
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
File: D769452C15749C457029AB81E06B7D36C9F48804.mft (raw, json)
Hash identifier: wd3p8S9bw4VG22dP+p7p8LCyPocXVYZeePoQQya0vsI=
Subject key identifier: 69:3F:F4:A7:44:AB:D5:65:89:12:DD:02:45:01:1E:C2:CB:62:BD:F9
Authority key identifier: D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04
Certificate issuer: /CN=D769452C15749C457029AB81E06B7D36C9F48804
Certificate serial: 3E37C5EF18E18FFEBEAC4A9F6A49B0BB15326507
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
Manifest number: F6
Signing time: Mon 02 Nov 2026 14:00:29 +0000
Manifest this update: Mon 02 Nov 2026 13:55:29 +0000
Manifest next update: Tue 03 Nov 2026 16:05:29 +0000
Files and hashes: 1: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (hash: Wgp2Ly277xiC/SJ4ahqqMWo1yKBGTp7hlr1qa44tvrs=)
2: D769452C15749C457029AB81E06B7D36C9F48804.crl (hash: RXk7K4zRVUDc3aJuHMDST2VFs09FsqfW2nVxoOZyhQM=)
3: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (hash: FxemyMpIsKKyeyZF+nt8pq/Wh2yMuBg7NUlyoxRZXT8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl
rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 11:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:37:c5:ef:18:e1:8f:fe:be:ac:4a:9f:6a:49:b0:bb:15:32:65:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D769452C15749C457029AB81E06B7D36C9F48804
Validity
Not Before: Nov 2 13:55:29 2026 GMT
Not After : Nov 3 16:05:29 2026 GMT
Subject: CN=693FF4A744ABD5658912DD0245011EC2CB62BDF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:d6:a0:c7:a1:41:ff:41:80:9a:74:1f:13:
69:9b:ca:b3:20:d8:01:9b:c4:08:15:61:08:e7:62:
c6:17:bf:a8:39:d6:4c:c1:36:4a:95:6b:9a:00:bc:
3e:55:55:31:98:50:cf:7f:70:0f:b1:6a:2c:d9:aa:
00:05:9d:c0:98:fc:bf:d4:8f:f2:aa:10:83:f2:3c:
50:33:a6:62:a4:8d:9d:f2:e0:44:35:4f:b6:9d:d6:
39:6b:13:a4:bf:df:b3:72:5a:50:68:45:bc:5f:c6:
15:5e:8f:ac:c1:d3:cc:ee:fd:08:ea:23:e1:3f:46:
c1:df:b7:e7:25:bc:5c:99:e9:49:40:95:3b:14:79:
68:54:4b:8d:0f:1f:8f:58:61:00:4d:f7:eb:5f:85:
90:fa:46:a1:be:ba:fb:a0:cf:f2:50:ef:ee:a2:95:
2c:e3:0e:a1:20:ef:71:1c:2e:44:58:60:45:c6:1c:
8c:e4:79:75:5f:4b:8a:6c:0c:59:73:f3:99:57:f0:
68:63:fe:17:cc:2f:95:ef:f9:5c:0f:ae:75:c7:cf:
28:89:34:65:54:b3:99:60:3a:17:ca:41:a6:8b:8a:
2d:c9:dd:86:62:4f:d5:a2:98:be:89:68:e5:29:8a:
cb:91:83:ae:c3:79:16:70:7d:68:8d:e1:36:7e:cf:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3F:F4:A7:44:AB:D5:65:89:12:DD:02:45:01:1E:C2:CB:62:BD:F9
X509v3 Authority Key Identifier:
keyid:D7:69:45:2C:15:74:9C:45:70:29:AB:81:E0:6B:7D:36:C9:F4:88:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D769452C15749C457029AB81E06B7D36C9F48804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/D769452C15749C457029AB81E06B7D36C9F48804.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:70:9a:e3:02:33:f1:99:b9:d9:d4:6a:8b:95:13:ec:be:54:
af:ea:59:94:75:10:44:96:64:38:7c:86:b9:90:66:3e:37:b7:
93:d5:b6:2d:1e:9d:d3:b0:9f:e4:d8:22:39:ae:71:01:25:f1:
bf:48:1f:43:4a:e2:97:f4:9c:f4:b8:8f:02:38:aa:15:ba:ae:
82:c6:84:b2:18:66:8d:cc:91:14:11:ed:ef:8f:ed:a4:40:8c:
fc:e9:34:1d:5f:5c:e3:5c:1f:12:fa:24:0b:ce:9f:69:99:37:
93:42:f5:f8:bb:38:55:71:6c:a1:9e:d4:47:4a:be:e5:fc:d6:
93:3c:3b:2d:2c:cb:93:97:35:08:bb:49:bb:03:bf:b2:9d:00:
d3:da:fc:f3:bd:7b:56:57:7b:4f:78:2b:88:1c:50:55:a5:fb:
1e:32:14:2f:c7:e8:d7:a2:c2:c4:39:f5:01:b2:5b:3b:b6:b9:
ea:3e:e4:19:7b:97:48:b9:a6:5b:75:ea:ef:64:b0:22:b1:63:
0e:14:18:56:44:57:d8:01:4d:6b:16:7e:9d:c5:87:62:8a:af:
7c:7f:3e:6c:50:08:10:f7:32:9a:a5:45:33:47:e8:1e:35:d8:
d9:92:ae:5a:05:da:6e:86:6d:4a:d5:33:c6:c2:77:b9:10:ba:
ec:ea:6a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:16:55 2026 by rpki-client