
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
File: 67869B177D646DD081563D36E6E9775C31473EE2.mft (raw, json)
Hash identifier: 5s8rx0fnTbfZDPB9ofanJGz7dwB+4in+tNrA+ordb84=
Subject key identifier: EB:39:B9:27:4D:4E:1E:1E:F5:00:BF:E9:49:DE:DB:87:EB:2D:57:C1
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Certificate issuer: /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial: 186A65924D95B3740722117CB5033181BE4ED4FA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 08:29:56 +0000
Manifest this update: Tue 12 May 2026 08:24:56 +0000
Manifest next update: Wed 13 May 2026 11:58:56 +0000
Files and hashes: 1: 323430323a3630303a643a3a2f34382d3438203d3e203338353135.roa (hash: OzZH/D6AOeSKi/B68s/JsfZKJ8q2Nf0IMX0MHCxOzJU=)
2: 323430323a3630303a633a3a2f34382d3438203d3e203338353135.roa (hash: T1nc91DmBxWyircdZzFzbDxGxyovVe7DPHahSvPllcY=)
3: 323430323a3630303a633162313a3a2f34382d3438203d3e203338353135.roa (hash: 5J1J4PqLlG84JUqFzehXqUJSzaizav7T3dZxgUAafu4=)
4: 3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (hash: tDbsfjEDMxa62P8bXV7786EDY10m/l1Hfbr/3+kciqg=)
5: 3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (hash: X/sAxsDuRah8IJiZ2MNAigntLPHYMOLgC4Qd/BLMdRg=)
6: 3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (hash: e8KVnvyYSXyFNwKbKojy/FuBAC2iwrcpmK/bEobVoLw=)
7: 323430323a3630303a62313a3a2f34382d3438203d3e203338353135.roa (hash: mPehBT00jiY/mvxElgCv+CTGd1K6RVVC/AiDtpNS60E=)
8: 323430323a3630303a313030303a3a2f34382d3438203d3e203338353135.roa (hash: SLO7crG5MN2DlhdgBiaeLi1vELhQiu/y4Xricr0iQIY=)
9: 3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (hash: N3QuzEKlcEB5QVB6ktu4ie90f+FhLLN7QYnW5ppb+do=)
10: 3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (hash: psHY4jaTgzI0faEzcQs4jj9v5F7KEDrhP0uTR9a6JIs=)
11: 3131372e37342e3132302e302f32322d3232203d3e203338353135.roa (hash: H0lx6yfwXvuzVHo723AYAPX0NqfIefM1dqjJRJpPua8=)
12: 3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (hash: Y8970f4i5rHjVl4BWleFzqBrlQQgV35ntejpqxdnCiA=)
13: 3130332e3130372e3234382e302f32322d3232203d3e203338353135.roa (hash: iuzg6GYGTaoy7fsEDAMwMxJJMU0InpEIJz/bfq0GG+k=)
14: 323430323a3630303a3a2f33322d3438203d3e203338353135.roa (hash: JOiAp3jXH49RWqx0RzZF/vQ7edFQ7lAl/c/n0M0GXRM=)
15: 3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (hash: qGWjnJJ/GYC6/UdMykV4yUNqj/n0gbris8Cxoim6J/s=)
16: 3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (hash: o2BW4KEu9QhR/ZgqGMngSixWkrbWulUWHKOK41U7NC0=)
17: 3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (hash: BbQ0kxGG4V/DoukSVVKvwhEMQ8SUJ9uiLxVWlPkIeKs=)
18: 323430323a3630303a353431343a3a2f34382d3438203d3e203338353135.roa (hash: pbLRqvIGcFyn/7m6CqlnX9OGnnf//u2PTw4LD4ws3V0=)
19: 3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (hash: tMvUI+KURvhbQu+c9c8RrqZg9hF/ImzlW6ITnNdYAy4=)
20: 3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (hash: cUKFA5F04PCCOl3p+R/RfwT0fJqfxISh9qfKau7cspg=)
21: 67869B177D646DD081563D36E6E9775C31473EE2.crl (hash: T7QApHnpBg6op4TjCDg6gGZHJ2spPf8wwJf9BH3CRYE=)
22: 323430323a3630303a313a3a2f34382d3438203d3e203338353135.roa (hash: UoQ5wwYQR1W0CdGwm3CbzAGtC1zCCxi3okzihU8MCho=)
23: 3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (hash: tykJF6DboR5k4q21U5Qq+5eJiiEi7rWGoBUT5R2EI3I=)
24: 323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa (hash: ge328E5DHquhOrpztjYQoFR5EnAYSz6fiEvoUGs2cng=)
25: 323430323a3630303a643030303a3a2f34382d3438203d3e203338353135.roa (hash: fyhAAUX0oYHo/blO6bCLTKGITAX4/ek1/9c40JSPCMw=)
26: 3131372e37342e3132302e302f32312d3231203d3e203338353135.roa (hash: BaQmZEH9tW06GWie+v+l91ALirtn7nIilUv54Li2/vw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:6a:65:92:4d:95:b3:74:07:22:11:7c:b5:03:31:81:be:4e:d4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
Validity
Not Before: May 12 08:24:56 2026 GMT
Not After : May 13 11:58:56 2026 GMT
Subject: CN=EB39B9274D4E1E1EF500BFE949DEDB87EB2D57C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d3:52:fe:a7:03:21:f6:1e:60:f1:a1:82:ac:
68:d4:77:fb:f9:82:de:9e:35:f1:39:a2:d6:41:5d:
65:22:93:fc:41:1b:db:4d:3c:45:06:5d:14:b7:12:
1b:11:7a:77:e9:eb:13:46:b8:35:7a:30:d1:b8:19:
ba:56:af:ab:2c:6c:f3:8f:6c:a5:1e:8f:a3:e2:03:
fc:d3:66:55:98:31:cd:a5:d7:3c:b2:7f:bd:b4:0e:
31:49:fa:9b:d5:b7:18:d1:35:a8:65:24:ed:4e:ef:
99:a3:b0:3d:a8:11:94:cf:ab:72:f2:a0:94:02:37:
8b:b6:c8:b7:5c:80:4a:c2:33:01:1a:d7:ad:9a:0f:
58:e5:b9:bc:95:30:83:b9:e8:f3:0b:e3:13:22:cd:
8c:ae:6a:19:c4:c5:2c:4c:0b:96:af:8c:ad:60:f7:
11:fd:32:56:4c:d9:1f:f8:b1:ac:21:d2:17:d3:67:
44:bd:af:84:0b:45:88:12:59:06:18:08:df:13:86:
b9:46:e7:59:a7:49:e9:3d:9c:88:ab:a8:e2:43:24:
ff:29:98:c1:71:ae:2e:06:2b:2b:7b:c0:98:60:80:
1d:79:99:3b:cf:b6:04:1f:64:13:c1:36:80:92:5e:
93:e0:ae:ef:08:7d:11:22:3a:28:85:e3:ef:1e:b3:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:B9:27:4D:4E:1E:1E:F5:00:BF:E9:49:DE:DB:87:EB:2D:57:C1
X509v3 Authority Key Identifier:
keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2a:b6:c2:5e:c6:de:68:fc:32:d5:fd:cf:3f:bb:90:8c:4c:
c5:3c:a8:58:bf:0e:b1:8b:62:c5:11:cd:ac:35:27:e1:52:e1:
2a:7c:d3:1f:7e:a0:57:95:a1:dd:45:68:ee:90:9e:79:c9:42:
05:9c:5f:b0:e7:11:9a:f6:bd:81:09:4e:80:6a:de:d2:50:ba:
59:25:3e:be:30:76:a9:2a:1f:40:4c:28:ec:df:19:0e:99:d4:
d8:4a:d8:59:c3:b8:17:29:f7:39:15:fb:d2:10:4a:a8:24:4a:
57:62:88:86:6a:65:63:78:e1:b0:a4:ed:d0:22:e4:62:25:6b:
93:fb:48:c1:2f:bc:d4:81:e1:f2:e3:f0:a6:45:0f:91:04:23:
2e:a8:a0:27:09:00:7f:ea:d1:69:ac:f7:56:14:de:55:4f:2d:
fd:db:26:d3:ac:65:33:a0:a8:c5:6d:4f:ed:05:03:50:77:b1:
00:5d:8b:65:6f:e2:e5:86:ef:b1:8a:8f:93:df:a6:22:ae:f3:
19:40:84:6e:f9:15:3a:c2:78:da:f0:e5:8d:c2:e8:ca:b2:57:
c4:fc:26:37:d7:be:bc:c2:e1:af:ab:8a:59:b4:de:56:81:50:
03:6e:7f:2a:09:d1:a5:1d:d8:17:69:79:38:3b:35:45:7d:2e:
1a:c4:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:49 2026 by rpki-client