
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
File: D69DF302479F4777A9A0892154204AF107B510B2.mft (raw, json)
Hash identifier: 3I6opubSEppfp+6ARdsYP415GEQMS6D5qeBqjmnpCcc=
Subject key identifier: 8E:E6:7D:79:1D:B5:E9:CC:C8:20:D6:8F:09:F5:E9:37:3C:7D:5C:4E
Authority key identifier: D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2
Certificate issuer: /CN=D69DF302479F4777A9A0892154204AF107B510B2
Certificate serial: 0D0D08EC946354354A5DAB0FDFB5647E2265A7E6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 04:02:43 +0000
Manifest this update: Wed 17 Jun 2026 03:57:43 +0000
Manifest next update: Thu 18 Jun 2026 06:27:43 +0000
Files and hashes: 1: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: q5uFk3VLUA+Zp9Xrj3e+V8aDF57mtzIkLAnY1xqIYg8=)
2: D69DF302479F4777A9A0892154204AF107B510B2.crl (hash: +rUhDnjF1oowF1jB77RGLzmWV/7eT6x6barqTq2roSA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl
rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:0d:08:ec:94:63:54:35:4a:5d:ab:0f:df:b5:64:7e:22:65:a7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D69DF302479F4777A9A0892154204AF107B510B2
Validity
Not Before: Jun 17 03:57:43 2026 GMT
Not After : Jun 18 06:27:43 2026 GMT
Subject: CN=8EE67D791DB5E9CCC820D68F09F5E9373C7D5C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:14:a2:32:96:12:f5:d7:d8:2f:16:f4:3d:
20:f0:54:5f:49:6a:e3:57:25:28:8c:ee:be:c8:cb:
80:83:bc:01:47:bf:2e:bf:40:44:44:bf:ff:18:09:
6c:bb:64:b6:5c:1a:e7:6b:11:12:8e:d4:3a:8b:82:
aa:4e:98:16:6a:1f:72:aa:61:24:fe:12:5b:0e:14:
c5:07:bc:c5:1e:fa:2b:79:fa:46:e8:c4:24:71:26:
30:b0:6c:bc:dc:59:d0:88:06:27:f1:40:36:23:2b:
81:58:b2:ef:6d:68:29:c1:28:5b:06:7f:02:5f:07:
22:66:9a:c3:f7:ea:6e:83:34:e5:bb:d3:5d:06:1b:
8e:9d:15:73:4c:bd:19:be:17:8a:48:d8:cc:4a:1e:
97:d6:34:39:80:68:eb:b9:39:f3:30:11:7b:42:21:
fc:f6:67:7a:3d:da:cb:40:43:b3:64:b0:0f:7c:43:
e4:f8:1f:53:1d:c1:1b:14:75:6e:b5:13:ec:6b:ef:
5f:8d:13:5b:d1:68:33:e3:06:94:f1:8d:77:c7:30:
af:25:d1:b0:3c:0b:35:4f:e9:2e:06:00:77:6e:4e:
38:ea:96:f8:f7:77:2a:39:77:e4:11:80:93:ed:69:
54:da:95:88:4b:83:7e:d1:16:d1:88:74:f7:ad:7e:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E6:7D:79:1D:B5:E9:CC:C8:20:D6:8F:09:F5:E9:37:3C:7D:5C:4E
X509v3 Authority Key Identifier:
keyid:D6:9D:F3:02:47:9F:47:77:A9:A0:89:21:54:20:4A:F1:07:B5:10:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D69DF302479F4777A9A0892154204AF107B510B2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/D69DF302479F4777A9A0892154204AF107B510B2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ff:55:48:90:c1:44:30:07:82:28:66:26:8a:78:1e:51:25:
c2:f2:5d:59:d9:bf:4d:c3:e3:a2:2b:ef:ed:11:86:e9:77:5b:
d2:52:0c:41:70:32:b8:ef:76:8b:2e:b2:96:5e:bb:4a:75:3e:
7e:3b:08:d8:f6:ee:66:c4:c9:40:89:9d:b5:3a:81:b7:0c:43:
c1:56:f0:16:55:a5:ac:34:a5:30:ff:06:15:8b:07:35:a3:db:
0c:95:06:10:68:40:92:68:17:f3:a0:02:dd:2c:98:8f:46:bd:
6a:f4:20:46:e0:45:8b:97:5f:8b:82:4c:74:38:c4:3c:68:a4:
ba:df:9b:8b:ff:0a:9b:69:58:f8:81:da:46:7c:70:8b:d1:4e:
47:b0:04:f7:d9:4e:7a:72:85:68:2a:fd:f9:af:a4:8b:17:f8:
d1:75:00:fb:c3:04:af:39:7b:dc:69:fd:7e:b1:bb:80:f5:55:
53:ca:4b:73:57:0b:cf:d1:7b:32:a6:c1:57:1e:52:76:32:77:
34:f4:87:2d:5f:e8:05:04:20:e4:a6:de:38:70:ad:4a:d9:b5:
d7:da:27:bb:97:d7:55:cc:4d:09:14:72:63:4f:43:aa:58:f3:
c7:9b:d0:2b:e8:c2:eb:24:7d:52:c5:d3:12:a6:bc:dc:25:cd:
65:32:e1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:18:11 2026 by rpki-client