
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
File: 69815E9AA14BB02AA62080FF68CEED525920B7CB.mft (raw, json)
Hash identifier: Z0C3odLq7DS3LRRRwfLKrC93NO39U7NkwKyo5iYwoGI=
Subject key identifier: 88:20:F1:37:8F:F9:CA:3E:8C:AB:19:FF:D6:C6:D4:8F:E0:2E:B7:C4
Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
Certificate issuer: /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Certificate serial: 559629D0202C446A48F6D0085CFBD648290E8052
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
Manifest number: C3
Signing time: Sat 26 Sep 2026 04:15:34 +0000
Manifest this update: Sat 26 Sep 2026 04:10:34 +0000
Manifest next update: Sun 27 Sep 2026 05:50:34 +0000
Files and hashes: 1: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: L61Dq+JOgTVZ8Zg4QhtuTyVZiqTe5CzyDJzKqTh0In0=)
2: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: CJ3C5Ad0lXVGoXoTJJLAUWAzAvNTOgEY9RwmCwNrPhg=)
3: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: Lk1tNkM5iXGzAH8YNwcIq2YC8yUeom1TAzpJAMLwNHo=)
4: 69815E9AA14BB02AA62080FF68CEED525920B7CB.crl (hash: ecunwktc7orB7wzc55+/S8LNwoX95k2sUWIHZumBYzQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 05:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:96:29:d0:20:2c:44:6a:48:f6:d0:08:5c:fb:d6:48:29:0e:80:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Validity
Not Before: Sep 26 04:10:34 2026 GMT
Not After : Sep 27 05:50:34 2026 GMT
Subject: CN=8820F1378FF9CA3E8CAB19FFD6C6D48FE02EB7C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d1:68:82:4f:54:fe:49:f1:32:29:12:7f:12:
73:0c:d1:d0:6a:0b:10:09:7b:e5:bf:25:4d:b6:fd:
c0:33:f4:76:de:d7:38:e6:ea:90:99:2f:a7:79:9b:
be:64:1d:51:3f:b8:b5:48:99:51:03:8e:8e:56:db:
60:d6:75:43:30:c1:45:f6:a9:80:1f:51:d5:f1:01:
7f:0d:e4:f4:ba:16:f2:fc:98:1a:ed:47:aa:8d:08:
9c:8d:a3:d2:88:cb:02:48:e8:35:ba:36:3a:75:4b:
fc:7d:46:c9:fd:31:33:e3:e6:0f:d7:28:4b:b8:93:
ab:ac:33:15:d5:66:34:ff:1b:6a:33:6f:38:c0:b7:
90:ed:25:55:27:d4:12:6f:23:ed:35:c2:76:f8:ab:
4f:37:c1:29:7d:8d:1f:a5:af:b6:42:f2:96:d1:8b:
e3:21:d9:c4:cf:da:08:a4:d8:35:ac:fc:65:5b:ae:
c3:9f:83:9f:bd:9e:61:34:25:9f:91:9e:fd:1e:d7:
a7:d2:b5:6d:06:81:69:18:ca:05:c8:fd:c1:f6:e6:
c4:65:34:98:58:2e:8a:bc:bf:fa:f1:56:32:f8:c0:
e3:e8:06:71:56:19:de:94:0b:f0:6b:dd:4e:80:ae:
79:50:ad:7a:bb:9d:18:c8:6c:f1:66:74:92:4a:27:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:F1:37:8F:F9:CA:3E:8C:AB:19:FF:D6:C6:D4:8F:E0:2E:B7:C4
X509v3 Authority Key Identifier:
keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:91:97:cb:47:71:f5:f7:93:c1:af:54:74:f2:96:6c:45:90:
ba:c2:e7:ba:46:bf:da:dd:6e:be:d2:9e:a9:f3:cb:27:83:a4:
53:4d:87:b2:e1:90:64:c7:35:95:3f:92:56:92:82:e4:03:67:
6f:bc:c3:c5:1f:63:11:d5:c4:53:72:5c:85:e0:fb:15:9a:3b:
d7:d4:86:02:45:c6:7c:16:e7:a1:a1:01:22:0d:b4:65:f9:12:
7e:58:82:05:34:81:10:17:f2:bd:49:4c:3f:f9:8a:fb:4e:8e:
58:ae:87:58:eb:e9:61:7c:85:77:92:96:5e:ef:8c:43:85:94:
9c:57:fc:94:ab:bf:e6:01:6f:42:e4:74:7c:68:e5:56:23:f3:
bd:9d:55:88:af:4c:a1:e2:d2:db:17:1f:ce:db:ac:6d:9a:4a:
6d:80:d9:b6:8c:f6:a1:d0:40:dc:73:39:a5:00:b6:d9:02:c2:
4f:6f:7c:e3:bc:5e:b5:d2:a3:b4:b8:e2:16:5e:d1:dd:95:1e:
58:af:cf:34:cd:e3:63:bb:30:02:92:55:bc:39:30:cd:10:86:
2d:25:7e:99:e3:55:12:26:43:0c:5d:4a:7e:1b:4d:fa:46:df:
a7:5a:f7:09:cc:4a:9e:f2:46:16:34:45:a5:3c:c6:e3:20:96:
22:c7:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:53:34 2026 by rpki-client