
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
File: 6392804C8E02387641837CC130058F05667A805F.mft (raw, json)
Hash identifier: SoYOjb4t4CeBt5jBUa2fUYFF1NSJXhHGvg+Z20Ay3W0=
Subject key identifier: 5C:3B:FE:80:8A:C9:F6:B3:61:DF:8E:78:3D:A0:22:77:62:3A:EF:3E
Authority key identifier: 63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
Certificate issuer: /CN=6392804C8E02387641837CC130058F05667A805F
Certificate serial: 4A772E09C85F25E54F372816F1E964097F7F17DA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
Manifest number: C3
Signing time: Sat 26 Sep 2026 01:47:33 +0000
Manifest this update: Sat 26 Sep 2026 01:42:33 +0000
Manifest next update: Sun 27 Sep 2026 02:13:33 +0000
Files and hashes: 1: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: pPJq2G46Sz99bsDL9wBJRoipwgn9lZRSYh+JhFJc+0o=)
2: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: TRMnk8iAgB4rpOEvi1c2ELL28OXN6Zn5l8OWp2rvcOg=)
3: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: SLlp2TgUJDxKzIChZFNu8nUMQolYFP9BFrEaRb9z5dQ=)
4: 6392804C8E02387641837CC130058F05667A805F.crl (hash: CXV5gBO1H5a4zCQZ/FvbRRpM9oO1GEoH1C/TRKuL6Iw=)
5: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: l3e6649ftGy/RyoIrij/BvUADN52ueYZyLhMioJKOn8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl
rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:77:2e:09:c8:5f:25:e5:4f:37:28:16:f1:e9:64:09:7f:7f:17:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6392804C8E02387641837CC130058F05667A805F
Validity
Not Before: Sep 26 01:42:33 2026 GMT
Not After : Sep 27 02:13:33 2026 GMT
Subject: CN=5C3BFE808AC9F6B361DF8E783DA02277623AEF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b6:0c:b7:5b:84:e6:7d:1d:96:1c:4a:11:81:
f7:17:6c:87:6b:a5:8a:17:6c:5e:2b:91:a0:bb:cf:
51:a8:fe:97:be:50:07:fd:1e:43:f1:a3:d1:c8:35:
fd:2b:ac:67:45:16:d7:48:a5:13:b5:9f:14:6e:8c:
37:3e:5c:f0:16:30:40:02:e2:78:9a:42:e7:cb:a3:
3f:4e:2b:8e:de:f5:42:1a:86:e3:94:4d:09:b6:09:
79:4a:28:6f:6f:b2:18:c8:f5:b9:6f:96:0e:0f:e4:
c1:d7:4a:b4:63:1e:01:7a:35:9f:b8:39:94:9a:8c:
fe:93:6a:d7:d0:b3:a4:f0:04:49:de:ca:ab:da:f3:
b3:b0:e3:c2:6c:e7:8e:25:df:57:ef:db:e7:27:29:
e3:6d:ce:58:86:0a:f4:fd:fa:dc:c1:d9:f3:42:78:
ac:3d:4d:d9:7f:01:bb:1c:e4:33:3b:c7:68:6f:89:
c7:17:1e:33:ff:a0:a1:b7:91:f5:ed:e2:1c:9d:9e:
99:81:be:bc:87:91:69:71:63:c9:65:29:04:f6:64:
15:06:c4:26:15:b3:1a:69:e2:74:21:05:5a:13:c5:
98:2d:8a:29:f0:60:b2:dc:09:4e:0d:c9:4c:3e:0c:
78:5a:48:27:ee:a2:18:b0:d7:06:8d:7f:08:25:a9:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3B:FE:80:8A:C9:F6:B3:61:DF:8E:78:3D:A0:22:77:62:3A:EF:3E
X509v3 Authority Key Identifier:
keyid:63:92:80:4C:8E:02:38:76:41:83:7C:C1:30:05:8F:05:66:7A:80:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6392804C8E02387641837CC130058F05667A805F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/6392804C8E02387641837CC130058F05667A805F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a6:17:23:c3:32:4c:34:30:8d:a7:81:30:f5:60:4c:e7:71:
5d:95:cb:68:bb:56:7c:4b:d7:0b:ed:50:e2:8f:13:38:0a:cd:
a9:be:a2:03:b1:71:0a:fb:df:11:84:f0:4f:e8:c0:07:9a:ed:
a1:df:73:b5:59:1a:52:0f:8a:4b:17:4b:8f:23:5a:fa:fd:c8:
ee:65:c8:4b:58:dc:b6:02:7d:96:a8:b0:24:24:27:c3:4c:bf:
73:55:22:a3:b0:02:89:cf:b2:f3:b4:6f:c8:a6:b9:09:01:0a:
e0:38:99:84:3e:61:02:23:2e:03:61:35:32:d4:75:c5:05:03:
60:bf:77:5b:72:df:4c:df:f9:d7:51:53:f0:59:13:43:22:33:
19:8d:7c:4c:00:63:b8:95:12:99:a5:da:31:3b:6c:23:bb:4b:
d2:1c:a0:36:62:7d:8e:37:4b:d1:3c:00:1a:c2:10:0d:7c:18:
8a:91:7a:8e:62:2e:a8:f4:b2:c8:fa:35:48:ad:ab:ee:7e:7e:
4d:1b:d2:41:d4:e5:49:fa:3e:0b:df:3d:df:70:38:aa:9b:ff:
ae:06:05:15:13:7e:c6:c9:2c:74:f8:4f:ff:ae:bf:75:78:09:
ce:fc:2a:d8:6d:44:ac:c6:97:1b:b1:5d:81:47:d2:0c:8c:48:
0d:e0:5f:4e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSncuCchfJeVPNygW8elkCX9/F9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5MjgwNEM4RTAyMzg3NjQxODM3Q0MxMzAwNThGMDU2
NjdBODA1RjAeFw0yNjA5MjYwMTQyMzNaFw0yNjA5MjcwMjEzMzNaMDMxMTAvBgNV
BAMTKDVDM0JGRTgwOEFDOUY2QjM2MURGOEU3ODNEQTAyMjc3NjIzQUVGM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNtgy3W4TmfR2WHEoRgfcXbIdr
pYoXbF4rkaC7z1Go/pe+UAf9HkPxo9HINf0rrGdFFtdIpRO1nxRujDc+XPAWMEAC
4niaQufLoz9OK47e9UIahuOUTQm2CXlKKG9vshjI9blvlg4P5MHXSrRjHgF6NZ+4
OZSajP6TatfQs6TwBEneyqva87Ow48Js544l31fv2+cnKeNtzliGCvT9+tzB2fNC
eKw9Tdl/Absc5DM7x2hviccXHjP/oKG3kfXt4hydnpmBvryHkWlxY8llKQT2ZBUG
xCYVsxpp4nQhBVoTxZgtiinwYLLcCU4NyUw+DHhaSCfuohiw1waNfwglqc4XAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXDv+gIrJ9rNh3454PaAid2I67z4wHwYDVR0j
BBgwFoAUY5KATI4COHZBg3zBMAWPBWZ6gF8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzZhMDAyZGUtMGNkZS00NjJlLTk0MDQtNDZiYzYyNzBlMDRmLzAvNjM5MjgwNEM4
RTAyMzg3NjQxODM3Q0MxMzAwNThGMDU2NjdBODA1Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82MzkyODA0QzhFMDIzODc2NDE4MzdDQzEzMDA1OEYwNTY2N0E4
MDVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzZhMDAyZGUtMGNkZS00NjJlLTk0
MDQtNDZiYzYyNzBlMDRmLzAvNjM5MjgwNEM4RTAyMzg3NjQxODM3Q0MxMzAwNThG
MDU2NjdBODA1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEmmFyPDMkw0MI2ngTD1YEzncV2Vy2i7VnxL
1wvtUOKPEzgKzam+ogOxcQr73xGE8E/owAea7aHfc7VZGlIPiksXS48jWvr9yO5l
yEtY3LYCfZaosCQkJ8NMv3NVIqOwAonPsvO0b8imuQkBCuA4mYQ+YQIjLgNhNTLU
dcUFA2C/d1ty30zf+ddRU/BZE0MiMxmNfEwAY7iVEpml2jE7bCO7S9IcoDZifY43
S9E8ABrCEA18GIqReo5iLqj0ssj6NUitq+5+fk0b0kHU5Un6PgvfPd9wOKqb/64G
BRUTfsbJLHT4T/+uv3V4Cc78KthtRKzGlxuxXYFH0gyMSA3gX04=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:27:45 2026 by rpki-client