
$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
File: 6969B3009665224541D322068C9E3444C78F90F9.mft (raw, json)
Hash identifier: VcEeTUxeNGBWx4KoJaZWYknHnvEDbIVpqSpNmEZcId8=
Subject key identifier: C0:82:26:DE:EF:3E:14:78:32:10:4A:AA:3C:C6:04:F5:88:3F:F2:20
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial: 35B0A5FA3FFB4B354B0EF4F3E3FCA2636DB186C2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
Manifest number: 04F0
Signing time: Thu 26 Mar 2026 02:40:41 +0000
Manifest this update: Thu 26 Mar 2026 02:35:41 +0000
Manifest next update: Sun 29 Mar 2026 10:06:41 +0000
Files and hashes: 1: 3130332e3134372e3234362e302f32332d3233203d3e20313339393732.roa (hash: teCWdBffnsSq00HVFNB0zTbUb3mhJ+Mb1bWy4BeWvPg=)
2: 323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa (hash: 8IK00qD1mcZyUe31U0w/j0iWrFFsRvs3QsCBJPOq4NU=)
3: 323430353a633434303a333a3a2f34382d3438203d3e20313339393732.roa (hash: p71Bd7qt2LnQQfHqP0vxYblXT2UAQT2vozq/b5tT5tQ=)
4: 323430353a633434303a3a2f33322d3332203d3e20313339393732.roa (hash: 7B9NMIAt6o2ouwcqf5Q5a326EHxky3KwQZQYJ3mikGI=)
5: 323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa (hash: gbaWHMYogVYHSsn2QDOr4CXrKUvLF5nUF0bmeD5zg3A=)
6: 323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa (hash: mbTIULMpDW49jAaGj5l4Q/HdCaJ2mWL8K/BtO/7oyAE=)
7: 3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa (hash: Nt5yIQQRjM3EYZ6LLAJtlTQeYmFOb12a5fWQTQgyftY=)
8: 323430353a633434303a3a2f34382d3438203d3e20313339393732.roa (hash: qdpua64K6XKO1BzztEjSdqKs6BcraRKEEjxmWtSbUpM=)
9: 323430353a633434303a323a3a2f34382d3438203d3e20313339393732.roa (hash: fouWRDUQRVJ8s06qwWjIYLujpkqkEw0cr2CXSj6LTdQ=)
10: 323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa (hash: TCUPKlg7kQPNlt+DuDLObLWam/60pHmjwqxGHPtQjYY=)
11: 6969B3009665224541D322068C9E3444C78F90F9.crl (hash: B9p9/X1NVXsJ8XjJlm5fXF+AK7iS51YDnY1kqWuVTpw=)
12: 323430353a633434303a393937323a3a2f34382d3438203d3e20313339393732.roa (hash: /Lq8uKWD+CacJahidfmR4A9rz6j7OmtaYT2A4cqn4+U=)
13: 323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa (hash: /naXUI1PFOv1rItDNLbEQT4MSqYrlC9O+26iNkvkvFM=)
14: 323430353a633434303a353a3a2f34382d3438203d3e20313339393732.roa (hash: BssgmQukkLPpn+lyxMqCsRLQAaaeIP62Hd9DQhdX16U=)
15: 323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa (hash: fis6p5xtzergO0yqcgYbenFp5St19jT3Hlh35aVHMuY=)
16: 3130332e3134372e3234372e302f32342d3234203d3e20313339393732.roa (hash: E1pvmLC0oScYJCQ1VqOLQ7iP3RGB0Zu4FP5c2Qeaw1g=)
17: 323430353a633434303a343a3a2f34382d3438203d3e20313339393732.roa (hash: BqWVHHzzoFWpxbeXBGajTbzj7bsFyYJHW0FcRWiTKes=)
18: 323430353a633434303a313a3a2f34382d3438203d3e20313339393732.roa (hash: auZLy/3CHp+sBJ3xdIxzbPRr6nV7RhYVvEKlFJiywhs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 10:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:b0:a5:fa:3f:fb:4b:35:4b:0e:f4:f3:e3:fc:a2:63:6d:b1:86:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
Validity
Not Before: Mar 26 02:35:41 2026 GMT
Not After : Mar 29 10:06:41 2026 GMT
Subject: CN=C08226DEEF3E147832104AAA3CC604F5883FF220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:d2:df:bb:3b:8c:db:d1:e5:b6:36:c2:3b:
45:20:4e:0c:79:76:7b:d5:97:f9:a2:91:24:30:56:
4f:2d:c5:58:e3:ec:e5:0d:17:24:44:24:cf:75:5c:
e8:e7:17:7d:5c:d5:9f:aa:68:6c:fe:99:ee:a4:f2:
81:e2:e8:a4:74:78:62:74:50:ce:5b:d3:3d:b0:4e:
a8:ad:d5:60:00:b0:ba:e3:82:b2:40:2d:e8:68:d4:
ba:c4:af:76:2a:cd:e1:5f:fc:87:f6:39:38:31:f1:
58:c4:0c:c7:93:e8:40:37:b7:09:96:6b:9e:12:ec:
1d:5b:51:9c:ed:09:1e:c8:2f:a3:c6:3e:fb:5d:c6:
3d:ad:3b:41:36:07:9b:74:05:f4:25:45:0b:42:24:
80:04:b9:92:43:56:27:ee:55:06:d3:65:d8:65:b3:
a2:e6:28:82:dd:05:09:23:a1:e0:14:04:c4:29:26:
9b:35:2d:13:68:24:43:90:2f:c2:8e:78:4c:e1:86:
20:d9:3e:ef:50:53:59:02:87:61:25:08:b0:90:af:
ff:a3:26:5f:c1:9b:8f:ff:6d:35:4f:e6:da:48:3e:
17:f5:fe:99:4d:5e:fd:a6:60:67:15:c5:14:22:ee:
e5:f5:f3:27:b3:b0:50:37:13:82:4e:f2:6b:33:f5:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:82:26:DE:EF:3E:14:78:32:10:4A:AA:3C:C6:04:F5:88:3F:F2:20
X509v3 Authority Key Identifier:
keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ca:88:ca:84:4d:ba:c8:43:27:5b:70:44:c4:5f:33:a5:6c:
f6:f9:e7:f7:04:78:b2:15:6d:3f:2f:da:ec:35:7c:86:d8:b0:
04:60:91:f3:9a:55:d6:a8:05:7f:d2:31:60:11:8b:7d:d0:c6:
92:7a:10:88:03:94:81:ef:9e:45:9d:e8:aa:27:7f:1b:4a:80:
ca:27:ca:c6:bf:2c:e2:7e:ba:17:73:c7:c4:ab:79:33:4e:31:
95:58:49:b6:e5:00:bf:72:ba:44:e4:00:26:93:1a:27:09:47:
a8:96:d3:f4:fa:f1:f4:f3:a3:a0:05:51:94:e5:2a:0a:65:d5:
ec:c6:51:1d:5c:df:cd:31:a8:34:39:b4:4c:8e:31:d3:4a:25:
70:19:e8:f5:5a:7f:10:e8:bc:42:6e:a0:55:f9:e0:2c:5d:cd:
10:83:19:be:ce:97:59:e0:69:2b:f3:85:76:de:1d:37:f3:ca:
92:ad:58:e2:3f:76:6f:b6:8c:09:cd:d6:dd:23:18:89:77:50:
c3:9c:53:91:72:3c:0f:84:fb:b6:fe:8d:07:70:4d:b5:f3:17:
e4:7b:0e:c2:7c:91:b8:82:b6:1f:0a:71:48:d7:af:b4:f0:84:
2c:c7:c6:fb:0d:52:a9:23:71:29:d0:bb:43:5c:a8:f8:cc:d9:
d1:5f:e3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:24 2026 by rpki-client