
$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json)
Hash identifier: e7ysAYPypn6o1QgF2MaMGSJhcY1MybV6IlmA6h5pwM4=
Subject key identifier: 1A:BD:4E:76:2A:6C:4C:3B:B1:EC:9E:D8:27:F2:0E:4E:95:15:D1:91
Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
Certificate serial: 1885846540C0C7C5EC9739F3DACC8FF9B1D41B18
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
Manifest number: 0268
Signing time: Tue 24 Mar 2026 12:31:28 +0000
Manifest this update: Tue 24 Mar 2026 12:26:28 +0000
Manifest next update: Fri 27 Mar 2026 14:48:28 +0000
Files and hashes: 1: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: +lLWVkW77msDkt22BmOKE6zoe3F7Rva3RzwGn4oP4Gw=)
2: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: BBSfs0YHYFY6aNip4ye3zUlYvhp6JHeTdQdI/P3ewAo=)
3: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: Eib5yl7GGM3j8TazhHMXqKNs+y3IgGV6TQslDQRwaFQ=)
4: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: /OiaatiAFJjYmCuKDfs8T2psl4m0IWHb+mxkKWe3Vd0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl
rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 14:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:85:84:65:40:c0:c7:c5:ec:97:39:f3:da:cc:8f:f9:b1:d4:1b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
Validity
Not Before: Mar 24 12:26:28 2026 GMT
Not After : Mar 27 14:48:28 2026 GMT
Subject: CN=1ABD4E762A6C4C3BB1EC9ED827F20E4E9515D191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:b3:62:59:37:2e:f8:31:33:c1:c7:27:cd:
16:b3:af:de:11:9c:3d:a1:e9:b9:fa:c0:df:ff:5d:
9f:6b:3f:9e:e2:bd:1f:c0:6c:59:35:f9:56:ad:35:
b6:59:3c:db:60:4a:56:48:66:37:fe:82:bc:bf:37:
7e:3e:49:58:f4:e7:a9:7b:6d:39:0e:2e:fe:0d:0b:
7f:f0:b0:57:58:ac:22:73:18:4f:18:7a:6b:ea:9b:
d4:25:32:2f:aa:ca:59:a4:0d:15:19:30:03:4d:6e:
d4:e4:36:8f:52:dc:a5:7c:d0:0a:6c:49:27:01:1e:
d3:f5:47:78:08:bb:ab:de:7e:d5:5c:33:6e:b8:67:
06:a7:b6:b7:f2:d7:b3:d7:4b:6f:30:74:50:27:cc:
9e:e7:ad:e4:fd:ac:6f:ea:36:e5:13:15:fd:e5:c7:
02:73:09:30:4f:19:ea:3d:56:29:07:9b:ee:e0:34:
8f:1d:9f:cd:20:09:a3:c0:0e:7a:b2:f1:6d:c7:c0:
a4:6d:84:83:90:84:3e:86:a9:1d:8d:c0:01:ee:fd:
52:52:db:1b:48:98:7e:0f:48:96:60:3b:a4:6a:84:
d8:d2:06:c8:ca:ff:6a:35:fb:ef:16:3e:43:40:e5:
f6:75:53:a2:1b:5d:71:2c:ef:93:40:62:87:84:7c:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BD:4E:76:2A:6C:4C:3B:B1:EC:9E:D8:27:F2:0E:4E:95:15:D1:91
X509v3 Authority Key Identifier:
keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cd:55:3d:a5:62:f9:93:39:b9:a3:22:22:68:c5:a3:e1:7a:
5a:32:58:99:4c:d8:72:cb:ec:32:f4:c8:44:73:22:48:be:15:
b3:dd:c3:39:5e:f6:55:4a:3f:84:97:89:2b:95:2b:e3:06:04:
37:63:ad:1d:54:5f:93:21:ad:69:8f:0e:89:4b:e5:64:c3:7f:
76:2e:d8:29:82:87:00:dd:b7:84:13:55:bc:68:30:b6:c7:24:
9c:30:16:62:ed:4e:3d:09:df:4f:32:47:b0:d0:77:ab:bc:20:
3f:ff:50:5e:52:41:a1:93:1f:90:00:4f:77:32:55:90:9f:1d:
55:63:69:b4:15:d1:23:37:d2:34:5a:78:eb:1c:ca:a4:23:23:
c9:d0:c3:00:01:6f:f8:6d:28:22:b3:1f:53:4a:87:8f:4c:17:
94:3f:2a:ed:8c:1f:c2:ee:69:ff:27:57:ac:cb:a7:78:52:cc:
ac:3a:67:a1:a7:32:ba:34:dd:5f:cb:bc:9f:40:5a:fc:fa:2c:
a3:98:b9:e4:34:68:fa:7b:4e:60:69:fb:59:a8:df:1d:fe:cd:
5d:6c:bb:e7:25:e7:6a:91:3f:1f:5e:b4:b7:a1:17:1e:e6:3c:
e9:7a:7b:22:7f:99:06:ce:0b:ab:41:ed:60:fb:97:b2:90:2f:
af:a3:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:09:03 2026 by rpki-client