
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
File: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft (raw, json)
Hash identifier: PAHdSWphSRDne9QOvtlsiiffhkqDeSB3k209UL7O/rM=
Subject key identifier: B2:89:CF:63:4F:5A:A5:2F:FC:CF:33:D6:C6:07:C5:BE:EE:90:8B:E0
Authority key identifier: 1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF
Certificate issuer: /CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF
Certificate serial: 5CF6119CFCB7806FC33B821BAF6059528A241967
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
Manifest number: 6D
Signing time: Thu 23 Jul 2026 11:29:05 +0000
Manifest this update: Thu 23 Jul 2026 11:24:05 +0000
Manifest next update: Fri 24 Jul 2026 12:12:05 +0000
Files and hashes: 1: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: G3yTjAsTBJcMcArecaYX/yOP7athsjKmul3O/4eoKrU=)
2: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl (hash: c2TBOvkVASWyPcQyDumfUDe8+OSGFq30wSG9oFjwkd8=)
3: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: Je18gPRqgq+WsGNVuHao3MPV58XjK3X72Kp18GA2rlA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl
rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 12:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f6:11:9c:fc:b7:80:6f:c3:3b:82:1b:af:60:59:52:8a:24:19:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF
Validity
Not Before: Jul 23 11:24:05 2026 GMT
Not After : Jul 24 12:12:05 2026 GMT
Subject: CN=B289CF634F5AA52FFCCF33D6C607C5BEEE908BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:31:d5:e0:fc:df:d0:06:0e:30:d3:32:a4:
7a:40:2e:30:c9:22:8b:da:75:36:12:c2:ed:6a:07:
62:e9:4b:30:64:65:20:ac:d2:58:24:53:5f:f7:75:
f4:14:62:e8:80:d3:0e:58:8c:11:85:9b:1f:b1:26:
b4:bf:af:24:bf:ba:07:a9:08:a3:81:e5:46:b4:a6:
05:e5:70:42:46:29:7e:a8:33:31:71:0a:15:0b:1e:
ed:29:cc:fc:ae:62:f8:a0:66:b1:24:a2:b0:21:44:
fc:75:a0:74:68:19:e2:b0:81:50:0f:12:07:cc:af:
01:4b:f2:eb:9c:07:7d:cf:06:d9:ca:dd:9b:1a:33:
58:e1:28:6c:14:34:24:b0:13:ab:a7:16:91:be:50:
31:55:e4:8a:04:83:6f:0f:ec:f2:80:0b:40:3b:0d:
dc:92:ee:ee:47:28:1e:37:f6:1d:27:0d:67:af:d3:
ec:d8:5a:99:22:2d:33:2b:90:8a:53:e1:08:ed:14:
b1:78:be:94:a4:fb:fd:00:7d:c8:63:72:29:d2:f1:
68:d7:3a:11:aa:d8:27:03:c2:bd:8f:2b:e4:09:5b:
3a:95:ad:e7:64:52:d4:2d:74:fa:87:7f:b2:7e:2d:
18:e2:12:c8:59:59:d7:66:8f:8b:c6:c0:a1:94:ca:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:CF:63:4F:5A:A5:2F:FC:CF:33:D6:C6:07:C5:BE:EE:90:8B:E0
X509v3 Authority Key Identifier:
keyid:1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:f6:b0:02:04:03:42:77:09:7e:80:3d:87:94:c9:f3:25:
8b:af:14:e2:47:2b:ce:da:3d:09:94:91:ef:47:00:f1:50:75:
0a:85:ef:cb:54:1f:76:29:f4:f7:2c:3f:6d:64:b5:b3:81:b8:
92:c3:56:65:eb:06:0f:b4:c0:67:56:ce:57:d7:95:1f:80:14:
01:35:c0:ea:db:36:14:af:27:a7:cf:e1:23:53:1c:89:18:30:
b4:a2:f7:ff:ae:8c:65:95:76:1a:24:77:73:a9:2a:c3:9a:d2:
07:36:4c:26:7a:3b:49:a9:ec:bd:3f:2b:6f:63:77:53:b2:a0:
b6:62:59:31:d8:43:82:3f:dd:61:b1:a2:7c:f5:61:f3:69:a5:
4e:b0:2e:a8:a9:75:6f:71:51:f8:17:c3:5b:39:1d:4a:03:4b:
aa:5b:36:00:e3:7d:68:d4:1d:e6:ba:c0:68:51:1c:7f:7a:49:
f2:f5:14:ed:79:32:98:45:1e:b6:59:41:7f:75:ad:76:b8:ee:
40:08:bb:5b:c3:e6:7c:b2:1f:5b:5c:99:12:49:1f:a9:93:79:
db:de:9b:99:7e:92:2d:23:82:cc:8f:be:c7:5e:69:7b:ea:29:
42:b6:af:fd:df:42:2a:89:e0:5e:a1:6c:3f:45:6c:98:6d:0d:
ff:f5:0a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:31 2026 by rpki-client