
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
File: 2702EC259515C0960B0BFF36647679F0CA781E52.mft (raw, json)
Hash identifier: iziaHZttDi/fkdP+oM+rc8AaV1hIX40UuO/s/Hp2qy8=
Subject key identifier: 41:02:45:12:57:F1:AC:12:D1:D3:32:24:E0:28:A6:64:9D:AE:8E:54
Authority key identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
Certificate issuer: /CN=2702EC259515C0960B0BFF36647679F0CA781E52
Certificate serial: 0F63A5F2EECFC41F21CD4E3268F02C4A33A967AE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
Manifest number: DF
Signing time: Sat 17 Oct 2026 04:55:13 +0000
Manifest this update: Sat 17 Oct 2026 04:50:13 +0000
Manifest next update: Sun 18 Oct 2026 08:03:13 +0000
Files and hashes: 1: 323430343a636263303a3a2f34302d3430203d3e20313338383433.roa (hash: g1km73POKKg69MSbDnEF0CkpP2rF3ZrF65BD2T6WTQc=)
2: 2702EC259515C0960B0BFF36647679F0CA781E52.crl (hash: niUIv+qFEVYgd4iS/t7vPxc6VpZS6QCNTKOazdpAHbE=)
3: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: vNMbKB+jjAGCqgxCSWzjKIMOhXwlS0DnqcWYtGqskho=)
4: 3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa (hash: MvYURtqKvXgJtHDe+bGVN+qQ+GvO+Bbw/63OedWxccg=)
5: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: SF5csYZOV6O0/pz/yzpUeG3NGqNwVVPBe+gjRAAxx1w=)
6: 3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa (hash: /lklKRwQXzQQDya+GH3WUkfxs3Rw/gHVRuuz1tcXoUE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 05:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:63:a5:f2:ee:cf:c4:1f:21:cd:4e:32:68:f0:2c:4a:33:a9:67:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2702EC259515C0960B0BFF36647679F0CA781E52
Validity
Not Before: Oct 17 04:50:13 2026 GMT
Not After : Oct 18 08:03:13 2026 GMT
Subject: CN=4102451257F1AC12D1D33224E028A6649DAE8E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cb:23:fd:d6:02:17:4b:1a:4f:16:70:cb:03:
bb:64:c9:69:6f:7b:fe:f9:7b:30:87:08:ca:d0:12:
a7:65:46:e6:69:29:8b:7b:52:fe:4f:51:a2:6b:5f:
de:46:dd:0f:4b:4c:1c:3c:89:08:04:ee:47:f3:bb:
e1:e5:6a:14:37:1b:d3:38:ac:9b:ae:c0:92:8f:1e:
d1:b8:ce:a2:e8:31:c4:fb:60:ed:a7:dc:8d:67:db:
4e:9a:4f:55:f7:4b:4c:45:0c:de:d3:ce:09:92:1f:
b6:57:83:68:73:b3:73:2f:39:78:c2:6f:01:05:9b:
ac:05:53:0f:9f:09:3a:01:89:ea:a9:33:5f:b5:9b:
c5:56:d8:1c:2a:9a:b0:64:5f:9f:9a:75:ab:6f:66:
11:5c:4e:56:b2:41:a4:e1:fa:f0:ed:65:95:65:1c:
24:3a:3e:dc:6d:4c:31:9f:29:64:6e:bd:e9:49:ba:
06:9e:e4:1d:1e:62:b0:e2:0d:14:65:87:1e:2c:84:
20:eb:f8:9d:c3:72:0c:0f:2a:2b:1e:55:2a:73:89:
d7:17:ce:4f:b1:23:dd:93:84:57:f3:5c:3c:1d:d9:
bf:8b:3d:8b:ee:e9:e4:9d:be:88:fd:28:62:97:3d:
aa:7c:cc:4b:c3:32:fc:8c:c0:19:e2:ac:60:a9:4f:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:02:45:12:57:F1:AC:12:D1:D3:32:24:E0:28:A6:64:9D:AE:8E:54
X509v3 Authority Key Identifier:
keyid:27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2a:b8:3e:14:d7:42:40:d1:b5:3f:05:d3:dd:bf:50:58:a1:
e7:b0:37:ec:69:a5:81:8a:14:14:ea:46:67:c1:68:d3:95:b8:
8e:26:68:d4:7a:46:96:94:06:20:34:ca:ff:75:a5:4f:0a:48:
db:59:10:1e:63:bd:a8:ce:64:ea:9d:4d:83:c0:bf:16:3a:2c:
2a:99:76:76:20:72:e3:ff:af:3a:db:90:c8:48:0f:0a:4f:f2:
98:5e:9d:25:e5:c4:55:cf:6a:ca:64:c9:de:44:09:85:a6:a3:
53:ed:eb:ac:70:db:44:7e:e9:5c:48:01:22:d6:c5:ef:2e:88:
0a:1d:5a:c6:de:e1:7c:d2:f2:8b:88:0a:cd:ab:1f:c9:be:ac:
fa:75:6f:37:f0:0b:ec:f0:d4:ae:f9:dd:48:e8:e4:74:aa:e2:
51:cd:36:33:68:84:cc:33:68:4f:a0:a0:92:ce:bd:f3:43:ff:
24:09:5b:32:37:9e:25:0a:fe:0b:8b:a9:29:3d:c4:04:a6:96:
91:a5:8e:29:8d:55:99:59:40:62:ce:03:2a:b1:52:a9:48:49:
cd:15:b7:84:c9:d2:c5:68:1c:01:2e:03:97:21:ed:63:83:ee:
dc:a0:99:f3:bc:17:0d:2a:91:e6:f0:d9:64:2d:de:59:9b:74:
2c:d1:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:01:25 2026 by rpki-client