
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
File: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft (raw, json)
Hash identifier: QUAWpYEv/Z6D9nSCrRMAm6ak+fpNI1/PYaue60fpr70=
Subject key identifier: 56:77:29:2F:39:28:8D:4E:B2:B3:F2:D0:99:9C:2A:C3:AE:6D:CB:73
Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A
Certificate issuer: /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
Certificate serial: 6A5850D633328363F994DF38F8E427D46FFDC18B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:30:52 +0000
Manifest this update: Tue 12 May 2026 22:25:52 +0000
Manifest next update: Wed 13 May 2026 23:13:52 +0000
Files and hashes: 1: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: x5RJwcfSJcf4TPrfYCbrHH5Zw0JrrU1hDPa+akMmLpg=)
2: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl (hash: WoErIy6YK2fiy/2cJpn8sOp93ahcfFw7rshcrfEt6VE=)
3: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: Gn+HGQkiKeq+di9EEDtZ6qlSybdGiW1EgXCAyflphd4=)
4: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: cFFyKwGpHn4uF9F1ttK0LolsMUqZe11EhB3qJ8iRTTQ=)
5: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: +UxBUQ9LWmrn5ILaIrGRF3Yxb69k3Lazu4IHoItBqGI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl
rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:58:50:d6:33:32:83:63:f9:94:df:38:f8:e4:27:d4:6f:fd:c1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
Validity
Not Before: May 12 22:25:52 2026 GMT
Not After : May 13 23:13:52 2026 GMT
Subject: CN=5677292F39288D4EB2B3F2D0999C2AC3AE6DCB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:a7:01:d2:d6:22:28:2e:04:34:e6:d6:a7:
56:01:c4:a5:45:c6:b0:8f:b4:9e:8c:44:1d:43:d6:
1f:2b:cc:15:22:cf:4a:47:ec:cb:02:a6:88:ea:40:
46:8c:75:c4:b3:68:03:f9:9a:50:64:cc:23:52:dc:
64:b0:ea:3f:ef:d6:83:5b:99:be:3f:94:41:6b:8c:
17:e0:dd:03:a2:9d:19:dd:f7:2f:28:f5:cd:7b:37:
a2:5c:69:1f:b5:40:59:c2:69:70:93:33:fd:ae:ce:
5d:01:c4:a8:7b:7e:9d:54:87:e2:5a:cb:88:cb:02:
df:68:e6:bc:e1:0a:84:06:94:bd:65:26:d2:1d:9e:
f9:de:4a:38:35:d2:4f:61:e7:98:f5:e9:3b:db:c3:
6f:3d:e5:9a:12:5c:86:6b:2d:14:75:94:d2:25:24:
b7:ee:dd:77:82:80:97:16:24:90:5d:14:7f:a1:63:
4d:9d:ba:28:10:8b:84:f3:28:5e:f7:26:61:46:7e:
fa:20:28:d9:11:0b:ff:38:2b:56:11:5b:ba:c1:24:
46:34:fe:c0:71:97:97:51:d4:0b:0c:25:57:c2:2a:
d4:99:6e:b9:3c:94:a9:41:d4:85:af:14:42:e6:8c:
30:e1:88:ae:14:24:a5:9a:bf:0c:e7:da:0d:8f:ab:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:77:29:2F:39:28:8D:4E:B2:B3:F2:D0:99:9C:2A:C3:AE:6D:CB:73
X509v3 Authority Key Identifier:
keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c5:97:54:59:f7:99:59:a9:98:6f:37:a2:51:38:44:23:ef:
ac:88:09:ee:cd:fd:e6:63:2e:85:04:49:fb:5a:b2:2a:f2:b7:
92:24:7e:e6:a0:aa:e6:36:89:76:75:19:ab:86:60:75:0d:49:
70:1e:bf:7c:19:d1:2a:b8:37:34:e9:8b:f4:66:39:58:b1:1b:
c5:4e:bd:32:53:74:68:00:1d:e2:60:49:29:3a:0d:3a:7a:b3:
d5:0c:49:4e:12:7d:c3:4c:d1:ce:9b:48:d3:a9:d4:37:bd:e2:
af:1f:8f:7c:2b:b9:67:c0:6a:1e:3c:e7:e9:cc:58:fd:9a:c2:
d9:ee:e8:e4:55:11:be:af:71:cc:9a:66:90:0e:c4:4a:95:8a:
a2:9f:83:f1:de:65:06:64:89:2b:d2:de:c2:50:38:a2:56:f8:
e9:0b:bb:0b:8d:cc:60:d8:51:dd:80:27:dc:9f:71:96:5f:83:
59:09:a6:5a:31:1a:73:12:8d:18:05:4a:8a:b7:21:54:9b:b3:
af:87:30:99:b0:61:6c:36:5e:68:83:e7:17:77:e6:c0:80:e0:
54:2b:19:b8:46:20:27:cd:47:14:cd:bd:04:74:a5:1a:3a:61:
58:71:f2:b7:31:e1:2d:70:34:08:97:a9:da:e1:6f:ae:c6:4e:
ab:84:a0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:04 2026 by rpki-client