
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
File: D69DF302479F4777A9A0892154204AF107B510B2.mft (raw, json)
Hash identifier: VtfzpAO6SvvmwFewp2w1Q06tO1q5Pqm6cVxe6idqv0k=
Subject key identifier: 90:F0:CA:AB:68:49:E4:2B:EF:F0:7D:DA:C4:93:46:D2:04:67:81:04
Authority key identifier: D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2
Certificate issuer: /CN=D69DF302479F4777A9A0892154204AF107B510B2
Certificate serial: 64551742586B13904AF4EC9FC99B5B3E367798A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
Manifest number: BA
Signing time: Wed 16 Sep 2026 15:23:10 +0000
Manifest this update: Wed 16 Sep 2026 15:18:10 +0000
Manifest next update: Thu 17 Sep 2026 17:40:10 +0000
Files and hashes: 1: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: q5uFk3VLUA+Zp9Xrj3e+V8aDF57mtzIkLAnY1xqIYg8=)
2: D69DF302479F4777A9A0892154204AF107B510B2.crl (hash: joWQsBm4lcaFkn+PDi/We9rJUAUYV/y3piekMRJEG9E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl
rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:55:17:42:58:6b:13:90:4a:f4:ec:9f:c9:9b:5b:3e:36:77:98:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D69DF302479F4777A9A0892154204AF107B510B2
Validity
Not Before: Sep 16 15:18:10 2026 GMT
Not After : Sep 17 17:40:10 2026 GMT
Subject: CN=90F0CAAB6849E42BEFF07DDAC49346D204678104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5e:0c:1c:e7:b4:5b:98:5f:0f:04:fc:19:bd:
d1:88:7d:1e:c4:8e:81:70:a5:e6:58:d2:ae:36:7f:
54:ea:37:90:c6:04:1e:9b:a2:c8:ce:2d:2e:2b:c0:
94:77:bd:36:c3:61:63:d3:b7:a6:37:94:f9:95:db:
2c:ce:e8:9d:1d:32:b0:3a:aa:27:53:f8:73:cc:f6:
3f:59:e4:1f:6b:e6:c8:d4:5d:ff:f7:58:b0:f5:a5:
5d:52:39:86:e9:f1:60:62:ef:44:19:24:bd:91:45:
61:c4:35:a3:d0:28:07:1d:10:ce:6d:22:39:83:cb:
ea:5b:8f:5f:83:fc:7d:e6:98:5f:1e:fb:10:2f:15:
13:79:0a:a3:5e:69:cd:2a:58:fd:c7:d7:52:20:0a:
ef:22:7c:67:3d:1a:47:0c:78:9a:8d:5b:68:7e:a5:
8c:ba:14:cf:2d:1b:57:03:88:b9:ad:ad:30:7d:ef:
cf:69:c9:ae:f6:77:b7:8e:82:3a:89:93:81:f1:59:
90:a3:94:30:11:f0:54:25:40:8d:9c:2a:9c:e3:b6:
42:e9:e0:36:e2:ac:ee:9c:6d:05:03:1e:79:39:5a:
d1:d2:49:0e:d9:2e:e6:0c:af:61:11:74:b5:ad:0f:
6f:22:07:cc:16:da:3a:dd:35:05:1c:ef:aa:a5:d8:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F0:CA:AB:68:49:E4:2B:EF:F0:7D:DA:C4:93:46:D2:04:67:81:04
X509v3 Authority Key Identifier:
keyid:D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:18:10:07:0e:a4:5b:29:6f:5f:2d:7d:3a:f3:11:9e:1b:77:
d7:cb:ad:e8:ce:10:d8:6e:40:c9:db:a9:59:66:af:2b:c0:7f:
99:6a:00:45:3a:ed:49:27:f6:f4:ba:5d:26:07:6e:cf:01:30:
72:1c:14:e0:6b:5e:fa:a7:5b:28:00:e2:39:70:d6:8c:53:d0:
f9:9c:cc:90:b4:f2:e1:bc:dd:73:9f:70:fb:be:d3:37:aa:a9:
4c:af:fe:67:5a:c2:17:e7:c8:0e:bc:77:c1:e3:23:42:64:c3:
90:24:1e:9d:10:80:c1:ee:6d:e1:f1:1c:60:1c:2b:b4:51:41:
2a:ba:49:fe:6f:d1:92:0b:67:43:6d:66:16:f6:93:a6:84:b7:
23:53:d7:b0:ce:79:5a:0e:11:7d:c9:de:f1:17:b0:86:5a:b9:
2c:58:9d:f4:45:b8:58:fe:ad:2b:33:10:32:a1:20:5d:86:1d:
d6:c8:92:e0:cb:14:4c:88:b8:00:47:f8:6c:2d:12:4a:9b:06:
c3:e5:04:ef:f1:88:94:18:6d:f2:76:2f:5b:28:ef:75:58:8b:
ab:fd:22:cd:bd:91:3e:b5:7d:f9:60:c6:f1:fb:de:14:2a:a3:
b6:d7:a3:db:fc:62:06:7f:41:8f:0c:29:ed:20:d6:f3:6a:cb:
14:33:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:04:20 2026 by rpki-client