
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
File: B68C761C821AA1629C9F6105D99B85E34433B478.mft (raw, json)
Hash identifier: 4w0ufQcacOFXU05BmJxhEnvgyvVmW8Iko0vz0Elli+s=
Subject key identifier: 74:3D:9E:C0:E0:45:4A:CA:BF:AC:CE:6E:B6:BC:E2:28:F0:6D:8A:F2
Authority key identifier: B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78
Certificate issuer: /CN=B68C761C821AA1629C9F6105D99B85E34433B478
Certificate serial: 735E683B7D94D1720F38D9B06C8828A3EF68838D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
Manifest number: 6C
Signing time: Tue 21 Jul 2026 02:44:11 +0000
Manifest this update: Tue 21 Jul 2026 02:39:11 +0000
Manifest next update: Wed 22 Jul 2026 05:24:11 +0000
Files and hashes: 1: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: eM4zTeT5x8zRTCedGRk54XligMqqPoDVVW+mAmQIEvQ=)
2: B68C761C821AA1629C9F6105D99B85E34433B478.crl (hash: FC7VsaxxSDTNH20marhV1dTo9nDmHRGCEdstuV8PhbU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl
rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:5e:68:3b:7d:94:d1:72:0f:38:d9:b0:6c:88:28:a3:ef:68:83:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B68C761C821AA1629C9F6105D99B85E34433B478
Validity
Not Before: Jul 21 02:39:11 2026 GMT
Not After : Jul 22 05:24:11 2026 GMT
Subject: CN=743D9EC0E0454ACABFACCE6EB6BCE228F06D8AF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:d7:2f:a5:15:e4:f5:5d:a0:5b:38:c9:2e:
fe:43:02:29:39:b7:01:81:3f:05:27:12:95:2b:d5:
b5:27:2d:85:c7:32:8a:52:ff:67:16:46:c4:3b:a9:
77:6e:89:09:1a:a7:06:87:a5:13:c3:18:79:3c:dd:
6a:ee:a3:ea:5d:23:bf:00:2c:8c:eb:64:d1:8b:d5:
23:58:23:26:a1:05:a3:c7:7d:ff:28:9c:0b:16:92:
87:33:18:e8:36:b1:47:0c:e0:7e:f3:dd:80:65:00:
c4:7d:fc:72:6a:74:ec:70:18:9e:84:44:0d:a7:47:
04:bb:10:8d:46:67:a1:55:87:b2:fe:02:35:3c:7b:
d2:05:f3:51:84:42:1d:72:c8:b8:7e:53:96:69:60:
84:a7:96:52:bb:2b:8f:84:d1:ac:17:93:18:71:f5:
be:53:36:53:1f:57:31:76:be:5a:58:25:01:23:57:
12:67:4e:f4:1f:d8:5f:b8:13:d6:fd:cc:13:cc:c3:
ee:b3:de:5f:8e:62:d0:4f:ad:99:e7:e8:ea:cf:5f:
19:ff:7b:b0:e9:09:2a:58:0c:a6:a5:10:eb:48:fd:
27:dc:0d:3f:73:d4:eb:52:6e:59:70:f3:62:78:e5:
1c:10:4c:29:80:67:45:d0:72:13:93:d4:a5:8b:33:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3D:9E:C0:E0:45:4A:CA:BF:AC:CE:6E:B6:BC:E2:28:F0:6D:8A:F2
X509v3 Authority Key Identifier:
keyid:B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ec:4d:80:04:55:66:04:39:81:a1:9f:01:d6:9a:a3:3a:ad:
06:a3:bb:e6:dc:ef:5f:84:2b:fe:a7:b1:91:14:09:90:bd:74:
f2:7b:93:37:a4:aa:5c:70:1c:63:8d:e8:a0:2a:23:5b:70:89:
fa:78:8c:a2:f4:b2:9b:fe:48:8a:91:46:bd:76:00:6a:9c:28:
11:75:f0:ff:ae:ff:65:51:2a:7f:ad:aa:c6:c2:00:47:62:72:
16:81:f5:09:f6:f6:e0:5c:c7:e3:4f:79:a8:ad:0f:f0:7e:52:
50:fa:ad:8f:9d:e8:fe:9a:d0:f2:09:3b:02:e7:85:76:9a:fa:
d6:6e:04:54:0a:09:9e:a5:f0:3f:9a:a8:b7:ae:ae:da:01:35:
7c:7f:8c:8b:71:0d:1c:3b:b1:98:02:01:70:47:54:13:90:1a:
9c:dc:38:8e:71:3f:26:6e:28:90:7f:c5:a8:38:57:e6:3f:70:
71:36:47:0f:ae:04:a8:63:d8:94:94:22:cc:3f:df:a1:5c:85:
3c:91:86:8f:78:2d:7e:c4:cc:3b:5e:c0:da:c4:59:80:41:5c:
48:80:65:50:75:28:3d:07:4f:a6:f7:94:1c:4d:0f:8f:dc:cd:
42:10:ec:55:6f:97:c1:c9:67:f0:15:bb:40:0c:d5:7b:c1:46:
6f:6b:47:58
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc15oO32U0XIPONmwbIgoo+9og40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY4Qzc2MUM4MjFBQTE2MjlDOUY2MTA1RDk5Qjg1RTM0
NDMzQjQ3ODAeFw0yNjA3MjEwMjM5MTFaFw0yNjA3MjIwNTI0MTFaMDMxMTAvBgNV
BAMTKDc0M0Q5RUMwRTA0NTRBQ0FCRkFDQ0U2RUI2QkNFMjI4RjA2RDhBRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKtcvpRXk9V2gWzjJLv5DAik5
twGBPwUnEpUr1bUnLYXHMopS/2cWRsQ7qXduiQkapwaHpRPDGHk83Wruo+pdI78A
LIzrZNGL1SNYIyahBaPHff8onAsWkoczGOg2sUcM4H7z3YBlAMR9/HJqdOxwGJ6E
RA2nRwS7EI1GZ6FVh7L+AjU8e9IF81GEQh1yyLh+U5ZpYISnllK7K4+E0awXkxhx
9b5TNlMfVzF2vlpYJQEjVxJnTvQf2F+4E9b9zBPMw+6z3l+OYtBPrZnn6OrPXxn/
e7DpCSpYDKalEOtI/SfcDT9z1OtSbllw82J45RwQTCmAZ0XQchOT1KWLMwIPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdD2ewOBFSsq/rM5utrziKPBtivIwHwYDVR0j
BBgwFoAUtox2HIIaoWKcn2EF2ZuF40QztHgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTQzNTYzNzUtOGUyOS00NDc3LWIwMTMtYzQ0MTUwYTI1YTMxLzAvQjY4Qzc2MUM4
MjFBQTE2MjlDOUY2MTA1RDk5Qjg1RTM0NDMzQjQ3OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNjhDNzYxQzgyMUFBMTYyOUM5RjYxMDVEOTlCODVFMzQ0MzNC
NDc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw
MTMtYzQ0MTUwYTI1YTMxLzAvQjY4Qzc2MUM4MjFBQTE2MjlDOUY2MTA1RDk5Qjg1
RTM0NDMzQjQ3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH3sTYAEVWYEOYGhnwHWmqM6rQaju+bc71+E
K/6nsZEUCZC9dPJ7kzekqlxwHGON6KAqI1twifp4jKL0spv+SIqRRr12AGqcKBF1
8P+u/2VRKn+tqsbCAEdichaB9Qn29uBcx+NPeaitD/B+UlD6rY+d6P6a0PIJOwLn
hXaa+tZuBFQKCZ6l8D+aqLeurtoBNXx/jItxDRw7sZgCAXBHVBOQGpzcOI5xPyZu
KJB/xag4V+Y/cHE2Rw+uBKhj2JSUIsw/36FchTyRho94LX7EzDtewNrEWYBBXEiA
ZVB1KD0HT6b3lBxND4/czUIQ7FVvl8HJZ/AVu0AM1XvBRm9rR1g=
-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:16 2026 by rpki-client