
$ rpki-client -vvf repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft
File: 69CE57F4984A7B332974000C0033734628A36A46.mft (raw, json)
Hash identifier: ml08Q62fx7TggamgPTZd7OYokrsV3skOihnO/cqxMbM=
Subject key identifier: 8E:91:54:32:D9:C9:A5:07:52:80:15:28:88:41:FD:08:65:86:B4:6F
Authority key identifier: 69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46
Certificate issuer: /CN=69CE57F4984A7B332974000C0033734628A36A46
Certificate serial: 7A63A0C45A19C12F5000D9FA3D24386B04F06F19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft
Manifest number: 0238
Signing time: Sun 01 Mar 2026 21:02:28 +0000
Manifest this update: Sun 01 Mar 2026 20:57:28 +0000
Manifest next update: Thu 05 Mar 2026 08:25:28 +0000
Files and hashes: 1: 3130332e3231312e32362e302f32342d3234203d3e20313530313933.roa (hash: p7oly61u2I9DIyxWJNTp5Y4E72pJPA3rw/vCpcCqXJg=)
2: 69CE57F4984A7B332974000C0033734628A36A46.crl (hash: ePUQmxOCBHWJ0vXw68O3mkTu+ypsklyzUJYwnegYpjk=)
3: 3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa (hash: tDhS3e/QLZsQ3vBs7q3ofq7yiXbldQoFkAzqM7dBRFo=)
4: 3130332e3231312e32362e302f32332d3233203d3e20313530313933.roa (hash: I5tBiXW53g+o5711q+c6sqmDZ0V8yGZ1wPd6GIxulEc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl
rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:63:a0:c4:5a:19:c1:2f:50:00:d9:fa:3d:24:38:6b:04:f0:6f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69CE57F4984A7B332974000C0033734628A36A46
Validity
Not Before: Mar 1 20:57:28 2026 GMT
Not After : Mar 5 08:25:28 2026 GMT
Subject: CN=8E915432D9C9A507528015288841FD086586B46F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:c5:a0:db:7d:9d:e3:ef:b6:1a:85:ae:9c:
02:c0:23:b6:95:9f:a4:2b:04:9b:f8:07:43:ce:f8:
ca:0c:32:07:90:b8:0d:87:48:19:be:d9:fe:0c:92:
38:a2:97:86:ef:53:c9:5a:33:0b:bc:8c:13:76:b9:
ef:61:35:14:62:ed:37:91:a5:ac:0a:ac:10:0c:aa:
47:21:c5:b1:ef:e7:7c:c0:dc:26:db:6f:96:6e:75:
e2:b8:d2:ba:4f:8e:26:10:b5:9f:c8:38:39:c3:ac:
da:1c:4a:c3:83:ab:84:1b:5e:e6:34:10:80:c3:19:
f4:40:ee:30:dd:d2:19:a2:03:f4:fc:0c:e0:13:a2:
f4:25:e3:e0:47:ef:35:7f:92:50:54:68:0f:8a:e0:
e6:40:ce:13:f7:e0:83:c4:e8:d9:f1:14:6b:a1:6a:
1a:1f:0c:a6:39:d6:fb:e9:c8:19:e3:28:b7:c0:fa:
8e:42:90:1f:2f:4e:c1:01:94:5e:8b:2a:ea:d9:64:
8c:d5:df:a4:54:56:2f:04:66:e5:7c:ee:a3:f5:22:
d5:55:82:34:f7:fd:11:6d:39:4e:2a:2c:ef:d0:31:
b0:19:ee:e1:8f:3c:ab:5b:2b:2e:b2:3d:6e:f3:f4:
b7:12:bc:35:14:6f:53:87:65:70:43:22:c9:d5:f9:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:91:54:32:D9:C9:A5:07:52:80:15:28:88:41:FD:08:65:86:B4:6F
X509v3 Authority Key Identifier:
keyid:69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:50:04:3b:ca:2a:4d:22:6a:5b:4a:b9:9d:5c:29:64:c6:c6:
39:d8:4d:e1:9f:da:9d:63:10:55:e8:77:e2:da:ca:0e:35:ef:
6c:34:e1:3f:e0:fb:00:15:89:ae:38:35:a4:d9:73:0c:1c:a0:
24:52:d2:ab:8e:86:a1:cb:f1:58:7b:35:99:46:25:6d:43:1e:
3a:de:85:7a:92:07:af:42:40:fd:23:6c:20:87:89:a7:0e:f4:
b8:be:0c:7c:0e:e3:3b:b8:be:48:d6:b4:f2:72:cb:91:39:23:
10:5f:8b:e9:ae:22:30:75:31:dd:a8:e8:e7:be:9d:9e:37:45:
e8:90:d4:18:d0:85:02:bc:24:3b:e3:05:aa:35:e3:df:a2:d1:
c4:6e:d3:a6:33:d1:af:c4:4d:e3:99:a0:03:a8:e8:cf:b3:11:
bc:dd:22:02:45:6a:8f:61:78:42:95:93:06:38:e3:89:68:af:
8e:13:6c:91:6f:47:21:20:1b:b5:2d:7c:e5:56:fb:d2:19:d4:
4b:1f:10:a0:d4:9c:df:70:62:96:cd:1f:d1:25:f8:f8:ac:b3:
9c:d0:77:d3:13:65:7b:92:fc:ac:ba:7c:03:f5:69:4d:cc:fe:
6a:82:ff:73:c5:0e:ae:44:82:d3:11:4f:6c:c1:4f:e6:47:46:
e5:6d:77:6e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUemOgxFoZwS9QANn6PSQ4awTwbxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYy
OEEzNkE0NjAeFw0yNjAzMDEyMDU3MjhaFw0yNjAzMDUwODI1MjhaMDMxMTAvBgNV
BAMTKDhFOTE1NDMyRDlDOUE1MDc1MjgwMTUyODg4NDFGRDA4NjU4NkI0NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgRcWg232d4++2GoWunALAI7aV
n6QrBJv4B0PO+MoMMgeQuA2HSBm+2f4Mkjiil4bvU8laMwu8jBN2ue9hNRRi7TeR
pawKrBAMqkchxbHv53zA3Cbbb5ZudeK40rpPjiYQtZ/IODnDrNocSsODq4QbXuY0
EIDDGfRA7jDd0hmiA/T8DOATovQl4+BH7zV/klBUaA+K4OZAzhP34IPE6NnxFGuh
ahofDKY51vvpyBnjKLfA+o5CkB8vTsEBlF6LKurZZIzV36RUVi8EZuV87qP1ItVV
gjT3/RFtOU4qLO/QMbAZ7uGPPKtbKy6yPW7z9LcSvDUUb1OHZXBDIsnV+eYhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjpFUMtnJpQdSgBUoiEH9CGWGtG8wHwYDVR0j
BBgwFoAUac5X9JhKezMpdAAMADNzRiijakYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MGQ2NmI2OS03MDdhLTQ4MzAtYTJkMy1hZjZjYTBkMTViY2UvMC82OUNFNTdGNDk4
NEE3QjMzMjk3NDAwMEMwMDMzNzM0NjI4QTM2QTQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzczNDYyOEEz
NkE0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkNjZiNjktNzA3YS00ODMwLWEy
ZDMtYWY2Y2EwZDE1YmNlLzAvNjlDRTU3RjQ5ODRBN0IzMzI5NzQwMDBDMDAzMzcz
NDYyOEEzNkE0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAA5QBDvKKk0ialtKuZ1cKWTGxjnYTeGf2p1j
EFXod+Layg4172w04T/g+wAVia44NaTZcwwcoCRS0quOhqHL8Vh7NZlGJW1DHjre
hXqSB69CQP0jbCCHiacO9Li+DHwO4zu4vkjWtPJyy5E5IxBfi+muIjB1Md2o6Oe+
nZ43ReiQ1BjQhQK8JDvjBao149+i0cRu06Yz0a/ETeOZoAOo6M+zEbzdIgJFao9h
eEKVkwY444lor44TbJFvRyEgG7UtfOVW+9IZ1EsfEKDUnN9wYpbNH9El+Piss5zQ
d9MTZXuS/Ky6fAP1aU3M/mqC/3PFDq5EgtMRT2zBT+ZHRuVtd24=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:31 2026 by rpki-client