
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
File: B68C761C821AA1629C9F6105D99B85E34433B478.mft (raw, json)
Hash identifier: B5n1+0aLkTfcC8TJBXiyRL/I9pxhBjq5BLMnLJ2zEO4=
Subject key identifier: 64:9C:80:C9:D2:0A:7D:3C:19:C4:25:53:08:8A:D9:04:F2:8D:CB:8A
Authority key identifier: B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78
Certificate issuer: /CN=B68C761C821AA1629C9F6105D99B85E34433B478
Certificate serial: 722482F60A292B54FDAC443C4F08B85DEA90ED3A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 22:57:20 +0000
Manifest this update: Wed 16 Sep 2026 22:52:20 +0000
Manifest next update: Fri 18 Sep 2026 01:10:20 +0000
Files and hashes: 1: B68C761C821AA1629C9F6105D99B85E34433B478.crl (hash: zRE9+uohinat+maytu+F4faE8ul939qCjr3c0kheGYw=)
2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: eM4zTeT5x8zRTCedGRk54XligMqqPoDVVW+mAmQIEvQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl
rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:24:82:f6:0a:29:2b:54:fd:ac:44:3c:4f:08:b8:5d:ea:90:ed:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B68C761C821AA1629C9F6105D99B85E34433B478
Validity
Not Before: Sep 16 22:52:20 2026 GMT
Not After : Sep 18 01:10:20 2026 GMT
Subject: CN=649C80C9D20A7D3C19C42553088AD904F28DCB8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:69:95:ee:3b:e3:87:e7:a7:32:52:01:43:
4d:0d:95:a8:4c:5e:dc:fd:ac:92:c1:8a:68:f0:71:
ac:aa:ff:e0:bd:2a:44:89:98:3e:34:35:76:44:86:
4c:a0:62:cc:85:ef:77:81:63:d2:d1:09:cf:0b:6a:
1c:dc:fe:52:54:27:9c:ce:92:bb:54:c9:33:76:4a:
0a:f0:a7:31:99:49:2a:a4:b5:54:24:75:db:e1:bc:
e6:aa:f2:3d:34:94:1a:55:a3:3b:43:e1:da:b9:f9:
09:f3:ae:cf:b0:c2:c8:06:97:72:04:0e:2c:2b:bc:
c3:05:c0:5c:50:c2:e4:71:d4:3e:a7:64:2c:23:93:
76:3c:61:08:a2:13:d0:03:3e:bc:ec:f2:8d:40:d7:
a3:71:b0:4a:82:93:91:2e:28:09:6d:b6:37:c6:30:
27:8a:13:f6:83:b1:1d:14:01:92:75:c2:c1:c6:42:
c8:b5:91:51:23:5c:08:97:9d:f9:55:be:7b:b6:b9:
c3:79:d4:60:9c:32:9a:97:18:45:e0:28:12:ed:91:
25:e9:f6:7c:04:d0:d1:e1:cd:30:33:7e:ff:38:5e:
c1:e2:69:ce:19:d7:4a:9c:3a:b6:da:5f:77:b3:9b:
98:5e:77:78:a3:a9:3b:c4:c4:ef:e5:ae:ca:8d:84:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:80:C9:D2:0A:7D:3C:19:C4:25:53:08:8A:D9:04:F2:8D:CB:8A
X509v3 Authority Key Identifier:
keyid:B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e5:b5:a3:04:57:c3:4c:b8:1e:43:aa:be:b5:86:ef:16:ba:
3c:c4:a1:84:d6:2b:5c:41:85:04:5c:64:62:b7:5e:4c:3b:f1:
0d:99:9a:0b:82:f1:ed:b1:69:06:d1:21:43:92:fe:1b:61:80:
db:26:17:b7:c7:88:cc:ec:66:c5:fb:20:fb:32:d3:d6:39:8c:
ef:c9:12:5a:7a:58:8e:20:3e:fc:90:41:b7:29:df:fc:da:45:
82:ba:2a:1e:5e:45:0d:d0:89:b3:0c:43:32:8e:8c:af:ac:8d:
e9:a9:79:57:5e:9a:e8:bc:4c:3c:84:83:1e:b2:4d:82:65:09:
27:0e:6b:e7:b3:c8:f3:8b:d0:de:02:a9:8b:cc:ee:24:27:82:
e7:aa:8b:4c:31:2a:ba:64:cb:bd:0e:a5:da:f8:c3:bd:b3:60:
c4:7b:10:ae:57:82:66:56:20:fc:22:6e:dc:d1:31:3f:9a:ac:
34:a3:7a:f4:4f:60:6c:87:4b:6f:b8:e9:a4:19:b5:ee:e8:f3:
e4:13:ab:cb:d6:46:4b:24:b4:b0:72:a2:f3:24:23:10:55:c4:
8b:53:64:b1:a2:0b:a0:a8:71:00:ab:35:a2:03:a0:36:81:d6:
fb:05:65:2e:19:15:48:82:49:1d:d2:5a:3b:f4:4c:a6:8f:75:
33:ec:c0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:17:47 2026 by rpki-client