
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
File: B68C761C821AA1629C9F6105D99B85E34433B478.mft (raw, json)
Hash identifier: 27Qou0MhLLFgwc0vr38jrx2s8Vl1P+OJFS2eppeVhJI=
Subject key identifier: E7:64:CF:C6:AF:1E:66:D0:AF:ED:55:A9:AF:36:C6:6B:70:82:8B:C8
Authority key identifier: B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78
Certificate issuer: /CN=B68C761C821AA1629C9F6105D99B85E34433B478
Certificate serial: 20CBA95FEC6C57CDEC0222743EF0BD6C5E9F58A1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
Manifest number: C5
Signing time: Sat 26 Sep 2026 02:53:46 +0000
Manifest this update: Sat 26 Sep 2026 02:48:46 +0000
Manifest next update: Sun 27 Sep 2026 05:35:46 +0000
Files and hashes: 1: B68C761C821AA1629C9F6105D99B85E34433B478.crl (hash: erh/ZQt6dedrVXgFLZPwkC5JOGuCmqe+IQZgk+nuMPI=)
2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: eM4zTeT5x8zRTCedGRk54XligMqqPoDVVW+mAmQIEvQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl
rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 05:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:cb:a9:5f:ec:6c:57:cd:ec:02:22:74:3e:f0:bd:6c:5e:9f:58:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B68C761C821AA1629C9F6105D99B85E34433B478
Validity
Not Before: Sep 26 02:48:46 2026 GMT
Not After : Sep 27 05:35:46 2026 GMT
Subject: CN=E764CFC6AF1E66D0AFED55A9AF36C66B70828BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:5e:80:d6:5d:64:d0:b4:9c:e9:24:b0:91:
2c:05:b3:5b:31:e9:fb:86:f5:2f:57:d6:5d:d1:e2:
24:d0:42:0d:41:fb:a7:27:79:8a:d3:49:af:8a:b9:
30:9e:e5:db:a2:f5:d6:90:14:8e:76:f4:6b:e5:3b:
f7:8a:1e:e4:66:54:9c:e3:dc:da:3e:47:c7:5e:17:
6b:23:5f:58:f6:d7:47:d9:72:b7:17:9b:79:68:92:
b7:5a:45:d1:d6:ee:b0:43:a3:12:3b:58:47:c3:f8:
1a:a5:bc:76:fd:ed:88:5e:c8:b2:cd:bd:6e:fb:b1:
b0:82:15:1e:eb:90:b0:41:f0:eb:ec:32:be:ce:96:
05:dd:dc:f7:e4:be:ac:58:3d:af:65:28:c7:c5:b9:
27:7e:0a:b4:f6:d0:a1:e6:c2:b8:a2:7d:8e:56:fd:
fe:ff:db:8d:8c:94:c4:f7:b6:6c:94:b3:9e:1f:bd:
d1:ce:c5:cd:77:a2:d6:cb:54:1f:6a:8b:ef:25:47:
1d:8a:b8:77:e6:a5:79:33:4f:b6:f7:8a:c3:25:ad:
11:cf:a1:8b:d3:c8:b2:81:a3:5b:5f:c3:1f:61:3b:
3c:27:e7:6b:4c:22:45:ca:6b:8b:b2:2a:db:e9:e5:
49:95:aa:e0:72:87:95:93:bb:f0:29:9f:02:26:9d:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:64:CF:C6:AF:1E:66:D0:AF:ED:55:A9:AF:36:C6:6B:70:82:8B:C8
X509v3 Authority Key Identifier:
keyid:B6:8C:76:1C:82:1A:A1:62:9C:9F:61:05:D9:9B:85:E3:44:33:B4:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B68C761C821AA1629C9F6105D99B85E34433B478.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/B68C761C821AA1629C9F6105D99B85E34433B478.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:00:e1:7a:7d:24:c6:c1:76:56:e0:52:3f:e1:99:90:ff:4a:
d0:e0:6f:49:4a:61:14:2b:a1:50:4c:54:d8:61:90:f1:0a:0c:
3a:a7:bc:cc:9c:30:9f:e1:6e:64:97:d6:80:14:c3:8b:3a:29:
a3:68:9d:d2:90:9c:49:82:e7:56:5d:74:f7:e6:3c:b4:a7:87:
2c:f5:76:42:7b:c9:56:66:ed:62:8f:0c:78:6d:94:70:0d:0d:
aa:93:83:b7:54:1e:1a:ce:d8:29:8a:68:c8:03:41:03:63:98:
8b:47:59:08:12:71:eb:aa:ec:de:5c:fb:73:33:88:a9:8b:34:
fe:8d:16:62:b8:31:a7:d2:20:01:3f:91:7e:2a:51:9d:ad:1b:
fc:e3:d2:a9:d2:93:3b:5d:d5:84:da:7d:b7:4d:b1:f6:8b:5e:
6f:b8:2b:af:4d:d3:88:8f:44:ca:04:e9:5b:21:c8:73:93:da:
12:e3:78:62:5e:13:ab:e6:a7:f5:9a:8f:67:1f:1b:e2:03:e1:
23:72:99:ad:da:74:f0:37:64:24:7d:ec:1e:4c:3e:32:cf:bf:
36:d2:f9:ff:9f:74:0c:46:2f:e0:a9:9a:cf:61:eb:91:03:a5:
b5:5d:7c:49:48:ff:f4:ed:69:50:f0:94:dd:2a:56:5c:f0:c2:
a4:37:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:47:49 2026 by rpki-client