
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
File: 468662DE4789E1663881A25708CA5FBF0EC39637.mft (raw, json)
Hash identifier: DjGp/CUcm1R0xxki2UUGIoxevjTc9hkqS1gMNWMkCT8=
Subject key identifier: 9D:41:B9:38:B8:9F:73:FE:40:4F:62:16:46:6D:15:1F:44:28:5B:B6
Authority key identifier: 46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
Certificate issuer: /CN=468662DE4789E1663881A25708CA5FBF0EC39637
Certificate serial: 24C6697DBF54AF0BE37CE10BC86CCF09DE7C9501
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
Manifest number: 0106
Signing time: Sat 14 Nov 2026 22:27:18 +0000
Manifest this update: Sat 14 Nov 2026 22:22:18 +0000
Manifest next update: Sun 15 Nov 2026 22:56:18 +0000
Files and hashes: 1: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: TDJxU3359vrwAFB04SP7SYHre1Ki2hvpSBCNPL07USs=)
2: 468662DE4789E1663881A25708CA5FBF0EC39637.crl (hash: /a2gqlmw+TXVbLjvHeWMD8Dg6FQAPwRp8ycad9XFMRk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 22:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c6:69:7d:bf:54:af:0b:e3:7c:e1:0b:c8:6c:cf:09:de:7c:95:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468662DE4789E1663881A25708CA5FBF0EC39637
Validity
Not Before: Nov 14 22:22:18 2026 GMT
Not After : Nov 15 22:56:18 2026 GMT
Subject: CN=9D41B938B89F73FE404F6216466D151F44285BB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:c6:b9:5d:85:f3:5a:24:b4:82:2b:20:57:
1d:dc:76:29:97:72:c5:a3:83:dc:0d:a2:b3:1a:82:
d2:6d:4a:50:cf:77:90:dc:33:cf:8e:7b:e4:fc:d1:
ec:a5:6a:6a:dd:a6:db:7c:b7:f7:6f:01:3c:5a:6d:
de:6a:5e:2a:b6:cb:43:bb:d2:20:09:50:dc:8a:5c:
4e:46:c6:8b:5d:c1:cd:c9:c9:28:88:b9:9b:58:58:
21:73:6c:8f:97:4e:ee:4b:66:da:05:f9:03:39:7a:
4e:72:84:5c:4d:75:c2:d5:eb:d4:7f:5e:e6:dc:c5:
bb:35:3f:98:e8:95:82:5d:f7:8c:12:b0:91:6f:34:
a4:9f:09:d9:51:fb:4c:e1:a0:71:50:58:31:ae:11:
43:d7:f6:4b:d1:a4:d7:b9:f5:ca:52:13:e5:f1:83:
df:e3:5e:38:17:dd:12:9c:53:0e:9c:b7:89:0d:0f:
c4:39:51:14:41:da:13:0f:c7:71:67:9b:b6:81:7a:
b9:4f:18:f3:a0:ae:67:d9:8e:2f:14:b5:a8:00:ad:
16:56:64:00:0c:8a:9d:5e:d2:18:61:36:67:5f:c2:
b4:d9:46:30:e6:0a:b9:99:5b:95:37:dd:1c:9a:24:
ce:23:f5:42:22:f1:e2:fe:1a:60:1c:19:69:5c:bd:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:41:B9:38:B8:9F:73:FE:40:4F:62:16:46:6D:15:1F:44:28:5B:B6
X509v3 Authority Key Identifier:
keyid:46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:29:fa:dd:59:e5:be:75:33:eb:e6:19:85:d9:08:da:a6:82:
62:16:41:59:b9:bb:38:7f:cf:ca:9e:38:f0:29:de:ab:1e:22:
6e:f9:9a:37:2f:f1:6d:95:71:ca:a0:c5:96:cb:0e:67:e3:bf:
52:b8:cc:9d:47:85:ee:73:f1:bf:b3:ab:b6:af:19:51:91:b6:
ec:f5:96:f2:19:49:00:d6:dc:b9:0a:a7:95:ff:f7:e8:58:2e:
28:ee:04:8e:ac:1b:cc:86:d1:52:ca:41:da:ec:6f:c1:7d:16:
bc:77:4f:67:10:47:30:04:3d:95:f0:b7:1c:1f:e2:cc:af:46:
f0:fb:ab:10:44:1a:80:2c:7c:80:f2:25:15:11:6b:c7:0a:f4:
b4:48:b6:56:9b:e6:03:28:7a:5e:10:81:bb:94:14:08:84:c4:
62:16:a4:37:4b:05:34:f2:48:34:d8:c2:65:a0:2e:f6:23:9e:
ee:fc:9d:2f:aa:ca:85:7d:78:d0:de:5d:bf:da:ff:1c:f9:bb:
4e:39:a7:9f:9d:54:54:eb:06:3b:c2:43:10:75:8f:78:64:d1:
88:5b:cf:91:46:1a:a9:ca:b7:77:2c:39:fa:21:ed:b2:5f:cc:
49:98:00:c3:4c:42:0d:4e:96:c0:51:92:da:23:83:f8:3a:5e:
e6:d0:4b:20
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJMZpfb9UrwvjfOELyGzPCd58lQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY4NjYyREU0Nzg5RTE2NjM4ODFBMjU3MDhDQTVGQkYw
RUMzOTYzNzAeFw0yNjExMTQyMjIyMThaFw0yNjExMTUyMjU2MThaMDMxMTAvBgNV
BAMTKDlENDFCOTM4Qjg5RjczRkU0MDRGNjIxNjQ2NkQxNTFGNDQyODVCQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0ca5XYXzWiS0gisgVx3cdimX
csWjg9wNorMagtJtSlDPd5DcM8+Oe+T80eylamrdptt8t/dvATxabd5qXiq2y0O7
0iAJUNyKXE5Gxotdwc3JySiIuZtYWCFzbI+XTu5LZtoF+QM5ek5yhFxNdcLV69R/
Xubcxbs1P5jolYJd94wSsJFvNKSfCdlR+0zhoHFQWDGuEUPX9kvRpNe59cpSE+Xx
g9/jXjgX3RKcUw6ct4kND8Q5URRB2hMPx3Fnm7aBerlPGPOgrmfZji8UtagArRZW
ZAAMip1e0hhhNmdfwrTZRjDmCrmZW5U33RyaJM4j9UIi8eL+GmAcGWlcvYZLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnUG5OLifc/5AT2IWRm0VH0QoW7YwHwYDVR0j
BBgwFoAURoZi3keJ4WY4gaJXCMpfvw7DljcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2VjZjVkOTQtN2YxZi00M2JmLWI3YWEtMjIwZjBjMTU2ZWMwLzAvNDY4NjYyREU0
Nzg5RTE2NjM4ODFBMjU3MDhDQTVGQkYwRUMzOTYzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC80Njg2NjJERTQ3ODlFMTY2Mzg4MUEyNTcwOENBNUZCRjBFQzM5
NjM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3
YWEtMjIwZjBjMTU2ZWMwLzAvNDY4NjYyREU0Nzg5RTE2NjM4ODFBMjU3MDhDQTVG
QkYwRUMzOTYzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABsp+t1Z5b51M+vmGYXZCNqmgmIWQVm5uzh/
z8qeOPAp3qseIm75mjcv8W2VccqgxZbLDmfjv1K4zJ1Hhe5z8b+zq7avGVGRtuz1
lvIZSQDW3LkKp5X/9+hYLijuBI6sG8yG0VLKQdrsb8F9Frx3T2cQRzAEPZXwtxwf
4syvRvD7qxBEGoAsfIDyJRURa8cK9LRItlab5gMoel4QgbuUFAiExGIWpDdLBTTy
SDTYwmWgLvYjnu78nS+qyoV9eNDeXb/a/xz5u045p5+dVFTrBjvCQxB1j3hk0Yhb
z5FGGqnKt3csOfoh7bJfzEmYAMNMQg1OlsBRktojg/g6XubQSyA=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:23:09 2026 by rpki-client