
$ rpki-client -vvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
File: 68A727878748F40EF62D744B06303F71A6B3F75C.mft (raw, json)
Hash identifier: U3hG27YO04bNblTJXHLwp3DBxWFafVfRVJk8hWk1rR4=
Subject key identifier: CF:E4:73:08:5C:BD:67:20:AF:DA:25:53:D1:87:F1:7E:0B:6D:CB:42
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Certificate issuer: /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial: 75B803CE5DC8DC28D7F8CDF5A64693E0757F671C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 10:52:40 +0000
Manifest this update: Fri 24 Jul 2026 10:47:40 +0000
Manifest next update: Sat 25 Jul 2026 14:04:40 +0000
Files and hashes: 1: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: vW5w5IkuRb83zA5ANSFF1CJerE321mN8QnbQgdvihxM=)
2: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: r2ZYiFd01bWs0eEN9nD+Mp8m+K6B0HFPjNNciuS/bGc=)
3: 68A727878748F40EF62D744B06303F71A6B3F75C.crl (hash: nyL7l1Fna8xt7Vw/Bi/CzJOAVSJT2EfYeiuFT6yeTxE=)
4: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: gR1DTuGl5zoFpulg1oigiYRS4tO3/p7LnE5jaqD1jaU=)
5: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: hz0u1O8torhSAEu0GK+s8W9famRD261lcziOb/ZySjc=)
6: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: S8QwzcFeryIcuSdPBiMnAYW7dqUXcBjtqFkLeF9/BcE=)
7: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: NLB3lY9DFzaCd5CKPizbBhfO5LYHEpYinHrGVDAbCes=)
8: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: PvN2AuvxpSJAs/KNp18Hx71tEJNrxtBQ9MHqNXHlPGI=)
9: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6s+J2D1xc+Un9FBlPt0gue96vFI4b8yX8woz+h6eFQo=)
10: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: IbAFzZACUnD6lwBQxPhQqMDiyphOZDVL6AMwxKGfiyQ=)
11: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: ghKRefxmMKmKlt978ds7tp9D7g1WWsJyZmES+glyEMw=)
12: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: pivfi9ji1ihnIAJ1idyzgwRmHruzS5uloDq3BscV5e0=)
13: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: Tv2GPPjlGM6s70rJUxZeMrMG5Grjr8wYER/e5zbXioI=)
14: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: CeqXPBLKTKcb4QWFvGgnRWapqG6f1Vmt1NBorMo+v2c=)
15: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: c+NnvyqB3knbtuO7KdhM0hJjec2wwtXVinOUBhE4/24=)
16: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: WRqUfw4kkLNha7EwV7NENaJIZvhb1ikV9t5ePDUcyD4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b8:03:ce:5d:c8:dc:28:d7:f8:cd:f5:a6:46:93:e0:75:7f:67:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
Validity
Not Before: Jul 24 10:47:40 2026 GMT
Not After : Jul 25 14:04:40 2026 GMT
Subject: CN=CFE473085CBD6720AFDA2553D187F17E0B6DCB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:82:a7:ae:92:fd:dd:98:55:cd:8a:9a:dc:1c:
c9:fc:08:78:47:b0:8f:d5:a1:8e:ed:69:0f:16:68:
a3:d9:ad:d8:3c:36:2d:42:af:5b:3f:60:9a:c8:18:
d3:77:51:5a:5f:a7:63:b2:02:0c:e8:5b:da:6f:3c:
99:1d:0b:ab:94:33:04:fe:48:b1:dc:87:70:7e:c7:
b2:c8:13:52:e8:a0:aa:4c:cb:60:7a:8f:7b:f0:21:
87:d4:b6:ae:fc:4e:05:40:7f:26:3e:f1:1a:d0:c0:
7a:d0:92:82:db:63:db:8c:1a:b8:ea:7f:18:52:5a:
c7:7f:05:f1:f2:26:32:0f:90:a7:e4:0e:38:18:fd:
3d:5d:4d:22:74:31:9b:57:b6:1d:6f:97:06:9b:50:
90:d2:85:87:52:13:d4:50:d6:06:2c:22:bc:59:fb:
89:19:d6:19:60:02:19:51:88:87:f5:79:3a:eb:28:
28:d0:88:95:c7:6d:9e:d0:01:a5:ea:1b:a4:84:26:
94:f1:9c:93:0e:fa:9f:b9:d9:bc:d5:47:bd:92:3d:
72:3e:cf:5f:62:23:23:7d:f8:2b:77:12:61:0b:a6:
1b:e6:00:9e:ca:e1:10:c4:17:73:d0:2b:47:a0:b8:
a6:ef:8c:d7:15:de:83:ef:f6:62:7f:bc:e8:fd:58:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:73:08:5C:BD:67:20:AF:DA:25:53:D1:87:F1:7E:0B:6D:CB:42
X509v3 Authority Key Identifier:
keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:00:7e:d1:2d:e6:7e:dd:d5:ea:3f:64:9b:3a:a4:e1:28:f2:
e6:c3:fd:b0:21:b4:45:6b:43:3f:77:d0:80:24:4f:2f:ca:dd:
a9:02:97:d7:50:81:74:ef:dc:4f:0f:8b:38:62:74:51:84:94:
54:34:6c:74:16:a1:de:d1:38:00:d9:44:60:f8:a8:d1:e8:f4:
ab:99:c1:3a:64:b6:d0:7c:f3:bb:44:09:73:22:69:4a:55:22:
b4:d7:0a:e3:e6:94:83:95:b8:e9:f3:cd:cc:37:e8:20:38:9b:
b8:e3:87:40:24:fe:66:b4:2c:ac:8a:71:bb:74:c7:09:93:a3:
6f:69:38:db:c9:c0:1c:cf:41:f0:52:fb:bf:ea:6d:e6:a3:5b:
02:96:4b:7d:d4:91:80:51:11:ac:cc:74:4a:be:48:af:4b:08:
e6:d0:1c:ab:70:83:53:ea:97:1d:fa:06:4d:3c:0f:41:95:c3:
f0:fc:1f:19:4f:06:c3:ec:92:0e:f9:14:fe:72:8b:7f:9e:81:
ec:f9:44:67:5f:c7:5b:6b:b6:23:58:76:22:cc:50:9a:14:ad:
e2:26:5b:62:6c:14:fb:63:14:51:68:50:e6:f2:13:22:2b:14:
57:ab:e9:76:9f:0f:8d:53:fb:94:26:06:d3:34:79:28:92:cf:
00:08:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:17 2026 by rpki-client