
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
File: 68A727878748F40EF62D744B06303F71A6B3F75C.mft (raw, json)
Hash identifier: XVtwptLjoZRCrxGdw/7cB+JshVwS8ADaNrcJTuT7NQE=
Subject key identifier: 9E:E0:64:DD:CA:DB:9C:8C:29:DF:48:98:64:87:D5:64:BC:BA:3E:6D
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Certificate issuer: /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial: 2C7928E881C916D88AAF5964FD1BE1E38B641D3B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 13:12:47 +0000
Manifest this update: Mon 21 Sep 2026 13:07:47 +0000
Manifest next update: Tue 22 Sep 2026 15:54:47 +0000
Files and hashes: 1: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: pivfi9ji1ihnIAJ1idyzgwRmHruzS5uloDq3BscV5e0=)
2: 68A727878748F40EF62D744B06303F71A6B3F75C.crl (hash: lDAW+4lGKpOd3hFDIJcghSBTC5sSV2M1OQBhkOiE0jY=)
3: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6s+J2D1xc+Un9FBlPt0gue96vFI4b8yX8woz+h6eFQo=)
4: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: c+NnvyqB3knbtuO7KdhM0hJjec2wwtXVinOUBhE4/24=)
5: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: CeqXPBLKTKcb4QWFvGgnRWapqG6f1Vmt1NBorMo+v2c=)
6: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: PvN2AuvxpSJAs/KNp18Hx71tEJNrxtBQ9MHqNXHlPGI=)
7: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: r2ZYiFd01bWs0eEN9nD+Mp8m+K6B0HFPjNNciuS/bGc=)
8: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: gR1DTuGl5zoFpulg1oigiYRS4tO3/p7LnE5jaqD1jaU=)
9: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: vW5w5IkuRb83zA5ANSFF1CJerE321mN8QnbQgdvihxM=)
10: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: ghKRefxmMKmKlt978ds7tp9D7g1WWsJyZmES+glyEMw=)
11: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: WRqUfw4kkLNha7EwV7NENaJIZvhb1ikV9t5ePDUcyD4=)
12: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: hz0u1O8torhSAEu0GK+s8W9famRD261lcziOb/ZySjc=)
13: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: NLB3lY9DFzaCd5CKPizbBhfO5LYHEpYinHrGVDAbCes=)
14: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: S8QwzcFeryIcuSdPBiMnAYW7dqUXcBjtqFkLeF9/BcE=)
15: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: IbAFzZACUnD6lwBQxPhQqMDiyphOZDVL6AMwxKGfiyQ=)
16: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: Tv2GPPjlGM6s70rJUxZeMrMG5Grjr8wYER/e5zbXioI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 15:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:79:28:e8:81:c9:16:d8:8a:af:59:64:fd:1b:e1:e3:8b:64:1d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
Validity
Not Before: Sep 21 13:07:47 2026 GMT
Not After : Sep 22 15:54:47 2026 GMT
Subject: CN=9EE064DDCADB9C8C29DF48986487D564BCBA3E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:82:61:b7:5d:e6:9b:86:91:e9:64:70:5c:
e3:cd:26:5e:65:91:e0:b7:e5:41:96:e3:78:b2:a5:
61:09:88:5b:89:b2:b8:e5:db:ca:40:29:9c:ab:39:
f0:06:ef:64:62:ca:88:30:58:35:22:a8:d9:bc:3c:
e8:7d:8f:e3:8b:e4:95:06:94:af:83:90:35:93:16:
c9:5a:af:97:84:3a:84:c3:03:70:c7:78:bc:17:da:
58:62:5a:73:9d:67:f7:1e:4f:3a:ab:58:f9:db:c5:
52:74:b8:ab:18:06:e6:b9:f6:16:71:da:c8:28:33:
8a:3e:00:53:e3:b5:70:57:b2:e6:62:a2:59:e7:63:
0e:69:db:97:f5:63:82:8c:b6:e4:05:44:2a:ae:bc:
69:6f:64:dc:73:ae:7b:d9:1f:72:86:03:cb:ca:2f:
a9:d6:2e:4a:b0:c9:37:cc:69:a1:ea:7c:6e:d2:6b:
c8:ab:94:98:f5:6d:34:e1:39:9a:e1:b2:c8:21:79:
36:a1:f9:92:72:6c:2e:72:25:94:ef:3f:b5:07:8b:
57:6a:09:31:91:b5:a1:d0:77:cc:e7:f6:1c:c3:ca:
1a:05:87:c7:0d:b2:e5:71:44:4b:9d:e7:b7:95:7b:
c5:e3:a5:6f:dc:7a:14:1e:bd:fc:f4:1f:b6:0d:bd:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E0:64:DD:CA:DB:9C:8C:29:DF:48:98:64:87:D5:64:BC:BA:3E:6D
X509v3 Authority Key Identifier:
keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:51:f3:08:e9:d3:62:68:36:8d:73:b9:cf:08:38:a3:9c:b6:
9d:3a:a2:8a:55:5f:23:de:86:e0:16:1c:5a:ab:a0:6d:48:db:
a5:19:b3:00:f4:77:b6:58:56:e8:83:3c:27:28:bb:cd:d7:c6:
f4:27:a1:ae:cc:29:15:e5:ff:66:6f:e5:49:75:b2:62:aa:cd:
2c:56:a8:a0:53:a2:17:c9:d5:72:f6:bb:ed:90:0d:39:0b:97:
8e:3d:a7:7b:39:fd:63:48:3e:7c:16:7b:10:04:07:4b:88:2e:
44:de:ec:cc:0b:0c:d1:1f:23:29:85:45:9f:17:f1:3f:75:a6:
9b:bd:f9:61:c9:f2:93:c7:95:cc:3d:09:55:35:4e:3e:e2:ad:
d2:0e:79:93:0c:85:08:c1:ca:23:d9:92:3a:ce:f2:73:8f:c8:
c2:d3:4c:7f:a2:af:fb:a4:2b:c9:c1:a8:6d:ec:e2:76:40:ec:
62:56:a3:7c:a0:90:6c:fb:a2:ac:dc:11:84:ce:96:dd:bb:8d:
de:93:e6:22:6e:9c:4c:4c:ee:e0:27:f0:fa:13:56:70:6b:bd:
46:8d:76:47:40:3c:ff:30:0b:42:9f:ee:f4:38:e5:3b:0f:28:
b0:65:b2:10:e0:32:cb:04:a2:5f:e0:e9:69:9c:ec:88:d6:42:
f9:79:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:47:48 2026 by rpki-client