
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
File: F69535097C181B143312D8EA1A6A52D500443902.mft (raw, json)
Hash identifier: oa+JeUWKslR7tYBE9wnqyzFpjN4SCfoMtwfPBp2dr7E=
Subject key identifier: D6:A3:22:7E:95:04:DE:06:60:3B:A1:FC:22:6C:8E:A3:E0:0E:91:9A
Authority key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02
Certificate issuer: /CN=F69535097C181B143312D8EA1A6A52D500443902
Certificate serial: 7F806FF346859C8DD15E73DD77EA1D4424F62BE7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
Manifest number: FF
Signing time: Fri 06 Mar 2026 05:01:25 +0000
Manifest this update: Fri 06 Mar 2026 04:56:25 +0000
Manifest next update: Mon 09 Mar 2026 11:30:25 +0000
Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: gKD6cMrbmMD3BQHPO//21JJbyMzelItTAF6aFVjLccI=)
2: F69535097C181B143312D8EA1A6A52D500443902.crl (hash: vsKo+nzNHbuU9ruwA3I4LzdN+60oIEDkRrWdiwi9d34=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl
rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:80:6f:f3:46:85:9c:8d:d1:5e:73:dd:77:ea:1d:44:24:f6:2b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69535097C181B143312D8EA1A6A52D500443902
Validity
Not Before: Mar 6 04:56:25 2026 GMT
Not After : Mar 9 11:30:25 2026 GMT
Subject: CN=D6A3227E9504DE06603BA1FC226C8EA3E00E919A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6c:d0:9f:da:87:61:a9:d3:79:8d:48:02:d5:
53:b1:04:56:93:37:07:df:99:62:93:40:02:41:ac:
c7:8a:1e:9f:90:9e:c7:5f:e7:60:33:58:63:c1:d9:
fb:25:63:83:4e:17:3f:f9:a3:ee:04:bd:cf:fb:6c:
33:28:fa:6e:86:76:80:d1:eb:4e:84:f1:e9:f2:ac:
ed:b5:7e:e5:05:7a:b4:07:45:9f:b3:6e:de:c0:78:
ae:aa:8c:22:fb:51:be:22:74:5d:50:6f:30:3f:f5:
3c:0b:4a:43:eb:d7:60:27:5d:76:de:9b:85:33:81:
72:17:cf:e8:b6:b6:a0:0a:7d:70:f5:b2:b4:63:31:
8b:33:d7:61:27:9a:ca:9c:14:c9:81:e9:9f:87:69:
db:03:43:cd:af:8f:5c:36:5e:25:1c:85:1c:13:86:
27:31:a2:ab:d1:80:70:1c:d7:fd:4e:fc:6d:a8:31:
ce:76:87:dd:51:9a:93:8a:13:65:14:5d:4f:dd:19:
be:a0:5a:12:b5:db:c8:3f:0d:d4:94:bd:12:61:a0:
d7:a6:b6:90:17:a5:3d:ed:26:30:11:bc:63:6d:38:
14:a9:ab:50:5c:6e:6e:3c:60:f1:2a:59:d9:0c:0f:
08:47:a2:8d:e2:f3:b8:e4:18:6a:9a:6f:96:1f:75:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A3:22:7E:95:04:DE:06:60:3B:A1:FC:22:6C:8E:A3:E0:0E:91:9A
X509v3 Authority Key Identifier:
keyid:F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8a:57:38:8f:8f:3b:ec:8b:ff:34:97:26:6e:39:dc:60:66:
dd:8d:63:5f:95:ea:58:d3:cf:7d:44:64:9f:c6:88:c0:e6:da:
92:97:c4:27:41:ea:64:a7:d2:07:b3:d8:58:80:33:1c:a0:ef:
61:96:20:37:39:2b:d4:d8:9b:c8:89:c3:9d:2f:7c:3c:96:7b:
a6:44:32:e1:ba:f2:72:00:90:09:2b:60:c1:bb:5a:f5:2d:a1:
ef:fb:fb:54:07:bc:1a:ca:f5:fd:d8:b6:1e:d7:06:04:77:d7:
a3:5c:35:0b:fa:c0:5b:0c:ab:6a:34:18:d0:36:d0:c9:45:40:
11:19:0b:51:14:0e:d9:0b:5e:39:28:1d:5f:80:5f:2e:f0:69:
d0:18:63:89:02:b4:02:8e:1f:aa:00:cc:b3:dc:00:21:d7:f9:
7f:3b:a0:b7:ea:b3:52:32:8b:e5:c7:c8:aa:dc:6a:5c:d1:56:
72:a9:32:07:a8:83:29:26:70:e0:3d:e5:6c:9c:6f:8e:0e:82:
b3:16:19:53:e1:6b:55:17:d1:bf:d5:df:d4:98:5d:61:51:c0:
c4:c4:ce:24:3b:a8:4a:d8:ad:30:25:5e:f4:78:ce:40:f6:93:
8d:16:fd:fb:b5:49:3c:b7:23:37:f3:4f:e4:33:19:5f:ea:0e:
dd:50:a3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:57:41 2026 by rpki-client