
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
File: D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft (raw, json)
Hash identifier: f+Zl43KegwMUd6OI+mncFesBX864oEwDTWv6uj7gekk=
Subject key identifier: EE:AA:86:63:0C:AB:25:DE:97:68:A5:03:18:BD:90:F8:A0:A6:85:C9
Authority key identifier: D4:69:E6:C4:82:F0:5D:FD:52:8E:B9:D1:E1:37:A9:89:86:C2:AA:64
Certificate issuer: /CN=D469E6C482F05DFD528EB9D1E137A98986C2AA64
Certificate serial: 6DD72D7B96D5E296A99D827274680AD063FDC25C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 20:05:22 +0000
Manifest this update: Thu 24 Sep 2026 20:00:22 +0000
Manifest next update: Fri 25 Sep 2026 20:52:22 +0000
Files and hashes: 1: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: dqW6TWRtsltPNTEFRMpYh1GeX5vPLKOWuyjNksoCBu4=)
2: D469E6C482F05DFD528EB9D1E137A98986C2AA64.crl (hash: GoUX56y9glGodZTxonkAkVDqjXSPkUWuA1Rnh9Do9Vo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.crl
rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d7:2d:7b:96:d5:e2:96:a9:9d:82:72:74:68:0a:d0:63:fd:c2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D469E6C482F05DFD528EB9D1E137A98986C2AA64
Validity
Not Before: Sep 24 20:00:22 2026 GMT
Not After : Sep 25 20:52:22 2026 GMT
Subject: CN=EEAA86630CAB25DE9768A50318BD90F8A0A685C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:75:90:d9:b4:d0:c4:85:6b:ad:d0:c8:c6:
4a:d3:ba:df:af:e4:e0:6c:24:52:59:72:b9:05:57:
de:60:1d:8b:34:44:bb:65:09:dc:ff:10:84:01:ad:
80:8f:e5:a8:1b:e7:4b:aa:e9:1f:79:89:95:fd:b4:
8c:02:9b:90:c3:ad:f4:d4:14:eb:73:08:c2:4e:8f:
1f:3d:54:fa:72:4a:cf:91:80:50:d0:6c:1e:95:02:
ea:3a:0f:f0:95:f4:6c:af:0d:21:06:2b:2b:3f:bd:
82:3a:54:72:91:44:f1:21:13:b0:da:44:68:0f:65:
0a:60:e7:3e:49:24:3f:80:dc:3c:5f:57:c1:98:72:
8c:7b:18:ab:b1:9e:f6:0f:c6:59:73:cd:87:01:5e:
15:17:f3:4b:90:7a:c5:30:c3:6c:42:67:11:fb:bf:
50:cf:2c:9c:8b:fa:52:99:3e:4b:cc:87:82:a2:4d:
9e:51:8d:e3:a4:ff:88:05:27:b7:84:f9:48:fb:56:
7b:5f:33:f3:51:34:e9:6c:c4:70:43:1c:53:a4:18:
ec:c6:00:5d:3e:f5:62:53:b9:aa:82:6a:be:1a:c1:
a4:b4:2c:b3:2c:db:e7:1d:63:8c:7f:4c:9b:70:f7:
c5:1e:88:0a:21:4a:46:60:da:bd:fa:23:34:fc:5f:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AA:86:63:0C:AB:25:DE:97:68:A5:03:18:BD:90:F8:A0:A6:85:C9
X509v3 Authority Key Identifier:
keyid:D4:69:E6:C4:82:F0:5D:FD:52:8E:B9:D1:E1:37:A9:89:86:C2:AA:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6a:43:e5:8e:8b:0f:b8:fd:77:f8:1f:9d:3c:27:04:5f:eb:
fb:46:67:eb:1f:84:2d:6d:9d:bf:03:06:a4:7d:6b:24:d7:ed:
cc:ea:3d:b3:93:74:9f:88:be:68:1d:31:75:3f:b4:03:61:df:
97:c9:6d:9e:0d:a5:3c:ff:5a:b5:70:c5:05:46:bb:34:08:fe:
9e:9f:89:44:29:6d:98:09:db:fe:f4:10:58:c9:3b:51:e6:81:
05:46:7f:29:e3:71:6d:aa:1a:92:14:b4:10:7d:02:1f:bf:2a:
4c:bc:7f:34:47:12:4a:0f:8d:ff:a2:c0:8e:46:80:59:92:f5:
fd:2d:db:02:3e:93:72:b4:51:35:4b:90:db:b7:de:7f:eb:c5:
41:62:80:fd:6b:ef:4a:a5:d9:73:f3:de:06:aa:9e:71:a0:8e:
bc:7c:78:71:34:02:f7:1b:c5:dc:10:25:7c:66:bc:70:ae:64:
77:3b:02:45:12:03:30:38:b4:75:41:4d:f4:cc:78:0e:c2:f4:
0a:1a:78:bf:04:e4:7e:d7:28:5e:62:91:00:43:0d:e3:c4:80:
21:7a:dc:c4:01:06:1e:ed:14:84:84:b7:80:f0:45:f9:36:8f:
9a:63:99:1b:62:2a:ee:8b:1a:ef:e9:3f:1f:ae:65:2f:e5:46:
df:32:a2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:58:22 2026 by rpki-client