
$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json)
Hash identifier: e0ogRBovpQal+gt070TCIefWhPWz2PwAe4a/OyRW/Ac=
Subject key identifier: 5C:19:8F:39:D7:9D:54:77:EA:90:EE:63:48:84:95:CA:B1:52:98:93
Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
Certificate serial: 4EBC16B7B43569B6A0AA7AAE6CC3E32E13053F6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
Manifest number: 0266
Signing time: Thu 19 Mar 2026 23:31:31 +0000
Manifest this update: Thu 19 Mar 2026 23:26:31 +0000
Manifest next update: Mon 23 Mar 2026 08:47:31 +0000
Files and hashes: 1: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: /OiaatiAFJjYmCuKDfs8T2psl4m0IWHb+mxkKWe3Vd0=)
2: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: ER94Koy93N1iX2ZjCHRiv7QDLqCqYgMFlRPJn292854=)
3: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: BBSfs0YHYFY6aNip4ye3zUlYvhp6JHeTdQdI/P3ewAo=)
4: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: +lLWVkW77msDkt22BmOKE6zoe3F7Rva3RzwGn4oP4Gw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl
rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Mar 2026 08:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:bc:16:b7:b4:35:69:b6:a0:aa:7a:ae:6c:c3:e3:2e:13:05:3f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
Validity
Not Before: Mar 19 23:26:31 2026 GMT
Not After : Mar 23 08:47:31 2026 GMT
Subject: CN=5C198F39D79D5477EA90EE63488495CAB1529893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:d4:c1:0d:55:7f:8c:8a:19:b3:01:df:7f:
de:e0:f7:28:97:f7:da:86:f3:8e:89:db:88:a4:51:
1c:28:a9:91:52:69:f4:b5:41:46:6d:a5:b0:7f:17:
bc:12:93:d9:78:c3:0e:d7:a0:b7:b8:f7:53:1f:5a:
5b:6c:69:d1:f6:34:85:ad:65:7c:f5:76:ba:f7:8d:
f1:80:38:28:b5:0d:89:f8:5e:df:12:29:31:e2:f8:
d8:ef:8e:03:36:5f:2f:cf:c1:3c:57:54:f3:ed:d5:
39:c7:12:91:7c:0d:98:d2:0e:d4:3f:d2:1b:51:c1:
8a:7b:0a:4f:9f:a6:1e:2d:d9:7a:69:f3:2d:9c:6f:
37:95:53:7f:21:ec:3b:f6:71:af:59:d2:e5:53:48:
92:40:05:7e:2b:24:4d:7e:0f:bc:ec:ec:91:2a:22:
a8:0d:d5:3c:c0:64:95:2f:e7:dc:0d:0c:3b:fa:1d:
28:fc:ef:3e:76:c0:54:e3:f9:5b:df:05:fa:18:db:
0b:7b:e2:61:c7:ed:df:96:12:38:bd:fe:05:e4:53:
23:3f:5b:f3:58:62:c2:30:26:09:ef:b2:d5:ff:7d:
5f:f0:48:b8:0c:77:78:6e:76:7a:58:58:44:85:08:
c0:ba:9a:9f:07:5b:9c:3c:30:dd:6b:79:54:26:1d:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:19:8F:39:D7:9D:54:77:EA:90:EE:63:48:84:95:CA:B1:52:98:93
X509v3 Authority Key Identifier:
keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:43:6e:2d:6a:f0:9c:ff:6b:d4:7c:e8:9f:19:c2:1b:33:c8:
93:84:66:9a:7c:81:c0:85:41:b0:a3:a8:06:50:25:c2:42:99:
76:8e:0b:bd:7a:50:de:20:b0:47:c5:2f:56:9a:ed:4d:65:c7:
0c:38:ba:31:81:4e:2e:8a:54:fd:04:b7:2c:3b:b0:ff:51:fe:
d2:29:02:19:3b:d2:95:16:6d:5a:cf:91:14:41:6b:64:a9:22:
c3:82:25:d6:b6:04:66:ce:56:d9:09:b2:81:a2:b7:95:96:c7:
ea:84:c8:d6:cf:d5:cb:5e:70:af:7f:33:8a:98:92:d5:e4:2b:
92:4d:7b:3a:a5:77:59:db:cf:c3:80:86:fb:56:95:ab:3a:36:
bc:ec:b4:70:aa:96:ea:29:df:ce:67:e6:a3:aa:53:28:67:b9:
05:9b:71:c4:89:a4:27:56:bf:1c:31:2d:7c:87:27:02:03:81:
93:a4:70:cb:6b:2c:07:54:e9:bf:46:f9:10:eb:f9:47:6b:48:
09:34:40:ba:2d:f7:ac:e9:06:46:27:11:92:dc:12:72:1c:e5:
22:40:9f:65:48:d3:e8:d4:4a:e0:e0:1f:47:04:2c:9f:f8:9b:
32:70:2b:9c:99:2a:ce:89:1e:e6:62:80:37:80:88:ea:8a:f1:
1a:b0:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 14:35:09 2026 by rpki-client