
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
File: 02A914400077F3E213C8972280DBD775A6B4C27C.mft (raw, json)
Hash identifier: sbvqAn9lGJQR+l1iKoXwq7Udq4Q1fgnSZmRqLoSHC5Q=
Subject key identifier: 3C:38:45:40:EE:59:09:32:E1:4F:6D:D6:85:34:24:87:EF:32:55:04
Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C
Certificate issuer: /CN=02A914400077F3E213C8972280DBD775A6B4C27C
Certificate serial: 1A2A25E0FF4189CF517B18926189AE4368C3E56B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 23:51:03 +0000
Manifest this update: Tue 28 Jul 2026 23:46:03 +0000
Manifest next update: Thu 30 Jul 2026 01:05:03 +0000
Files and hashes: 1: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: 7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=)
2: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=)
3: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: GtvHkVY9/W43sI4HiI73HEw8h6eq1YXH6SXHhFSgbQc=)
4: 02A914400077F3E213C8972280DBD775A6B4C27C.crl (hash: XVopitGEAhazav99aaT/8VGCzySif0dj4pUCcrNnVEg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl
rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2a:25:e0:ff:41:89:cf:51:7b:18:92:61:89:ae:43:68:c3:e5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C
Validity
Not Before: Jul 28 23:46:03 2026 GMT
Not After : Jul 30 01:05:03 2026 GMT
Subject: CN=3C384540EE590932E14F6DD685342487EF325504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:a2:7d:b5:e4:91:31:c0:9d:28:1b:ac:e4:
58:18:e3:95:4b:d5:10:42:40:69:ed:fd:ff:6e:43:
cc:5a:61:b0:b3:02:29:13:f5:c4:2c:8c:a7:50:0e:
d6:a9:3d:d6:4a:c9:fb:05:e9:e0:17:61:83:fb:85:
cd:50:64:0d:5e:ba:e1:c8:2c:16:ca:35:12:83:96:
b1:1e:da:cb:58:6b:01:76:37:81:00:98:6d:15:2e:
47:d3:4a:89:18:48:dd:2e:2f:77:16:19:35:0c:fd:
09:6c:89:52:a1:28:8b:c4:8e:f1:ec:db:18:c1:10:
24:64:09:b8:ad:71:fb:ee:72:46:73:94:4e:95:ba:
87:28:3a:70:48:fe:f5:ce:65:b1:4e:53:68:fc:67:
28:14:d9:f2:58:9a:4d:ca:07:2c:16:4c:d7:95:6b:
99:e9:9a:57:a0:7f:1e:2e:5b:15:1c:a6:ff:03:1c:
d3:a8:48:88:de:ca:76:37:e3:d0:6c:5b:12:15:ea:
92:65:84:c4:16:06:49:08:6f:80:47:fa:f0:92:3f:
05:98:67:a3:63:85:84:e8:95:9a:79:3d:b1:b3:88:
7a:5e:0d:af:7d:79:69:17:5a:de:ff:10:de:48:c6:
ea:29:04:79:cf:5b:7f:ce:f4:c9:23:07:a5:ca:bf:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:38:45:40:EE:59:09:32:E1:4F:6D:D6:85:34:24:87:EF:32:55:04
X509v3 Authority Key Identifier:
keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7d:f6:12:e4:6d:84:9b:62:e7:69:8b:b3:8a:77:4f:b8:cb:
4f:ff:61:38:b0:f7:82:ed:4b:88:df:21:04:bb:34:96:43:a1:
3d:d6:37:37:ba:3d:5d:62:de:50:7d:cc:53:b8:a5:7d:67:31:
a2:31:c2:16:d7:d1:02:cc:cc:5d:d5:fb:6e:f1:2a:98:3c:98:
1c:c7:3b:21:cb:ff:52:89:6c:cd:6b:ba:c3:39:a6:07:88:8e:
fc:25:30:80:49:6d:a8:9c:93:da:bf:a7:68:9f:e4:60:95:99:
47:20:0c:0b:cb:31:a5:b7:f2:73:41:8f:42:55:bb:3f:dd:3f:
2c:1b:96:3f:02:62:95:86:69:0d:65:df:54:45:03:4d:86:b1:
03:bd:fc:75:7c:23:ed:75:23:31:22:70:a4:1d:23:64:44:36:
77:8e:2c:45:8f:10:31:65:e5:17:37:cc:f0:2f:81:4e:f6:50:
50:7e:de:4d:ae:61:a0:fa:7e:24:6d:23:41:30:1c:2d:cd:1c:
3a:9b:f2:16:6c:2f:0b:15:c7:e9:48:d5:b2:b1:e6:4d:d3:62:
b5:82:bb:32:1b:b0:b3:c1:cc:d4:f6:52:20:55:b9:71:27:25:
d3:a7:d0:38:c9:bb:05:cb:f0:02:ab:37:40:63:cc:76:5a:e2:
68:84:4f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:36 2026 by rpki-client