
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
File: 6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft (raw, json)
Hash identifier: xy6Ovabkg4RPtQc2th3LuI/Mh3Eaf5ZgE91Sc/8PDKI=
Subject key identifier: DE:0C:37:1E:3C:E3:D7:82:B6:AC:5E:F1:DA:E4:50:7D:5C:35:CD:45
Authority key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
Certificate issuer: /CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Certificate serial: 35A45B65D64AED51E48B18436535A256DC0E9F52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
Manifest number: C3
Signing time: Sat 26 Sep 2026 05:52:17 +0000
Manifest this update: Sat 26 Sep 2026 05:47:17 +0000
Manifest next update: Sun 27 Sep 2026 07:10:17 +0000
Files and hashes: 1: 3230322e36352e3132302e302f32342d3234203d3e203233393531.roa (hash: s511aUhrDoqnfoWhUJdvzunShOrgJJ2eEdfvPOc7/iM=)
2: 323430313a656530303a3a2f33322d3438203d3e203233393531.roa (hash: gDi9lsZTgWpDsqBFFdEKjdwXfOikVjH6Fxotmc+Vgaw=)
3: 3230322e36352e3132322e302f32342d3234203d3e203233393531.roa (hash: SkkIe4wvJDfaCFpHfpB2OtR1kDRXOa1S8sX9Q6iNz1o=)
4: 3230322e36352e3131322e302f32342d3234203d3e203233393531.roa (hash: jCjqsNCdBEFIqMkeYj7DtRya4SyDxnX4Y5acueY82W8=)
5: 3230322e36352e3132302e302f32332d3234203d3e203233393531.roa (hash: EnPb48KAH/rDHK4BXBIr8OrfPZBZCqfsFv/VR+LxTZA=)
6: 3230322e36352e3132302e302f32322d3233203d3e203233393531.roa (hash: mLNvyo56xMvlY2ZSKvstmsPMbawgSec2YeBLS8bZ9sA=)
7: 3230322e36352e3132342e302f32322d3234203d3e203436303531.roa (hash: 72I3Y1PxU+BUnijfN48Lj2lvSmClHCbdAP1EdcsqnEY=)
8: 3230322e36352e3132322e302f32332d3233203d3e203233393531.roa (hash: SqRthFkIhavYM0HLmmT/c7rjyHQa7gUUZFkZYgMFOus=)
9: 3230322e36352e3131322e302f32312d3234203d3e203233393531.roa (hash: lJAR5H9EAjowki+F3wTub0E5xXRygZB7vWolMlHO9Ks=)
10: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (hash: DePOqwtS+Yy/vwnGCfzYifsz/IKHcq1iOiguiAW2xIk=)
11: 3130332e3130312e3133362e302f32332d3233203d3e203538353030.roa (hash: QtJsRt2bJkV+pUkYXyZvp3UviU6T+E4EYmhQxwxw1j4=)
12: 3230322e36352e3132312e302f32342d3234203d3e203233393531.roa (hash: ieaoOIKWcjfMopIKpCICGAmLYWwCSO+V3LkDuBSNkT8=)
13: 3130332e3130312e3133382e302f32332d3234203d3e203233393531.roa (hash: Wvbg4+GD4iqvIQYlS3uoYOVUygK7AWNPw3RQRNj68WY=)
14: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (hash: k9ygR7dcCcgQZcCVUZosJ0kFFCk6RTnOiQEs0TkSlyM=)
15: 3230322e36352e3131322e302f32302d3231203d3e203233393531.roa (hash: Z6QAti3PcHBV90jcJBYSuP5NzwSFPFHOvN09h9cPcv8=)
16: 6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl (hash: 6J2vALBGryWliGGaiGXv3gsNvIilGSlfcrC2HrdjKlo=)
17: 3131372e32302e34382e302f32302d3234203d3e203233393531.roa (hash: ZPDwYO2P6k8WjawbES/6S1o1QZK3XoCLsSCHN9ik8MI=)
18: 3130332e3130312e3133372e302f32342d3234203d3e203538353030.roa (hash: kpDzav+NfWvWz3egyn4r8aVxx4KUoQ4n0QZWFhLvaI0=)
19: 3230322e36352e3132332e302f32342d3234203d3e203233393531.roa (hash: 7zhNfhcyJKgN7kaxC80uWUI6jRdb18+Z+fZTl9tGqDE=)
20: 3230322e36352e3131322e302f32312d3231203d3e203233393531.roa (hash: ysYXY8Og9pIRdS9Mximv3wY/d5ba67AO7yhPpTjNltI=)
21: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (hash: LAUJzImDyMcLaxvXOPu7YXEqU04fBD2R+B9Fx7oa3PI=)
22: 3130332e3130312e3133362e302f32342d3234203d3e203538353030.roa (hash: G+y1F+6WafU6W/Chxw+c2cx5xyPCDvh0bU8Z2Hol69g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 07:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a4:5b:65:d6:4a:ed:51:e4:8b:18:43:65:35:a2:56:dc:0e:9f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Validity
Not Before: Sep 26 05:47:17 2026 GMT
Not After : Sep 27 07:10:17 2026 GMT
Subject: CN=DE0C371E3CE3D782B6AC5EF1DAE4507D5C35CD45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:53:e0:96:51:af:2d:a5:b2:69:0f:be:21:
88:e3:9c:83:49:b0:27:69:e4:e9:fc:99:6d:6a:20:
73:4e:24:db:33:3c:11:80:8d:8f:13:5e:78:29:fc:
51:ae:d2:30:dd:42:61:56:47:36:53:0c:5f:d3:5f:
09:b8:f5:91:ef:96:dd:32:56:1e:c0:bc:f3:1d:7b:
b5:28:fb:68:98:b7:eb:e0:88:bd:2c:c9:55:7e:e4:
1e:29:39:ee:05:14:81:1b:43:f6:96:e7:8b:e0:d9:
3a:4c:9d:81:08:d2:d5:d7:a4:0b:c5:d1:01:4a:5c:
85:6b:e2:fa:78:1b:1e:ac:be:77:8d:ee:bb:a1:21:
65:12:de:c4:ca:75:93:52:2c:40:a1:05:6f:98:69:
35:b3:e8:a8:53:c5:e4:ca:ae:9b:e4:62:97:66:9c:
e6:5d:0b:de:70:e1:ff:4f:4d:f2:50:13:1b:12:75:
32:c7:87:46:1d:d8:c7:1d:32:24:b7:9e:13:33:43:
d9:b6:c4:11:15:6e:57:e9:97:03:ee:6e:a1:a0:c8:
97:7a:f4:ee:1e:85:3d:70:81:d7:bf:83:bc:21:3d:
8d:96:ef:bf:a6:97:b2:16:3b:da:fe:d6:15:bc:86:
81:df:b1:e8:0b:18:9c:bd:cc:c3:b5:5d:0b:e7:b4:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0C:37:1E:3C:E3:D7:82:B6:AC:5E:F1:DA:E4:50:7D:5C:35:CD:45
X509v3 Authority Key Identifier:
keyid:66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:75:9e:b1:76:49:de:b9:e6:13:f9:53:07:34:00:f1:45:88:
96:dc:8e:be:15:f8:47:90:14:3e:08:fa:74:4e:39:ef:1b:c8:
f7:a8:41:71:0f:bc:15:d6:c6:6f:5c:a2:f8:fd:e9:4c:cd:01:
10:55:37:01:b0:84:0a:49:bb:9f:b4:3a:de:cc:63:82:81:80:
c5:a8:75:3d:97:b2:9a:47:bf:b1:8c:09:ab:f9:6a:f7:e4:31:
2f:58:c7:04:77:d9:61:06:1d:f6:af:ea:cb:53:b6:45:0a:fb:
6b:46:6e:01:6e:a6:ea:05:7c:e8:9d:16:4c:49:42:01:1c:15:
ef:1d:dc:0d:37:6a:eb:a5:bc:d8:d1:b6:fc:1e:27:c5:1e:90:
74:ce:0b:bb:ce:f1:39:90:e7:7e:c3:6e:c9:25:b5:40:f1:ed:
b3:5d:24:ec:57:81:d6:82:2c:fb:b2:b4:6a:69:51:d2:a2:70:
a7:e1:3d:f4:8c:b4:d0:a3:09:af:f9:d7:59:22:f5:de:8a:91:
ec:90:b2:9e:87:15:70:71:86:2f:21:24:91:ab:31:73:c7:5e:
63:5f:49:87:01:91:75:8f:29:4e:d3:06:c3:2e:16:76:a1:bb:
4a:a7:0d:78:f8:58:33:cf:d6:aa:08:ca:4f:94:fc:31:98:62:
2b:6e:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:13 2026 by rpki-client