
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
File: C69451771D2C519C2269EA17115B3E600E9CF809.mft (raw, json)
Hash identifier: odZnBtI+DFtukmknv1SOCps5Wc1le98p4ajuWaBH4h0=
Subject key identifier: 39:69:FD:D1:C1:4F:9B:D0:2D:42:74:96:30:90:95:1F:B2:0A:D6:04
Authority key identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09
Certificate issuer: /CN=C69451771D2C519C2269EA17115B3E600E9CF809
Certificate serial: 776123623D2B11946EA4033BF45903601DC8DFBE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
Manifest number: B8
Signing time: Sun 02 Nov 2025 23:12:18 +0000
Manifest this update: Sun 02 Nov 2025 23:07:18 +0000
Manifest next update: Thu 06 Nov 2025 04:44:18 +0000
Files and hashes: 1: C69451771D2C519C2269EA17115B3E600E9CF809.crl (hash: BKKjxMPTE1yR5TtUex1o8LRxCOHJ+1B5hPSMCPZoDBA=)
2: 3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (hash: HyQIrSfaVLasp8fH2cuEU5XU64FY/TlMBq7lyZFmW5w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl
rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 04:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:61:23:62:3d:2b:11:94:6e:a4:03:3b:f4:59:03:60:1d:c8:df:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C69451771D2C519C2269EA17115B3E600E9CF809
Validity
Not Before: Nov 2 23:07:18 2025 GMT
Not After : Nov 6 04:44:18 2025 GMT
Subject: CN=3969FDD1C14F9BD02D4274963090951FB20AD604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:10:e7:c3:9d:2c:f8:3c:1f:17:84:58:fa:
03:9a:0e:b3:70:d5:4f:16:ef:60:a7:77:12:04:a9:
d3:95:bf:4f:ed:c3:df:4c:1c:a8:90:50:4c:23:90:
f6:ba:f7:e7:98:27:9e:fc:57:7f:d4:9a:ba:19:02:
b7:00:82:32:9b:15:9c:81:e3:9c:80:b1:46:70:f4:
3a:87:cb:27:20:01:a7:29:22:df:e7:bc:25:3f:41:
d1:e5:0d:a6:20:b4:63:2d:87:ba:04:e8:d8:8e:f7:
3a:80:c8:ca:c6:05:d4:ec:47:99:16:1e:78:d3:97:
59:9d:6e:ea:d3:76:2d:30:77:08:49:f8:0f:a8:03:
c2:ae:c0:0d:9b:fe:50:00:b5:2c:50:f1:a9:4f:89:
e0:70:81:d7:03:a2:fc:be:5b:27:84:24:a1:98:4b:
f1:43:a8:aa:3c:8c:b8:ab:ac:f3:bd:84:e6:40:f1:
ff:fd:37:18:74:58:54:82:b3:28:3e:12:a4:ff:34:
ee:4d:48:39:68:81:dc:3b:30:eb:e8:82:4a:d3:76:
02:17:e2:1d:35:43:ba:44:98:a1:26:b8:b4:e1:7a:
e9:66:e7:6b:32:46:35:e0:23:96:f7:d5:42:05:ee:
59:99:5a:c0:8b:e4:4b:87:cf:bd:6f:ac:25:7f:15:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:69:FD:D1:C1:4F:9B:D0:2D:42:74:96:30:90:95:1F:B2:0A:D6:04
X509v3 Authority Key Identifier:
keyid:C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d9:e8:90:32:27:ee:90:1d:0f:64:d0:82:36:3f:b4:de:f1:
b6:78:2a:de:73:d7:79:b9:b2:2f:9e:b6:ec:f5:a5:18:9f:57:
60:93:2f:23:79:31:e4:e4:d0:94:bb:b6:8d:cb:b5:d5:48:7e:
c0:90:8b:a4:c9:a9:67:95:58:56:75:5f:90:dd:5a:77:c0:f0:
02:c6:df:b2:b9:8c:50:27:67:7f:c0:0b:21:a8:de:5a:a7:51:
a3:86:77:9c:fc:d3:14:d4:62:02:63:94:38:63:4b:ad:ff:03:
c4:2d:39:03:84:30:f7:52:3b:b0:86:f5:17:53:4d:45:3c:aa:
97:14:4b:2d:fe:3f:22:be:a8:5a:76:ab:ec:ab:d9:99:7d:5b:
41:48:e1:91:bb:6d:81:f4:81:1d:02:69:92:d8:a3:dd:0e:80:
78:6a:e7:fa:6d:fb:b4:f6:cd:7e:cb:2e:52:aa:e5:b4:9a:5f:
c0:56:cf:31:02:63:95:97:24:ef:71:66:cb:86:a5:71:24:45:
77:18:d0:eb:51:7e:4d:f6:07:b3:6f:1b:6c:18:5f:8d:68:a2:
bf:65:0e:ad:c3:dd:40:29:7d:bb:1e:b7:86:04:d0:cd:1a:df:
25:fa:b0:4b:e3:1a:7b:2f:1f:ba:63:21:ba:5b:37:50:7d:47:
e7:85:43:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUd2EjYj0rEZRupAM79FkDYB3I374wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNFNjAw
RTlDRjgwOTAeFw0yNTExMDIyMzA3MThaFw0yNTExMDYwNDQ0MThaMDMxMTAvBgNV
BAMTKDM5NjlGREQxQzE0RjlCRDAyRDQyNzQ5NjMwOTA5NTFGQjIwQUQ2MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO3RDnw50s+DwfF4RY+gOaDrNw
1U8W72CndxIEqdOVv0/tw99MHKiQUEwjkPa69+eYJ578V3/UmroZArcAgjKbFZyB
45yAsUZw9DqHyycgAacpIt/nvCU/QdHlDaYgtGMth7oE6NiO9zqAyMrGBdTsR5kW
HnjTl1mdburTdi0wdwhJ+A+oA8KuwA2b/lAAtSxQ8alPieBwgdcDovy+WyeEJKGY
S/FDqKo8jLirrPO9hOZA8f/9Nxh0WFSCsyg+EqT/NO5NSDlogdw7MOvogkrTdgIX
4h01Q7pEmKEmuLTheulm52syRjXgI5b31UIF7lmZWsCL5EuHz71vrCV/FXQ1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOWn90cFPm9AtQnSWMJCVH7IK1gQwHwYDVR0j
BBgwFoAUxpRRdx0sUZwiaeoXEVs+YA6c+AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTE0M2ExOS0yMTdhLTQ5ZWYtOGNiMS01OTMwMTJkMmI3NTkvMC9DNjk0NTE3NzFE
MkM1MTlDMjI2OUVBMTcxMTVCM0U2MDBFOUNGODA5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNFNjAwRTlD
RjgwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExNDNhMTktMjE3YS00OWVmLThj
YjEtNTkzMDEyZDJiNzU5LzAvQzY5NDUxNzcxRDJDNTE5QzIyNjlFQTE3MTE1QjNF
NjAwRTlDRjgwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB3Z6JAyJ+6QHQ9k0II2P7Te8bZ4Kt5z13m5
si+etuz1pRifV2CTLyN5MeTk0JS7to3LtdVIfsCQi6TJqWeVWFZ1X5DdWnfA8ALG
37K5jFAnZ3/ACyGo3lqnUaOGd5z80xTUYgJjlDhjS63/A8QtOQOEMPdSO7CG9RdT
TUU8qpcUSy3+PyK+qFp2q+yr2Zl9W0FI4ZG7bYH0gR0CaZLYo90OgHhq5/pt+7T2
zX7LLlKq5bSaX8BWzzECY5WXJO9xZsuGpXEkRXcY0OtRfk32B7NvG2wYX41oor9l
Dq3D3UApfbset4YE0M0a3yX6sEvjGnsvH7pjIbpbN1B9R+eFQ2g=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:32:47 2025 by rpki-client