
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
File: D69DF302479F4777A9A0892154204AF107B510B2.mft (raw, json)
Hash identifier: chnaWEyF2bhW1+ZUjEoSJVJ/RNF9pnnRoK/wbG/yigU=
Subject key identifier: 07:98:48:81:D2:08:1B:73:76:A3:E9:E1:0C:78:8C:A5:87:BE:E5:EB
Authority key identifier: D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2
Certificate issuer: /CN=D69DF302479F4777A9A0892154204AF107B510B2
Certificate serial: 3774AD3771B6792592B086E06C1606AFB49BB47F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
Manifest number: FB
Signing time: Wed 04 Nov 2026 12:03:13 +0000
Manifest this update: Wed 04 Nov 2026 11:58:13 +0000
Manifest next update: Thu 05 Nov 2026 15:30:13 +0000
Files and hashes: 1: D69DF302479F4777A9A0892154204AF107B510B2.crl (hash: p7a2qdlUQVOTlSVl/m51wti3tHoc7FoEDKtnkvksi3c=)
2: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: q5uFk3VLUA+Zp9Xrj3e+V8aDF57mtzIkLAnY1xqIYg8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl
rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 15:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:74:ad:37:71:b6:79:25:92:b0:86:e0:6c:16:06:af:b4:9b:b4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D69DF302479F4777A9A0892154204AF107B510B2
Validity
Not Before: Nov 4 11:58:13 2026 GMT
Not After : Nov 5 15:30:13 2026 GMT
Subject: CN=07984881D2081B7376A3E9E10C788CA587BEE5EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:07:a1:b3:a7:15:b8:3c:37:9e:e6:29:e1:
55:d0:51:81:dd:35:d6:f1:d9:05:a9:71:59:5b:75:
23:74:9b:68:bd:7d:36:82:51:2a:5c:98:ab:b4:a6:
40:7d:1d:d7:17:42:63:12:32:44:23:15:2b:df:9c:
e5:2c:76:0d:01:7d:ed:b3:51:cf:eb:0d:9c:79:ff:
01:56:aa:6c:4b:70:fb:10:6d:0d:4c:d8:15:6e:ec:
8c:5f:84:c4:6d:e2:95:59:6b:ae:41:95:31:30:b2:
80:c1:69:0c:83:50:f0:6a:1b:38:a8:59:ea:51:c3:
37:b6:97:48:76:57:69:73:c3:55:07:65:68:fe:cb:
fa:50:49:8b:a7:c7:33:1d:70:07:d4:03:64:5a:08:
32:ca:43:fd:1e:7a:4b:07:a7:f7:89:27:39:78:77:
9f:f8:92:5e:63:f3:28:70:c9:60:43:df:7f:4d:76:
da:92:0c:6f:f5:6c:9c:d7:f4:d8:f7:64:6a:3d:35:
41:01:de:91:a0:e0:6a:e2:7a:70:2a:b7:3c:de:fa:
a5:2f:9e:f7:7b:96:cf:f0:bb:30:91:56:e0:8d:39:
c5:c5:e9:fa:62:67:81:5a:f3:75:a2:47:85:38:29:
dd:10:74:4c:ab:73:a5:4b:de:47:e6:c5:09:2a:93:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:48:81:D2:08:1B:73:76:A3:E9:E1:0C:78:8C:A5:87:BE:E5:EB
X509v3 Authority Key Identifier:
keyid:D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:42:44:c9:69:04:5e:63:77:70:28:4e:70:d6:22:96:b7:03:
3e:20:1a:a7:42:14:ec:ae:1f:90:2a:e8:6c:65:fa:90:19:45:
3c:e5:ce:22:a1:08:03:c0:44:3e:13:24:ab:75:e6:8c:2d:bf:
fe:0a:e2:ba:ff:2f:c0:8c:b0:2f:fa:46:81:6e:54:5c:ae:cc:
63:61:f1:c7:06:25:8b:86:47:e3:c7:a2:94:ed:c2:2d:13:05:
c5:69:81:60:58:58:ba:7e:00:2d:6d:ec:7d:4c:d9:5e:35:72:
8f:ba:cf:eb:e3:99:03:83:19:02:1c:50:10:6f:53:a5:37:bb:
cb:bb:3f:af:ad:6e:66:2b:07:26:05:bf:bd:36:45:97:c0:cc:
25:e1:87:5b:e4:d0:b8:84:e4:6b:ef:52:5d:ed:12:d0:52:b4:
bb:76:07:9d:b6:a4:7f:c5:7f:2b:75:35:b3:a7:60:72:6e:f7:
3a:98:12:95:02:17:be:4f:6f:af:4b:2d:34:b0:dd:17:23:b9:
83:dd:47:19:d7:aa:56:38:6d:47:4b:bf:47:11:af:b5:47:43:
15:3c:15:8b:d9:88:bc:c9:7b:48:10:a3:41:46:ba:37:ff:a6:
a3:ec:a0:80:b9:db:b2:82:d5:87:7e:91:35:de:fc:6c:2c:e3:
11:e5:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:37:57 2026 by rpki-client