
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft
File: 202D68B92C393694107A2F9B59DF1822383F0A40.mft (raw, json)
Hash identifier: 1mxA4UEnKDgv5W+J6uRsVJCyGhPuvs2Zi/Bv18tZfGM=
Subject key identifier: 7C:49:AC:3B:FB:21:3A:0E:7D:19:9F:67:9F:CA:A8:6B:97:8B:9C:79
Authority key identifier: 20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40
Certificate issuer: /CN=202D68B92C393694107A2F9B59DF1822383F0A40
Certificate serial: 2E902D6D63404145B23A6C917C13A1760127FA83
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft
Manifest number: C3
Signing time: Thu 24 Sep 2026 20:46:15 +0000
Manifest this update: Thu 24 Sep 2026 20:41:15 +0000
Manifest next update: Fri 25 Sep 2026 22:29:15 +0000
Files and hashes: 1: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: s1JJ4qxqnX+/x2wRLTL/vn6XvEiBu3g0RUuaHJFKCfY=)
2: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: 59w4gZXVO0UF24xOSJ6tHWLfwtyek7qt4pTN2C7JT58=)
3: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: sVkX/3BAqlUnIX3vPMQ13bPbeRbhUsec2KXwzV7qXyg=)
4: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JJn7HIlfA2u7cKl1pj836AvFJgvd06b+L9BxXbXGPiQ=)
5: 202D68B92C393694107A2F9B59DF1822383F0A40.crl (hash: 4nfxngosiYYhUkO2m6B4vcqifTfLe/KDrXhKQsyz6fQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.crl
rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 22:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:90:2d:6d:63:40:41:45:b2:3a:6c:91:7c:13:a1:76:01:27:fa:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202D68B92C393694107A2F9B59DF1822383F0A40
Validity
Not Before: Sep 24 20:41:15 2026 GMT
Not After : Sep 25 22:29:15 2026 GMT
Subject: CN=7C49AC3BFB213A0E7D199F679FCAA86B978B9C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:4d:e0:ef:5b:ad:ce:a4:e7:20:93:c2:f2:
30:3f:0e:d6:b7:85:0f:ff:00:54:35:a1:a9:9a:b2:
d8:12:33:a6:90:fc:b7:19:7e:c5:a4:2a:bb:4b:29:
d4:9d:e5:9c:6d:cc:a8:2d:c9:0d:50:f7:ee:da:da:
76:c5:2e:d6:94:a5:33:b1:e5:a2:fa:9b:79:76:c8:
db:0b:5b:89:56:ad:a7:15:5b:fb:7c:6f:55:cd:d2:
da:e5:db:96:ed:ba:62:75:f8:c5:bc:60:6f:ea:cc:
1a:c2:9e:fb:c4:f4:55:dc:23:8c:74:34:f7:0b:70:
03:e3:49:83:11:e0:1d:a0:a1:21:7c:1d:12:2f:b0:
a7:76:77:b6:ec:92:70:62:39:64:8c:9b:a5:d5:c4:
a7:7d:7f:bb:0a:1f:90:67:47:7e:39:6c:16:f7:55:
46:d0:17:12:6e:7b:7f:5a:f6:79:f2:8b:64:2c:d8:
1d:70:64:16:30:e0:ad:04:f6:e3:5f:51:14:1c:f6:
66:34:6d:1a:bd:7e:f7:f4:db:72:b3:9f:25:10:af:
ef:a4:49:c5:8b:d3:c7:93:d0:79:97:0d:f2:94:08:
e5:85:1a:96:7b:fd:8b:75:0f:aa:07:7c:04:db:53:
28:70:dd:65:6e:3b:c2:55:38:64:50:05:8b:a3:9a:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:AC:3B:FB:21:3A:0E:7D:19:9F:67:9F:CA:A8:6B:97:8B:9C:79
X509v3 Authority Key Identifier:
keyid:20:2D:68:B9:2C:39:36:94:10:7A:2F:9B:59:DF:18:22:38:3F:0A:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/202D68B92C393694107A2F9B59DF1822383F0A40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/202D68B92C393694107A2F9B59DF1822383F0A40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ba:d2:d2:f8:34:80:36:1c:df:03:d3:a2:6c:97:87:4c:24:
b0:5d:4e:ec:96:a0:94:16:6b:7e:29:c9:77:0d:60:6b:9c:09:
a6:94:cc:fd:61:38:a5:66:01:c8:53:54:8e:12:66:53:b3:df:
8f:c6:ef:ee:60:61:25:df:c4:1e:d5:85:13:c0:51:30:67:7e:
d3:fe:16:87:50:1a:c6:9a:51:65:73:b9:1c:e5:9f:c2:8a:01:
9e:40:8e:d9:47:cd:ed:5a:0c:cf:1c:49:77:00:30:25:87:dc:
34:22:10:b3:99:18:9f:9c:3a:de:18:73:cb:3c:ca:42:d9:07:
25:46:3a:30:66:aa:6d:ad:b8:7b:bd:c4:0e:7a:13:22:c4:30:
d9:ef:8e:b3:0f:a1:80:91:3a:02:b4:f3:7a:b1:41:73:0c:02:
4b:25:80:84:19:07:91:3e:ee:d1:44:ff:e0:41:ef:d1:4c:c1:
8e:8c:41:65:57:ab:04:b8:60:3c:00:5e:1f:66:99:67:74:a9:
07:eb:f5:d8:05:f7:3f:c3:c0:84:27:f8:a4:6b:87:ee:1a:9a:
76:1e:cb:2c:d5:47:3f:6b:4d:14:7b:00:85:5b:24:8d:b4:2e:
a9:f8:a1:2e:3f:7e:c7:ec:e2:ce:02:61:1e:6a:a8:a1:c3:41:
4e:b9:d2:e3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULpAtbWNAQUWyOmyRfBOhdgEn+oMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjAyRDY4QjkyQzM5MzY5NDEwN0EyRjlCNTlERjE4MjIz
ODNGMEE0MDAeFw0yNjA5MjQyMDQxMTVaFw0yNjA5MjUyMjI5MTVaMDMxMTAvBgNV
BAMTKDdDNDlBQzNCRkIyMTNBMEU3RDE5OUY2NzlGQ0FBODZCOTc4QjlDNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Q03g71utzqTnIJPC8jA/Dta3
hQ//AFQ1oamastgSM6aQ/LcZfsWkKrtLKdSd5ZxtzKgtyQ1Q9+7a2nbFLtaUpTOx
5aL6m3l2yNsLW4lWracVW/t8b1XN0trl25btumJ1+MW8YG/qzBrCnvvE9FXcI4x0
NPcLcAPjSYMR4B2goSF8HRIvsKd2d7bsknBiOWSMm6XVxKd9f7sKH5BnR345bBb3
VUbQFxJue39a9nnyi2Qs2B1wZBYw4K0E9uNfURQc9mY0bRq9fvf023KznyUQr++k
ScWL08eT0HmXDfKUCOWFGpZ7/Yt1D6oHfATbUyhw3WVuO8JVOGRQBYujmo7VAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfEmsO/shOg59GZ9nn8qoa5eLnHkwHwYDVR0j
BBgwFoAUIC1ouSw5NpQQei+bWd8YIjg/CkAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjU3MjkyOTEtYTFhNy00YjE5LTkzZjYtMWQ4NDU3NGE2N2FlLzAvMjAyRDY4Qjky
QzM5MzY5NDEwN0EyRjlCNTlERjE4MjIzODNGMEE0MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yMDJENjhCOTJDMzkzNjk0MTA3QTJGOUI1OURGMTgyMjM4M0Yw
QTQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz
ZjYtMWQ4NDU3NGE2N2FlLzAvMjAyRDY4QjkyQzM5MzY5NDEwN0EyRjlCNTlERjE4
MjIzODNGMEE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABC60tL4NIA2HN8D06Jsl4dMJLBdTuyWoJQW
a34pyXcNYGucCaaUzP1hOKVmAchTVI4SZlOz34/G7+5gYSXfxB7VhRPAUTBnftP+
FodQGsaaUWVzuRzln8KKAZ5AjtlHze1aDM8cSXcAMCWH3DQiELOZGJ+cOt4Yc8s8
ykLZByVGOjBmqm2tuHu9xA56EyLEMNnvjrMPoYCROgK083qxQXMMAkslgIQZB5E+
7tFE/+BB79FMwY6MQWVXqwS4YDwAXh9mmWd0qQfr9dgF9z/DwIQn+KRrh+4amnYe
yyzVRz9rTRR7AIVbJI20Lqn4oS4/fsfs4s4CYR5qqKHDQU650uM=
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:28:23 2026 by rpki-client