
$ rpki-client -vvf rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
File: 02A8ED077C03E43C338DFC14D6192E46DA534B52.mft (raw, json)
Hash identifier: YxHabUtdnqE2FBs7ujO473Tj6QFICJ/gGW6kbASbn+k=
Subject key identifier: F7:14:D4:48:AB:BD:B4:62:42:C3:04:04:CD:F3:96:29:AD:78:A7:45
Authority key identifier: 02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
Certificate issuer: /CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Certificate serial: 055C288B820EF60F8A764444B9606585C9DA4AA8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 03:59:14 +0000
Manifest this update: Fri 24 Jul 2026 03:54:14 +0000
Manifest next update: Sat 25 Jul 2026 05:53:14 +0000
Files and hashes: 1: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 5QRCY/F26LQx+cpm0T1M7MYTi3ygt+T6ugETEbjQYdg=)
2: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: 3pwrvYXUcXwtoiYb2fFzF/R5rpxEebJsT3YYZEfo+OM=)
3: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: d3o2aJg5sY9JGfN+Wb+JV5Ly3qfvYxcESwubxcNcZ8g=)
4: 02A8ED077C03E43C338DFC14D6192E46DA534B52.crl (hash: G5GLaGEJGe0J9uu2OGm/FehyIXgXGS5aK9bQL6fcvv8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 05:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5c:28:8b:82:0e:f6:0f:8a:76:44:44:b9:60:65:85:c9:da:4a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Validity
Not Before: Jul 24 03:54:14 2026 GMT
Not After : Jul 25 05:53:14 2026 GMT
Subject: CN=F714D448ABBDB46242C30404CDF39629AD78A745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:df:e3:b1:de:6c:33:e2:97:6b:cc:0d:b1:
39:f4:18:a7:ba:b6:75:9e:72:bf:2a:c0:8a:08:8b:
8f:e7:86:1b:68:04:45:0a:c4:b1:83:8a:93:d6:4a:
f7:68:25:5f:7d:a6:a5:f3:70:5c:4a:a7:81:5e:e4:
28:a7:d8:67:c7:3f:d3:0c:ab:a1:da:6d:97:b8:fe:
19:34:c6:ca:ab:42:4d:a7:1d:51:09:98:0a:e6:ad:
ff:15:6e:1b:57:87:2b:a4:4d:50:28:01:9e:ec:04:
6e:65:16:9d:7e:e1:dc:23:49:b3:ef:4e:25:af:ca:
00:51:51:28:2c:f0:08:9d:4f:c5:75:d0:ff:b2:a5:
23:8c:d8:0c:2e:c5:4c:64:10:fe:7d:28:c5:64:89:
10:9c:ff:e0:95:ec:18:fa:88:db:8c:72:62:cf:f9:
06:22:4c:c8:ab:ab:fa:cb:6b:19:90:fc:7e:c1:87:
f7:56:7b:03:2c:2f:ea:35:a5:bc:24:e8:7a:4b:88:
45:cd:a0:05:e7:ae:bb:4e:72:ff:d0:8f:45:4c:84:
9f:c8:9b:c4:1c:3c:5c:9b:14:d5:33:34:60:76:58:
2c:61:5e:d6:c6:ab:d0:32:86:99:76:05:00:9d:91:
a3:fd:29:b2:ae:f7:58:b8:21:52:68:18:cc:10:4c:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:14:D4:48:AB:BD:B4:62:42:C3:04:04:CD:F3:96:29:AD:78:A7:45
X509v3 Authority Key Identifier:
keyid:02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bb:83:96:00:3f:06:62:d1:c2:78:21:2f:81:7a:36:b9:fa:
b0:98:53:9b:e1:55:59:31:bd:98:b9:73:8f:5a:db:03:e2:5b:
43:a5:cd:c1:41:a7:6d:01:a9:df:04:8d:77:27:aa:2c:5d:1c:
6b:00:6c:ba:6a:5c:54:5f:7f:8a:3a:ad:6b:6e:09:85:52:59:
dd:8c:69:1b:9f:f3:49:38:5b:01:db:93:38:d5:cf:d4:8d:e3:
89:99:53:78:aa:63:53:96:63:99:9b:30:a5:41:73:25:4b:34:
7c:f4:b8:1f:42:5f:ad:54:9b:95:7d:7c:47:e0:af:52:1b:e7:
ad:30:f5:17:ac:94:0f:5c:82:d8:4e:76:66:3f:2c:7c:70:7b:
b5:4a:ce:b2:db:83:9c:79:45:55:ef:17:8a:55:3c:be:a2:68:
7d:c4:81:b2:0f:56:b7:7c:8b:9d:5f:66:ac:d7:51:b6:c4:82:
49:74:2f:aa:9c:95:0a:8f:3f:27:e8:ec:5f:33:e7:f0:62:34:
b3:39:46:df:71:f6:b4:c2:f4:ba:3e:c2:38:76:b8:95:8a:42:
db:d1:89:94:2a:8a:48:bc:34:e9:ca:75:0d:2d:21:34:83:fc:
3a:52:cd:e9:a2:b9:96:ac:c2:25:ea:d7:75:09:82:dc:5b:3d:
16:db:22:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:26 2026 by rpki-client