
$ rpki-client -vvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
File: 68A727878748F40EF62D744B06303F71A6B3F75C.mft (raw, json)
Hash identifier: Gal6oCWbmhQpYOxpZi2ise5n9eq3FNWwZtoMQMaFLJI=
Subject key identifier: D1:32:01:F5:FC:43:8E:3E:41:D6:16:88:18:34:3A:5E:D2:2E:F5:2C
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Certificate issuer: /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial: 25FB27AF5052352FFF065B488714B45CA219BFA9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
Manifest number: 36
Signing time: Thu 11 Jun 2026 15:45:35 +0000
Manifest this update: Thu 11 Jun 2026 15:40:35 +0000
Manifest next update: Fri 12 Jun 2026 19:35:35 +0000
Files and hashes: 1: 68A727878748F40EF62D744B06303F71A6B3F75C.crl (hash: UcCbGNnxNeQPDgLboBYaLRJ2koFnpSyr9W1RNkH0+Z0=)
2: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: S8QwzcFeryIcuSdPBiMnAYW7dqUXcBjtqFkLeF9/BcE=)
3: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: IbAFzZACUnD6lwBQxPhQqMDiyphOZDVL6AMwxKGfiyQ=)
4: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: PvN2AuvxpSJAs/KNp18Hx71tEJNrxtBQ9MHqNXHlPGI=)
5: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: CeqXPBLKTKcb4QWFvGgnRWapqG6f1Vmt1NBorMo+v2c=)
6: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: WRqUfw4kkLNha7EwV7NENaJIZvhb1ikV9t5ePDUcyD4=)
7: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6s+J2D1xc+Un9FBlPt0gue96vFI4b8yX8woz+h6eFQo=)
8: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: c+NnvyqB3knbtuO7KdhM0hJjec2wwtXVinOUBhE4/24=)
9: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: hz0u1O8torhSAEu0GK+s8W9famRD261lcziOb/ZySjc=)
10: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: gR1DTuGl5zoFpulg1oigiYRS4tO3/p7LnE5jaqD1jaU=)
11: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: ghKRefxmMKmKlt978ds7tp9D7g1WWsJyZmES+glyEMw=)
12: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: r2ZYiFd01bWs0eEN9nD+Mp8m+K6B0HFPjNNciuS/bGc=)
13: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: Tv2GPPjlGM6s70rJUxZeMrMG5Grjr8wYER/e5zbXioI=)
14: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: pivfi9ji1ihnIAJ1idyzgwRmHruzS5uloDq3BscV5e0=)
15: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: NLB3lY9DFzaCd5CKPizbBhfO5LYHEpYinHrGVDAbCes=)
16: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: vW5w5IkuRb83zA5ANSFF1CJerE321mN8QnbQgdvihxM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:fb:27:af:50:52:35:2f:ff:06:5b:48:87:14:b4:5c:a2:19:bf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
Validity
Not Before: Jun 11 15:40:35 2026 GMT
Not After : Jun 12 19:35:35 2026 GMT
Subject: CN=D13201F5FC438E3E41D6168818343A5ED22EF52C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:22:91:cf:c4:ea:a8:73:d6:65:58:28:41:
8a:53:16:bf:b6:6f:b5:35:75:2c:de:00:e1:c0:7c:
eb:8a:52:94:01:4d:69:52:2a:2b:cb:7d:0f:53:46:
13:b5:d7:01:26:97:cb:1e:98:90:0f:b0:8b:cc:47:
31:95:17:b1:41:ec:5d:f1:13:5e:42:98:f8:7d:4b:
6e:28:c0:da:01:2f:9a:a7:d3:9b:10:96:f1:47:23:
1d:20:06:d0:c6:86:be:36:59:d2:f8:58:d5:04:f5:
a5:db:de:fa:51:27:eb:1a:96:6d:43:ae:cf:1b:2f:
2a:a0:3e:90:be:16:31:f0:f6:80:aa:a5:75:b9:f9:
2a:d2:b1:7c:98:b7:a8:86:de:c0:5a:b0:d6:0a:a0:
08:1e:5f:8b:c6:41:d1:a9:e5:4a:e6:85:e0:5c:68:
f6:3d:1d:7d:cb:1a:5b:97:50:61:64:68:c9:c1:ef:
84:03:57:48:ea:1b:5e:f6:75:97:de:39:51:70:6f:
cf:a1:b7:f7:01:bc:8f:a2:65:8a:6b:54:f3:92:f9:
6b:ca:40:52:a9:e4:42:ac:4a:99:30:b4:ba:f9:9c:
15:c4:b3:ba:6a:86:fd:cb:05:d1:f0:77:58:04:d1:
15:d1:84:11:fb:36:de:13:2f:94:40:58:3d:99:fa:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:32:01:F5:FC:43:8E:3E:41:D6:16:88:18:34:3A:5E:D2:2E:F5:2C
X509v3 Authority Key Identifier:
keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5b:70:c4:2c:ae:de:0a:d6:88:de:dc:2e:05:66:31:b8:e4:
70:fc:13:b9:55:b1:51:59:46:8d:d6:e9:b9:db:01:4c:7f:cb:
6e:e8:f8:a3:77:7e:21:bf:bf:1c:fc:27:1f:fe:0f:15:d8:34:
89:bb:54:5c:a7:8c:3e:59:4b:e9:e0:ce:b6:6c:e6:fe:78:46:
94:ed:b6:53:05:6f:7f:71:82:e1:b0:06:a9:5a:58:59:ed:40:
1f:ca:2e:04:ae:71:e2:4a:da:d8:1d:bc:a8:7c:08:e9:60:73:
6e:cb:6a:f2:33:86:7c:0a:51:f1:e4:b2:cb:bd:e9:04:6f:65:
a6:92:3c:3c:6d:d5:87:30:ea:3a:4f:98:fb:c9:49:b4:51:62:
05:e7:4e:56:4c:87:67:88:ed:de:29:0c:17:a6:54:08:be:9f:
ff:26:b5:52:e9:18:86:e2:06:12:c6:59:73:4d:7b:8d:87:ff:
07:79:5a:fd:9b:d9:7b:8d:c6:9d:dd:0a:28:24:3d:02:1c:77:
5c:56:03:4a:66:0c:d4:d2:92:d8:43:57:c0:e3:4a:1f:f5:f3:
62:3d:97:0c:58:67:8c:a2:c1:24:92:7c:1b:c5:37:e5:90:ed:
d3:19:22:0b:ff:91:b5:5a:4f:4e:e7:da:42:1b:18:c0:d6:21:
9f:b5:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:04:08 2026 by rpki-client