
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.mft
File: 69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.mft (raw, json)
Hash identifier: AFFlTeklaCqvEbRbN6MfF6PjHk576H8I5ElRmH+gQAs=
Subject key identifier: 73:83:4F:CF:17:64:BE:05:19:9F:E6:7D:3A:41:40:9A:5D:2D:DA:0D
Authority key identifier: 69:EB:8C:4D:4C:8A:1C:4F:F6:9E:9E:4C:4A:C1:98:3F:ED:78:C0:1F
Certificate issuer: /CN=69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F
Certificate serial: 29691AB010A68A53A06520A87B4AEB3F1F3A8BF9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 16:35:12 +0000
Manifest this update: Thu 23 Jul 2026 16:30:12 +0000
Manifest next update: Fri 24 Jul 2026 18:50:12 +0000
Files and hashes: 1: 69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.crl (hash: sFUvEk2QFVkTHuJyHwyrLp2SN6yent/2rzU5M4JZ0hE=)
2: 3230322e34372e39302e302f32332d3234203d3e203436303230.roa (hash: PApA+CwXWU/yi3bwKoQ4f3KXSY4CYtS/AwKKxJ6EK/4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.crl
rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:69:1a:b0:10:a6:8a:53:a0:65:20:a8:7b:4a:eb:3f:1f:3a:8b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F
Validity
Not Before: Jul 23 16:30:12 2026 GMT
Not After : Jul 24 18:50:12 2026 GMT
Subject: CN=73834FCF1764BE05199FE67D3A41409A5D2DDA0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:7b:c0:bd:df:98:0f:23:b4:40:e7:d8:3f:
ec:c9:c3:86:1a:f6:44:05:27:a0:23:fc:99:1a:90:
f3:f9:d9:cc:e9:1c:6f:da:05:9f:d9:d2:84:f3:3a:
28:10:8a:40:5d:8d:fd:96:fa:69:a2:b1:1a:ca:57:
8e:79:df:9e:1d:8a:9a:34:d3:5b:92:fd:e7:bb:34:
ee:1a:a3:23:11:22:cf:1a:4e:02:43:20:e1:38:67:
1f:a0:62:4b:2d:2b:ff:3c:c4:aa:6d:e0:8f:4e:f3:
48:b3:b3:54:9c:c3:fc:02:d9:d5:d5:76:f2:db:e9:
3a:42:f0:79:75:30:9f:1d:be:f8:5f:2c:24:e8:97:
1e:b5:03:e7:ec:ea:c4:39:a0:3d:02:68:33:cb:bb:
08:ed:90:dd:38:5b:37:10:5c:d6:a6:10:c1:5d:0a:
ce:0c:8b:de:c7:f0:d9:69:82:81:7f:7e:f5:bc:58:
33:48:9d:fc:db:9a:9a:9b:8f:4d:61:65:08:7c:c8:
26:0f:c5:45:25:35:92:c0:81:d5:b2:fc:96:02:72:
c1:45:65:eb:7d:57:1e:a1:f6:6e:c3:a9:5c:34:34:
95:3c:db:d0:d2:1a:42:c3:7c:01:11:78:ee:89:8a:
dd:f4:89:b3:c2:0e:b6:70:a1:65:aa:f1:9f:32:64:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:4F:CF:17:64:BE:05:19:9F:E6:7D:3A:41:40:9A:5D:2D:DA:0D
X509v3 Authority Key Identifier:
keyid:69:EB:8C:4D:4C:8A:1C:4F:F6:9E:9E:4C:4A:C1:98:3F:ED:78:C0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/69EB8C4D4C8A1C4FF69E9E4C4AC1983FED78C01F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:76:d3:e2:eb:63:a8:4c:a9:f7:a5:a5:53:cb:0f:f9:c7:c7:
b3:ae:09:28:34:52:a7:13:b2:3f:00:d2:6a:94:be:e4:06:70:
f1:37:ba:16:27:a0:1f:90:1c:84:24:5a:bc:2d:3d:0e:72:55:
4a:9f:dc:f7:d2:a9:a9:fc:99:91:cf:58:30:bd:fb:b6:ee:6f:
ea:ca:66:89:5e:e3:4e:37:9c:44:16:2a:5d:43:9d:cf:f9:f9:
57:44:ad:b6:10:c9:fb:5f:4e:21:48:70:f9:72:c3:3d:fa:46:
7a:30:2b:fd:2f:12:d8:8a:bd:e2:69:e1:9b:44:e7:79:34:c8:
15:69:3f:44:16:02:7f:37:74:c6:6f:bc:12:bc:f0:90:98:e8:
80:33:01:55:c2:14:6b:19:18:89:e6:20:b6:27:a4:e2:c7:c2:
13:6b:e1:be:0b:97:93:ba:b2:22:7e:d0:04:9e:e1:fe:7a:12:
a8:bb:83:99:8a:25:b1:5f:81:0d:68:9e:d5:b1:ca:7c:69:99:
23:5c:a8:5d:bb:eb:e6:1a:30:f3:b7:ee:9d:65:85:e4:b5:26:
0d:9c:c1:22:be:77:5c:80:88:e5:ac:fb:3b:8c:ca:0b:72:a3:
d6:59:ba:80:90:ad:68:39:58:c3:99:eb:e8:15:25:0e:63:64:
a4:e9:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:50 2026 by rpki-client