
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
File: 02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft (raw, json)
Hash identifier: tBEroVRH8Z4p5JzzYluzQbBqEXm6LYQ0exxeVM6VPsY=
Subject key identifier: 84:0C:51:68:C3:7A:A6:9F:1E:57:E7:AB:86:9F:A9:F9:40:F6:5A:94
Authority key identifier: 02:A3:40:15:CF:1F:98:FC:B2:24:0C:5F:C9:1E:82:6B:CA:AE:C1:67
Certificate issuer: /CN=02A34015CF1F98FCB2240C5FC91E826BCAAEC167
Certificate serial: 6E87A14B807D9817F5D8C27FB90132F2F5B3EFE8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 13:53:17 +0000
Manifest this update: Wed 23 Sep 2026 13:48:17 +0000
Manifest next update: Thu 24 Sep 2026 15:43:17 +0000
Files and hashes: 1: 3130332e3138352e3235322e302f32342d3234203d3e20313439393132.roa (hash: oJ8l8dMFPY8CyTy4Q0yxOCLUg4RyDgditXXqmbGk6Sg=)
2: 02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl (hash: roq0/SOLu/YhB8Cn6okCysfiNae/UbegSLMNHmJ250k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl
rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 15:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:87:a1:4b:80:7d:98:17:f5:d8:c2:7f:b9:01:32:f2:f5:b3:ef:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A34015CF1F98FCB2240C5FC91E826BCAAEC167
Validity
Not Before: Sep 23 13:48:17 2026 GMT
Not After : Sep 24 15:43:17 2026 GMT
Subject: CN=840C5168C37AA69F1E57E7AB869FA9F940F65A94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:3e:2b:23:bb:31:34:20:14:b2:73:a0:14:
9a:86:9e:92:fb:97:f8:aa:76:4e:95:33:30:9c:3a:
29:f6:4e:88:63:57:aa:b5:61:4f:ef:a5:1c:4a:f4:
57:e5:11:04:8c:c9:e9:95:c0:cf:d7:e5:a1:33:99:
5d:8c:9c:2e:e0:8d:bc:35:b7:33:2c:af:d9:9f:2e:
72:da:17:38:07:78:5f:22:19:0b:8b:72:fc:6c:84:
0b:a0:52:26:78:5e:fc:b2:b4:02:80:23:62:52:6a:
eb:f9:17:32:a1:6b:ac:80:2d:d4:d9:dc:21:6c:09:
cf:4b:6b:03:54:81:e2:a1:99:5c:a0:58:bd:bb:bd:
29:a1:79:45:66:0a:16:c1:53:bb:92:ca:4b:4b:b0:
bf:ce:f1:dd:2f:40:9f:c0:b2:47:b1:8c:ec:a5:b3:
c4:72:de:f1:23:83:dc:77:f1:33:46:51:81:e2:34:
20:aa:cf:80:2f:1f:25:cf:fa:45:b4:b2:4d:f6:fa:
52:0e:89:f1:06:15:a0:56:d0:07:f5:aa:ed:04:3d:
72:38:a4:c4:cd:0a:db:9a:8e:79:b9:26:fc:e6:8d:
38:f8:43:38:f6:1e:02:77:01:c3:75:eb:1f:0b:58:
56:8e:d8:36:b6:d0:dd:69:e1:73:7a:1d:5b:71:38:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0C:51:68:C3:7A:A6:9F:1E:57:E7:AB:86:9F:A9:F9:40:F6:5A:94
X509v3 Authority Key Identifier:
keyid:02:A3:40:15:CF:1F:98:FC:B2:24:0C:5F:C9:1E:82:6B:CA:AE:C1:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:07:67:ae:e5:4d:39:af:3c:0a:cd:64:37:2e:e9:2c:14:50:
97:f6:e8:93:2a:52:4d:38:37:61:da:e7:a3:6d:d4:76:c4:d3:
8d:78:4d:b8:c2:25:86:46:3d:9a:7a:8d:da:83:0f:3e:ab:06:
ea:3c:85:a1:f8:5a:f8:67:94:08:4b:99:50:0b:58:d4:e9:7e:
1a:1c:06:19:a6:b8:be:eb:95:38:6b:19:ec:5f:e6:3f:4c:a0:
cd:d2:cb:5a:43:05:02:96:9b:13:32:d3:9c:8c:33:2e:3b:34:
ee:e4:0d:ee:63:a8:50:51:44:13:5a:15:e0:c5:3f:86:38:5e:
d5:8d:05:79:95:36:bc:2b:50:21:5a:36:3d:b6:02:5d:57:f0:
07:28:70:36:94:44:1c:c9:51:87:4f:46:ac:87:69:5a:f0:d8:
8c:bd:e9:56:b3:aa:4a:65:0d:78:52:0d:18:4a:02:55:1b:0a:
ce:b6:3f:91:f4:c7:a5:35:13:7e:d4:37:4d:e0:05:75:f1:83:
7d:48:b6:e7:6e:5b:f2:98:45:d4:16:30:1a:23:13:71:c0:77:
54:cb:bf:ac:e6:4d:f1:09:e5:7e:2f:3a:72:8d:5f:d9:79:bf:
a6:78:f7:15:7e:76:5a:02:fa:f2:8b:44:65:65:97:d2:de:fd:
0b:8d:e7:f2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUboehS4B9mBf12MJ/uQEy8vWz7+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJBMzQwMTVDRjFGOThGQ0IyMjQwQzVGQzkxRTgyNkJD
QUFFQzE2NzAeFw0yNjA5MjMxMzQ4MTdaFw0yNjA5MjQxNTQzMTdaMDMxMTAvBgNV
BAMTKDg0MEM1MTY4QzM3QUE2OUYxRTU3RTdBQjg2OUZBOUY5NDBGNjVBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYD4rI7sxNCAUsnOgFJqGnpL7
l/iqdk6VMzCcOin2TohjV6q1YU/vpRxK9FflEQSMyemVwM/X5aEzmV2MnC7gjbw1
tzMsr9mfLnLaFzgHeF8iGQuLcvxshAugUiZ4XvyytAKAI2JSauv5FzKha6yALdTZ
3CFsCc9LawNUgeKhmVygWL27vSmheUVmChbBU7uSyktLsL/O8d0vQJ/AskexjOyl
s8Ry3vEjg9x38TNGUYHiNCCqz4AvHyXP+kW0sk32+lIOifEGFaBW0Af1qu0EPXI4
pMTNCtuajnm5JvzmjTj4Qzj2HgJ3AcN16x8LWFaO2Da20N1p4XN6HVtxOEopAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUhAxRaMN6pp8eV+erhp+p+UD2WpQwHwYDVR0j
BBgwFoAUAqNAFc8fmPyyJAxfyR6Ca8quwWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTUyM2QwNjAtYjdhNS00NDU1LTk5NDAtNGZiN2M3MDQ0MzBmLzAvMDJBMzQwMTVD
RjFGOThGQ0IyMjQwQzVGQzkxRTgyNkJDQUFFQzE2Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMkEzNDAxNUNGMUY5OEZDQjIyNDBDNUZDOTFFODI2QkNBQUVD
MTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5
NDAtNGZiN2M3MDQ0MzBmLzAvMDJBMzQwMTVDRjFGOThGQ0IyMjQwQzVGQzkxRTgy
NkJDQUFFQzE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG8HZ67lTTmvPArNZDcu6SwUUJf26JMqUk04
N2Ha56Nt1HbE0414TbjCJYZGPZp6jdqDDz6rBuo8haH4WvhnlAhLmVALWNTpfhoc
BhmmuL7rlThrGexf5j9MoM3Sy1pDBQKWmxMy05yMMy47NO7kDe5jqFBRRBNaFeDF
P4Y4XtWNBXmVNrwrUCFaNj22Al1X8AcocDaURBzJUYdPRqyHaVrw2Iy96Vazqkpl
DXhSDRhKAlUbCs62P5H0x6U1E37UN03gBXXxg31ItuduW/KYRdQWMBojE3HAd1TL
v6zmTfEJ5X4vOnKNX9l5v6Z49xV+dloC+vKLRGVll9Le/QuN5/I=
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:59:19 2026 by rpki-client