
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft
File: 68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft (raw, json)
Hash identifier: zkDWdZ6rB0badpTUdGFXQrCffWo/WoVF8qNuP4hQAWo=
Subject key identifier: F0:37:63:78:D7:86:5F:75:89:79:06:77:B4:4C:02:0B:69:7A:68:68
Authority key identifier: 68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE
Certificate issuer: /CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE
Certificate serial: 2DB791BC50D5CE074C912074920DDE77C2222F4B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 10:06:03 +0000
Manifest this update: Sat 13 Jun 2026 10:01:03 +0000
Manifest next update: Sun 14 Jun 2026 12:32:03 +0000
Files and hashes: 1: 3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (hash: AfcLIhCoxrNIL4gRzBZvaf0VEddtgYfRViPlzgx7Sn0=)
2: 323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (hash: RqzBnuxk9dxcoh/IjiKr1/twWJoSn5/CF9hmDw/2Ve8=)
3: 68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl (hash: GExWvpdAQMp8Bk09hOrEPzCSsQPoKCQiZm8uvNLCE/I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl
rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b7:91:bc:50:d5:ce:07:4c:91:20:74:92:0d:de:77:c2:22:2f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68F007D710232A499BEB68E3E3BF5E7B1325A9DE
Validity
Not Before: Jun 13 10:01:03 2026 GMT
Not After : Jun 14 12:32:03 2026 GMT
Subject: CN=F0376378D7865F7589790677B44C020B697A6868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:37:d9:3e:e6:2a:5c:69:52:da:b5:d7:10:
ce:8e:19:43:5b:d6:1b:0e:56:d7:37:4c:5a:ec:29:
a5:6f:43:b7:d8:6d:e6:7b:19:08:88:09:8b:1d:ed:
7f:ea:54:1d:a0:ce:5d:ac:ab:12:8a:a3:61:c4:d2:
4c:53:22:b6:96:f9:fb:e5:0c:14:dd:79:17:47:6d:
76:a2:0a:09:e6:ec:94:43:b6:c9:32:1b:2e:51:1c:
ac:5d:c0:73:fc:29:7b:af:3b:88:21:8c:3c:10:b0:
95:f4:ea:73:0c:68:ee:86:2f:52:f3:db:40:96:bd:
6f:63:98:96:6a:03:23:6d:91:18:73:f1:ff:c1:53:
b9:c3:61:6d:04:a2:2d:7f:2a:0d:45:b8:f7:bd:28:
87:7f:f8:4f:03:7a:74:cc:86:0c:07:48:50:a6:b5:
4e:56:ca:a4:28:f1:36:00:74:cf:c3:6a:2b:ee:37:
eb:2e:4c:a6:78:d7:bc:cc:a8:fe:7c:59:5c:3a:ea:
0d:72:92:81:93:5f:01:76:b2:f8:e5:3b:ee:64:83:
38:eb:80:34:62:1a:14:c9:e9:2c:dd:8a:00:77:92:
5e:90:55:73:16:39:c8:7b:84:76:c3:16:d1:6f:77:
1f:f9:b7:bd:40:d6:9e:eb:75:f8:28:7c:05:bb:91:
59:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:37:63:78:D7:86:5F:75:89:79:06:77:B4:4C:02:0B:69:7A:68:68
X509v3 Authority Key Identifier:
keyid:68:F0:07:D7:10:23:2A:49:9B:EB:68:E3:E3:BF:5E:7B:13:25:A9:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/68F007D710232A499BEB68E3E3BF5E7B1325A9DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:83:7d:cb:8f:9a:51:f1:69:98:da:17:77:79:ca:e4:15:c7:
52:df:41:72:83:2d:df:c8:28:c4:d3:70:17:18:93:af:70:8d:
04:76:98:1e:3c:6e:4b:2e:4c:2e:4e:a7:94:19:a6:ed:17:9c:
95:ea:6c:8a:58:9e:89:07:ef:09:90:66:85:ec:c6:97:59:e8:
23:97:96:0f:fb:e7:c2:bb:67:f7:9b:f1:e2:5f:f6:3d:4b:90:
72:6e:ae:99:3a:68:60:9f:fc:9f:91:5a:a6:09:86:8a:a6:b7:
30:d1:e0:b2:88:ab:be:88:e4:d3:92:7f:ee:bf:d7:9c:dd:ae:
62:b1:1b:da:2c:c7:55:60:e8:cd:43:7b:c4:1f:f2:68:f3:2a:
cf:a6:97:54:0e:59:62:7d:a7:67:9c:cd:19:a7:b1:6e:37:37:
71:14:49:bb:d4:7c:89:6f:c0:49:57:13:4f:d2:17:94:e6:ef:
e5:13:f3:19:75:e3:ef:21:81:39:47:5e:18:57:05:76:79:75:
8c:93:1d:a5:95:a6:b6:62:cf:4b:9e:2a:58:3c:94:4b:70:9c:
c9:f2:df:4a:97:76:43:75:13:b9:02:e0:52:2a:e5:83:28:bc:
8d:de:3b:af:d2:6e:33:d2:60:ba:ab:d3:97:24:5f:41:ca:50:
66:da:dd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:10:33 2026 by rpki-client