
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
File: A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft (raw, json)
Hash identifier: Xi4Iof1gfFycL9olxD2R1kJq1aMSI5ff7jP5E42w9K8=
Subject key identifier: C2:BC:9E:DB:D0:05:B5:3A:55:BA:DC:40:2C:AD:97:84:44:2D:F3:22
Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
Certificate issuer: /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Certificate serial: 37F067BC58AE58AD0995BF20FB76020F2C9E107F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 21:48:03 +0000
Manifest this update: Mon 20 Jul 2026 21:43:03 +0000
Manifest next update: Tue 21 Jul 2026 22:12:03 +0000
Files and hashes: 1: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: qIa6emmkoMA4lane7jyL1Uz074v6ftwy/PmbugIuJLI=)
2: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: IgDS+soANP3J3I/M4lqmTWHqHF/CWw4GOux2+pU3uZk=)
3: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: 1sjbDI9dhuriYC2cGKfsX3Esj0PZpCf3CbJjOgUfU5k=)
4: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: oQq+nr1R3/LIq3FYUPDo+7lWe378qim9S5GBtc/7+XI=)
5: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: iYrGJJ9iIv+cRwIblIq+9q3Q7tv/1rCHNku1x0uMX3o=)
6: A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl (hash: tskKNmz1GI4kArdo72VQEFAkxcMNTYSaQdWFSs/XdKQ=)
7: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: smvcSJU7arKg9wwHjFpQV6E26iIrv2S+SKozwQ9k4AA=)
8: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: uZzBwW9d4r/pMm/O/U0uE2dQ0H137+IT+iWRLJXsbtU=)
9: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: wOk7wCCxqtS7Iv5pVlomQKnIoRly1bMRWor8VmTMwhc=)
10: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: HE8Pj52+IZhV7TEkL1SN8xO4SlYdr60vODvajC36cyk=)
11: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: ZpP6fFTVzHg2TsrE8eBvLbSiODy4VISVHgrK1I2J8vE=)
12: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: cBuCEcM59m7bokueA5utqjCb5MDgTJH77vwBhsI0byM=)
13: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: y/B5rdY50adVs0er15Ug7P5cwgk8KxerWANg5QHwyDQ=)
14: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: mLD+GhO1xXk2PTbUDcTfshDEYKPNXgJniWHXGxp+RlI=)
15: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: S8Ek9RlB50nYWIYGV3GDgnzVz7pzb0Rv9NpPnpubFVA=)
16: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: g9UTMN38ofb78nZGj/6EE+B5/x+vpqW+tFIfQppedNY=)
17: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: YctTfX6DGOTRKPoRHGUwycW4/Zl5+c5Mmaff4w6V6rg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 22:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f0:67:bc:58:ae:58:ad:09:95:bf:20:fb:76:02:0f:2c:9e:10:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Validity
Not Before: Jul 20 21:43:03 2026 GMT
Not After : Jul 21 22:12:03 2026 GMT
Subject: CN=C2BC9EDBD005B53A55BADC402CAD9784442DF322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:34:0a:bf:29:9a:6b:98:ae:4b:28:27:77:
5b:50:57:8f:f8:85:21:13:41:92:04:e4:ad:e5:1e:
69:57:e7:55:49:8d:a6:ed:9c:87:01:5b:3d:31:03:
2b:c6:10:f9:03:c1:0e:1e:61:06:e3:79:f4:e3:56:
9a:ff:c0:fc:1d:4c:c2:2c:ad:62:d8:6f:e3:78:44:
b4:f1:fb:f1:ae:d6:83:9d:70:21:d9:2a:66:bf:df:
45:a8:04:81:66:84:9a:55:c3:44:41:f3:27:f9:19:
b4:64:64:a8:7c:b3:7a:f6:03:2c:4a:fb:98:45:36:
f4:e3:57:1a:6b:a5:80:35:d6:65:ee:d7:d6:3d:5c:
f5:09:a6:a2:3e:2a:70:80:4e:c4:76:86:77:80:5e:
d5:2f:2b:c9:3f:66:88:6f:e7:a1:60:3f:5a:0f:02:
ee:1a:47:c4:f8:ac:91:81:15:10:e4:b4:2d:6c:23:
2f:33:f0:29:3b:f5:3c:58:1e:36:7d:59:7e:f6:d2:
f9:93:de:05:35:50:45:e9:cb:40:47:dd:7e:9d:de:
f6:16:fc:b3:97:11:71:4e:bb:0c:0e:b8:53:de:83:
c2:a9:de:4a:86:5a:5a:a9:99:6c:cc:b3:aa:80:42:
a3:b8:e8:50:bc:80:6a:4a:12:e9:4a:53:98:a5:53:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:9E:DB:D0:05:B5:3A:55:BA:DC:40:2C:AD:97:84:44:2D:F3:22
X509v3 Authority Key Identifier:
keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dc:6e:a2:6c:25:11:67:19:f4:56:3d:fe:ea:7f:52:2e:a8:
a9:dc:27:ae:fb:74:1d:72:fe:0d:13:df:84:89:e9:a1:07:32:
dd:e8:12:1d:03:53:f1:3c:1e:4a:00:03:66:6b:4e:72:09:81:
82:d7:78:12:a7:e4:24:fb:aa:42:ff:41:83:98:29:de:03:73:
46:de:d5:31:80:ea:97:18:97:3b:0b:1c:17:37:ce:26:fd:de:
f4:7a:69:10:a0:c5:f4:d6:0d:2d:44:e2:36:94:70:76:79:48:
b9:43:d7:a5:8e:b4:2c:28:6e:7b:2d:ad:fd:90:cd:c7:15:92:
15:46:db:a8:d7:b6:33:cc:62:d2:62:30:ec:36:b4:0a:dc:27:
27:8a:54:51:96:56:a9:af:c4:bf:a8:e8:08:42:e6:44:3f:88:
93:00:93:7d:86:d6:21:64:0c:cf:5b:40:8c:0a:8b:33:37:e2:
f8:7b:bc:ce:57:19:9d:aa:16:e7:5c:2a:74:93:8b:17:ed:aa:
08:7a:cc:b0:b5:a9:14:d2:95:9b:46:6e:fc:5e:f2:77:a0:55:
6f:d2:ba:6e:17:d8:b8:bc:f7:a5:b4:81:f9:09:55:0c:32:ee:
e2:a2:e5:98:d8:3e:17:77:46:ce:73:70:c7:1c:df:9a:c0:f2:
e7:68:9b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:41:57 2026 by rpki-client