
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
File: 02A914400077F3E213C8972280DBD775A6B4C27C.mft (raw, json)
Hash identifier: LwgoraKt3l1zwikG/nKpg8VTebB3Q90hgohY+2A42QA=
Subject key identifier: AF:51:7E:9A:21:00:4B:98:FD:EE:E5:00:F6:AC:C0:E1:4F:09:24:4A
Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C
Certificate issuer: /CN=02A914400077F3E213C8972280DBD775A6B4C27C
Certificate serial: 25E36723C7A705CD53AB26B8F9CC8A54EBB0CE50
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 18:42:07 +0000
Manifest this update: Sat 13 Jun 2026 18:37:07 +0000
Manifest next update: Sun 14 Jun 2026 19:00:07 +0000
Files and hashes: 1: 02A914400077F3E213C8972280DBD775A6B4C27C.crl (hash: lxnvjNUKTGwsOSpCWvxopKAH1oaBy5H7vuoCqxrBZ6s=)
2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: GtvHkVY9/W43sI4HiI73HEw8h6eq1YXH6SXHhFSgbQc=)
3: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: 7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=)
4: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl
rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e3:67:23:c7:a7:05:cd:53:ab:26:b8:f9:cc:8a:54:eb:b0:ce:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C
Validity
Not Before: Jun 13 18:37:07 2026 GMT
Not After : Jun 14 19:00:07 2026 GMT
Subject: CN=AF517E9A21004B98FDEEE500F6ACC0E14F09244A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:a7:48:f6:3e:fc:97:43:4c:dd:cb:7d:c8:
07:1b:15:55:b3:c5:d2:d8:7c:00:43:88:43:f4:d4:
8c:15:a2:80:cd:33:b8:39:ab:f6:db:3f:bb:9d:5b:
f5:60:a7:1c:3f:94:5d:75:5c:5f:71:ed:01:c1:0b:
ea:b7:25:df:b8:e8:bd:32:b9:7c:4d:5a:87:59:02:
39:d8:16:a8:5e:7b:90:7a:26:56:c3:fa:9e:ff:5a:
f8:02:f9:e3:7c:88:3e:85:6f:36:a9:14:52:9b:bb:
e6:31:5f:32:2c:10:f2:a0:2f:83:25:11:bb:bd:a3:
f8:e1:c8:46:74:46:c7:f0:a5:11:06:e3:fe:a9:0d:
3f:c7:1b:2c:86:f8:67:c7:2b:7f:05:00:46:cf:b9:
c9:6e:77:b2:bb:8e:2b:0c:af:1a:d3:4c:20:c2:12:
d0:c0:d9:db:3e:4a:13:89:2d:da:e1:16:2a:86:b1:
bc:a0:7e:d6:a2:41:4e:14:5a:5d:54:c7:dd:a3:17:
25:45:52:c6:dd:3d:85:8d:d4:c8:85:1f:25:06:b3:
ae:d5:43:be:d5:62:91:bb:d9:1b:e3:22:47:36:d1:
22:dc:38:60:2b:39:1a:1b:86:24:6f:fa:12:c4:3f:
91:9c:a1:26:d1:92:b0:9e:c1:d1:7a:7f:49:1a:5e:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:51:7E:9A:21:00:4B:98:FD:EE:E5:00:F6:AC:C0:E1:4F:09:24:4A
X509v3 Authority Key Identifier:
keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fc:19:60:c5:e9:7f:02:56:52:a6:a0:91:43:69:f0:29:9b:
3a:78:dc:98:64:f0:7e:63:57:3f:c9:63:66:b4:1c:5c:70:80:
cd:e7:8e:6a:08:e0:87:bb:c4:d4:5a:0b:0f:78:d1:ad:a3:0c:
b1:11:8d:30:92:73:18:78:71:0c:06:b2:44:13:b6:a8:40:6d:
4c:99:82:9a:e7:89:2c:e3:77:49:67:45:4e:0e:2a:52:aa:b0:
92:59:ac:c4:0d:68:14:ea:77:21:49:b6:f6:51:02:bd:87:41:
84:7a:83:d1:b7:6d:37:8c:4c:77:40:eb:bc:93:58:b3:c8:59:
29:92:d1:af:fd:75:5d:93:92:7c:a9:53:bd:c7:7c:7c:ac:80:
34:f3:a3:68:b3:63:c4:20:9d:15:a9:84:7f:6f:7f:0b:d4:d0:
f5:2d:42:dd:0f:18:bc:7e:dc:7a:f9:0d:48:d4:dc:3e:16:d5:
ca:a5:8e:66:3f:ac:d9:80:24:cc:0e:91:e6:c8:3a:5d:66:00:
db:84:4e:bc:86:d8:d9:a2:fb:d4:0f:d6:ef:e4:88:7d:a5:86:
ae:d7:a1:dd:ee:ba:28:8f:c8:27:82:a5:00:3e:99:1e:a4:d6:
5f:cc:61:f4:d4:38:66:9c:9c:2b:da:d3:5e:2a:4c:b4:e0:37:
47:b1:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:39:25 2026 by rpki-client