
$ rpki-client -vvf rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
File: 02A8ED077C03E43C338DFC14D6192E46DA534B52.mft (raw, json)
Hash identifier: f+qUNYVpWohbIuyLNCpGqPn2Fu+Xr6tBRow92JZpjbg=
Subject key identifier: 32:62:A5:04:2D:CB:CF:6F:F9:3E:FD:FC:AC:1E:96:B6:3C:11:E7:30
Authority key identifier: 02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
Certificate issuer: /CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Certificate serial: 0ACB531F780B3B52BDAB444B7BA92B52AA57B0B1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 16:54:41 +0000
Manifest this update: Tue 16 Jun 2026 16:49:41 +0000
Manifest next update: Wed 17 Jun 2026 20:21:41 +0000
Files and hashes: 1: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 5QRCY/F26LQx+cpm0T1M7MYTi3ygt+T6ugETEbjQYdg=)
2: 02A8ED077C03E43C338DFC14D6192E46DA534B52.crl (hash: kz7XKbVXf+RBOuaJYv6RYCOojxA8YR1YGEiZQfjkJ4M=)
3: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: 3pwrvYXUcXwtoiYb2fFzF/R5rpxEebJsT3YYZEfo+OM=)
4: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: d3o2aJg5sY9JGfN+Wb+JV5Ly3qfvYxcESwubxcNcZ8g=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:cb:53:1f:78:0b:3b:52:bd:ab:44:4b:7b:a9:2b:52:aa:57:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Validity
Not Before: Jun 16 16:49:41 2026 GMT
Not After : Jun 17 20:21:41 2026 GMT
Subject: CN=3262A5042DCBCF6FF93EFDFCAC1E96B63C11E730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ed:4a:69:bf:26:e7:d8:41:d2:f7:16:55:93:
ef:4e:66:6c:8e:01:7a:f8:c3:b2:43:d4:b1:97:12:
82:e4:95:f0:d2:d6:ba:fe:32:17:56:62:95:4a:d3:
9f:71:ba:f6:81:59:52:e0:30:4d:36:2c:7b:56:df:
d1:d1:46:71:2e:ab:6d:78:6c:bb:d6:fc:9c:e6:ab:
a5:a2:dd:ba:24:35:ae:5c:9a:94:1c:17:db:18:e3:
0a:40:2f:bb:6d:28:13:94:16:e4:73:8d:0e:16:c6:
dd:af:af:1a:a0:23:86:af:80:37:b8:12:ae:5b:a3:
12:11:fb:54:f9:d1:5b:23:ee:6a:e7:dd:b5:44:08:
24:32:20:56:fb:b7:2e:ef:99:43:9b:56:21:ac:05:
9e:64:b6:37:eb:dd:f1:a6:f3:2e:a7:34:6d:70:1b:
74:6f:8d:f1:28:60:ed:9c:05:a0:4f:fe:e8:26:c2:
20:0b:7a:26:58:d1:dc:ea:f7:87:d1:9e:40:80:af:
2b:79:85:c3:e6:62:8a:3d:8e:ea:8f:6e:34:8c:4e:
d1:01:5c:6c:b9:38:8a:99:95:cc:c6:66:b3:ae:c3:
55:33:f1:51:df:6e:6c:23:d8:a3:cc:51:74:4e:72:
60:ae:fb:e4:9a:af:c2:6e:f5:7d:4a:04:3f:6d:2d:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:A5:04:2D:CB:CF:6F:F9:3E:FD:FC:AC:1E:96:B6:3C:11:E7:30
X509v3 Authority Key Identifier:
keyid:02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1e:2a:09:71:e0:dd:63:c4:1e:e4:0e:46:2a:7a:10:ab:6e:
d7:21:21:e9:e1:db:c8:44:4c:90:af:ea:53:f5:d5:32:cd:c2:
3c:07:bb:67:e6:8d:7c:cd:09:98:fe:ba:1f:a9:62:38:74:29:
05:57:9e:85:20:00:fc:ff:13:68:25:58:a8:41:36:ea:b4:b3:
7a:0b:87:84:13:66:cf:44:da:e1:0c:c6:ff:78:d7:4c:51:2d:
ee:37:47:f7:c7:51:2f:bb:40:75:bd:4f:93:da:b6:a7:78:78:
ce:99:dd:ca:5c:ad:b2:ac:5d:92:51:dc:ba:3c:41:8b:dc:ed:
7a:3d:c0:6d:0e:d4:4b:ef:16:91:41:a7:27:18:10:b2:26:ed:
2e:de:48:0f:53:2d:9b:9f:c1:99:f2:42:1c:9a:0e:60:f2:90:
11:05:f3:ec:1c:a8:08:27:4f:96:16:b9:4a:f3:47:4e:96:4c:
e5:1b:d5:a6:f8:3f:4f:5e:62:33:48:25:10:7b:5c:4c:df:f8:
ea:b0:55:4e:41:3f:cf:44:c1:d3:ea:1d:6f:2d:88:f6:e8:f5:
f2:88:59:d9:fd:18:99:83:b1:aa:25:f5:a1:ad:cc:9c:92:83:
8b:08:68:22:2a:f7:54:b3:a1:32:e0:c0:56:9b:26:47:37:59:
46:16:1b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:45:41 2026 by rpki-client