
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
File: D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft (raw, json)
Hash identifier: nerfZnXkDR+tpPqaYU2M7bEQpkPf3BNHbXpApytqAbg=
Subject key identifier: 99:FB:64:DF:25:01:F5:E9:52:B4:A9:EC:DD:F2:D7:57:06:EC:0B:3A
Authority key identifier: D4:69:E6:C4:82:F0:5D:FD:52:8E:B9:D1:E1:37:A9:89:86:C2:AA:64
Certificate issuer: /CN=D469E6C482F05DFD528EB9D1E137A98986C2AA64
Certificate serial: 09B9BF0CFB3FED0A92D4E228D1B8DA77F14B536E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 21:50:43 +0000
Manifest this update: Tue 16 Jun 2026 21:45:43 +0000
Manifest next update: Wed 17 Jun 2026 23:23:43 +0000
Files and hashes: 1: D469E6C482F05DFD528EB9D1E137A98986C2AA64.crl (hash: thEILPtQN5atc1Xi6pMD9hoy3NI0omOXbnxOkH7i1aE=)
2: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: dqW6TWRtsltPNTEFRMpYh1GeX5vPLKOWuyjNksoCBu4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.crl
rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 23:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b9:bf:0c:fb:3f:ed:0a:92:d4:e2:28:d1:b8:da:77:f1:4b:53:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D469E6C482F05DFD528EB9D1E137A98986C2AA64
Validity
Not Before: Jun 16 21:45:43 2026 GMT
Not After : Jun 17 23:23:43 2026 GMT
Subject: CN=99FB64DF2501F5E952B4A9ECDDF2D75706EC0B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2d:a8:5e:ba:84:7b:8c:0a:bb:1a:29:ef:29:
8b:7d:00:86:8d:49:25:d5:aa:aa:2d:80:1e:63:d4:
06:de:28:e0:95:ad:17:37:69:5a:bf:35:f1:c3:c6:
d9:d9:8e:9b:d2:7c:33:6a:57:36:99:25:a3:05:41:
67:51:78:79:cb:2a:d2:af:f6:87:bd:26:ef:a6:69:
1b:19:14:9a:8b:d8:2a:88:43:80:d9:c1:f2:87:36:
d1:e6:75:1f:c4:58:a0:55:84:a2:20:30:1a:62:1e:
57:91:79:aa:92:54:07:49:26:ae:ab:c1:dd:b3:9e:
6e:e8:7e:eb:a1:79:93:04:6e:8c:c1:73:76:45:a1:
57:a0:75:3a:37:a6:a8:8f:2c:71:3d:df:cf:14:d8:
84:11:da:d8:38:6d:16:4e:03:c2:1d:7b:34:af:1b:
ea:c7:d1:12:f1:99:8b:48:70:41:d1:4c:16:23:96:
e2:a3:3f:6c:91:0a:39:2c:35:ab:cd:e8:fd:01:fc:
64:e7:90:dd:03:34:df:1f:d1:73:ce:e4:42:41:3e:
3b:44:56:08:04:29:28:5f:75:1b:c7:a4:f1:6d:1e:
62:11:09:f9:af:11:09:f4:7d:0d:37:28:2c:11:70:
e6:7d:b2:d2:3d:47:1f:5f:89:7e:39:40:5f:36:d8:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:64:DF:25:01:F5:E9:52:B4:A9:EC:DD:F2:D7:57:06:EC:0B:3A
X509v3 Authority Key Identifier:
keyid:D4:69:E6:C4:82:F0:5D:FD:52:8E:B9:D1:E1:37:A9:89:86:C2:AA:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:34:b9:76:9d:22:c8:32:c2:7b:ee:2f:5e:ec:8a:0c:c0:81:
1c:92:6f:f1:95:0a:63:91:f4:07:81:40:9b:9f:99:37:7e:4e:
02:61:00:7b:86:a5:7f:2b:a3:d1:05:8b:82:2a:4f:81:38:87:
09:c9:be:2a:b3:e7:f2:1f:36:88:23:52:f5:af:a1:ca:b6:36:
2a:b7:24:00:06:b9:0a:5f:73:6c:24:91:33:8e:e3:3a:e2:5e:
6e:71:d4:d4:95:e5:bd:5b:39:51:db:15:bc:ef:0a:64:8d:19:
e0:fe:20:01:ce:12:e3:1b:77:16:6b:f8:e5:88:7d:a2:7c:62:
07:e7:dd:aa:03:ae:f6:6b:0d:9c:1d:55:da:65:ec:d4:34:af:
7a:06:a0:94:95:18:71:45:15:ac:34:08:0d:db:b0:40:6f:01:
c6:16:64:09:d9:e7:58:ca:2c:da:03:6e:a6:45:e9:60:b8:b4:
c4:a6:64:c1:ae:b7:f7:d7:fb:8b:6f:84:0c:77:8d:c0:cb:20:
36:7f:77:d4:02:59:9b:06:c2:1f:1b:ac:a8:09:62:ba:f0:5d:
55:2b:f2:6d:51:94:f1:96:1a:c0:3d:4a:f0:35:dc:24:33:71:
ef:2f:5b:d8:e6:a3:fd:90:65:df:cf:31:34:25:48:68:ac:02:
0e:d7:5b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:13:30 2026 by rpki-client