
$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json)
Hash identifier: ukgML4t2QR5/+MFEUYurN+S2Pfz0QGRj0CZw6gGNMVQ=
Subject key identifier: 71:58:E3:F0:65:42:7A:C7:83:DA:EA:16:4A:40:97:87:99:91:AA:47
Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
Certificate serial: 0FAE322108F7BDDADFCC2282ABCD88F939A2ABAA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
Manifest number: 0272
Signing time: Thu 16 Apr 2026 05:41:30 +0000
Manifest this update: Thu 16 Apr 2026 05:36:30 +0000
Manifest next update: Sun 19 Apr 2026 13:04:30 +0000
Files and hashes: 1: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: /OiaatiAFJjYmCuKDfs8T2psl4m0IWHb+mxkKWe3Vd0=)
2: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: +lLWVkW77msDkt22BmOKE6zoe3F7Rva3RzwGn4oP4Gw=)
3: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: qY2q9xivq0KIfn4wtZjsLyUvMsCLDcghGqiwGKmaqJ8=)
4: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: BBSfs0YHYFY6aNip4ye3zUlYvhp6JHeTdQdI/P3ewAo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl
rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 13:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ae:32:21:08:f7:bd:da:df:cc:22:82:ab:cd:88:f9:39:a2:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429
Validity
Not Before: Apr 16 05:36:30 2026 GMT
Not After : Apr 19 13:04:30 2026 GMT
Subject: CN=7158E3F065427AC783DAEA164A4097879991AA47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:82:20:28:b3:5e:d1:13:9e:c9:d4:22:98:f8:
67:4a:5e:4d:22:6d:83:34:56:62:be:aa:e8:3d:c1:
2a:d4:e8:be:d0:05:47:4c:ee:a5:78:5b:48:b8:1c:
fd:cb:e1:8c:04:c8:0f:27:59:01:c9:88:8d:8b:14:
cc:b1:3e:0f:73:bb:73:e4:8d:ef:0b:76:7c:54:21:
37:2e:2f:ea:7e:9c:6f:cc:2e:34:1d:da:a4:56:1c:
49:83:82:bf:79:18:ba:cb:c9:10:cf:9f:40:b3:d4:
b4:a5:80:fc:d5:4b:b0:7b:3c:31:cf:cd:48:19:31:
99:49:12:10:a4:fa:05:4d:09:d4:cc:39:2f:4a:81:
7c:7e:b0:ac:93:65:0d:c7:77:1f:db:e9:d1:03:5a:
38:5e:24:c0:6e:68:39:bf:44:18:56:4b:11:98:9a:
a5:06:ec:26:39:72:49:5f:7c:88:98:56:ed:da:d9:
4a:43:b2:2f:c0:6d:2b:83:bc:62:ca:78:8d:75:f1:
da:e3:c6:df:8c:64:68:24:77:6f:d7:b5:e6:8f:e6:
62:b0:e7:82:00:8b:52:07:87:3d:49:73:8b:61:ca:
78:2f:36:52:18:5c:d0:b6:6a:2c:9c:6d:40:2d:1f:
b4:92:f4:ff:72:4e:6c:24:ae:b9:73:ad:c8:1f:bc:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:58:E3:F0:65:42:7A:C7:83:DA:EA:16:4A:40:97:87:99:91:AA:47
X509v3 Authority Key Identifier:
keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bb:4a:1e:e9:b4:90:a0:bc:84:06:73:ac:7c:b6:45:e3:05:
7f:96:e3:c4:b1:26:08:4a:ae:5e:75:f7:e0:b6:2f:e7:c4:f7:
ec:a0:86:6c:da:a6:3d:83:65:48:35:70:27:cc:22:fd:52:5b:
0d:0d:a3:e6:ec:44:66:96:d9:59:14:11:c5:58:a3:19:1b:9c:
00:cf:ce:d8:45:4e:b0:4a:79:c2:99:82:d4:ea:e4:bf:d7:b6:
5c:c3:20:95:24:41:d3:fe:72:e9:ca:aa:65:fe:30:22:13:e5:
27:11:d3:ba:68:59:9e:9f:40:9e:ab:00:7c:4f:c1:da:0e:c1:
f3:1d:c0:0c:ee:92:1d:f7:21:ae:91:e4:c6:8e:f3:ad:79:9d:
95:b8:8c:b4:7a:ec:ff:f7:fa:d5:7e:cc:d7:91:03:92:dd:71:
fd:58:a8:3f:ed:a8:77:f1:8c:ec:7a:dd:83:6c:41:aa:2e:fe:
ff:10:af:c3:2b:c3:d7:d6:18:04:e1:5c:22:e2:fe:3f:94:ec:
9c:5a:5f:71:cb:ce:53:17:1e:33:61:b9:c5:d6:1b:cc:9e:cb:
27:18:86:78:78:a5:e3:28:0a:29:93:77:c8:52:e2:93:45:71:
e4:71:ee:8f:cd:f4:97:e4:7d:d4:82:9a:03:ec:cd:4b:2f:09:
34:ef:d4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:25 2026 by rpki-client