
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
File: 69815E9AA14BB02AA62080FF68CEED525920B7CB.mft (raw, json)
Hash identifier: ax5OIgzhICAW3lzhjO4LsLf5dSgmvNg3asUpNSfW4MM=
Subject key identifier: 80:83:87:21:32:75:24:E7:11:37:03:B4:56:04:50:A5:7C:56:E7:33
Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
Certificate issuer: /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Certificate serial: 16F9970C696E71E06C86EB64344A787122EEFA63
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 16:14:42 +0000
Manifest this update: Thu 23 Jul 2026 16:09:42 +0000
Manifest next update: Fri 24 Jul 2026 19:40:42 +0000
Files and hashes: 1: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: L61Dq+JOgTVZ8Zg4QhtuTyVZiqTe5CzyDJzKqTh0In0=)
2: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: CJ3C5Ad0lXVGoXoTJJLAUWAzAvNTOgEY9RwmCwNrPhg=)
3: 69815E9AA14BB02AA62080FF68CEED525920B7CB.crl (hash: 5Dql0XZJPKILfbvEmaMgslYGY9cni5O5LVT4xQQ8HXs=)
4: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: Lk1tNkM5iXGzAH8YNwcIq2YC8yUeom1TAzpJAMLwNHo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f9:97:0c:69:6e:71:e0:6c:86:eb:64:34:4a:78:71:22:ee:fa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Validity
Not Before: Jul 23 16:09:42 2026 GMT
Not After : Jul 24 19:40:42 2026 GMT
Subject: CN=80838721327524E7113703B4560450A57C56E733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:9d:02:fe:1e:07:86:ef:e5:10:0b:a4:07:
a3:8d:20:a2:d2:f2:6e:31:c3:50:50:4a:57:b9:5e:
36:bc:2e:5e:b5:41:de:ce:de:4f:0e:09:eb:0c:c4:
bc:64:c0:c8:38:39:e7:06:9c:02:67:62:4f:1c:84:
48:28:40:bd:30:b3:92:d7:19:e2:a0:43:2e:0f:2d:
9f:71:22:82:0d:55:bd:4b:64:53:1c:df:91:0a:ae:
1c:bb:6f:27:c8:88:3b:77:64:a8:57:71:70:14:0c:
b5:f8:e5:c3:4a:f1:a1:a3:9f:2f:78:ea:a3:78:c1:
d5:fd:8d:8a:94:95:22:b8:13:d2:bb:ef:a4:a3:bb:
51:02:86:30:49:cd:59:d6:1f:ae:d4:d5:f3:a2:cf:
83:91:8d:5d:83:01:17:2c:10:6c:65:97:9d:18:ae:
43:8f:29:4d:f1:0d:92:92:8b:e7:2f:f8:0d:19:16:
d3:bd:2c:19:40:4a:d9:ed:8a:89:f4:f0:61:57:3d:
fa:12:a1:55:d4:dd:35:39:6a:11:54:e9:8f:76:cc:
c5:25:3f:83:5c:a6:16:f1:ce:d1:23:5a:ed:a9:fa:
5a:2f:8a:75:f4:3b:a8:7e:36:c2:0d:95:fd:1e:c6:
b4:34:1a:cf:3b:6e:f1:00:ab:12:85:56:38:15:ec:
9e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:83:87:21:32:75:24:E7:11:37:03:B4:56:04:50:A5:7C:56:E7:33
X509v3 Authority Key Identifier:
keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:58:f0:e5:27:e3:ad:1e:c9:12:c3:86:d9:87:d8:4d:fc:b3:
f8:30:a5:c4:d5:15:26:fb:3c:42:e2:8f:1a:e2:59:a7:10:41:
a1:45:9b:bc:ad:9f:0f:e8:06:6e:1a:0c:28:2d:a3:55:8c:80:
72:bf:8a:39:3a:56:bc:4b:80:71:83:62:5a:7a:e3:54:e9:33:
73:65:9d:ba:26:78:48:be:5b:76:cb:9c:e0:a5:c9:2a:04:8a:
0e:34:12:c1:76:00:71:3e:fc:9a:f5:f9:24:6d:3e:c9:6d:fd:
46:42:ea:bf:ac:4f:0e:8f:98:3e:4f:e1:47:e0:19:2f:6b:d5:
b7:63:38:e9:c9:64:e4:34:de:2a:10:db:fe:45:dd:df:bc:20:
a0:ea:09:a8:47:ac:90:3f:56:59:ba:7b:9e:de:16:d4:7b:1c:
af:46:25:b5:26:b9:62:6e:d0:7c:24:50:c2:7b:80:b2:0e:81:
96:37:b6:c5:15:ce:38:96:7c:6c:a7:50:2e:e6:28:f8:e2:ac:
23:be:b5:61:1c:ec:85:ad:a6:13:1d:90:f0:8a:98:54:4a:98:
a7:1e:e7:9f:a8:23:d0:1c:9e:d8:ed:17:32:28:1d:1b:96:aa:
05:02:35:04:64:b0:b3:8e:f2:5e:c4:a4:70:e1:f6:71:95:9c:
d7:2f:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:24 2026 by rpki-client