
$ rpki-client -vvf rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft
File: 2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft (raw, json)
Hash identifier: fqh89CE7SPl4UmUO1H01wKz5KzT/+c0nBVvrh1y8H9Y=
Subject key identifier: 15:B3:C7:FE:57:5E:81:3F:31:39:12:D0:88:30:E6:A9:EF:07:F2:FC
Authority key identifier: 24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E
Certificate issuer: /CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E
Certificate serial: 1A57B46FFC2B331E203E2C4F0622909EA3A75B35
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 18:57:01 +0000
Manifest this update: Tue 16 Jun 2026 18:52:01 +0000
Manifest next update: Wed 17 Jun 2026 19:58:01 +0000
Files and hashes: 1: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: kBjc6OXZ/6vxacL9UgjRAviZ4OmFuFSXJVueUFg8fnE=)
2: 2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl (hash: YkzkI6RvO+wxSidyw5ye9xM31XSHYyayau1DQOrNYzY=)
3: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: IoDA8uRnuH2Y6CGJmD83Fs8xZFkU0MuwdHuMYgo3MNI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl
rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 19:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:57:b4:6f:fc:2b:33:1e:20:3e:2c:4f:06:22:90:9e:a3:a7:5b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2469BE3E79EE624DE9C3D6D6307B6482C1DE832E
Validity
Not Before: Jun 16 18:52:01 2026 GMT
Not After : Jun 17 19:58:01 2026 GMT
Subject: CN=15B3C7FE575E813F313912D08830E6A9EF07F2FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:d9:c5:34:4b:a7:39:b7:67:0e:12:3c:d4:
90:39:2b:89:6c:cf:70:4a:48:d6:ca:6b:da:f7:fc:
36:5f:e4:b5:53:53:7c:6d:a0:39:47:14:28:de:84:
0b:03:7c:58:48:7c:b5:fc:bf:1a:b4:8c:9d:0e:65:
ab:7b:6b:9f:1b:47:87:7d:78:45:17:c9:10:01:ef:
36:05:aa:74:39:97:b1:62:72:e7:c2:f8:63:87:28:
c4:7b:8c:9b:c6:f6:d7:bf:9b:c6:84:88:f7:9f:93:
7d:e1:f4:61:a9:68:bc:01:b5:51:73:7e:c4:8d:d0:
6e:ef:8b:d2:37:84:f8:96:bd:4c:9a:91:62:12:c7:
5d:8c:17:d0:66:53:e1:38:98:73:a9:85:0a:56:bc:
11:85:de:2f:4a:a5:8f:81:05:48:f3:a7:5a:24:ca:
10:6a:bc:1f:b8:c3:12:f2:67:12:c8:f0:50:45:bf:
84:59:3a:f3:e9:99:21:7c:45:bb:5a:3c:92:60:6e:
a4:14:bb:84:02:12:13:99:94:51:77:61:0f:f0:20:
63:97:ce:10:64:73:c0:b0:6a:02:54:90:a2:6f:e7:
33:ec:6b:a1:59:03:4c:a7:92:51:ec:a6:a2:74:80:
51:81:c0:55:46:a4:d1:9d:0e:09:2b:26:ed:1b:c3:
4b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B3:C7:FE:57:5E:81:3F:31:39:12:D0:88:30:E6:A9:EF:07:F2:FC
X509v3 Authority Key Identifier:
keyid:24:69:BE:3E:79:EE:62:4D:E9:C3:D6:D6:30:7B:64:82:C1:DE:83:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/2469BE3E79EE624DE9C3D6D6307B6482C1DE832E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7e:0f:7b:1f:a1:96:42:f3:3a:8d:e4:8b:24:d6:bd:78:49:
10:84:7a:98:c7:34:c1:87:dc:bd:02:a3:87:41:b5:60:70:d0:
56:ba:84:da:0f:ab:36:a8:d0:e1:00:e3:8e:a3:ad:d8:d9:a8:
a7:37:6d:91:77:5e:eb:48:c4:3c:56:64:24:2a:86:d2:9e:a4:
40:d6:ad:28:ef:6a:45:8e:19:79:ef:fd:f2:7b:f9:d0:58:96:
5a:84:71:f8:09:d4:f7:ad:d6:a2:52:ab:1c:62:dc:59:a8:6a:
0a:b2:08:4f:b2:d7:4b:7a:02:9e:c6:6b:e5:77:bf:37:70:ba:
1b:8d:1d:66:fd:fc:28:3f:e4:42:40:32:91:e3:48:dd:4f:58:
16:41:85:1e:4e:da:d1:48:33:1a:15:f5:f7:24:66:63:51:6e:
90:33:89:fb:8f:16:5c:3c:47:b2:f5:e2:b4:c2:6f:41:c2:ef:
ef:e1:8a:37:0d:85:99:b6:bc:f4:d4:cd:66:b3:49:ee:22:1c:
d3:31:19:de:d8:c6:99:0c:2d:e9:32:76:0c:96:d0:12:f2:24:
37:34:72:65:dc:19:34:b5:e3:af:9e:6a:5a:69:52:68:6b:72:
60:62:47:1b:5d:89:1c:92:9c:dc:72:b9:02:14:4e:d6:91:b4:
eb:50:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:47 2026 by rpki-client