
$ rpki-client -vvf repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
File: 69BB542D91A8CC754EA322384139641D17704D60.mft (raw, json)
Hash identifier: rFfZ11B+zW+15lE7S1Amf8WxSNyZvk0k+qBL0BFsGok=
Subject key identifier: 36:E6:42:A4:FA:A6:88:5F:B9:B2:82:7B:07:D9:9C:16:A6:FC:CB:12
Authority key identifier: 69:BB:54:2D:91:A8:CC:75:4E:A3:22:38:41:39:64:1D:17:70:4D:60
Certificate issuer: /CN=69BB542D91A8CC754EA322384139641D17704D60
Certificate serial: 0F2763FD64345FCEEB45E7D590004DFF780E367B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
Manifest number: 0215
Signing time: Wed 25 Mar 2026 01:50:52 +0000
Manifest this update: Wed 25 Mar 2026 01:45:52 +0000
Manifest next update: Sat 28 Mar 2026 06:08:52 +0000
Files and hashes: 1: 69BB542D91A8CC754EA322384139641D17704D60.crl (hash: rej0oBOXm/banT6TRpT0fk/bREVEdxH4Gwy5EMMjYLw=)
2: 3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa (hash: /cB/UKxImbPCeH1Tv0z/T2nqJMV32d3EX5C9M3ekCEM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.crl
rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 06:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:27:63:fd:64:34:5f:ce:eb:45:e7:d5:90:00:4d:ff:78:0e:36:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69BB542D91A8CC754EA322384139641D17704D60
Validity
Not Before: Mar 25 01:45:52 2026 GMT
Not After : Mar 28 06:08:52 2026 GMT
Subject: CN=36E642A4FAA6885FB9B2827B07D99C16A6FCCB12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:00:2f:68:9b:33:63:f6:26:14:d4:75:d1:
c2:f2:c5:5e:ea:d6:0c:b0:90:d1:b3:2b:05:11:2f:
33:30:6f:ea:3a:d4:96:9f:f0:26:90:aa:b3:4c:9d:
79:fd:76:6c:af:ec:35:35:8b:50:d1:90:d6:6b:88:
ca:4c:3f:23:6b:ad:ba:7c:18:b1:5c:35:7e:20:25:
64:35:ca:6f:eb:a1:e4:37:b9:1b:d5:7a:a8:d4:d8:
20:67:02:2d:7f:5e:ea:75:dd:26:22:b9:e7:50:67:
7f:b0:2e:65:c7:8a:6a:f3:32:a7:7b:14:cd:1b:54:
34:82:54:fa:20:b3:2e:3e:88:0b:13:7c:b8:00:0a:
4a:70:10:f5:b7:d9:88:80:5b:16:48:af:ed:3e:c7:
ed:a5:8b:60:1f:30:17:a3:e5:a6:f0:ea:1a:29:0e:
51:57:aa:0e:f6:c1:f5:35:5f:20:e7:3b:ae:22:31:
cc:dd:58:d6:23:5a:b0:ea:94:d3:2b:82:e8:71:be:
f5:38:7a:77:bb:38:34:d6:99:09:74:cc:73:6f:e5:
04:ce:f6:28:86:44:5f:3e:c6:f7:e6:3c:0d:9f:92:
b2:a0:c7:09:d9:f7:76:a0:75:f3:4f:d7:eb:7d:38:
41:fe:16:36:35:bc:82:e4:dc:ee:e2:06:d5:ab:4a:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:42:A4:FA:A6:88:5F:B9:B2:82:7B:07:D9:9C:16:A6:FC:CB:12
X509v3 Authority Key Identifier:
keyid:69:BB:54:2D:91:A8:CC:75:4E:A3:22:38:41:39:64:1D:17:70:4D:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c0:39:ca:fd:d8:78:e8:62:c8:42:4b:a3:36:03:cc:99:bb:
00:8e:9e:97:1f:24:b9:c4:6c:82:20:83:1f:39:c1:24:df:9a:
73:51:e4:e3:c9:13:38:a0:24:93:20:11:37:72:36:ad:cd:3e:
dc:71:5f:61:a0:89:54:97:d6:b9:25:c7:89:b1:6a:89:db:56:
3a:b0:2b:46:e8:3e:10:81:07:b4:8c:7d:31:4f:22:4f:b3:52:
e2:4d:42:24:a1:b4:1b:30:3c:41:94:a7:84:6e:f4:0d:24:c0:
68:8d:af:5e:2c:02:ff:7c:bc:a3:36:90:d6:82:63:02:15:fb:
12:79:51:7b:cc:44:17:dd:cf:5c:c2:99:1e:f1:7f:67:c8:2f:
9a:a2:e7:0f:b7:ab:60:eb:ad:44:0b:67:4d:da:f2:d4:00:90:
d2:bc:a1:c0:37:6c:e8:ee:61:0e:45:78:a2:09:9e:b1:7d:22:
a4:fa:ac:3b:87:7f:e1:dd:f7:54:53:e4:0b:07:a8:0b:ef:e6:
9d:de:34:e0:54:76:40:fd:da:fb:6e:16:d3:7d:48:fa:77:a9:
f4:70:03:32:00:e2:e8:53:e2:a4:a2:60:83:ed:f8:13:7f:1b:
18:31:55:2a:82:e9:77:7c:16:c6:ff:32:d4:c3:bb:f3:b2:65:
36:50:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:47:32 2026 by rpki-client