
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
File: 69815E9AA14BB02AA62080FF68CEED525920B7CB.mft (raw, json)
Hash identifier: iqCgyuYSc40oYee1KbKEEJA0u+XNYbUPvLQv3Ajwq5k=
Subject key identifier: DD:FD:DF:7A:F5:65:66:DC:43:91:3B:54:6E:33:FD:8B:D6:19:E0:D3
Authority key identifier: 69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
Certificate issuer: /CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Certificate serial: 4F38B3A5CB1FE44EFD5F89269A5DED3F7F5D8B72
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 13:10:37 +0000
Manifest this update: Sat 13 Jun 2026 13:05:37 +0000
Manifest next update: Sun 14 Jun 2026 15:12:37 +0000
Files and hashes: 1: 3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (hash: CJ3C5Ad0lXVGoXoTJJLAUWAzAvNTOgEY9RwmCwNrPhg=)
2: 69815E9AA14BB02AA62080FF68CEED525920B7CB.crl (hash: WL1HLTcA+EcJY0/r+3pCrogODxqHqsNpuZ4JkKIkaKM=)
3: 3130332e3135382e3139342e302f32332d3233203d3e20313331313131.roa (hash: L61Dq+JOgTVZ8Zg4QhtuTyVZiqTe5CzyDJzKqTh0In0=)
4: 3130332e3135382e3139342e302f32342d3234203d3e20313331313131.roa (hash: Lk1tNkM5iXGzAH8YNwcIq2YC8yUeom1TAzpJAMLwNHo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:38:b3:a5:cb:1f:e4:4e:fd:5f:89:26:9a:5d:ed:3f:7f:5d:8b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69815E9AA14BB02AA62080FF68CEED525920B7CB
Validity
Not Before: Jun 13 13:05:37 2026 GMT
Not After : Jun 14 15:12:37 2026 GMT
Subject: CN=DDFDDF7AF56566DC43913B546E33FD8BD619E0D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:c7:de:ce:1b:26:c5:6d:bb:00:10:a0:ff:
65:03:bc:c1:4f:e6:1c:0f:88:69:06:5e:74:5c:93:
f9:d0:a6:7a:c7:05:ac:6a:50:99:5b:8d:7c:bf:d8:
4c:90:d4:34:82:53:30:9b:87:e6:d3:53:10:7c:08:
b9:da:2d:f9:20:9d:db:24:d8:44:82:80:95:d0:14:
40:63:eb:cd:5d:5e:3d:59:f7:fd:1a:71:9f:8a:ce:
13:bd:8f:9e:cf:d6:62:a9:0b:2d:77:96:73:2b:52:
c5:97:24:ab:52:b6:b4:5b:16:e2:a6:0c:1d:04:b5:
6c:9a:91:74:3d:66:52:9e:5c:fd:69:03:b4:c3:b4:
b1:4c:ab:e0:4f:06:66:c5:94:38:d0:03:02:a2:64:
a6:3f:4f:eb:39:67:68:a8:99:a0:ce:c1:8f:8f:4e:
a4:61:87:64:ac:64:6d:4e:8a:85:8f:fc:82:2a:8c:
17:ad:71:d5:b2:50:cc:14:52:0c:72:be:ed:59:97:
fb:b4:1b:fd:c1:9b:fc:ec:37:80:29:18:63:5a:55:
9d:f1:30:78:4f:ee:23:5e:46:3e:55:1b:ab:3b:01:
ad:17:88:7b:d8:49:20:2e:68:7e:48:50:50:8c:1c:
25:63:fa:df:3c:04:7d:00:68:36:2f:16:29:fc:03:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:DF:7A:F5:65:66:DC:43:91:3B:54:6E:33:FD:8B:D6:19:E0:D3
X509v3 Authority Key Identifier:
keyid:69:81:5E:9A:A1:4B:B0:2A:A6:20:80:FF:68:CE:ED:52:59:20:B7:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69815E9AA14BB02AA62080FF68CEED525920B7CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/69815E9AA14BB02AA62080FF68CEED525920B7CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6e:94:0f:49:fa:03:e5:ae:3d:e4:0e:ad:f2:f9:01:33:77:
00:24:2e:ea:9b:72:bb:b2:c5:13:3d:10:e9:3e:43:c1:1b:ac:
d3:da:e8:47:fa:8d:83:96:44:c8:62:92:e3:05:28:0a:ca:58:
ea:4b:5a:8c:f1:b8:2a:25:d9:55:0a:c7:9a:d4:ee:c9:bf:a1:
57:69:c9:92:ca:b1:5a:0e:c7:25:cc:13:b5:14:4f:42:56:3e:
da:70:38:46:89:71:16:36:ad:05:6d:d1:34:bb:e4:d0:8a:a5:
84:49:0e:59:7c:6b:a3:4f:f7:1a:9d:4c:13:5f:a9:05:bd:28:
02:0d:c7:af:f3:65:f6:0c:cc:4d:2d:de:66:21:48:a8:6c:44:
2d:19:ea:0e:d4:e7:34:88:a9:4d:9b:95:95:9f:b9:49:0b:b1:
83:8e:c6:98:e9:f0:1e:af:a9:0a:80:3b:71:4b:82:48:07:93:
70:71:2d:7c:30:3b:5e:96:32:71:56:1f:87:0e:a6:b7:20:c7:
5a:9b:c2:27:94:7b:3a:b6:5b:ec:6d:a0:3e:bc:ce:a0:fe:1e:
38:b6:ff:ff:0a:ec:17:aa:6a:2b:40:e9:33:ea:ba:67:63:36:
16:27:ae:85:6c:8a:4b:16:31:f7:cd:f6:40:d8:34:c8:65:5e:
09:b1:80:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:45:36 2026 by rpki-client