
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
File: 0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft (raw, json)
Hash identifier: 26wfTN1n0OdpsQYx5LsQT8evgJm816zo8XNXHjuEYbQ=
Subject key identifier: B2:86:C6:98:E2:7E:88:B7:50:11:40:96:4D:42:C3:68:AC:E5:F7:C2
Authority key identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2
Certificate issuer: /CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
Certificate serial: 62A3823645A27D853B9F5F03EBA0E616CD01915B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 14:48:07 +0000
Manifest this update: Tue 02 Jun 2026 14:43:07 +0000
Manifest next update: Wed 03 Jun 2026 17:57:07 +0000
Files and hashes: 1: 323430303a656134303a3a2f33322d3332203d3e203436303631.roa (hash: /Mgyo9ff3zy6arAcZsb+8DNgEw9iCUEDLwcPq3vZVTM=)
2: 0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl (hash: 5Z9AT/dDVunGTQvDMkwcFuBWiOdp+Y+W2wbRhb63Jno=)
3: 3130332e32342e37322e302f32322d3232203d3e203436303631.roa (hash: HPMtJkG9vBmkfKDdQcScUoOmdbP+traQt1X9CJZPJyo=)
4: 3130332e32342e37332e302f32342d3234203d3e203436303631.roa (hash: MyQFtjJqg7ZYwpERzdoDmD5jzoRErmzO01EIiv31fWg=)
5: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (hash: YEcfoQjDpMi0GF8b5kmh9JJ3H1tnO76M1gzrmxVWaMc=)
6: 3130332e32342e37322e302f32332d3233203d3e203436303631.roa (hash: G9sq4ErGZj+4CsLlGYQ96xB1AH1Q/5k7LHe36UaA1Pw=)
7: 3230322e35322e3134312e302f32342d3234203d3e203436303631.roa (hash: ooDWixoDrf/cdih9Rb8FLtagmcLYMAGnpLpX2ocgURU=)
8: 3130332e32342e37322e302f32342d3234203d3e203436303631.roa (hash: 6afeRIJnDM/uUZHogbKxMoXG/M34lmpUP/58vATJWAM=)
9: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (hash: prcWJfhlUErzmRWR1H7hkcJb4s+PiXSVs4vIyO1/46s=)
10: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (hash: sfhfAHrl757lamU4yGIl09WzhCGt6COimj3NHeX2Rnc=)
11: 3130332e32342e37342e302f32342d3234203d3e203436303631.roa (hash: 4mD9TjqePo/yOB3/Fiwn7z8Fd4y7bA97GyieYO2qTlw=)
12: 3130332e32342e37352e302f32342d3234203d3e203436303631.roa (hash: k7wAQ0uD+feQhS7bp4KkJxo3uZUwNKoeGm20CJyRgyc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl
rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a3:82:36:45:a2:7d:85:3b:9f:5f:03:eb:a0:e6:16:cd:01:91:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
Validity
Not Before: Jun 2 14:43:07 2026 GMT
Not After : Jun 3 17:57:07 2026 GMT
Subject: CN=B286C698E27E88B7501140964D42C368ACE5F7C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:19:3a:21:ea:fd:85:fa:0f:1a:d3:2f:04:
96:81:b8:b4:52:d2:3d:3a:85:0e:44:3c:e6:e9:97:
53:50:a8:c1:ff:f1:4a:a4:6e:80:05:0e:bf:87:0f:
57:00:77:04:01:9b:ae:89:c5:ce:7d:f1:03:05:24:
92:b3:50:2f:e7:02:f0:50:37:82:79:b5:8f:ca:59:
60:55:4d:f3:62:61:f8:3d:a1:e4:ee:76:4f:06:de:
a9:f2:07:9a:6e:4c:ba:88:b9:11:a1:80:c2:1f:4c:
ce:c5:6c:5e:af:08:cf:44:69:10:6e:aa:4e:51:3a:
9d:bc:f5:e4:65:13:e8:4a:8d:8e:b5:21:9c:0b:34:
6a:3c:79:d6:dd:63:03:ad:6f:6c:ea:8d:da:df:68:
00:b3:62:32:1c:14:a1:63:7c:0f:a2:6b:72:3f:b7:
eb:15:3a:28:e2:78:e8:fb:eb:d0:35:be:5f:27:67:
93:9b:d3:3f:be:9f:67:3b:ce:79:95:81:4d:3f:12:
ea:ab:a0:c1:a5:c2:f7:c9:27:7b:2f:5a:75:9d:a3:
4f:3f:02:da:a1:ff:36:4c:36:25:f9:0c:0d:ad:a2:
65:fb:45:34:41:39:f5:dc:2b:50:da:a4:8a:66:af:
b9:af:00:78:39:25:f5:a6:5e:a0:97:bb:ac:dd:b7:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:C6:98:E2:7E:88:B7:50:11:40:96:4D:42:C3:68:AC:E5:F7:C2
X509v3 Authority Key Identifier:
keyid:0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3f:53:ab:aa:48:42:bf:f6:6b:d0:84:dc:70:84:86:ee:ab:
9d:01:ff:26:67:3e:b8:32:d5:4e:ae:0f:f2:fe:e8:ec:85:db:
bb:64:0f:5d:c1:18:a8:47:1c:cf:d1:ea:f3:5b:9d:2b:c2:db:
05:41:3a:f4:8a:72:fe:17:0c:03:b0:94:52:8f:c9:f6:0b:b6:
2c:79:7c:49:6d:03:03:5d:ad:d4:d1:31:53:72:74:d7:1f:60:
d0:7a:b2:25:5e:c4:a3:0c:09:28:86:60:e4:f4:48:69:0b:92:
ec:07:b0:e9:b3:d4:ce:e8:16:94:e3:89:92:4b:1b:a9:ae:a2:
40:09:ac:4e:17:bb:8a:c4:ff:71:d2:d8:db:d5:46:f1:4d:29:
48:1f:c5:d0:b4:9b:ce:43:bf:6f:71:e9:f9:53:0d:c9:8a:51:
f3:e4:6a:bc:50:29:d1:b7:ff:a3:4e:e8:0f:72:ce:fd:60:99:
5c:a5:3d:20:ea:db:b4:f7:c3:57:ec:9b:01:6e:ba:2b:25:c2:
4a:e0:b9:94:f7:3e:dc:99:57:ae:e5:67:f0:f1:b1:34:c6:7b:
eb:8d:b8:aa:94:28:17:30:d9:54:0b:29:12:df:93:43:85:fa:
7d:88:9e:32:c2:4a:86:ad:a9:2f:84:ee:74:11:7b:7b:13:e4:
8c:b9:0c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:46:44 2026 by rpki-client