
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
File: 02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft (raw, json)
Hash identifier: 4lcByEvD4TM9uyL2dRi9X8VStB8qQWoXMXnd44QmYfY=
Subject key identifier: 6A:14:15:32:38:19:BB:16:1E:B0:DD:8B:0B:90:D7:40:C1:28:FA:93
Authority key identifier: 02:A3:40:15:CF:1F:98:FC:B2:24:0C:5F:C9:1E:82:6B:CA:AE:C1:67
Certificate issuer: /CN=02A34015CF1F98FCB2240C5FC91E826BCAAEC167
Certificate serial: 6EF8A2FD6F2B86B34B085E412EC4A62D15FACE6F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:01:34 +0000
Manifest this update: Tue 12 May 2026 19:56:34 +0000
Manifest next update: Wed 13 May 2026 22:02:34 +0000
Files and hashes: 1: 02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl (hash: SyIJGA4Q8NYR0r1+rXI4F7vkCwGnIJczuwDDo+ZIJe8=)
2: 3130332e3138352e3235322e302f32342d3234203d3e20313439393132.roa (hash: oJ8l8dMFPY8CyTy4Q0yxOCLUg4RyDgditXXqmbGk6Sg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl
rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f8:a2:fd:6f:2b:86:b3:4b:08:5e:41:2e:c4:a6:2d:15:fa:ce:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A34015CF1F98FCB2240C5FC91E826BCAAEC167
Validity
Not Before: May 12 19:56:34 2026 GMT
Not After : May 13 22:02:34 2026 GMT
Subject: CN=6A1415323819BB161EB0DD8B0B90D740C128FA93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:5e:aa:81:6d:c7:eb:6f:43:8d:6e:b5:98:
6a:5a:aa:18:8e:55:79:80:ce:02:40:51:94:b8:f8:
f4:32:3d:5b:81:71:e2:d0:bd:06:5b:f9:be:60:f7:
61:54:ff:32:ca:f7:4c:e3:cb:dc:0b:f7:fa:b8:87:
5a:cf:7b:55:c9:65:81:97:d0:11:10:1c:d8:23:9f:
90:ee:e4:f1:54:00:33:f3:a0:6a:79:ff:38:c6:82:
0f:3f:a6:9c:d8:f8:36:0f:99:7c:d8:90:27:9f:6c:
ab:52:71:e4:8e:89:db:4f:50:df:3d:6b:da:fa:78:
f3:31:e5:7b:f7:2d:52:61:b1:da:dc:51:96:e6:62:
df:d3:50:12:ee:48:03:b7:a9:6f:80:4f:c3:8a:f2:
14:bb:d2:89:a0:98:fb:3f:13:0d:35:91:16:3a:31:
d5:be:26:8c:e6:4a:cb:36:d2:9e:86:80:35:72:86:
ce:24:28:1d:a4:3f:1b:95:21:90:a5:d8:f9:2d:48:
47:ea:3c:74:5d:36:7a:ab:02:84:1a:8e:e9:2c:dc:
a9:5f:46:f4:74:82:f5:01:e0:c1:67:9a:95:e5:a7:
ed:fc:b3:fd:70:80:7a:5b:e2:eb:82:75:f8:48:ba:
d5:a4:b6:74:8b:6e:75:c5:04:d0:ae:57:e0:99:ed:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:14:15:32:38:19:BB:16:1E:B0:DD:8B:0B:90:D7:40:C1:28:FA:93
X509v3 Authority Key Identifier:
keyid:02:A3:40:15:CF:1F:98:FC:B2:24:0C:5F:C9:1E:82:6B:CA:AE:C1:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:32:d8:e7:9e:1b:aa:6f:47:c8:fc:ad:23:7a:2c:94:8f:9c:
c5:a3:d9:d1:03:46:13:c5:86:43:88:33:a7:8b:e4:84:35:bd:
f8:95:8f:9e:20:9c:20:b6:48:3d:2a:7d:44:ba:53:8b:6f:f2:
01:e1:bb:37:de:75:12:b6:32:2c:f1:d2:3d:a7:f8:7d:12:19:
c4:ce:5f:8b:21:a5:82:54:0b:1e:5f:e0:f9:4d:58:02:49:4e:
00:1c:1f:65:3f:d1:6e:f9:34:29:bb:72:fc:a1:4d:59:92:08:
ae:99:8f:ad:58:81:55:cd:34:89:ab:35:0f:d2:3d:2f:b7:9f:
2c:c3:00:38:00:87:78:b4:f9:4c:70:83:10:98:93:cd:62:cf:
12:9d:2a:88:80:47:26:6c:80:18:26:db:8c:6a:3b:08:19:74:
0e:05:d9:73:33:c9:af:f7:30:40:97:79:d1:5b:92:82:28:4f:
7b:41:08:4a:d6:87:79:0d:66:a8:27:f3:ec:3f:92:e4:6e:e1:
93:62:e0:1c:4d:fd:a9:2f:0b:21:23:18:b1:ea:e6:a8:30:65:
a5:ff:06:56:dd:27:9b:7d:1d:f2:47:24:cb:ae:c6:45:42:35:
b9:67:42:83:64:f6:a8:5a:9a:c7:22:d6:a1:14:0e:23:a2:20:
59:c9:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:00 2026 by rpki-client