
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
File: C69451771D2C519C2269EA17115B3E600E9CF809.mft (raw, json)
Hash identifier: IMpLug5xuFKx2/kpMOuiucP0QN8Yti8TnuE014gs9Eo=
Subject key identifier: EC:F9:B6:CF:E5:89:18:47:5F:07:20:F6:FF:C6:E1:9A:E5:6B:97:57
Authority key identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09
Certificate issuer: /CN=C69451771D2C519C2269EA17115B3E600E9CF809
Certificate serial: 32949DAB49E19408C9DA319DFD7A7E3C0692499D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
Manifest number: 0103
Signing time: Tue 21 Apr 2026 14:22:36 +0000
Manifest this update: Tue 21 Apr 2026 14:17:36 +0000
Manifest next update: Fri 24 Apr 2026 17:39:36 +0000
Files and hashes: 1: 3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (hash: 3Bd79FcZzbMku5kiCcswF+pzWGDe5uW4Tc9yOqMC/ZA=)
2: C69451771D2C519C2269EA17115B3E600E9CF809.crl (hash: Zuzs8JUmqpnSJ/BKCVPaIJ9xqQBI6cHmXBz6liUnOUk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl
rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 13:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:94:9d:ab:49:e1:94:08:c9:da:31:9d:fd:7a:7e:3c:06:92:49:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C69451771D2C519C2269EA17115B3E600E9CF809
Validity
Not Before: Apr 21 14:17:36 2026 GMT
Not After : Apr 24 17:39:36 2026 GMT
Subject: CN=ECF9B6CFE58918475F0720F6FFC6E19AE56B9757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:c4:48:4e:48:f1:d2:92:2a:a0:6f:a5:8a:
e0:6c:7a:b1:32:48:a7:b4:d7:7b:ba:b3:b4:c2:9d:
ae:35:83:5c:00:03:cf:2e:29:f9:56:37:f5:4f:78:
86:56:27:b5:57:1d:87:21:b5:0f:56:6a:e6:3d:1c:
a2:d0:71:09:44:ea:ad:be:b4:97:e7:9b:0e:9e:a4:
96:cf:bb:d6:9e:fd:55:48:67:ac:8a:87:da:e9:5d:
93:36:e8:58:0f:06:73:04:0d:a3:0b:6f:51:d6:3f:
e0:f5:cb:97:f9:79:16:a8:dd:ab:1e:50:cf:14:35:
a2:8c:c1:a7:61:16:c3:98:e6:fa:f3:85:aa:2b:fb:
44:a6:d8:26:7c:a1:03:a0:81:a2:16:65:58:3f:9d:
ef:81:3c:20:70:9d:3e:ce:48:7b:7c:64:5e:7c:68:
30:5d:37:86:0d:cf:f5:70:8f:33:30:fb:fb:e5:3e:
e8:e8:12:80:bb:c3:8e:3e:0b:8c:9b:e3:d1:8f:6a:
09:c8:83:d4:66:d1:fa:82:55:2d:f7:db:a6:cc:44:
13:0c:47:e1:3f:70:cf:f2:c2:1b:82:fa:c3:f8:4b:
21:d6:41:96:e2:25:92:3b:a9:9e:3a:19:de:42:ad:
ca:82:27:34:2d:a1:e0:3e:94:87:b1:1c:9e:d5:78:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F9:B6:CF:E5:89:18:47:5F:07:20:F6:FF:C6:E1:9A:E5:6B:97:57
X509v3 Authority Key Identifier:
keyid:C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7e:c4:6f:41:43:92:f9:40:43:87:98:e2:d0:d0:6c:14:0e:
ca:72:75:28:fa:f3:a0:b8:47:29:87:7b:68:d2:ce:ec:35:cd:
9b:db:2a:fb:3b:03:44:a2:61:a2:08:72:d3:81:ba:0f:e2:ae:
f9:d4:12:cb:dc:55:dc:ba:d9:ce:c9:22:6e:ab:ac:6b:f1:8b:
87:8b:49:42:6d:c6:6a:b9:25:27:3f:cd:dd:51:3a:d0:fc:f6:
26:68:41:f5:59:c7:60:fc:38:7d:52:d9:bf:68:2c:0b:a5:00:
e1:79:04:bb:09:d1:59:4a:78:c1:1e:01:90:ce:b6:a3:00:e5:
74:b1:45:62:a3:9b:51:4a:27:76:52:81:e9:fd:fe:65:bc:6e:
dc:33:cd:cb:74:93:6b:26:4b:59:34:0e:9b:62:06:46:ee:a5:
70:c2:4b:cb:9a:79:f9:45:9e:86:d8:2a:78:d3:d8:a8:d8:b8:
41:e7:5d:a3:50:45:59:d6:a3:54:78:3f:24:cb:7d:33:84:4e:
3f:4a:f7:27:3f:6d:6d:d9:4e:06:17:da:33:50:58:9b:53:62:
e7:b7:2a:41:f4:ad:18:b0:9d:ec:2f:81:da:6a:73:ad:9c:99:
a3:a3:3e:6b:7a:49:b7:3b:b7:9d:be:80:35:5b:15:11:63:5b:
19:cb:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:53:54 2026 by rpki-client