
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
File: E6B678AE8DC843399DF534610764D871D4D698D8.mft (raw, json)
Hash identifier: tL1XMWT09ChN4ttjdVTH+q8e4eAWqgM88NMHe9G2VWE=
Subject key identifier: 3E:2E:64:0B:A8:79:58:F1:6D:9C:69:FF:E9:47:9D:A0:DE:7D:7E:B3
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Certificate issuer: /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial: 188CA437A7381E61B4C6139834ECCF3524AC5398
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
Manifest number: 010C
Signing time: Sat 14 Nov 2026 20:40:21 +0000
Manifest this update: Sat 14 Nov 2026 20:35:21 +0000
Manifest next update: Sun 15 Nov 2026 21:45:21 +0000
Files and hashes: 1: 3131302e34342e3136382e302f32342d3234203d3e20323133363037.roa (hash: DmoH8opGJbRaKyp4x9c9EP7+HF39t1DV3Qhv/2VdzFw=)
2: 323430323a616230303a65663a3a2f34382d3438203d3e203234323036.roa (hash: iSYg7oaleP+0hM8Q7VQjTSubDCUgtN9XxBOQbAjqvPc=)
3: 323430323a616230303a636166653a3a2f34382d3438203d3e203234323036.roa (hash: EAVIC7zwho1aCdIDVakXoAbpjUpz2w2Y3LxfSakp/FM=)
4: 3230332e38342e3133362e302f32342d3234203d3e20323135373438.roa (hash: PGJpqj97a4FLmBoFNBDINXicODmeYOoNb+ofVxYKueU=)
5: 323430323a616230303a63663a3a2f34382d3438203d3e203234323036.roa (hash: UEjlhJPDkogb1qqoZt4nQF0B03NRjWPLFpd+k3aP3g8=)
6: 323430323a616230303a64663a3a2f34382d3438203d3e203234323036.roa (hash: 4OT1Vj+gmmnFpwwDPh6x9/kISmTU11bxM2EYiVlOge0=)
7: 3230332e38342e3134302e302f32342d3234203d3e20313338303737.roa (hash: YwE5fGvWPY3YshdbLzQTeRk4XV9oJUzj/74z6hxtryo=)
8: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (hash: R8XsLLiQgeiVikjmq/bw0lBjlifQX0sveTtDTyBFbNw=)
9: 3131302e34342e3137322e302f32322d3232203d3e20313338303737.roa (hash: n5VI2ALwTByQW6MDpSlHEED2UTLT+bloshp6A2FsEGE=)
10: 3230332e38342e3134322e302f32342d3234203d3e20313338383433.roa (hash: gDMW2YhmbSmpH/joH4guJ0u/x2YZTaH6K5yf8b7OKLc=)
11: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (hash: +Dqe2NjVz3kFYrpCmrt1Ndb2xcIWymGbxC/ShLcbqm4=)
12: 323430323a616230303a3a2f33322d3332203d3e203234323036.roa (hash: hHOpQuaz1NpiD38wKgMW7/sVdao5mcNb1qjoiXtjt2M=)
13: 3230332e38342e3133392e302f32342d3234203d3e20313338383433.roa (hash: KKvEA+saL7OCLV4/t/DChshATtE9irWFXkl6IKtk9rE=)
14: 323430323a616230303a3a2f34382d3438203d3e203234323036.roa (hash: Dgwgj5jmSf0MitHLxiLeWJGMcOFeVudcVpq/Mh8BAbU=)
15: 3230332e38342e3134332e302f32342d3234203d3e20323133363037.roa (hash: V/RNPYsKxKgz/wwuGUcHBFCGmp8H/G2MrFtMGtEWP6s=)
16: 323430323a616230303a613a3a2f34382d3438203d3e203234323036.roa (hash: S0w6oPbGGw7ksXZ7pizDlEqFJpkKbKKbzIkgqnZ2JUY=)
17: 3131302e34342e3137312e302f32342d3234203d3e20333935373933.roa (hash: Qlk0oD+wYGVfdAwJsFbQ75XWp7ZZAdoIXaQP7ZyAga4=)
18: 3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (hash: DpDzPCK3khv6m/KkGe22KTbSHzzD0zpRKERpB4+hT3U=)
19: 3230332e38342e3133372e302f32342d3234203d3e20323134313433.roa (hash: jWQefS3Ey1XKZj63Vgm7X9Au391EQXnRCYqwez8oUUU=)
20: E6B678AE8DC843399DF534610764D871D4D698D8.crl (hash: 7iFNw7+Uq6iKebLPuNz4qXJVNkMPCtko5Ksv58JGvw0=)
21: 323430323a616230303a61663a3a2f34382d3438203d3e203234323036.roa (hash: 5O7GlJY194SnO8ciNiDYBvW3zLSQrHd5KYDUoQ4Khw0=)
22: 3230332e38342e3133382e302f32342d3234203d3e20313338303737.roa (hash: Z+nNi7ze6kTiTVkT6NIRGLRwkZjNL704bTyzTsqTbiU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 21:45:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8c:a4:37:a7:38:1e:61:b4:c6:13:98:34:ec:cf:35:24:ac:53:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
Validity
Not Before: Nov 14 20:35:21 2026 GMT
Not After : Nov 15 21:45:21 2026 GMT
Subject: CN=3E2E640BA87958F16D9C69FFE9479DA0DE7D7EB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fb:95:8a:09:ca:ce:ae:56:fa:d9:eb:5d:d2:
dd:9e:bf:f3:fe:e7:4c:42:da:6f:7e:6f:e9:fc:05:
7c:bc:75:61:c8:8e:50:29:c3:ee:8c:04:4e:48:8e:
17:18:10:a1:4e:8b:b4:f2:e7:70:ba:d0:cb:a1:de:
d1:31:a2:62:57:ea:d1:57:fc:14:32:98:d1:ae:b6:
2f:26:ce:b5:4b:3d:f6:3f:b2:64:51:d0:30:3b:e3:
88:6d:4d:27:2d:fe:7e:75:98:27:ff:8a:b4:2c:56:
bd:61:54:50:e4:10:31:d3:0c:33:10:f0:9f:8f:27:
8e:a1:0e:a3:05:56:cd:54:e3:00:b2:0a:41:86:c1:
2b:3c:36:1e:4d:68:d7:1a:49:1c:51:14:8b:18:04:
d3:a9:66:c3:ea:e6:4f:cf:28:11:f8:1c:3c:4b:96:
29:19:ab:fb:6d:e2:5b:4c:d5:04:c4:58:40:c8:c9:
df:aa:d5:48:67:43:c9:92:b5:ac:cf:49:d8:11:6d:
c3:3b:d8:84:24:16:39:f5:14:b0:a5:34:b5:fa:a1:
1a:5f:16:42:a7:fa:70:1e:37:f2:02:08:b8:34:90:
39:e5:2b:8e:8d:cd:07:e6:96:bf:f6:69:c1:cc:52:
a5:4c:8e:25:b8:66:68:1e:05:ae:d4:07:e2:cc:a7:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2E:64:0B:A8:79:58:F1:6D:9C:69:FF:E9:47:9D:A0:DE:7D:7E:B3
X509v3 Authority Key Identifier:
keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6c:33:14:c3:a2:d5:fe:c2:34:d9:6b:f8:3e:c2:b0:4e:24:
bd:72:d2:44:49:e6:d8:f7:1d:ef:d0:bf:11:b4:71:fe:84:2f:
f5:6b:4e:7d:37:28:cc:e7:82:42:df:2e:d6:7a:cc:70:73:e7:
58:8c:ff:78:62:5c:f5:dd:41:9a:52:43:75:84:93:f4:76:17:
9b:a4:20:2d:32:37:1c:1d:46:a4:83:38:37:b2:cb:4b:f9:ed:
7a:c1:6b:a4:ff:06:0d:3d:bb:a4:d4:40:41:cd:2a:6d:b5:bc:
3d:c4:c3:74:60:73:77:d7:ce:d7:30:94:18:c2:e5:fa:36:ec:
99:77:f2:35:b1:23:51:57:4e:d0:42:53:c2:bd:f0:25:55:74:
0f:9a:26:ca:23:f1:06:57:4a:34:da:1f:e2:08:e4:b8:26:2d:
8a:b3:18:dd:99:40:ea:d5:31:d8:09:6e:91:a8:0e:f1:77:00:
94:a0:04:51:72:f5:0c:0a:3c:95:9f:36:a6:d4:a3:0a:fc:10:
83:82:1b:0e:86:78:f5:3c:07:82:7d:27:56:d9:13:ec:cf:51:
4c:f1:a4:80:4f:aa:68:b7:ac:7c:70:50:66:8a:a2:89:27:c1:
c0:af:c7:ca:4e:95:20:b9:5a:27:1d:a0:0c:36:14:b4:1b:fd:
56:ab:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:01:57 2026 by rpki-client