
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
File: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft (raw, json)
Hash identifier: 4R+uHrZyLxvwo9w3OXa/sjjU8YexahmaH3vZ1DTVrP8=
Subject key identifier: E0:3B:AC:80:B4:14:42:12:97:87:99:A7:79:19:21:39:18:DE:B5:7C
Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A
Certificate issuer: /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
Certificate serial: 48FABD4C83654C5E12BB41218BC6A41685A79288
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 08:30:31 +0000
Manifest this update: Tue 02 Jun 2026 08:25:31 +0000
Manifest next update: Wed 03 Jun 2026 10:44:31 +0000
Files and hashes: 1: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: +UxBUQ9LWmrn5ILaIrGRF3Yxb69k3Lazu4IHoItBqGI=)
2: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: cFFyKwGpHn4uF9F1ttK0LolsMUqZe11EhB3qJ8iRTTQ=)
3: 697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl (hash: VWG+Bz0Jds7mLi1GJIAqI6um1AbRsilxFy4IgCoQyFE=)
4: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: Gn+HGQkiKeq+di9EEDtZ6qlSybdGiW1EgXCAyflphd4=)
5: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: x5RJwcfSJcf4TPrfYCbrHH5Zw0JrrU1hDPa+akMmLpg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl
rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:fa:bd:4c:83:65:4c:5e:12:bb:41:21:8b:c6:a4:16:85:a7:92:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
Validity
Not Before: Jun 2 08:25:31 2026 GMT
Not After : Jun 3 10:44:31 2026 GMT
Subject: CN=E03BAC80B4144212978799A77919213918DEB57C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:58:2f:c5:a4:8f:8f:aa:6a:4b:c6:0c:dd:
2e:27:0d:60:6b:16:c1:3f:1c:55:a1:c0:74:1d:c5:
8f:ac:2b:ee:10:d4:f1:79:fc:3a:b6:36:b9:b8:62:
bb:8f:eb:8a:74:1c:db:6e:c1:f7:f4:36:f8:c9:8b:
9a:83:cc:a5:fd:2b:65:d0:d8:6f:c5:bd:88:54:9f:
33:57:1f:b2:53:b1:dc:5c:c8:58:5e:19:95:c1:26:
28:b0:c6:6c:08:04:4c:2d:9e:e0:b7:3d:26:4d:08:
a7:cd:6f:e4:53:08:a4:43:d7:09:92:f5:de:3a:5a:
9c:11:3c:75:92:47:3b:c4:72:90:ea:6e:d8:32:bf:
91:3c:11:c1:55:e2:f7:e3:f5:c9:82:41:69:50:2c:
94:89:ec:65:23:3e:56:7c:45:1a:4e:ec:83:a6:bb:
ee:31:24:b6:50:ab:4c:f5:35:b6:ab:fd:7c:66:2e:
bc:b2:c7:de:1b:74:ab:a1:86:bc:e2:08:e1:89:f8:
21:0d:77:62:68:53:cb:a2:c7:d9:18:87:b5:33:25:
b8:98:87:58:a7:c5:77:cb:73:f7:72:ef:dc:25:fb:
2d:8f:92:2a:3a:16:d8:58:28:0c:a3:b3:d7:35:46:
a5:c5:43:87:99:ef:85:ff:34:27:ab:67:3d:13:ab:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3B:AC:80:B4:14:42:12:97:87:99:A7:79:19:21:39:18:DE:B5:7C
X509v3 Authority Key Identifier:
keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ba:24:95:05:35:cf:52:b9:de:f6:70:57:ee:aa:56:57:4e:
64:d6:2a:54:50:d5:a1:96:5e:72:f8:3a:21:a4:72:32:2e:ee:
28:f6:68:53:36:27:26:b0:25:2b:ae:4a:8e:77:27:2b:ac:b2:
05:ca:4e:84:b6:c3:40:54:cf:73:35:63:24:5b:9f:0e:0e:81:
bb:f8:b8:3e:c6:49:33:a9:3c:f2:92:c9:3c:cd:86:33:da:3a:
b3:6b:88:3a:f4:3c:b8:a8:a1:38:83:fd:97:98:f6:2e:2b:86:
78:43:a6:94:14:9a:9f:fd:89:fc:c8:0a:89:49:f1:3d:88:5c:
e2:43:f9:1c:e7:66:25:13:42:df:61:f5:1a:f9:b9:27:b8:8a:
d9:db:e7:ce:02:f9:ce:10:67:65:f7:68:2e:fa:09:cf:56:5c:
d3:55:59:ab:d9:74:a3:61:1f:0d:ed:9e:72:68:75:34:2f:5d:
64:60:eb:7b:40:6b:be:79:43:e0:2c:d4:14:9d:ad:7c:38:14:
42:fd:9b:cc:6a:42:3d:ae:17:b9:22:bc:cf:14:a2:a4:d7:95:
cc:02:a9:5b:d8:18:84:da:6d:7a:06:3d:8b:1e:a8:d2:42:d2:
c1:04:22:f9:7d:21:6f:6c:63:67:8b:42:17:1a:f0:d5:6d:cc:
5c:d5:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:01:35 2026 by rpki-client