ECF2C909C26366B9D9DD5878F3A40A2AD
Validity
Not Before: Sep 21 06:19:35 2026 GMT
Not After : Sep 22 10:12:35 2026 GMT
Subject: CN=AAD25D4EE2254191D8F5180D159BD7BC11232F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:31:ed:c4:12:67:27:a0:01:1a:9f:f0:12:e6:
6b:b5:63:3e:7f:69:29:fb:5b:4c:ad:9b:a1:d3:8d:
fd:06:1e:11:b0:35:06:4f:6d:26:fd:b2:e4:a1:89:
7f:dc:09:3a:e7:51:17:da:5b:c7:1c:43:0c:6b:1e:
c6:69:73:7e:05:4b:6e:25:5a:82:13:79:8e:0d:6c:
e6:4a:99:86:c5:b2:81:25:c0:bc:22:e7:c0:b8:46:
89:39:8e:de:f8:40:cc:3a:44:9f:a5:b1:70:a5:80:
72:7d:c5:5f:d9:88:6a:85:52:af:a7:09:08:e6:af:
a2:69:db:f8:7b:d7:a9:00:a0:da:27:e6:4e:5a:25:
fa:0d:76:8e:8a:7f:8a:3a:55:d6:7c:ce:b8:f2:7e:
e5:c4:a9:80:85:d2:df:97:27:f9:54:89:8c:2b:7c:
fc:ed:88:06:32:a0:a8:96:c9:05:10:9a:c3:da:2c:
4a:a0:61:9e:c7:42:4b:29:e0:64:51:a7:77:f9:65:
d9:19:1d:40:b2:91:7e:91:f9:78:15:9b:70:53:d4:
12:64:64:29:57:31:ea:f8:03:c2:ad:cc:e3:be:aa:
6f:8c:c6:58:16:bd:ef:7b:fa:0b:41:d2:14:3c:79:
2a:8f:a0:f6:6b:83:73:ff:ab:66:5a:a5:ad:d3:8f:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D2:5D:4E:E2:25:41:91:D8:F5:18:0D:15:9B:D7:BC:11:23:2F:79
X509v3 Authority Key Identifier:
keyid:67:62:76:9E:CF:2C:90:9C:26:36:6B:9D:9D:D5:87:8F:3A:40:A2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/6762769ECF2C909C26366B9D9DD5878F3A40A2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6762769ECF2C909C26366B9D9DD5878F3A40A2AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/6762769ECF2C909C26366B9D9DD5878F3A40A2AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8e:9b:87:ec:c7:00:6d:aa:50:c9:17:5d:d8:30:2a:ed:86:
cd:81:29:2b:29:ce:75:02:84:50:af:12:28:89:bf:41:d2:f3:
f6:4d:2f:e4:9a:e9:16:0c:25:b0:2f:70:45:52:f4:a3:ac:b3:
70:70:46:8d:01:64:ce:bd:cb:77:ee:a7:7c:58:04:2b:b4:00:
93:c5:05:cb:1b:33:b5:6c:c1:1d:9e:d1:34:b5:e1:73:46:e9:
10:2e:44:8d:f9:38:d7:69:a6:ef:91:3d:85:a8:a5:9b:75:79:
5c:6b:53:e6:b1:67:38:29:fe:cd:ec:4a:88:c7:7d:84:52:59:
26:bf:24:20:3c:10:11:6f:02:e2:76:a5:47:67:56:ff:d7:7f:
b2:b5:8f:3c:cb:a6:b4:c9:5f:b2:cd:cf:6f:2f:a6:a4:ea:4d:
e9:e3:4c:29:8c:c0:b2:32:95:53:2a:6f:6a:56:d4:a6:b7:e3:
aa:08:b9:2c:26:fa:16:aa:36:53:d7:b6:a6:1b:b2:56:59:ae:
d5:96:85:67:31:c8:70:03:1d:03:9e:8a:3b:18:56:5d:bc:89:
7e:ac:e3:35:39:b8:d5:74:fd:53:79:be:96:3d:71:65:3c:b5:
01:5c:be:7c:ff:bd:9d:b9:b1:41:71:52:25:16:23:70:e9:fd:
75:02:71:b8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUL9RA6O+5v0dt9/oHdJaj+22NIx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc2Mjc2OUVDRjJDOTA5QzI2MzY2QjlEOURENTg3OEYz
QTQwQTJBRDAeFw0yNjA5MjEwNjE5MzVaFw0yNjA5MjIxMDEyMzVaMDMxMTAvBgNV
BAMTKEFBRDI1RDRFRTIyNTQxOTFEOEY1MTgwRDE1OUJEN0JDMTEyMzJGNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKMe3EEmcnoAEan/AS5mu1Yz5/
aSn7W0ytm6HTjf0GHhGwNQZPbSb9suShiX/cCTrnURfaW8ccQwxrHsZpc34FS24l
WoITeY4NbOZKmYbFsoElwLwi58C4Rok5jt74QMw6RJ+lsXClgHJ9xV/ZiGqFUq+n
CQjmr6Jp2/h716kAoNon5k5aJfoNdo6Kf4o6VdZ8zrjyfuXEqYCF0t+XJ/lUiYwr
fPztiAYyoKiWyQUQmsPaLEqgYZ7HQksp4GRRp3f5ZdkZHUCykX6R+XgVm3BT1BJk
ZClXMer4A8KtzOO+qm+MxlgWve97+gtB0hQ8eSqPoPZrg3P/q2Zapa3TjxvtAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqtJdTuIlQZHY9RgNFZvXvBEjL3kwHwYDVR0j
BBgwFoAUZ2J2ns8skJwmNmudndWHjzpAoq0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmIwZTM2NGItNzc5ZS00MGQ1LWFkMGUtZDkxNzg3NzhkNmIxLzAvNjc2Mjc2OUVD
RjJDOTA5QzI2MzY2QjlEOURENTg3OEYzQTQwQTJBRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NzYyNzY5RUNGMkM5MDlDMjYzNjZCOUQ5REQ1ODc4RjNBNDBB
MkFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmIwZTM2NGItNzc5ZS00MGQ1LWFk
MGUtZDkxNzg3NzhkNmIxLzAvNjc2Mjc2OUVDRjJDOTA5QzI2MzY2QjlEOURENTg3
OEYzQTQwQTJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALWOm4fsxwBtqlDJF13YMCrths2BKSspznUC
hFCvEiiJv0HS8/ZNL+Sa6RYMJbAvcEVS9KOss3BwRo0BZM69y3fup3xYBCu0AJPF
BcsbM7VswR2e0TS14XNG6RAuRI35ONdppu+RPYWopZt1eVxrU+axZzgp/s3sSojH
fYRSWSa/JCA8EBFvAuJ2pUdnVv/Xf7K1jzzLprTJX7LNz28vpqTqTenjTCmMwLIy
lVMqb2pW1Ka346oIuSwm+haqNlPXtqYbslZZrtWWhWcxyHADHQOeijsYVl28iX6s
4zU5uNV0/VN5vpY9cWU8tQFcvnz/vZ25sUFxUiUWI3Dp/XUCcbg=
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:17:13 2026 by rpki-client