
$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft
File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json)
Hash identifier: kSV1lsW8xPveg/Ry7U5HXET7NacSojV0ChZj2+nWic8=
Subject key identifier: A8:47:8A:78:72:55:15:37:B0:84:7E:DE:4F:A0:AB:CB:53:FE:45:2F
Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38
Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438
Certificate serial: 406A698B13CE70D5AFE4AC7CC9F947B39A949B42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft
Manifest number: 0122
Signing time: Sun 01 Mar 2026 01:50:46 +0000
Manifest this update: Sun 01 Mar 2026 01:45:46 +0000
Manifest next update: Wed 04 Mar 2026 03:22:46 +0000
Files and hashes: 1: 020EA2304929066809CA6F723574798639D77438.crl (hash: K7KIGCl+hikQIi/44rhZGw0uizbj4FLj+UkHzSm9qi4=)
2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=)
3: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl
rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 03:22:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:6a:69:8b:13:ce:70:d5:af:e4:ac:7c:c9:f9:47:b3:9a:94:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020EA2304929066809CA6F723574798639D77438
Validity
Not Before: Mar 1 01:45:46 2026 GMT
Not After : Mar 4 03:22:46 2026 GMT
Subject: CN=A8478A7872551537B0847EDE4FA0ABCB53FE452F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:4c:7b:a9:fb:d7:97:1e:94:b5:63:ab:ec:
4d:37:6b:ab:d3:d4:40:42:cc:48:1b:0d:79:a7:c3:
e9:ec:be:04:bd:03:73:e8:93:9f:ff:ee:38:54:e2:
3f:7e:de:f5:bd:3b:f3:88:e1:56:73:5c:7f:74:79:
34:0b:e6:7d:ce:3b:f5:5d:e5:c9:3c:c9:45:61:c2:
a4:6b:73:63:15:9f:20:c8:a4:d6:4a:2c:80:a1:5a:
b3:40:a4:14:d9:0e:e7:1c:b9:d0:dd:08:ac:c8:46:
fc:7f:25:82:cb:bc:37:51:68:75:2e:36:51:29:fe:
4e:fd:a9:f9:0b:b9:42:86:79:88:6a:8c:84:64:1f:
0c:2e:2c:0b:60:a8:77:34:fa:d1:19:54:c0:3a:30:
26:83:46:aa:6a:de:33:17:f4:ab:9c:06:e7:59:8f:
a7:82:3b:08:b0:34:00:0f:45:51:f3:9e:b3:bf:3b:
45:c2:b6:c3:59:f7:36:5d:ff:7a:32:62:19:e1:8e:
2d:a8:96:bc:67:8b:d7:09:98:d9:75:0b:81:58:43:
5b:41:fb:aa:54:15:d3:90:8d:56:ea:92:46:3d:3e:
4c:16:c2:ff:cf:92:97:8a:42:f0:39:b1:17:9a:7f:
ad:d4:de:61:70:e9:b8:47:fb:ec:3e:ed:2a:d0:48:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:8A:78:72:55:15:37:B0:84:7E:DE:4F:A0:AB:CB:53:FE:45:2F
X509v3 Authority Key Identifier:
keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:aa:8d:51:16:1f:81:f2:1e:bc:bb:a0:16:4b:a1:b4:e6:06:
6c:c7:b8:4a:32:2e:b6:1d:6f:60:31:ec:ae:56:33:27:92:98:
da:c1:89:f2:a5:ef:2d:8b:fa:bd:da:0a:d0:e4:ef:2a:ec:66:
9f:6e:15:07:b2:0d:f5:0f:12:f5:5f:35:f0:3d:5f:a0:d9:5b:
d6:12:1c:3e:c7:6a:27:2e:09:f6:4b:bc:f9:bd:2f:3b:2b:18:
68:ee:d1:34:a3:7b:c8:a9:70:20:68:9c:a1:da:ce:8f:de:76:
83:28:26:e7:83:e9:51:35:f2:a6:de:eb:06:fa:bf:0d:a6:85:
f7:98:30:ac:81:bb:c4:84:42:d5:71:d5:db:e7:1e:07:b8:e0:
39:a9:a4:54:a6:06:93:2f:50:b5:98:f4:c4:cf:eb:ea:1f:18:
a5:61:09:d0:46:0d:ba:5f:8c:82:65:a8:be:be:90:80:32:b5:
f5:8c:13:31:59:91:13:dc:45:5d:3f:a3:26:09:8d:a0:c3:83:
51:90:3c:4d:57:23:8f:5d:ff:01:76:be:ee:a5:3a:74:01:78:
3f:3a:54:f3:d7:04:a8:78:05:ca:f6:16:b6:bf:af:fb:83:f8:
5d:2e:79:5f:41:76:79:67:95:69:3c:26:e8:49:74:47:22:ce:
ea:bd:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:49 2026 by rpki-client