
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
File: 69FEA3D523BC4635AE385A6D91412834159FF34B.mft (raw, json)
Hash identifier: xX+xaJWbOsRc1n4ulBuCmIKyuw8PfcozKQMrGvf4ecY=
Subject key identifier: D7:A1:18:C3:67:A7:6C:A3:37:F0:D5:65:62:47:70:5D:74:49:6F:C8
Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B
Certificate issuer: /CN=69FEA3D523BC4635AE385A6D91412834159FF34B
Certificate serial: 7F804D68D3D1531FED4940D397BE26AFDB8294D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
Manifest number: 0104
Signing time: Sun 01 Mar 2026 19:12:17 +0000
Manifest this update: Sun 01 Mar 2026 19:07:17 +0000
Manifest next update: Thu 05 Mar 2026 02:53:17 +0000
Files and hashes: 1: 69FEA3D523BC4635AE385A6D91412834159FF34B.crl (hash: jyyyHSYrD9CIUN7opDWbKnWGODcvfRwbs9RqWk+SkKw=)
2: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (hash: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl
rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:80:4d:68:d3:d1:53:1f:ed:49:40:d3:97:be:26:af:db:82:94:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B
Validity
Not Before: Mar 1 19:07:17 2026 GMT
Not After : Mar 5 02:53:17 2026 GMT
Subject: CN=D7A118C367A76CA337F0D5656247705D74496FC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:2d:32:2d:db:52:d3:9f:35:f6:bb:67:1a:
dd:ee:9d:b3:a3:39:30:bc:9c:cc:e1:50:cf:d5:c5:
21:8d:ac:f5:62:3b:75:4d:95:ea:63:4b:e2:75:87:
16:88:11:2d:f2:c6:6e:83:52:b0:48:b6:b8:14:7f:
77:79:ac:42:1a:52:7a:1a:5a:32:f4:d0:aa:91:e5:
fa:66:0f:bf:36:41:2a:30:6c:36:21:cf:79:f3:51:
4c:d7:7a:ab:92:54:8a:8d:28:fe:e4:1d:4f:9a:e7:
68:1b:fa:f1:cf:0e:33:06:d0:ed:cf:bf:2d:53:6c:
c0:78:88:94:5a:70:dc:3d:6a:be:9e:ea:ca:f4:5d:
dd:19:1a:51:83:36:70:40:99:96:b0:10:f4:b2:0c:
69:9f:8c:92:6f:27:31:b0:a8:5c:4e:0d:e8:d1:f0:
a7:b5:bb:a0:e1:b9:16:4c:9b:44:9c:40:dd:77:dd:
1c:c5:de:ae:27:0a:ee:e8:93:f0:14:3b:93:17:81:
cd:f7:ea:a5:12:36:f2:3a:6f:5e:ea:a7:7f:b6:94:
4b:7e:23:28:95:0f:0e:ab:9a:2c:5c:63:10:c9:95:
e1:6d:de:81:43:51:67:00:c9:60:52:55:82:4b:db:
d2:ad:59:91:e3:4d:57:0c:76:6d:42:70:89:a4:51:
8b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A1:18:C3:67:A7:6C:A3:37:F0:D5:65:62:47:70:5D:74:49:6F:C8
X509v3 Authority Key Identifier:
keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:df:8d:75:b7:4f:f0:a4:c5:fc:b8:6c:4a:89:1a:22:48:71:
6f:be:a9:ee:3f:3b:90:54:3c:71:e6:e0:4b:bb:c9:b5:b9:db:
42:27:b4:1e:f1:2f:a2:10:6d:86:6a:ba:ec:62:5e:c1:91:1f:
1c:97:3c:29:ae:b8:47:8c:9a:a2:85:1c:b1:b9:25:4d:31:f7:
b9:10:3d:ed:a2:4f:fa:bb:fa:59:20:31:96:8e:b5:00:90:5b:
08:0c:e4:e0:b9:51:7c:f4:b5:40:a9:63:84:4a:98:3e:c9:ff:
75:46:9e:2d:e0:d8:fa:71:4b:05:39:70:e2:74:40:e1:1f:ce:
2a:0c:f4:b1:fa:4e:63:27:b6:50:b5:e0:ce:f7:ef:b7:dd:52:
50:c6:95:b6:d6:5f:a6:96:c8:85:18:9c:e5:2a:be:35:4c:97:
fe:a9:71:f8:97:94:36:3e:e5:a5:34:ef:f9:ca:71:80:02:c1:
1b:30:bc:65:39:27:f1:b1:93:cb:a5:78:74:b8:0d:52:db:91:
9c:71:52:0e:3c:fc:b8:b2:83:da:41:7b:b3:f9:b4:a7:8f:cc:
55:02:17:1c:c2:05:54:4b:a2:d6:f5:bd:de:61:20:17:7e:a3:
9d:af:c7:b7:6d:87:de:b2:4e:fa:c6:9c:ab:17:d6:86:ba:a3:
8c:35:a0:dd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUf4BNaNPRUx/tSUDTl74mr9uClNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx
NTlGRjM0QjAeFw0yNjAzMDExOTA3MTdaFw0yNjAzMDUwMjUzMTdaMDMxMTAvBgNV
BAMTKEQ3QTExOEMzNjdBNzZDQTMzN0YwRDU2NTYyNDc3MDVENzQ0OTZGQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYy0yLdtS05819rtnGt3unbOj
OTC8nMzhUM/VxSGNrPViO3VNlepjS+J1hxaIES3yxm6DUrBItrgUf3d5rEIaUnoa
WjL00KqR5fpmD782QSowbDYhz3nzUUzXequSVIqNKP7kHU+a52gb+vHPDjMG0O3P
vy1TbMB4iJRacNw9ar6e6sr0Xd0ZGlGDNnBAmZawEPSyDGmfjJJvJzGwqFxODejR
8Ke1u6DhuRZMm0ScQN133RzF3q4nCu7ok/AUO5MXgc336qUSNvI6b17qp3+2lEt+
IyiVDw6rmixcYxDJleFt3oFDUWcAyWBSVYJL29KtWZHjTVcMdm1CcImkUYuhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU16EYw2enbKM38NVlYkdwXXRJb8gwHwYDVR0j
BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz
QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG
RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi
MjgtOTE0MmUxYmFhMGJhLzAvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4
MzQxNTlGRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFrfjXW3T/Ckxfy4bEqJGiJIcW++qe4/O5BU
PHHm4Eu7ybW520IntB7xL6IQbYZquuxiXsGRHxyXPCmuuEeMmqKFHLG5JU0x97kQ
Pe2iT/q7+lkgMZaOtQCQWwgM5OC5UXz0tUCpY4RKmD7J/3VGni3g2PpxSwU5cOJ0
QOEfzioM9LH6TmMntlC14M7377fdUlDGlbbWX6aWyIUYnOUqvjVMl/6pcfiXlDY+
5aU07/nKcYACwRswvGU5J/Gxk8uleHS4DVLbkZxxUg48/Liyg9pBe7P5tKePzFUC
FxzCBVRLotb1vd5hIBd+o52vx7dth96yTvrGnKsX1oa6o4w1oN0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:29:51 2026 by rpki-client