
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
File: F69535097C181B143312D8EA1A6A52D500443902.mft (raw, json)
Hash identifier: AEuIx5KjdjlxbrRkB5SrjE3iZA+jmTS5Rck3XFRT8ik=
Subject key identifier: 42:28:3E:C2:F6:CD:2E:81:C8:63:8B:E7:46:EB:13:7F:AE:DE:0C:E4
Authority key identifier: F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02
Certificate issuer: /CN=F69535097C181B143312D8EA1A6A52D500443902
Certificate serial: 393AD18D768023B5964A1B8BB83A2CB7724DE26E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
Manifest number: C9
Signing time: Tue 04 Nov 2025 19:21:16 +0000
Manifest this update: Tue 04 Nov 2025 19:16:16 +0000
Manifest next update: Sat 08 Nov 2025 02:37:16 +0000
Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: gKD6cMrbmMD3BQHPO//21JJbyMzelItTAF6aFVjLccI=)
2: F69535097C181B143312D8EA1A6A52D500443902.crl (hash: Ckw4ap+PHA4aWJmhOljqrZFubz6Th3ZeAxA38Z/HmHc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl
rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 10:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3a:d1:8d:76:80:23:b5:96:4a:1b:8b:b8:3a:2c:b7:72:4d:e2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69535097C181B143312D8EA1A6A52D500443902
Validity
Not Before: Nov 4 19:16:16 2025 GMT
Not After : Nov 8 02:37:16 2025 GMT
Subject: CN=42283EC2F6CD2E81C8638BE746EB137FAEDE0CE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:65:34:33:73:97:76:dc:10:df:0a:fc:22:
f0:95:d1:3d:b5:00:e7:07:2a:38:9d:61:d5:b3:4e:
cb:91:2f:77:49:0e:af:40:95:58:92:db:bb:53:fe:
41:3d:0d:0a:31:67:d9:5c:bd:10:15:67:f6:0b:86:
c4:3c:5d:16:2c:70:23:d6:8f:1d:b4:5d:11:73:23:
64:fb:ae:b0:79:78:e8:8d:91:ea:c7:f3:eb:75:ce:
70:5c:61:89:3f:ed:79:32:d2:da:c4:c7:97:4c:6d:
73:85:34:7a:ac:13:ec:8d:f3:a6:57:2b:9a:df:0d:
7d:d6:cf:d3:07:7c:84:ff:1c:da:3b:c8:f0:85:65:
bc:28:cd:24:ca:b2:d4:ed:6c:c5:cc:87:52:f1:b4:
52:03:9d:d1:17:af:d0:77:28:57:74:32:8f:09:47:
1c:34:af:a2:66:05:81:28:06:53:30:77:4b:a6:36:
98:81:6b:d9:0d:c3:1b:6f:c7:79:9e:00:b1:68:54:
9e:f3:c6:95:76:c1:e9:86:6d:0a:5c:81:13:11:12:
1a:5b:65:79:57:9e:f2:2f:f1:94:4c:64:95:b6:94:
80:31:ac:33:4c:bf:fc:0b:e3:4e:2d:90:aa:d0:1d:
7f:72:d1:c2:33:4e:f3:a9:d1:a7:f5:00:34:e9:c7:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:28:3E:C2:F6:CD:2E:81:C8:63:8B:E7:46:EB:13:7F:AE:DE:0C:E4
X509v3 Authority Key Identifier:
keyid:F6:95:35:09:7C:18:1B:14:33:12:D8:EA:1A:6A:52:D5:00:44:39:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F69535097C181B143312D8EA1A6A52D500443902.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/F69535097C181B143312D8EA1A6A52D500443902.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:58:25:16:72:73:ff:47:0f:89:b8:f1:27:b2:59:dd:1c:d0:
76:8f:50:84:32:10:fb:62:86:90:5d:90:44:e2:1b:af:56:02:
94:f4:24:80:48:ac:02:1f:2a:48:74:07:d0:57:ff:00:fa:14:
48:1d:b7:b2:ac:68:c6:a5:07:2e:f2:eb:a9:f4:b3:6e:c6:75:
da:de:1c:57:cd:3b:ca:43:a0:b6:34:be:42:99:2a:14:a3:fe:
ff:2f:2d:90:25:22:95:0a:a5:74:12:40:f9:0e:52:bb:c3:54:
9a:56:16:14:95:e8:a8:15:bc:27:2a:cb:0b:9d:a8:12:dc:1c:
75:3e:08:b7:8b:98:ea:9f:be:74:a7:1b:96:83:b8:45:ce:31:
d9:55:9d:04:c9:72:91:b3:7c:14:49:44:1e:68:d6:39:f8:cf:
c8:e1:47:1a:d1:9c:b6:13:f6:fe:57:93:29:9e:a0:17:c6:cb:
f3:bc:87:63:2b:d7:9a:1c:b2:98:84:43:b9:fd:e1:1b:f5:81:
28:ef:c3:44:1c:e3:d6:5b:f8:ea:4b:a2:8d:5b:e8:fc:d2:0d:
75:03:99:9d:f6:aa:3f:54:da:b5:1a:10:d9:bd:ec:a1:8c:1d:
4b:53:54:c4:cc:49:9c:00:05:f7:7d:1a:99:3f:e8:b6:50:81:
e7:53:1c:bb
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOTrRjXaAI7WWShuLuDost3JN4m4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUw
MDQ0MzkwMjAeFw0yNTExMDQxOTE2MTZaFw0yNTExMDgwMjM3MTZaMDMxMTAvBgNV
BAMTKDQyMjgzRUMyRjZDRDJFODFDODYzOEJFNzQ2RUIxMzdGQUVERTBDRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgLGU0M3OXdtwQ3wr8IvCV0T21
AOcHKjidYdWzTsuRL3dJDq9AlViS27tT/kE9DQoxZ9lcvRAVZ/YLhsQ8XRYscCPW
jx20XRFzI2T7rrB5eOiNkerH8+t1znBcYYk/7Xky0trEx5dMbXOFNHqsE+yN86ZX
K5rfDX3Wz9MHfIT/HNo7yPCFZbwozSTKstTtbMXMh1LxtFIDndEXr9B3KFd0Mo8J
Rxw0r6JmBYEoBlMwd0umNpiBa9kNwxtvx3meALFoVJ7zxpV2wemGbQpcgRMREhpb
ZXlXnvIv8ZRMZJW2lIAxrDNMv/wL404tkKrQHX9y0cIzTvOp0af1ADTpx097AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQig+wvbNLoHIY4vnRusTf67eDOQwHwYDVR0j
BBgwFoAU9pU1CXwYGxQzEtjqGmpS1QBEOQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZTRjNTcwYS00NDc0LTRjYmYtYjhmOS1mZjk3OTE3ODE1NDkvMC9GNjk1MzUwOTdD
MTgxQjE0MzMxMkQ4RUExQTZBNTJENTAwNDQzOTAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUyRDUwMDQ0
MzkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4
ZjktZmY5NzkxNzgxNTQ5LzAvRjY5NTM1MDk3QzE4MUIxNDMzMTJEOEVBMUE2QTUy
RDUwMDQ0MzkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGBYJRZyc/9HD4m48SeyWd0c0HaPUIQyEPti
hpBdkETiG69WApT0JIBIrAIfKkh0B9BX/wD6FEgdt7KsaMalBy7y66n0s27Gddre
HFfNO8pDoLY0vkKZKhSj/v8vLZAlIpUKpXQSQPkOUrvDVJpWFhSV6KgVvCcqywud
qBLcHHU+CLeLmOqfvnSnG5aDuEXOMdlVnQTJcpGzfBRJRB5o1jn4z8jhRxrRnLYT
9v5XkymeoBfGy/O8h2Mr15ocspiEQ7n94Rv1gSjvw0Qc49Zb+OpLoo1b6PzSDXUD
mZ32qj9U2rUaENm97KGMHUtTVMTMSZwABfd9Gpk/6LZQgedTHLs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:54 2025 by rpki-client