
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
File: 69815E9AA14BB02AA62080FF68CEED525920B7CB.mft (raw, json)
Hash identifier: HM/X/ZcrGvH3ahOV+W8XDceZrcdsUOwegYP81UUiwN0=
Subject key identifier: D0:F4:29:7E:04:E6:ED:04:D1:AD:9D:A5:6C:6A:D3:CF:C6:FF:A3:30
Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
Certificate issuer: /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Certificate serial: 76053F102610ACBDC2771AF548321BB6FC231457
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 22:58:43 +0000
Manifest this update: Tue 02 Jun 2026 22:53:43 +0000
Manifest next update: Thu 04 Jun 2026 00:28:43 +0000
Files and hashes: 1: 69815E9AA14BB02AA62080FF68CEED525920B7CB.crl (hash: f3jjl22GXWQNUTG6DNr939Vs87eRaWdd4PkNQuvS8VU=)
2: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: CJ3C5Ad0lXVGoXoTJJLAUWAzAvNTOgEY9RwmCwNrPhg=)
3: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: Lk1tNkM5iXGzAH8YNwcIq2YC8yUeom1TAzpJAMLwNHo=)
4: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: L61Dq+JOgTVZ8Zg4QhtuTyVZiqTe5CzyDJzKqTh0In0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 00:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:05:3f:10:26:10:ac:bd:c2:77:1a:f5:48:32:1b:b6:fc:23:14:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Validity
Not Before: Jun 2 22:53:43 2026 GMT
Not After : Jun 4 00:28:43 2026 GMT
Subject: CN=D0F4297E04E6ED04D1AD9DA56C6AD3CFC6FFA330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:ae:0d:1e:6b:45:d1:e0:a3:49:9d:c7:9f:
c4:b2:fa:74:62:8a:97:96:51:8a:03:ae:9e:28:1c:
39:59:9e:05:5b:9c:98:bb:5b:9c:58:b1:d1:bd:8b:
d7:9c:61:14:46:cd:d6:9c:c5:ca:8a:fa:ee:15:40:
97:61:f6:6f:7b:58:1b:a2:82:2c:40:65:e2:74:ff:
bb:4c:0b:8d:fa:a5:dd:98:98:5a:4c:e9:11:90:48:
ae:6b:5e:93:98:4d:a0:ed:85:27:5c:d5:13:bb:4d:
97:cf:d3:49:22:e9:ec:6f:31:a8:16:fa:2b:ef:22:
18:cf:de:ac:1b:b5:5e:2b:b9:32:35:9c:c5:af:69:
37:1a:dd:29:36:9d:b4:85:17:61:c1:2b:a7:e7:e0:
dc:9e:34:c4:e3:16:af:64:19:4a:43:97:0a:e9:37:
9f:b3:ea:c2:d4:cb:57:ea:3b:3e:22:c2:e3:39:24:
9d:94:d3:de:a0:1b:40:c8:98:ec:28:b3:4d:54:51:
54:31:1a:0b:f6:f0:01:06:8a:7c:fa:0c:3e:3a:64:
d0:a2:cc:67:c2:7f:54:c6:93:77:6b:b3:7b:c6:9d:
e0:01:db:a4:75:c2:fb:81:12:c6:35:07:2d:9e:66:
49:ec:12:b3:ce:ee:11:20:84:de:f9:98:88:95:dc:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:29:7E:04:E6:ED:04:D1:AD:9D:A5:6C:6A:D3:CF:C6:FF:A3:30
X509v3 Authority Key Identifier:
keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:77:e1:12:e6:67:1f:12:14:75:aa:e9:9b:9a:8a:24:7f:8c:
ab:3c:d5:47:10:93:a4:1b:42:1a:23:49:76:aa:33:2f:04:dd:
fb:28:25:36:5c:1e:15:48:6b:46:3d:3b:96:b8:f9:07:ea:98:
76:fe:4d:96:aa:a6:30:d3:59:0b:b3:8e:09:56:b8:9b:90:92:
ad:82:1e:84:ab:4d:25:e7:1c:78:e3:d7:68:3c:53:6d:cc:f4:
a1:45:85:9e:b7:84:55:28:62:2b:e4:dd:88:8d:71:e3:4c:ba:
1a:2b:df:7c:36:d9:bf:44:b6:ab:5b:df:0d:cd:5f:f7:bd:21:
6e:e6:71:59:35:8c:a9:98:8b:be:19:d1:37:0b:5e:75:b1:17:
4d:76:84:84:0c:bb:96:96:b8:55:d2:5b:10:b7:ce:73:74:16:
ac:00:eb:4b:f0:db:2f:d9:8a:95:c7:b0:d7:46:48:04:57:30:
ef:db:c9:fc:14:c7:5d:9e:a7:d0:3c:35:f1:0f:60:00:fc:06:
8d:84:0f:5d:b6:82:5a:23:fa:05:41:9a:be:62:ce:4f:f5:fd:
94:c8:50:ee:b2:22:ab:41:e9:8c:b4:9a:b5:08:8a:7b:93:a5:
24:7b:3f:9b:34:16:a8:76:5b:ac:f0:56:9a:f1:29:d1:4f:7d:
74:90:fe:f4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdgU/ECYQrL3Cdxr1SDIbtvwjFFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk4MTVFOUFBMTRCQjAyQUE2MjA4MEZGNjhDRUVENTI1
OTIwQjdDQjAeFw0yNjA2MDIyMjUzNDNaFw0yNjA2MDQwMDI4NDNaMDMxMTAvBgNV
BAMTKEQwRjQyOTdFMDRFNkVEMDREMUFEOURBNTZDNkFEM0NGQzZGRkEzMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqha4NHmtF0eCjSZ3Hn8Sy+nRi
ipeWUYoDrp4oHDlZngVbnJi7W5xYsdG9i9ecYRRGzdacxcqK+u4VQJdh9m97WBui
gixAZeJ0/7tMC436pd2YmFpM6RGQSK5rXpOYTaDthSdc1RO7TZfP00ki6exvMagW
+ivvIhjP3qwbtV4ruTI1nMWvaTca3Sk2nbSFF2HBK6fn4NyeNMTjFq9kGUpDlwrp
N5+z6sLUy1fqOz4iwuM5JJ2U096gG0DImOwos01UUVQxGgv28AEGinz6DD46ZNCi
zGfCf1TGk3drs3vGneAB26R1wvuBEsY1By2eZknsErPO7hEghN75mIiV3JaJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU0PQpfgTm7QTRrZ2lbGrTz8b/ozAwHwYDVR0j
BBgwFoAUaYFemqFLsCqmIID/aM7tUlkgt8swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGE0NmJkYWQtZjEzMC00OGE5LTg1MzQtNTRiYTNlOGVkNjFmLzAvNjk4MTVFOUFB
MTRCQjAyQUE2MjA4MEZGNjhDRUVENTI1OTIwQjdDQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OTgxNUU5QUExNEJCMDJBQTYyMDgwRkY2OENFRUQ1MjU5MjBC
N0NCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGE0NmJkYWQtZjEzMC00OGE5LTg1
MzQtNTRiYTNlOGVkNjFmLzAvNjk4MTVFOUFBMTRCQjAyQUE2MjA4MEZGNjhDRUVE
NTI1OTIwQjdDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIJ34RLmZx8SFHWq6ZuaiiR/jKs81UcQk6Qb
QhojSXaqMy8E3fsoJTZcHhVIa0Y9O5a4+QfqmHb+TZaqpjDTWQuzjglWuJuQkq2C
HoSrTSXnHHjj12g8U23M9KFFhZ63hFUoYivk3YiNceNMuhor33w22b9Etqtb3w3N
X/e9IW7mcVk1jKmYi74Z0TcLXnWxF012hIQMu5aWuFXSWxC3znN0FqwA60vw2y/Z
ipXHsNdGSARXMO/byfwUx12ep9A8NfEPYAD8Bo2ED122gloj+gVBmr5izk/1/ZTI
UO6yIqtB6Yy0mrUIinuTpSR7P5s0Fqh2W6zwVprxKdFPfXSQ/vQ=
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:22:52 2026 by rpki-client