
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
File: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft (raw, json)
Hash identifier: +zIc7avK6KglcsZNqunW10z7l2OfwpiPFB01OBvslMo=
Subject key identifier: B7:A1:1D:7D:CF:EE:EE:40:62:EC:C6:4D:80:66:B2:01:5C:10:30:9A
Authority key identifier: 1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF
Certificate issuer: /CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF
Certificate serial: 3497A5C7DADB8B66CF1A00AA0198E30C6A50E16B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
Manifest number: 6E
Signing time: Fri 24 Jul 2026 04:14:38 +0000
Manifest this update: Fri 24 Jul 2026 04:09:38 +0000
Manifest next update: Sat 25 Jul 2026 05:11:38 +0000
Files and hashes: 1: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: Je18gPRqgq+WsGNVuHao3MPV58XjK3X72Kp18GA2rlA=)
2: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: G3yTjAsTBJcMcArecaYX/yOP7athsjKmul3O/4eoKrU=)
3: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl (hash: NaRqddG7yzbDGneRL9q0GrNK7kThUXcLUs3xDfugFcA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl
rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 05:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:97:a5:c7:da:db:8b:66:cf:1a:00:aa:01:98:e3:0c:6a:50:e1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF
Validity
Not Before: Jul 24 04:09:38 2026 GMT
Not After : Jul 25 05:11:38 2026 GMT
Subject: CN=B7A11D7DCFEEEE4062ECC64D8066B2015C10309A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:86:f8:13:ba:70:ef:bb:98:6e:be:b9:c7:
a0:64:98:9f:4e:d7:21:89:30:06:2e:00:52:5d:8f:
f1:0c:64:9b:4b:bc:5b:07:74:a4:b5:8a:c2:5e:8d:
e1:a9:86:73:59:82:4c:15:b8:6a:21:97:59:8c:d9:
89:1b:35:84:06:5e:3b:1e:bd:05:5a:51:37:2a:7e:
90:19:a1:a2:33:fd:d6:50:45:d0:4b:f4:ea:cf:6d:
07:61:41:7f:cc:42:ce:26:d8:95:d8:d4:26:f3:db:
b3:6c:82:9d:3c:e7:6f:50:7b:6d:e7:e8:3a:ce:02:
ca:42:35:a5:7a:fc:c2:e9:d4:4a:8f:4c:c8:2c:c0:
f1:2e:cd:45:47:33:61:26:66:1c:72:4b:19:01:7d:
78:47:1a:cc:46:95:2d:2a:8f:32:5b:b2:05:b8:78:
22:ef:81:5f:c5:1b:23:8d:0e:4f:94:a8:2f:f4:5d:
73:2c:f5:0b:1f:ab:f1:de:b3:b2:79:6b:69:c7:a1:
d2:ad:ff:8c:f7:4d:7e:ba:3e:9f:39:c6:21:df:4b:
85:b8:08:4d:f8:6c:18:84:6d:3e:fa:63:68:1e:19:
40:0b:07:0a:3c:9f:05:bd:f8:ad:11:46:a7:7e:51:
e6:be:b9:5b:21:5f:e6:db:b3:68:94:ba:d7:c6:e2:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A1:1D:7D:CF:EE:EE:40:62:EC:C6:4D:80:66:B2:01:5C:10:30:9A
X509v3 Authority Key Identifier:
keyid:1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dc:c8:3b:09:a1:11:ca:77:cb:b9:19:f6:f8:83:a5:8e:3e:
75:6d:b2:51:19:e3:bf:2d:90:16:1b:7a:20:5e:f0:42:5a:c2:
8c:9f:b6:ea:3f:26:fd:72:71:f1:f1:fe:0b:83:ba:8f:1d:50:
b1:df:7c:1d:81:3a:d3:93:de:8c:2b:b3:e8:2f:9e:69:c4:38:
94:79:01:41:51:09:a8:c5:9d:bc:51:94:fd:c5:a5:53:9e:89:
1c:91:85:39:66:7d:7d:1b:b2:18:80:43:8b:9b:78:33:48:29:
28:2e:7b:f7:c1:d9:0e:69:de:10:54:9d:d0:12:8e:45:98:b1:
20:7a:16:9d:23:50:17:e3:91:62:a6:6d:48:55:35:8c:62:a4:
df:62:10:20:84:36:45:91:3f:40:e4:d6:04:58:be:63:f7:e0:
14:b5:8d:b5:1c:35:f7:b4:c9:7d:ab:c7:73:7a:06:e0:21:24:
e2:75:85:f4:e3:a5:f0:d8:2a:96:b2:0b:04:ef:f7:45:e5:f8:
91:47:64:59:fd:8a:ce:65:1a:87:b2:bf:82:cb:26:b2:3a:a8:
07:31:6b:96:e3:4f:14:7d:55:a2:78:ed:cd:00:7c:af:29:9c:
3d:58:5d:7c:f4:d1:fb:54:e0:8a:78:e9:1e:11:b5:b5:86:cd:
24:22:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:01 2026 by rpki-client