
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
File: 2702EC259515C0960B0BFF36647679F0CA781E52.mft (raw, json)
Hash identifier: oawuDaN+HExVtBFhwH9aWFCj0sXd9/IgtiHZEqABcxc=
Subject key identifier: 5E:28:90:F9:3E:94:8C:2C:85:A3:F9:77:0B:B5:E0:77:EF:03:C8:15
Authority key identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
Certificate issuer: /CN=2702EC259515C0960B0BFF36647679F0CA781E52
Certificate serial: 55F588B011A23A7174EBFB32DC6E02295A279A7B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
Manifest number: DC
Signing time: Thu 15 Oct 2026 01:31:46 +0000
Manifest this update: Thu 15 Oct 2026 01:26:46 +0000
Manifest next update: Fri 16 Oct 2026 03:20:46 +0000
Files and hashes: 1: 2702EC259515C0960B0BFF36647679F0CA781E52.crl (hash: LWfB9W04iLaz0p/8zNmwIU7pIvTftSSKluJ9h9dWkCk=)
2: 3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa (hash: /lklKRwQXzQQDya+GH3WUkfxs3Rw/gHVRuuz1tcXoUE=)
3: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: SF5csYZOV6O0/pz/yzpUeG3NGqNwVVPBe+gjRAAxx1w=)
4: 323430343a636263303a3a2f34302d3430203d3e20313338383433.roa (hash: g1km73POKKg69MSbDnEF0CkpP2rF3ZrF65BD2T6WTQc=)
5: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: vNMbKB+jjAGCqgxCSWzjKIMOhXwlS0DnqcWYtGqskho=)
6: 3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa (hash: MvYURtqKvXgJtHDe+bGVN+qQ+GvO+Bbw/63OedWxccg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f5:88:b0:11:a2:3a:71:74:eb:fb:32:dc:6e:02:29:5a:27:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2702EC259515C0960B0BFF36647679F0CA781E52
Validity
Not Before: Oct 15 01:26:46 2026 GMT
Not After : Oct 16 03:20:46 2026 GMT
Subject: CN=5E2890F93E948C2C85A3F9770BB5E077EF03C815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:f0:37:27:9e:c8:8d:ac:6d:03:de:1c:76:
64:6f:c1:2e:d8:6c:13:36:35:7f:f9:dc:fb:22:55:
6e:6b:58:d1:1c:49:0c:81:c4:41:a5:3f:4a:96:74:
e7:9c:8f:c9:4e:da:ff:6a:cd:d6:6c:8c:38:3f:6b:
24:9a:c4:9a:9f:e1:d3:60:d6:09:ba:4c:17:92:14:
ce:42:bc:13:17:7f:72:9a:94:48:b8:1c:b9:6c:14:
46:8b:4e:3d:95:8c:a9:d3:ea:99:d9:8d:32:cd:03:
ec:13:aa:26:43:16:2a:e3:e8:69:8d:0b:28:75:44:
b0:5f:6a:e8:a2:6a:42:f0:46:3b:69:d0:c4:22:96:
83:88:21:60:b8:ed:e9:ac:34:54:b3:80:19:1e:fc:
4e:76:82:45:07:65:0e:01:81:98:49:6d:cb:71:e2:
85:14:11:25:3e:21:2c:be:de:36:8d:4d:67:1a:13:
51:30:28:37:d7:df:f1:ea:c9:d7:62:a8:d7:a5:27:
2d:88:4a:c0:50:d5:99:e8:69:08:61:08:a6:b3:2a:
74:e6:ab:33:1a:7c:37:a1:80:10:29:71:e2:6e:23:
a7:ee:47:6a:a5:4f:77:7c:d3:05:2a:38:66:1b:f0:
f2:3c:56:27:0f:b0:6f:72:ab:0f:38:11:15:36:1a:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:28:90:F9:3E:94:8C:2C:85:A3:F9:77:0B:B5:E0:77:EF:03:C8:15
X509v3 Authority Key Identifier:
keyid:27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b3:aa:6a:a5:2c:c9:35:15:58:45:99:f3:5b:bd:d9:fe:3b:
b6:00:91:ce:04:e9:e5:88:31:ad:d5:85:36:b3:0f:7c:63:8c:
8a:86:5e:a1:fe:ae:ef:83:1a:a3:57:60:5b:39:43:d0:14:28:
f8:e0:fc:86:76:02:7a:27:2f:40:25:6e:b4:01:d6:9d:1a:ce:
0d:10:d1:4f:9e:86:ee:b8:64:30:71:80:eb:fa:56:82:34:f3:
ca:07:81:81:29:70:19:49:1c:eb:20:f3:36:be:6c:5c:a7:e7:
c4:bf:86:fd:0a:56:64:f8:e2:35:56:dd:a3:24:09:41:d3:ae:
db:fd:2e:54:9a:4a:9a:22:91:fc:35:2b:ff:05:56:d5:d1:ae:
d6:2c:e2:68:58:5d:b6:f7:39:8d:5a:86:a2:f1:24:41:3e:25:
32:36:3b:cc:19:9b:9a:0c:84:7c:d3:6e:5c:a1:f6:7a:10:0e:
45:85:41:ae:9b:da:5f:bf:d4:74:69:6e:9f:9e:09:d0:42:c6:
07:1b:46:fc:92:f2:62:97:02:01:f5:cf:f1:ea:32:ea:8b:83:
69:83:87:cc:e7:0f:46:5e:5d:44:43:8d:26:f2:76:5e:2f:d3:
84:21:29:1b:f9:15:ee:bb:ec:2b:23:e4:0a:b7:3c:67:31:57:
7d:bf:59:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:39:39 2026 by rpki-client