
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
File: 68A727878748F40EF62D744B06303F71A6B3F75C.mft (raw, json)
Hash identifier: lqoAHZM68R4wvU6mOdkVR8w5LdTGilvlIpg6PwDgckc=
Subject key identifier: 68:AF:48:0D:C7:BE:E3:E2:48:E9:45:99:37:39:05:03:9F:67:02:24
Authority key identifier: 68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
Certificate issuer: /CN=68A727878748F40EF62D744B06303F71A6B3F75C
Certificate serial: 69B9237C2E487BBCD9E9C5AC044292854427A15F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 18:39:01 +0000
Manifest this update: Wed 23 Sep 2026 18:34:01 +0000
Manifest next update: Thu 24 Sep 2026 18:39:01 +0000
Files and hashes: 1: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: NLB3lY9DFzaCd5CKPizbBhfO5LYHEpYinHrGVDAbCes=)
2: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: hz0u1O8torhSAEu0GK+s8W9famRD261lcziOb/ZySjc=)
3: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: ghKRefxmMKmKlt978ds7tp9D7g1WWsJyZmES+glyEMw=)
4: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: gR1DTuGl5zoFpulg1oigiYRS4tO3/p7LnE5jaqD1jaU=)
5: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: CeqXPBLKTKcb4QWFvGgnRWapqG6f1Vmt1NBorMo+v2c=)
6: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: vW5w5IkuRb83zA5ANSFF1CJerE321mN8QnbQgdvihxM=)
7: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: S8QwzcFeryIcuSdPBiMnAYW7dqUXcBjtqFkLeF9/BcE=)
8: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: c+NnvyqB3knbtuO7KdhM0hJjec2wwtXVinOUBhE4/24=)
9: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: Tv2GPPjlGM6s70rJUxZeMrMG5Grjr8wYER/e5zbXioI=)
10: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: r2ZYiFd01bWs0eEN9nD+Mp8m+K6B0HFPjNNciuS/bGc=)
11: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6s+J2D1xc+Un9FBlPt0gue96vFI4b8yX8woz+h6eFQo=)
12: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: WRqUfw4kkLNha7EwV7NENaJIZvhb1ikV9t5ePDUcyD4=)
13: 68A727878748F40EF62D744B06303F71A6B3F75C.crl (hash: vnHZSCQbI5yu4mZ16FdUttOjZuoX0tlaBdd3GVUc/Fs=)
14: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: IbAFzZACUnD6lwBQxPhQqMDiyphOZDVL6AMwxKGfiyQ=)
15: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: PvN2AuvxpSJAs/KNp18Hx71tEJNrxtBQ9MHqNXHlPGI=)
16: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: pivfi9ji1ihnIAJ1idyzgwRmHruzS5uloDq3BscV5e0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 18:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b9:23:7c:2e:48:7b:bc:d9:e9:c5:ac:04:42:92:85:44:27:a1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68A727878748F40EF62D744B06303F71A6B3F75C
Validity
Not Before: Sep 23 18:34:01 2026 GMT
Not After : Sep 24 18:39:01 2026 GMT
Subject: CN=68AF480DC7BEE3E248E94599373905039F670224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:bd:31:01:15:93:94:0a:18:3c:a1:54:1f:
7d:d1:70:7e:28:84:c1:cf:b8:6a:a2:bb:c4:48:b1:
d9:48:f1:10:d8:9a:9a:0e:6a:ea:4c:fe:0e:6e:84:
e6:c0:40:11:90:79:db:51:f8:30:99:08:ed:57:b2:
95:c5:b3:a2:4b:fb:d5:c4:25:32:64:cb:10:22:c4:
6b:c2:92:0a:9b:f6:8b:7f:b8:2a:13:0d:4f:ad:a4:
6d:d8:40:34:25:ec:57:cb:30:f8:5d:2c:ba:1f:12:
0a:97:63:41:d3:55:46:bd:36:45:81:65:95:c4:4f:
a3:82:1e:2f:8d:aa:c9:cf:bf:24:cf:0f:10:06:57:
62:f9:08:4f:2e:1d:ed:71:aa:1e:2d:62:7f:d4:25:
ae:89:e4:8a:07:d9:50:41:05:53:9b:71:8c:61:dd:
6b:b9:58:83:ec:d3:ab:d2:fb:7b:9c:ad:e9:d0:21:
53:ac:0c:08:c4:8e:fd:e5:5c:78:06:16:7f:ae:1d:
fd:1e:72:75:21:f4:c6:b1:af:09:a2:b7:3b:1a:d6:
3c:fa:15:f5:be:42:ad:11:66:2a:79:3c:2e:49:13:
69:b6:05:a1:ff:00:6a:1f:a9:56:4a:b4:22:bd:0d:
33:47:a0:87:ad:88:6f:c3:7b:51:6a:16:a8:cd:d1:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:48:0D:C7:BE:E3:E2:48:E9:45:99:37:39:05:03:9F:67:02:24
X509v3 Authority Key Identifier:
keyid:68:A7:27:87:87:48:F4:0E:F6:2D:74:4B:06:30:3F:71:A6:B3:F7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/68A727878748F40EF62D744B06303F71A6B3F75C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/68A727878748F40EF62D744B06303F71A6B3F75C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a5:d6:7e:d8:33:c9:2f:6e:9e:0d:43:67:32:8f:ed:2d:07:
aa:b0:21:30:c0:5a:bb:18:3c:65:08:fe:46:55:e4:31:57:d9:
62:a8:c5:bf:e0:06:8f:09:f2:b9:80:03:35:89:f4:b6:42:3b:
5d:11:ee:3b:11:5c:c1:b0:8c:e2:ae:1a:71:47:f8:93:f1:eb:
85:64:59:c3:ee:df:27:fa:4c:3c:e1:07:c1:b5:37:2e:79:e9:
b1:9f:d0:af:e0:91:54:ab:17:51:63:e0:01:2b:ce:f1:85:8d:
8e:3b:7e:1b:eb:35:bf:76:39:b7:25:c9:b8:2a:a7:5a:ad:f7:
1a:1e:2f:b5:ad:a6:e4:53:1f:d4:ad:b8:4b:5e:df:2c:00:13:
c6:f2:98:95:58:dd:77:27:33:28:37:12:df:f2:f4:65:3b:07:
75:29:52:13:8c:8a:d9:e6:88:b3:9e:d0:9b:8a:b4:ed:66:a0:
42:c1:b5:7c:d4:a0:96:9a:e4:4c:05:5e:19:97:98:8b:be:f0:
5b:86:f6:8b:55:8f:19:a2:cc:7a:28:4b:86:55:06:4e:c0:92:
7a:19:10:10:ac:a4:2d:fc:a1:84:d7:2f:51:07:21:65:4a:d0:
aa:5e:5a:ed:f2:ca:31:cd:b4:06:5d:74:ac:c0:ad:0b:83:e4:
17:76:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:33:22 2026 by rpki-client