
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
File: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft (raw, json)
Hash identifier: yTi5lXBB44SzBqMnrRmZ4rMtod79jrigXY52OFEK62k=
Subject key identifier: 40:DF:18:78:CC:73:76:DD:66:91:5F:0F:23:AA:27:CD:A7:FD:64:06
Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
Certificate issuer: /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Certificate serial: 6682A6E9EE6FEE98F4697F7B1A4830E098CA1EDE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 13:15:45 +0000
Manifest this update: Sat 13 Jun 2026 13:10:45 +0000
Manifest next update: Sun 14 Jun 2026 14:44:45 +0000
Files and hashes: 1: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: ArAw1U/ObqC6nylMjrPDR+er3LEvT016ghjJZD3baiw=)
2: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: JbJvmvToLRsj/pbiH1e96nax2mjHa9GpGHMhuuSXERU=)
3: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: vO+Q8HZjgmJonBgHOxFWAnJzI9j2ku3exsOHuLSofhs=)
4: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: r+nuLztYujAHMA3h3J8e3UnpoppY1KFa5/V4VYVp7Wg=)
5: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: rh10KjKVWoQwoKdQAU/xuosvzsdN9Rw59HlxfUxCKPU=)
6: B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl (hash: iJXje0rXK1QB/GFdbCkmTQ9YW1gfIe0kMHu5e+Diyw8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:82:a6:e9:ee:6f:ee:98:f4:69:7f:7b:1a:48:30:e0:98:ca:1e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Validity
Not Before: Jun 13 13:10:45 2026 GMT
Not After : Jun 14 14:44:45 2026 GMT
Subject: CN=40DF1878CC7376DD66915F0F23AA27CDA7FD6406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:89:d0:0b:8d:5b:8e:b8:54:bd:c0:2a:19:83:
9a:fc:67:2d:46:80:51:bf:18:83:b1:00:9f:c8:7f:
b8:5f:c6:58:6a:33:21:5f:ba:81:a8:d3:2d:c2:65:
48:43:62:63:d8:20:ee:1c:96:03:3c:c2:f0:fd:24:
2b:f2:a3:a4:d8:a4:d8:f6:9b:d8:49:35:77:e0:24:
21:00:97:82:fa:d6:86:7b:e9:83:d3:cc:4d:cf:e1:
6e:ca:1c:9b:a2:e3:2f:c2:bc:40:67:32:fe:98:51:
2d:a3:c4:38:af:07:e2:3b:e2:10:5a:b1:08:1e:52:
fd:f6:a3:f2:68:b7:84:a8:84:e2:2e:88:dc:b1:6e:
d9:c8:4d:87:c6:ac:cc:e6:f2:bb:f3:69:b7:70:b4:
af:a3:b6:58:a9:89:6f:64:7c:4a:9b:97:e0:24:ac:
3e:bd:9f:f2:69:48:9a:3f:82:60:6d:77:2e:96:4d:
b2:4c:65:5e:9c:2b:d9:97:2a:56:e7:3e:aa:36:ff:
ec:ee:29:1f:75:38:80:18:f7:01:d4:74:74:47:16:
23:56:1e:0a:01:64:4a:31:0b:c3:db:83:50:d4:66:
04:77:a3:92:ee:6d:e3:9e:23:a3:cc:cf:93:c7:70:
d0:60:d1:99:24:0e:1c:64:59:67:7e:79:18:c3:5d:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DF:18:78:CC:73:76:DD:66:91:5F:0F:23:AA:27:CD:A7:FD:64:06
X509v3 Authority Key Identifier:
keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:30:23:ea:10:6e:3c:7a:ea:92:e2:d9:5c:bf:ba:d7:f5:cc:
86:fe:ec:3f:11:2e:a8:cd:f7:0f:e8:91:dc:44:35:32:08:53:
3c:71:ad:30:d3:05:a5:02:8f:02:ec:71:d2:4b:ca:45:95:52:
6d:59:6c:b3:fd:11:cb:c1:f0:95:a1:cf:f5:d5:98:e3:b4:a8:
c6:e5:51:15:29:d8:17:02:9c:97:b5:d6:4e:e5:f3:e7:a3:e1:
4a:5c:96:1b:11:87:bf:40:a8:61:38:c0:ac:e1:27:f3:4a:2a:
f1:68:54:df:31:42:dd:6a:d4:98:87:b9:f8:79:12:01:a4:8a:
7c:84:32:85:56:94:7b:32:0b:6c:7a:29:ed:6e:67:e0:ec:97:
70:12:ed:26:12:aa:9b:aa:8b:09:21:a5:c9:25:b1:38:1d:7b:
7e:b9:cf:5a:d6:77:34:8d:a6:16:7c:92:97:1b:59:21:b0:c8:
4a:3f:9e:87:71:fa:1a:59:78:d2:8e:c3:6d:40:8c:8b:2a:14:
6f:a7:62:b1:3c:6b:de:db:15:e6:7f:ab:7c:99:5c:ea:e6:ca:
d0:54:9d:06:17:0f:f9:d6:d6:e1:30:e2:d8:b6:38:43:6a:32:
fd:73:d1:ab:a2:e3:65:a3:18:46:c9:03:31:02:31:a3:14:c6:
a3:0b:57:6c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZoKm6e5v7pj0aX97Gkgw4JjKHt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4
MDc3QjRFRjAeFw0yNjA2MTMxMzEwNDVaFw0yNjA2MTQxNDQ0NDVaMDMxMTAvBgNV
BAMTKDQwREYxODc4Q0M3Mzc2REQ2NjkxNUYwRjIzQUEyN0NEQTdGRDY0MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyidALjVuOuFS9wCoZg5r8Zy1G
gFG/GIOxAJ/If7hfxlhqMyFfuoGo0y3CZUhDYmPYIO4clgM8wvD9JCvyo6TYpNj2
m9hJNXfgJCEAl4L61oZ76YPTzE3P4W7KHJui4y/CvEBnMv6YUS2jxDivB+I74hBa
sQgeUv32o/Jot4SohOIuiNyxbtnITYfGrMzm8rvzabdwtK+jtlipiW9kfEqbl+Ak
rD69n/JpSJo/gmBtdy6WTbJMZV6cK9mXKlbnPqo2/+zuKR91OIAY9wHUdHRHFiNW
HgoBZEoxC8Pbg1DUZgR3o5LubeOeI6PMz5PHcNBg0ZkkDhxkWWd+eRjDXSOLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQN8YeMxzdt1mkV8PI6onzaf9ZAYwHwYDVR0j
BBgwFoAUtkqtYtkC9gi7lf0L0/HaioB3tO8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJE
OTAyRjYwOEJCOTVGRDBCRDNGMURBOEE4MDc3QjRFRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNjRBQUQ2MkQ5MDJGNjA4QkI5NUZEMEJEM0YxREE4QTgwNzdC
NEVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4
ZTYtNWRjNjI2YzI5MWQ0LzAvQjY0QUFENjJEOTAyRjYwOEJCOTVGRDBCRDNGMURB
OEE4MDc3QjRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADIwI+oQbjx66pLi2Vy/utf1zIb+7D8RLqjN
9w/okdxENTIIUzxxrTDTBaUCjwLscdJLykWVUm1ZbLP9EcvB8JWhz/XVmOO0qMbl
URUp2BcCnJe11k7l8+ej4UpclhsRh79AqGE4wKzhJ/NKKvFoVN8xQt1q1JiHufh5
EgGkinyEMoVWlHsyC2x6Ke1uZ+Dsl3AS7SYSqpuqiwkhpcklsTgde365z1rWdzSN
phZ8kpcbWSGwyEo/nodx+hpZeNKOw21AjIsqFG+nYrE8a97bFeZ/q3yZXOrmytBU
nQYXD/nW1uEw4ti2OENqMv1z0aui42WjGEbJAzECMaMUxqMLV2w=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:33 2026 by rpki-client