
$ rpki-client -vvf repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
File: 69BB542D91A8CC754EA322384139641D17704D60.mft (raw, json)
Hash identifier: Nf4TC/JhOVkADKfqp2EoPi1E1x50ODnO5OcY07kC+9s=
Subject key identifier: 8E:57:7F:FD:D1:30:D6:55:3B:36:1F:BC:98:EB:5D:95:42:94:97:A0
Authority key identifier: 69:BB:54:2D:91:A8:CC:75:4E:A3:22:38:41:39:64:1D:17:70:4D:60
Certificate issuer: /CN=69BB542D91A8CC754EA322384139641D17704D60
Certificate serial: 720E059A78EC63963BD85F45AC5891F14FD3DBF9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
Manifest number: 021F
Signing time: Thu 16 Apr 2026 06:30:50 +0000
Manifest this update: Thu 16 Apr 2026 06:25:50 +0000
Manifest next update: Sun 19 Apr 2026 16:03:50 +0000
Files and hashes: 1: 69BB542D91A8CC754EA322384139641D17704D60.crl (hash: bWpKNyVIfSlFKsBEtbrFmIGweD8lh8iE32WaIUkYJyQ=)
2: 3130332e37382e3135382e302f32342d3234203d3e20313530323438.roa (hash: /cB/UKxImbPCeH1Tv0z/T2nqJMV32d3EX5C9M3ekCEM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.crl
rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 16:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:0e:05:9a:78:ec:63:96:3b:d8:5f:45:ac:58:91:f1:4f:d3:db:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69BB542D91A8CC754EA322384139641D17704D60
Validity
Not Before: Apr 16 06:25:50 2026 GMT
Not After : Apr 19 16:03:50 2026 GMT
Subject: CN=8E577FFDD130D6553B361FBC98EB5D95429497A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:27:db:1f:cc:07:e2:46:f8:b2:d6:8b:6a:
56:ed:32:89:90:8d:13:b0:53:16:e7:7c:cd:d8:39:
90:72:15:83:88:e6:69:63:d8:b9:e9:39:a3:df:da:
34:55:34:9a:f7:33:e5:d5:12:05:44:65:67:01:8c:
bb:a0:d2:5c:74:1a:18:70:3c:bf:56:23:8b:18:8a:
a7:25:4a:a2:41:1d:51:96:b9:ef:8f:1a:d0:81:6c:
fb:54:24:ad:61:f4:a0:9c:2b:77:e9:da:e8:6e:1d:
68:9f:fd:38:34:d8:21:99:3f:44:90:cb:f7:ea:29:
82:4b:f1:92:b9:78:d1:ba:72:14:01:54:e4:33:78:
8c:8d:15:9f:16:31:5b:6a:8c:6e:3b:f4:02:07:37:
fd:3c:f2:6a:10:c9:a1:c8:6c:f6:be:77:6a:82:1a:
c3:43:2e:79:4d:e5:56:60:2d:6a:0c:5b:20:25:40:
fb:78:90:38:6b:95:f5:95:d7:27:f8:07:be:64:72:
71:76:b1:ed:0d:d0:be:43:f5:4a:e2:d6:6e:51:ff:
7e:e3:8e:a9:30:23:e2:9f:c0:df:bf:77:ec:06:6e:
da:7a:0b:27:c0:61:4e:6c:97:61:0c:21:2c:64:d8:
07:8b:39:0f:79:01:51:c4:32:6c:9e:8b:23:19:76:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:57:7F:FD:D1:30:D6:55:3B:36:1F:BC:98:EB:5D:95:42:94:97:A0
X509v3 Authority Key Identifier:
keyid:69:BB:54:2D:91:A8:CC:75:4E:A3:22:38:41:39:64:1D:17:70:4D:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69BB542D91A8CC754EA322384139641D17704D60.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26c060fb-e936-4a23-bbe2-94457bf709bf/0/69BB542D91A8CC754EA322384139641D17704D60.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:47:8e:3a:62:fb:dc:fa:9f:f3:54:d0:70:20:5d:13:7c:6e:
5b:c5:a0:17:1c:58:97:e9:47:68:31:c2:eb:0e:f4:60:5f:d9:
61:dc:27:cf:8e:4f:6c:11:d1:a6:d1:b8:65:23:4c:b0:06:1a:
4c:d4:15:e6:26:3c:e2:56:94:e7:24:32:f6:8c:66:27:9c:62:
18:c5:df:8a:5d:a0:19:9f:e0:87:4c:13:87:3c:b5:ac:db:9b:
54:1d:c5:47:8d:7b:09:ac:ba:56:5d:a3:19:05:73:63:15:ae:
73:6d:05:f2:79:0e:4f:d0:09:2b:9b:53:19:a5:37:1e:f3:9e:
be:2c:86:6d:90:bc:72:25:de:4a:09:db:bd:5f:ae:bd:9c:12:
0d:ed:db:4e:30:70:1a:08:d8:db:f2:06:8d:7c:07:98:1a:83:
e9:96:0d:1a:f6:11:e0:83:fa:e2:1f:f0:b2:7f:98:98:19:7f:
91:43:f0:f6:fe:4b:64:16:f0:5c:31:58:b4:ac:cd:f1:2d:27:
7b:78:d1:39:73:88:c3:5e:33:a6:4f:be:65:0b:13:44:7a:7f:
6e:01:8d:f5:87:b5:cd:9e:88:be:85:2d:de:0f:0c:bc:8c:ee:
01:7f:c5:e6:25:8c:cd:93:3c:ef:72:a7:4e:f2:25:f3:66:57:
d2:b8:36:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:55:40 2026 by rpki-client