
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft
File: B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft (raw, json)
Hash identifier: rSk6CXPhBVafRIbbZsEl9jXnx3F9pR17xYVfaOFwC1g=
Subject key identifier: 9B:88:72:36:D4:A7:4A:1C:E8:13:92:2F:93:77:57:F8:BC:92:16:F4
Authority key identifier: B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00
Certificate issuer: /CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200
Certificate serial: 483DC3A6714BD9A594BECB1DB4655F539128A056
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 00:09:41 +0000
Manifest this update: Sat 13 Jun 2026 00:04:41 +0000
Manifest next update: Sun 14 Jun 2026 03:51:41 +0000
Files and hashes: 1: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: JF3nOM9DvIQfDnFZ8r2bqyy+jLlTi+Z8ENvD6gOvVyQ=)
2: B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl (hash: uEpQUih13B8OyZ+iCTT0rSDC/uozH3kvGp3x1yD2k8c=)
3: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: fBRRCTp4CwR8YGVVkOjEeR/NmxPJKKKc/fK4TrmWWrk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl
rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 03:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3d:c3:a6:71:4b:d9:a5:94:be:cb:1d:b4:65:5f:53:91:28:a0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B69A98F297C5A1D4B56FAFC494906B492BA4C200
Validity
Not Before: Jun 13 00:04:41 2026 GMT
Not After : Jun 14 03:51:41 2026 GMT
Subject: CN=9B887236D4A74A1CE813922F937757F8BC9216F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:e4:1f:93:87:28:60:74:fa:30:38:fe:13:
63:c4:94:1f:48:80:e8:dc:55:ac:52:39:1d:5a:21:
26:3c:76:11:4e:6c:c6:0c:b4:c0:31:13:a3:fd:24:
76:32:3a:c4:94:16:60:47:25:cc:18:03:05:46:bf:
05:cd:9d:94:0f:2e:c4:b7:3a:81:e5:20:62:ef:b8:
76:ad:f7:ad:7c:d3:40:4c:df:8c:ae:8f:af:ea:1d:
fb:f5:a4:08:2c:a6:f9:41:88:8f:c3:fe:ee:28:5f:
33:71:6d:ec:ea:3a:72:0f:ae:d0:c5:d1:2e:f5:40:
3a:89:5b:cf:ac:73:46:b5:65:25:f6:5b:90:03:87:
50:e2:f4:bb:55:57:26:99:02:27:31:c9:c2:b6:59:
a3:72:cd:bf:7a:26:9a:9c:03:c8:9e:30:43:37:c9:
5c:9b:11:48:20:12:43:62:b8:da:a2:77:5c:f1:6b:
93:e1:86:34:51:10:43:d6:80:ec:12:9f:53:4c:5d:
04:e9:cc:fb:c4:66:45:32:13:ec:13:d1:c3:55:d9:
cb:26:fa:a0:f8:0b:1b:13:67:fd:99:c3:4a:77:04:
91:fd:2b:a3:6c:2f:bb:d4:ff:d0:48:1a:13:23:c0:
40:5e:cb:8d:ee:62:4d:66:8c:ae:18:a3:a7:36:e4:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:88:72:36:D4:A7:4A:1C:E8:13:92:2F:93:77:57:F8:BC:92:16:F4
X509v3 Authority Key Identifier:
keyid:B6:9A:98:F2:97:C5:A1:D4:B5:6F:AF:C4:94:90:6B:49:2B:A4:C2:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B69A98F297C5A1D4B56FAFC494906B492BA4C200.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/B69A98F297C5A1D4B56FAFC494906B492BA4C200.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f9:86:f3:9f:b1:de:d3:d1:77:31:96:11:a0:02:30:37:e9:
a4:37:cd:b0:67:6b:96:e3:fa:50:e1:2a:db:51:7b:90:e0:48:
d7:2b:0d:2f:96:1e:ea:cc:e5:da:83:3d:17:e8:cb:ce:c2:a2:
fb:96:54:99:a5:c0:3b:59:23:52:6c:b0:3f:bf:9b:dd:f0:84:
a9:24:f5:33:6a:a5:af:d1:8d:c7:e3:c9:16:45:70:18:65:1c:
95:78:60:33:fc:97:2e:12:68:cd:91:6b:48:be:63:b4:2c:02:
73:29:1a:ef:a6:c4:87:a7:ce:89:43:91:d4:05:48:5d:a8:0a:
4f:95:38:cd:e8:92:c2:d4:a1:c2:38:c1:6b:28:67:df:24:a5:
5c:c4:25:57:05:03:a9:15:aa:46:9c:9f:52:7e:1f:14:60:6e:
24:fd:05:40:e4:ec:a4:1b:46:b0:67:5e:af:b1:bc:96:32:ee:
21:72:93:07:c4:3a:d2:1e:df:98:8d:21:48:1c:ee:70:f3:ef:
37:29:9a:d7:75:14:d6:60:c1:ad:80:4e:cb:52:1e:3f:cc:27:
3b:db:25:e4:5c:dd:fa:38:5e:44:48:a1:11:71:ce:19:24:4e:
b1:2a:60:38:91:ee:82:d5:12:79:30:67:10:aa:b9:75:6d:6f:
6d:69:3b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:28:33 2026 by rpki-client