
$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
File: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json)
Hash identifier: BR7udzUHwuHr6qPDX7qIRh1eL78dTWHu9HVHGqR8vfI=
Subject key identifier: 7E:2A:CF:4B:DA:26:2F:53:16:9D:13:EE:4C:66:1A:27:18:5E:8D:74
Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
Certificate issuer: /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Certificate serial: 1A9EECD1A72C3DDB39B9E2A364EA5BBE903000
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
Manifest number: DC
Signing time: Thu 16 Apr 2026 19:12:37 +0000
Manifest this update: Thu 16 Apr 2026 19:07:37 +0000
Manifest next update: Mon 20 Apr 2026 06:58:37 +0000
Files and hashes: 1: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: 2bo14asIeMFuulQFAuyOMWvwruZszgFyWNm1gWivGps=)
2: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: qHrXMqQTucTeofIinh+6AXijbtXSBcDb8eithAS0vbA=)
3: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: GwQfQq4avK12Uj8vXYCcvSoj6e2C/em9Ve2A5zsdaNc=)
4: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: jZM60p+ihsOsnG/o5i9hHgFmzFPD3WS1aTcQqe2yPLg=)
5: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: qZQ4FJYs46n/+hOc10zmPRfwJHK6+NPt/Sqykb6up2s=)
6: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: H33ymI9ju2NfQ2pOTJN+8hPqJ6LyJFP7aCyIqWIccfg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 06:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:9e:ec:d1:a7:2c:3d:db:39:b9:e2:a3:64:ea:5b:be:90:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Validity
Not Before: Apr 16 19:07:37 2026 GMT
Not After : Apr 20 06:58:37 2026 GMT
Subject: CN=7E2ACF4BDA262F53169D13EE4C661A27185E8D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:1a:6c:21:a1:cf:56:bf:11:6d:cf:6e:51:
77:cf:61:e5:32:8c:0e:04:d9:3a:a7:b6:45:ef:8f:
5f:ce:38:5c:be:33:a7:ab:d5:b7:d3:e0:ff:fe:77:
cc:08:be:0b:df:b6:0f:74:07:3e:fc:29:22:58:38:
85:4c:02:b1:e2:1a:66:27:21:d5:22:27:63:d0:e2:
87:38:c3:65:5b:f1:65:fd:64:02:64:28:0d:63:f1:
e8:71:d0:71:6d:0b:3d:96:07:36:a6:ef:99:f8:ef:
0c:99:8b:c6:5e:ac:f6:b1:cb:20:99:39:a4:4b:40:
04:dc:6e:56:60:6a:ef:5c:f8:80:c9:ca:07:77:32:
f0:d1:9e:ce:2e:92:b1:84:d9:0c:a9:7f:0f:39:25:
68:65:b3:78:73:2b:d5:70:06:86:70:7b:89:56:3f:
9e:22:7f:f9:90:d8:56:65:a0:f1:0b:03:73:02:bc:
76:4a:c0:32:bc:5c:3f:de:77:9c:bd:14:d2:62:6a:
83:4b:a7:2d:f7:27:9d:e0:cf:47:1b:ab:fd:43:7a:
de:0e:88:04:95:52:95:ae:da:dd:d4:49:ae:22:b8:
63:5b:f4:ed:cb:62:fe:b1:66:5d:22:a7:fd:be:d7:
2f:89:6d:34:ca:04:d7:47:f1:e1:5e:57:2d:c6:03:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2A:CF:4B:DA:26:2F:53:16:9D:13:EE:4C:66:1A:27:18:5E:8D:74
X509v3 Authority Key Identifier:
keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:26:0f:a8:86:5b:27:56:6f:8c:18:80:5a:dd:5e:f0:c3:c0:
eb:67:8c:07:84:5e:9e:60:ef:3f:63:83:45:ed:aa:86:d1:f0:
d5:b6:e3:71:3e:4f:ef:9c:68:97:0b:13:5e:fc:d3:01:5a:25:
68:34:0a:42:7e:44:35:08:21:eb:13:01:5a:cc:0c:a7:5c:1a:
f0:0f:58:98:d5:e6:96:8e:0e:e0:6d:1d:bc:33:f6:c2:fa:ea:
3b:fd:ab:14:bc:b4:79:47:7f:cb:5d:38:fe:cf:49:8e:23:0e:
c0:30:e8:2f:49:18:b2:fb:cf:a0:8d:0e:c6:d1:22:83:95:95:
cc:ac:e7:2e:64:9e:75:f0:9d:88:37:3a:e4:1f:cf:6a:4e:08:
d2:2d:7b:4e:8c:3d:2a:cc:4c:5a:82:b3:e2:dd:74:58:f9:c6:
70:84:b3:3a:06:e2:4a:e9:d8:2f:60:46:38:67:f3:75:d1:5d:
2e:98:24:12:3f:dc:dd:d3:90:e4:9f:ab:f2:71:56:5c:87:08:
9a:d3:b7:0a:02:7a:ff:3f:e9:b0:bd:85:7b:c2:8d:47:bb:2f:
5e:55:82:1d:0f:33:40:f0:2f:7b:2d:f5:ab:c9:9d:c0:50:7f:
35:bc:c5:81:e3:4f:96:76:30:ec:01:21:5b:ec:e1:46:0e:be:
54:e6:1e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:59 2026 by rpki-client