
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
File: A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft (raw, json)
Hash identifier: FbTho0vc3CMGHHSmUC86pAH0esWuXRlIfM0NIO72laQ=
Subject key identifier: 82:9F:6D:A0:F0:96:9F:20:02:00:56:66:A4:58:B3:6E:EA:F5:C7:A3
Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
Certificate issuer: /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Certificate serial: 13DBDFCE2A07597E355EE73928B4BA75EAB1C50F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 05:10:25 +0000
Manifest this update: Tue 12 May 2026 05:05:25 +0000
Manifest next update: Wed 13 May 2026 05:10:25 +0000
Files and hashes: 1: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: cBuCEcM59m7bokueA5utqjCb5MDgTJH77vwBhsI0byM=)
2: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: 1sjbDI9dhuriYC2cGKfsX3Esj0PZpCf3CbJjOgUfU5k=)
3: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: YctTfX6DGOTRKPoRHGUwycW4/Zl5+c5Mmaff4w6V6rg=)
4: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: iYrGJJ9iIv+cRwIblIq+9q3Q7tv/1rCHNku1x0uMX3o=)
5: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: oQq+nr1R3/LIq3FYUPDo+7lWe378qim9S5GBtc/7+XI=)
6: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: uZzBwW9d4r/pMm/O/U0uE2dQ0H137+IT+iWRLJXsbtU=)
7: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: HE8Pj52+IZhV7TEkL1SN8xO4SlYdr60vODvajC36cyk=)
8: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: smvcSJU7arKg9wwHjFpQV6E26iIrv2S+SKozwQ9k4AA=)
9: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: y/B5rdY50adVs0er15Ug7P5cwgk8KxerWANg5QHwyDQ=)
10: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: qIa6emmkoMA4lane7jyL1Uz074v6ftwy/PmbugIuJLI=)
11: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: mLD+GhO1xXk2PTbUDcTfshDEYKPNXgJniWHXGxp+RlI=)
12: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: ZpP6fFTVzHg2TsrE8eBvLbSiODy4VISVHgrK1I2J8vE=)
13: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: wOk7wCCxqtS7Iv5pVlomQKnIoRly1bMRWor8VmTMwhc=)
14: A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl (hash: vLE7lB8objT/4uSxy83D1rnQgXxchU3hhNss4VqVYj8=)
15: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: g9UTMN38ofb78nZGj/6EE+B5/x+vpqW+tFIfQppedNY=)
16: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: IgDS+soANP3J3I/M4lqmTWHqHF/CWw4GOux2+pU3uZk=)
17: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: S8Ek9RlB50nYWIYGV3GDgnzVz7pzb0Rv9NpPnpubFVA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:db:df:ce:2a:07:59:7e:35:5e:e7:39:28:b4:ba:75:ea:b1:c5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Validity
Not Before: May 12 05:05:25 2026 GMT
Not After : May 13 05:10:25 2026 GMT
Subject: CN=829F6DA0F0969F2002005666A458B36EEAF5C7A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:20:1f:26:1e:7d:c1:14:5d:9d:e3:ef:5b:96:
38:5a:c7:d5:4b:e2:e6:15:7a:03:05:ad:59:e0:99:
64:41:f2:b1:94:00:d4:b0:f3:db:73:b3:cd:fc:97:
57:83:98:70:9f:ea:fb:45:de:10:83:50:72:ed:03:
c6:43:b0:82:0d:a1:97:f3:03:88:50:c9:e1:eb:49:
ad:33:b5:e9:4f:5f:81:71:cb:b5:0f:28:19:82:c4:
c2:7f:31:3b:69:0f:31:25:5e:ec:3e:76:89:d2:0b:
9c:fd:dc:4f:63:35:44:5f:4d:38:6e:97:bb:b1:90:
66:8b:95:04:98:7a:c1:aa:12:14:aa:c6:2e:06:d5:
01:cf:9b:ea:6b:d6:03:ce:a1:3f:ee:22:3d:ab:45:
03:5a:47:01:f5:2f:08:4f:39:a0:06:9c:79:a1:41:
cf:58:21:e4:03:3f:3b:36:e4:d7:0a:7c:78:ae:2b:
2a:38:82:bc:de:0d:14:14:01:73:46:d5:b4:a4:01:
96:6c:16:b0:36:57:7a:9d:44:88:69:49:8c:65:b2:
84:96:77:48:6a:e0:bd:88:3f:76:d7:c5:cc:aa:c3:
5a:4c:65:3e:70:4b:47:07:b2:fc:e5:bd:b9:18:0d:
8b:aa:5c:e0:10:ca:a1:1f:03:46:15:48:95:80:84:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9F:6D:A0:F0:96:9F:20:02:00:56:66:A4:58:B3:6E:EA:F5:C7:A3
X509v3 Authority Key Identifier:
keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f4:9f:24:8d:1f:bf:66:7a:ae:01:bf:c9:6c:61:61:ec:2c:
ca:4e:9a:3f:0f:63:9d:a3:79:90:c8:4a:f3:fe:e0:e5:f8:c7:
2c:6d:a3:1f:a3:a0:93:dd:6e:b7:23:b6:58:02:63:a2:3e:53:
87:40:dd:a0:41:75:e8:a3:96:55:8d:dc:2e:e9:8b:f1:1d:b5:
e8:52:db:32:e3:65:4a:b0:d5:00:83:9d:31:a4:f5:d3:11:88:
49:b5:b9:1a:2e:25:1d:7a:4f:5b:a5:c7:71:79:8b:66:20:93:
93:97:d2:36:6e:1e:d0:67:36:f1:0d:b4:33:55:4f:c8:29:7e:
5b:75:5e:ad:63:e5:8c:26:cc:34:4a:fe:72:3f:e2:ff:13:8f:
c7:44:a7:64:52:33:4f:83:f5:81:3c:d8:42:c7:af:0d:af:22:
e1:6e:b2:25:01:08:8e:7c:07:46:7e:4e:ab:b9:02:7c:b7:9b:
95:1a:2e:68:06:eb:db:9d:49:21:ca:8e:a1:c7:4c:c9:59:f4:
51:6e:c8:24:b4:5c:e8:ed:fb:1e:89:78:5d:1a:83:c2:5c:d0:
bc:43:e8:b8:b3:e2:6a:4a:cf:d1:b9:9b:df:d2:cf:46:f5:e0:
0f:5a:bc:07:4b:09:fc:5b:a3:0c:53:2f:80:d1:79:a7:23:e9:
e9:27:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:53:01 2026 by rpki-client