
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
File: 2702EC259515C0960B0BFF36647679F0CA781E52.mft (raw, json)
Hash identifier: heUZICElsS+CPWmYn2iEqhIpFzr+c6LiOgWS9l252IY=
Subject key identifier: 44:FA:04:27:0C:EF:4A:84:5F:76:FE:FC:64:79:74:BC:27:BC:1A:91
Authority key identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
Certificate issuer: /CN=2702EC259515C0960B0BFF36647679F0CA781E52
Certificate serial: 525865EBC07BD83C11AB62FE3F6E9F21C186EC61
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:51:11 +0000
Manifest this update: Tue 12 May 2026 19:46:11 +0000
Manifest next update: Wed 13 May 2026 21:49:11 +0000
Files and hashes: 1: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: vNMbKB+jjAGCqgxCSWzjKIMOhXwlS0DnqcWYtGqskho=)
2: 2702EC259515C0960B0BFF36647679F0CA781E52.crl (hash: XVmyI8GLH9MHdVbRXbjpSBx+8h9MbOqzaLEIRTYWjCA=)
3: 3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa (hash: /lklKRwQXzQQDya+GH3WUkfxs3Rw/gHVRuuz1tcXoUE=)
4: 3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa (hash: MvYURtqKvXgJtHDe+bGVN+qQ+GvO+Bbw/63OedWxccg=)
5: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: SF5csYZOV6O0/pz/yzpUeG3NGqNwVVPBe+gjRAAxx1w=)
6: 323430343a636263303a3a2f34302d3430203d3e20313338383433.roa (hash: g1km73POKKg69MSbDnEF0CkpP2rF3ZrF65BD2T6WTQc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:58:65:eb:c0:7b:d8:3c:11:ab:62:fe:3f:6e:9f:21:c1:86:ec:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2702EC259515C0960B0BFF36647679F0CA781E52
Validity
Not Before: May 12 19:46:11 2026 GMT
Not After : May 13 21:49:11 2026 GMT
Subject: CN=44FA04270CEF4A845F76FEFC647974BC27BC1A91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:cf:24:d5:93:c6:ad:cd:43:63:d3:67:e3:
3d:52:9c:7e:38:cb:8c:8b:b5:9e:f3:db:b8:52:37:
42:97:78:a7:17:1c:62:76:e1:f0:ba:76:93:3c:f6:
fb:a3:53:ff:d9:b6:da:6b:be:65:f9:08:cc:58:7a:
d2:10:c8:96:59:a9:6d:08:96:f5:5c:05:48:32:44:
08:21:5b:98:d3:5d:c7:db:27:72:da:5d:21:64:d1:
a8:69:02:dd:da:1f:f1:c1:5a:8e:eb:bc:45:d3:95:
5d:35:6d:20:32:a1:b8:fb:b1:79:fe:7b:67:a5:27:
b3:30:44:af:a2:4a:2e:48:ba:62:2c:b1:91:c3:b3:
f1:80:19:12:c0:1e:f0:3f:62:91:01:3a:dd:13:bf:
65:f5:c4:b5:ac:29:bb:22:f2:3a:f1:aa:2e:f1:26:
fe:0c:cf:37:df:9f:36:35:74:6a:f4:64:97:6d:eb:
24:ca:a2:7a:3a:77:9d:7f:7d:ff:1c:92:ca:68:73:
3f:0c:c8:a7:e6:9c:23:58:3e:6d:78:41:9f:3b:fd:
06:2f:35:bd:1b:ca:a1:e8:30:41:d2:13:07:56:c8:
13:11:85:2e:55:bb:f8:e7:7c:8a:04:b7:8c:0d:ba:
15:76:f3:f6:ba:61:5c:df:3a:80:36:e0:6f:7e:46:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FA:04:27:0C:EF:4A:84:5F:76:FE:FC:64:79:74:BC:27:BC:1A:91
X509v3 Authority Key Identifier:
keyid:27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9d:8c:b5:3e:f3:c6:e3:bb:4c:5d:9f:e1:8f:af:9a:a1:d8:
c0:56:33:b7:46:c5:83:31:07:95:3e:12:ba:57:5b:ab:65:69:
e6:70:36:af:ab:f2:67:48:5d:31:ea:bb:cd:14:74:75:22:dc:
bc:4a:27:b4:86:de:c7:10:c2:54:5c:9d:37:ce:39:da:ce:ba:
22:a9:2d:53:ac:75:28:d6:12:2e:64:da:16:02:56:b2:02:16:
8a:09:7d:d8:4b:31:42:e0:46:8b:75:ff:18:c5:ee:91:84:e1:
4c:9f:66:88:4d:69:60:ee:72:40:a1:6a:eb:1c:95:32:2a:70:
83:a5:5f:68:d2:e1:d2:34:de:0b:ce:f6:eb:2f:10:78:86:36:
95:72:e3:75:89:87:42:e0:09:62:6c:ba:6d:26:cf:ed:05:91:
a7:28:b2:34:c2:28:cc:a5:e1:81:7c:2b:83:0e:4f:ba:a0:95:
f3:3c:d5:81:34:b4:f8:e2:94:d6:71:bb:0d:68:25:9a:6b:35:
88:fe:81:0d:60:f4:80:67:e4:97:f6:f4:00:cc:1d:e0:63:b0:
f0:24:cb:8e:f7:ba:57:2b:7e:c0:96:fe:82:cc:69:04:ae:b2:
72:1c:c0:7f:1d:b2:12:b1:35:b9:c4:45:8b:26:55:56:dc:7d:
bc:5c:ac:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:27:28 2026 by rpki-client