
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
File: 68A727878748F40EF62D744B06303F71A6B3F75C.mft (raw, json)
Hash identifier: xjAfuiYl4561lxHYZd5yjQ7mZu4gvMRbOSajXNdZIOM=
Subject key identifier: AE:77:BE:2B:9B:1E:18:5E:66:B3:35:5F:E5:B5:91:19:2A:98:5D:F2
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Certificate issuer: /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial: 65F2A3239F7D286CB9939338CF0DF2DC5B831D8C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
Manifest number: F0
Signing time: Tue 27 Oct 2026 12:20:41 +0000
Manifest this update: Tue 27 Oct 2026 12:15:41 +0000
Manifest next update: Wed 28 Oct 2026 14:17:41 +0000
Files and hashes: 1: 323430323a613030303a3a2f33322d3332203d3e203234323131.roa (hash: SzSTO901STyn0yHOS8B1yF81kLT1mdXGjiInuL9y21M=)
2: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: ghKRefxmMKmKlt978ds7tp9D7g1WWsJyZmES+glyEMw=)
3: 68A727878748F40EF62D744B06303F71A6B3F75C.crl (hash: 4eDc2I+nzsoGBr8NHMgx36hgSMWsOMhkcEv7vRA2hU8=)
4: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: WRqUfw4kkLNha7EwV7NENaJIZvhb1ikV9t5ePDUcyD4=)
5: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: IbAFzZACUnD6lwBQxPhQqMDiyphOZDVL6AMwxKGfiyQ=)
6: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: c+NnvyqB3knbtuO7KdhM0hJjec2wwtXVinOUBhE4/24=)
7: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6s+J2D1xc+Un9FBlPt0gue96vFI4b8yX8woz+h6eFQo=)
8: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: PvN2AuvxpSJAs/KNp18Hx71tEJNrxtBQ9MHqNXHlPGI=)
9: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: r2ZYiFd01bWs0eEN9nD+Mp8m+K6B0HFPjNNciuS/bGc=)
10: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: S8QwzcFeryIcuSdPBiMnAYW7dqUXcBjtqFkLeF9/BcE=)
11: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: NLB3lY9DFzaCd5CKPizbBhfO5LYHEpYinHrGVDAbCes=)
12: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: hz0u1O8torhSAEu0GK+s8W9famRD261lcziOb/ZySjc=)
13: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: Tv2GPPjlGM6s70rJUxZeMrMG5Grjr8wYER/e5zbXioI=)
14: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: pivfi9ji1ihnIAJ1idyzgwRmHruzS5uloDq3BscV5e0=)
15: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: gR1DTuGl5zoFpulg1oigiYRS4tO3/p7LnE5jaqD1jaU=)
16: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: CeqXPBLKTKcb4QWFvGgnRWapqG6f1Vmt1NBorMo+v2c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 11:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f2:a3:23:9f:7d:28:6c:b9:93:93:38:cf:0d:f2:dc:5b:83:1d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
Validity
Not Before: Oct 27 12:15:41 2026 GMT
Not After : Oct 28 14:17:41 2026 GMT
Subject: CN=AE77BE2B9B1E185E66B3355FE5B591192A985DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:18:ac:92:f4:e6:2e:ae:f3:4f:6b:d4:93:
20:f6:b6:c9:b1:b0:8e:7d:86:0d:32:f7:1a:0f:e6:
f2:c5:90:81:2e:0c:ab:fd:fd:90:00:8c:ec:03:d2:
17:4a:88:dd:62:42:dd:8c:b3:6a:1b:af:9d:56:f2:
d9:09:61:54:9d:bd:a9:78:55:14:d0:96:c2:b1:5e:
d4:7b:05:a2:f8:e8:e2:b6:3f:5f:50:c3:71:98:2a:
9c:2d:4d:18:46:1e:0c:31:b5:1b:bc:5d:6d:c6:99:
cd:5f:d7:21:37:a0:d9:0d:e4:d5:d4:5a:cc:61:3a:
f0:5b:dc:89:03:06:5b:60:db:63:40:03:2a:7a:72:
a4:d4:fa:96:ef:de:af:3e:d6:ae:59:65:6b:bb:c7:
4b:37:f8:12:87:88:48:c8:11:5f:ed:aa:fc:c2:d4:
f1:4e:a5:8d:ef:fa:15:2f:61:1c:6d:b3:7f:28:3d:
08:76:72:0f:32:4d:c2:da:3b:4d:e2:0d:85:b8:d2:
1b:e6:ad:c6:09:c4:a4:14:e4:ba:27:b2:55:f2:d2:
85:bb:66:8b:20:e5:62:ed:57:9b:37:9b:48:96:16:
b9:dc:2e:f4:8d:34:8c:b2:db:9a:27:76:7a:bd:a6:
22:18:35:d5:e7:fa:fc:3b:21:52:e0:06:c0:91:3f:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:77:BE:2B:9B:1E:18:5E:66:B3:35:5F:E5:B5:91:19:2A:98:5D:F2
X509v3 Authority Key Identifier:
keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d2:ff:bb:0e:0e:f5:d4:69:6c:e7:2c:cd:d4:10:30:c1:d8:
9b:b5:0c:68:40:b3:26:39:a6:52:eb:a7:0f:a8:31:c7:39:75:
c3:6d:87:4d:e0:ea:22:a6:63:b4:d0:cf:e6:ee:dd:37:0a:0b:
4e:d6:fe:5c:ba:9c:e0:b9:7b:36:fd:34:fd:22:d7:9f:2b:e4:
49:89:c6:54:4f:3b:bc:47:ea:87:b9:fc:95:2a:8c:10:c7:41:
ab:de:d7:c0:56:bd:cc:cd:29:ef:fa:ee:07:0a:17:69:9c:15:
81:c1:fd:b4:da:53:f3:77:e3:21:8b:86:e3:4b:1d:ae:36:5b:
25:5b:65:e8:ef:b0:a5:20:e5:bc:49:05:cc:d5:b1:c5:fc:e7:
9c:59:61:0c:7d:f5:de:a4:1d:88:d9:23:30:84:e4:da:fa:90:
4d:3f:da:50:65:f1:ed:5d:2a:32:c0:b1:b7:5e:e2:02:69:f1:
66:62:30:75:43:c9:56:4e:3a:f6:74:65:ee:e8:83:06:95:43:
fa:4e:22:60:fe:3b:b6:90:33:25:d3:ee:70:6b:46:54:de:27:
b2:1e:a0:12:44:30:11:66:14:f8:42:c7:92:08:36:2b:75:65:
ec:8b:04:57:a6:ef:16:37:1d:6d:e3:94:b8:23:60:60:c8:4e:
51:22:64:12
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZfKjI599KGy5k5M4zw3y3FuDHYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhBNzI3ODc4NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFB
NkIzRjc1QzAeFw0yNjEwMjcxMjE1NDFaFw0yNjEwMjgxNDE3NDFaMDMxMTAvBgNV
BAMTKEFFNzdCRTJCOUIxRTE4NUU2NkIzMzU1RkU1QjU5MTE5MkE5ODVERjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSBiskvTmLq7zT2vUkyD2tsmx
sI59hg0y9xoP5vLFkIEuDKv9/ZAAjOwD0hdKiN1iQt2Ms2obr51W8tkJYVSdval4
VRTQlsKxXtR7BaL46OK2P19Qw3GYKpwtTRhGHgwxtRu8XW3Gmc1f1yE3oNkN5NXU
WsxhOvBb3IkDBltg22NAAyp6cqTU+pbv3q8+1q5ZZWu7x0s3+BKHiEjIEV/tqvzC
1PFOpY3v+hUvYRxts38oPQh2cg8yTcLaO03iDYW40hvmrcYJxKQU5LonslXy0oW7
Zosg5WLtV5s3m0iWFrncLvSNNIyy25ondnq9piIYNdXn+vw7IVLgBsCRP+OvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUrne+K5seGF5mszVf5bWRGSqYXfIwHwYDVR0j
BBgwFoAUaKcnh4dI9A72LXRLBjA/caaz91wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTlmMDEzZjktYjRmNy00NThjLWFhYzUtMDgwNDFiM2Y2NWU2LzAvNjhBNzI3ODc4
NzQ4RjQwRUY2MkQ3NDRCMDYzMDNGNzFBNkIzRjc1Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OEE3Mjc4Nzg3NDhGNDBFRjYyRDc0NEIwNjMwM0Y3MUE2QjNG
NzVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlmMDEzZjktYjRmNy00NThjLWFh
YzUtMDgwNDFiM2Y2NWU2LzAvNjhBNzI3ODc4NzQ4RjQwRUY2MkQ3NDRCMDYzMDNG
NzFBNkIzRjc1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABXS/7sODvXUaWznLM3UEDDB2Ju1DGhAsyY5
plLrpw+oMcc5dcNth03g6iKmY7TQz+bu3TcKC07W/ly6nOC5ezb9NP0i158r5EmJ
xlRPO7xH6oe5/JUqjBDHQave18BWvczNKe/67gcKF2mcFYHB/bTaU/N34yGLhuNL
Ha42WyVbZejvsKUg5bxJBczVscX855xZYQx99d6kHYjZIzCE5Nr6kE0/2lBl8e1d
KjLAsbde4gJp8WZiMHVDyVZOOvZ0Ze7ogwaVQ/pOImD+O7aQMyXT7nBrRlTeJ7Ie
oBJEMBFmFPhCx5IINit1ZeyLBFem7xY3HW3jlLgjYGDITlEiZBI=
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:30 2026 by rpki-client