
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
File: 2702EC259515C0960B0BFF36647679F0CA781E52.mft (raw, json)
Hash identifier: 2JqbESr8n+wSLiS60d4ptqvij6wjNcx/WDIKhuUyn4s=
Subject key identifier: E9:85:37:AD:1B:F2:A5:96:EB:DD:AF:A1:59:BB:0F:6B:CE:34:FE:0F
Authority key identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
Certificate issuer: /CN=2702EC259515C0960B0BFF36647679F0CA781E52
Certificate serial: 3FA9718F9AAE94E1E1A6A5BEF038695F913C64C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 21:14:48 +0000
Manifest this update: Sat 13 Jun 2026 21:09:48 +0000
Manifest next update: Sun 14 Jun 2026 22:19:48 +0000
Files and hashes: 1: 2702EC259515C0960B0BFF36647679F0CA781E52.crl (hash: vYaLMcJan7A/Ydr44Q/ir2L+mICJE62MUOYgoZdY8cw=)
2: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: vNMbKB+jjAGCqgxCSWzjKIMOhXwlS0DnqcWYtGqskho=)
3: 323430343a636263303a3a2f34302d3430203d3e20313338383433.roa (hash: g1km73POKKg69MSbDnEF0CkpP2rF3ZrF65BD2T6WTQc=)
4: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: SF5csYZOV6O0/pz/yzpUeG3NGqNwVVPBe+gjRAAxx1w=)
5: 3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa (hash: MvYURtqKvXgJtHDe+bGVN+qQ+GvO+Bbw/63OedWxccg=)
6: 3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa (hash: /lklKRwQXzQQDya+GH3WUkfxs3Rw/gHVRuuz1tcXoUE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a9:71:8f:9a:ae:94:e1:e1:a6:a5:be:f0:38:69:5f:91:3c:64:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2702EC259515C0960B0BFF36647679F0CA781E52
Validity
Not Before: Jun 13 21:09:48 2026 GMT
Not After : Jun 14 22:19:48 2026 GMT
Subject: CN=E98537AD1BF2A596EBDDAFA159BB0F6BCE34FE0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:4e:6f:6c:dc:70:49:46:03:c1:1a:69:c5:
60:e5:ef:05:c7:d2:28:f5:9a:fe:d2:7e:bb:a7:a3:
a8:bd:fe:81:44:06:34:ac:b0:e1:c6:a6:c8:96:d3:
6c:13:69:74:46:dc:29:3e:09:29:54:dc:f4:e4:b8:
e5:b1:64:28:58:f8:4d:be:f1:08:20:6a:74:7d:0e:
b2:d2:2f:e7:2d:b3:b8:59:e6:9c:51:30:90:81:1b:
39:90:19:c8:01:bd:13:c4:b3:10:6f:97:72:16:13:
f5:de:ee:50:ef:f4:68:17:e4:37:52:92:e6:8e:78:
8a:b8:48:a3:1c:61:85:73:2f:63:df:8c:fc:bb:d2:
5a:f0:f0:13:9a:d0:7f:d6:82:83:04:9c:48:b2:34:
68:dc:0b:7b:e6:4f:16:e1:ee:49:db:88:03:55:16:
e6:02:60:8f:c2:65:ab:fa:55:9c:e5:7d:bc:f9:0a:
ff:ac:24:76:35:ed:40:ba:e9:ea:9f:27:49:84:29:
eb:79:ac:90:fc:ac:d0:69:c6:9a:8f:1d:8e:ff:7c:
ff:f2:64:03:29:f6:3d:e9:62:c5:81:f5:85:00:29:
52:9a:8c:54:5c:83:65:2e:1e:6f:dc:4a:06:98:da:
d5:24:d6:9b:ba:01:24:cb:9e:b0:f2:40:b3:6a:7e:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:85:37:AD:1B:F2:A5:96:EB:DD:AF:A1:59:BB:0F:6B:CE:34:FE:0F
X509v3 Authority Key Identifier:
keyid:27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:62:4d:d6:f8:b6:27:05:33:88:27:38:fe:90:1f:78:b2:e9:
28:4e:d3:de:9c:90:90:70:a1:b8:96:d2:9a:ea:d3:0c:85:e3:
3f:f0:8f:8d:52:87:91:63:8b:cc:91:70:21:cb:b6:41:d6:04:
82:4e:8e:67:5d:42:e8:89:3d:61:3e:10:e3:7a:64:c9:e5:2c:
17:0a:00:79:1a:22:59:e1:cd:58:38:d2:2b:3b:5e:c1:73:01:
34:b2:91:16:9c:6f:39:25:c5:ea:8c:85:7d:e5:89:18:2d:92:
20:ab:6f:85:ba:0a:e5:90:c3:f9:d1:1c:21:13:a8:08:3e:5f:
32:3f:78:8d:4f:a9:43:89:b7:fd:44:76:00:e8:19:bb:50:fc:
48:bc:a6:d2:9e:0b:95:6c:33:e1:84:e1:cb:2f:4f:c3:25:0e:
9e:fb:2e:35:eb:8e:db:5d:a3:7c:ed:f9:37:c2:e2:0c:88:61:
60:6b:ec:cc:77:cd:71:40:5b:83:fb:79:52:17:c9:d8:fb:87:
20:df:f2:10:b7:c2:47:3d:56:45:08:51:e6:bd:64:36:6d:b5:
2f:59:a2:9e:d8:be:8a:d1:c7:5b:9c:96:5c:b5:4a:ef:a4:18:
9a:0b:c6:4c:27:72:a6:2e:3f:01:34:e5:dd:7b:0b:a9:e6:1f:
14:9e:1f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:48:34 2026 by rpki-client