
$ rpki-client -vvf rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft
File: 02AAB50744B5B2355B015A3152AD1101FDD80A06.mft (raw, json)
Hash identifier: ezRtcDRG0QqZIS2Ny8XXZYGvvThRT0KdymFxXGnxNpU=
Subject key identifier: 53:24:6C:17:CE:9A:48:71:A8:CE:0C:26:DB:81:EA:C7:22:BE:8E:E0
Authority key identifier: 02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06
Certificate issuer: /CN=02AAB50744B5B2355B015A3152AD1101FDD80A06
Certificate serial: 063A0AC2E8469454B65BEBFEF0DC06B10A5E3B90
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 18:49:21 +0000
Manifest this update: Tue 12 May 2026 18:44:21 +0000
Manifest next update: Wed 13 May 2026 21:11:21 +0000
Files and hashes: 1: 02AAB50744B5B2355B015A3152AD1101FDD80A06.crl (hash: lHCM1UgIb2mlJl64I4JZuaqOClOqULu8tBdLaQJ1GwI=)
2: 3130332e3138362e33342e302f32342d3234203d3e20313439363837.roa (hash: I/xRHiSouk0qQoSEfFFc5Esrv4Bnl21g3IwAa+RLLcM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.crl
rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:3a:0a:c2:e8:46:94:54:b6:5b:eb:fe:f0:dc:06:b1:0a:5e:3b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02AAB50744B5B2355B015A3152AD1101FDD80A06
Validity
Not Before: May 12 18:44:21 2026 GMT
Not After : May 13 21:11:21 2026 GMT
Subject: CN=53246C17CE9A4871A8CE0C26DB81EAC722BE8EE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:97:f8:cb:c9:7c:2c:45:77:f0:e1:f1:58:
54:5d:53:14:57:bb:df:63:d4:e3:c6:ce:c3:52:58:
ec:06:bd:85:f6:22:ad:0d:f3:99:44:12:f0:4f:40:
5d:47:24:00:3b:d1:ac:0a:68:9d:fd:0a:71:14:15:
33:33:6a:c9:73:88:75:5a:54:2a:5f:cb:28:9d:c9:
69:5a:fd:38:f0:da:8e:55:97:b3:d1:1f:93:4f:8e:
44:98:c6:f6:a7:3e:47:5b:d2:81:7a:37:ca:2f:00:
57:1e:ad:3b:29:6c:c1:e2:1c:65:a7:f0:ef:e2:65:
6c:96:81:af:a6:07:21:46:c0:a2:1f:cd:52:c2:a3:
3c:a6:d5:0c:05:3c:b0:7d:0a:0a:8b:77:dd:cf:44:
6c:f9:cf:f9:83:6b:54:18:7e:f2:ac:8f:94:70:1c:
c3:a8:36:f5:8a:a6:8f:1a:96:a6:af:33:72:ad:f8:
1f:9d:2e:9d:16:fb:84:9b:df:53:88:62:16:a3:61:
68:d9:78:98:3c:de:2b:89:7d:de:91:29:27:f7:1f:
7f:24:34:13:ba:50:c3:33:55:64:92:c4:04:ee:8a:
3a:45:ba:78:8d:1e:29:d6:d5:4a:a6:a9:9a:92:73:
c7:19:d5:7d:00:04:c5:e4:68:fe:b7:a3:29:d3:d3:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:24:6C:17:CE:9A:48:71:A8:CE:0C:26:DB:81:EA:C7:22:BE:8E:E0
X509v3 Authority Key Identifier:
keyid:02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:eb:cc:d8:c5:90:51:05:b4:7a:da:f7:e1:9f:eb:d8:59:65:
8b:2e:3b:10:61:bd:a4:94:5f:77:62:42:f0:0a:6e:3f:b4:cf:
d5:5f:f2:a6:a9:73:19:04:31:a9:73:1a:06:ed:83:c6:d8:eb:
a3:65:c2:a3:c3:f1:00:c4:44:c2:70:4e:5e:34:ef:d8:11:d9:
2a:41:55:e6:93:ba:38:00:f6:ae:12:19:dd:37:39:33:c5:7c:
69:24:1f:32:29:0b:cb:5a:48:d0:5f:1b:d0:da:4b:da:80:29:
39:cb:9b:cf:6a:30:c5:92:43:2b:86:01:84:21:6b:5e:fd:7e:
b0:e8:e2:c4:b8:c7:c6:00:c8:97:09:a8:95:85:51:39:11:be:
5e:b6:be:74:36:fb:e4:7d:a3:6c:a2:d5:d0:58:82:87:fa:1f:
71:c6:18:bd:96:c0:f8:3b:3f:2d:f3:1a:de:74:c4:8a:73:3e:
81:98:39:5b:11:9d:9d:22:97:02:81:06:50:9b:1e:bb:5f:08:
cc:1a:94:93:f7:05:5e:c7:2c:59:77:2b:f1:fc:cf:e7:50:eb:
4e:3c:c2:88:d4:36:64:07:22:6a:6b:e9:22:c0:5d:a3:d6:d2:
57:77:b5:c8:73:e3:b9:df:33:ac:8c:41:e0:78:0e:75:d2:b3:
52:70:45:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:21 2026 by rpki-client