
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
File: 69815E9AA14BB02AA62080FF68CEED525920B7CB.mft (raw, json)
Hash identifier: ifksFel4mOX1LdDJ9dxnTiwdDDgFEpMLKR0lIeGtakg=
Subject key identifier: F1:C9:13:22:69:B5:F2:40:C0:89:C7:B0:45:F3:D8:4F:F4:6B:4E:F7
Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
Certificate issuer: /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Certificate serial: 043E5B40CDCB62437FA118F8E293CC0AC2455389
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:32:22 +0000
Manifest this update: Tue 12 May 2026 17:27:22 +0000
Manifest next update: Wed 13 May 2026 18:12:22 +0000
Files and hashes: 1: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: L61Dq+JOgTVZ8Zg4QhtuTyVZiqTe5CzyDJzKqTh0In0=)
2: 69815E9AA14BB02AA62080FF68CEED525920B7CB.crl (hash: y2LxBHcbbqf3M2V1/POjx36oDz/OPQ6eYOmqg9SbmQQ=)
3: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: Lk1tNkM5iXGzAH8YNwcIq2YC8yUeom1TAzpJAMLwNHo=)
4: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: CJ3C5Ad0lXVGoXoTJJLAUWAzAvNTOgEY9RwmCwNrPhg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:3e:5b:40:cd:cb:62:43:7f:a1:18:f8:e2:93:cc:0a:c2:45:53:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Validity
Not Before: May 12 17:27:22 2026 GMT
Not After : May 13 18:12:22 2026 GMT
Subject: CN=F1C9132269B5F240C089C7B045F3D84FF46B4EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:83:26:4e:fe:7e:6b:26:e1:f1:be:51:98:
23:6f:f2:86:29:69:86:30:d4:b6:a8:81:d4:50:c9:
26:c1:59:ff:09:5f:e6:eb:13:09:2b:28:84:8d:5f:
6b:d9:31:53:3b:35:81:ee:e5:84:9b:66:bf:ab:e3:
6c:0d:96:4c:d9:36:6c:88:f9:41:2d:5e:2f:cd:f6:
64:47:23:9a:5b:d5:e7:be:0c:87:80:dd:c8:f1:cc:
79:24:14:d2:c2:c0:3f:e3:f8:25:6f:42:cd:0b:99:
a2:51:ad:15:9e:3a:a7:8b:e8:8c:78:c8:66:7f:5c:
1d:2b:e6:6a:54:5c:d9:d5:59:d2:02:2e:6d:b7:e7:
81:21:85:e0:98:fd:9d:aa:c9:70:bb:bf:db:02:f0:
bb:f4:92:48:55:99:9f:15:02:fd:13:2a:a6:6c:19:
51:10:df:c1:08:fe:28:bf:f2:55:31:51:0f:98:9b:
a0:36:ad:cf:b1:22:a4:7d:99:f5:72:f2:3c:7d:1e:
a5:20:3a:cb:82:a6:0b:3a:12:bc:2e:26:ce:a4:02:
6b:d0:62:c6:4f:c1:b9:82:9f:84:4c:13:d2:be:68:
a5:d8:cd:85:c2:59:5e:e0:77:5a:8f:d9:3f:7f:7e:
cb:9b:b2:68:e4:d4:e6:bf:2c:cb:c8:c9:63:1d:d5:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C9:13:22:69:B5:F2:40:C0:89:C7:B0:45:F3:D8:4F:F4:6B:4E:F7
X509v3 Authority Key Identifier:
keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:75:ff:bd:2e:82:dc:a3:e2:6d:f6:f4:37:61:64:23:df:b4:
ed:00:82:df:83:f4:83:1b:13:37:f5:f0:f0:26:26:57:02:ff:
48:8c:e2:97:18:2a:4d:90:ae:6a:07:cd:b8:41:c7:85:fc:94:
e0:a4:07:ba:3b:7b:40:48:f0:b8:48:4c:3c:c0:49:1c:c2:56:
7c:d4:0a:25:e2:e2:72:91:b5:29:d3:48:fe:92:60:c4:f2:62:
4b:0b:48:b3:09:8e:e8:fb:41:19:1d:b4:8c:93:e9:18:6a:16:
b2:fe:d8:54:e8:bf:12:95:dc:6f:9c:34:ef:05:fb:0c:b9:88:
ea:38:f4:3a:71:b1:93:30:dd:ef:79:5c:ba:47:f1:5c:a2:84:
4c:9b:47:5d:be:2c:e3:70:e9:9c:2e:3d:00:bb:47:84:09:d3:
47:d0:ca:4e:f3:d3:0a:eb:a1:e4:2b:db:9e:49:98:7e:11:b6:
46:bf:d1:67:fb:8b:94:ca:4b:b0:ca:0f:df:3c:6a:cf:60:7e:
d2:bc:6b:51:08:8a:ab:97:7b:4b:d4:1f:8f:ed:44:04:d0:fc:
58:3a:16:9b:fb:69:94:a5:63:c7:42:18:3f:5a:87:7e:2d:d2:
09:66:b4:c7:e7:f8:4f:b0:52:ad:e4:e1:67:ed:91:d7:ba:4e:
31:f3:d4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:56 2026 by rpki-client