
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
File: 2702EC259515C0960B0BFF36647679F0CA781E52.mft (raw, json)
Hash identifier: MjEA9bN2nXCH31Ob887KlfA7wKOuXH4TWxjAo5ltZcg=
Subject key identifier: 0F:EC:0E:91:13:84:62:77:0A:97:BC:C7:8F:DE:69:D9:DB:71:F3:C7
Authority key identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
Certificate issuer: /CN=2702EC259515C0960B0BFF36647679F0CA781E52
Certificate serial: 32E34C9B381F19A8EF1FE89D2A3FCD64C66506C7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
Manifest number: 74
Signing time: Tue 28 Jul 2026 13:53:32 +0000
Manifest this update: Tue 28 Jul 2026 13:48:32 +0000
Manifest next update: Wed 29 Jul 2026 17:46:32 +0000
Files and hashes: 1: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: SF5csYZOV6O0/pz/yzpUeG3NGqNwVVPBe+gjRAAxx1w=)
2: 2702EC259515C0960B0BFF36647679F0CA781E52.crl (hash: EDv+m0V1zoewpy9mJpQPdJRFJk0DGXBAhIDOZr/jWH0=)
3: 3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa (hash: /lklKRwQXzQQDya+GH3WUkfxs3Rw/gHVRuuz1tcXoUE=)
4: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: vNMbKB+jjAGCqgxCSWzjKIMOhXwlS0DnqcWYtGqskho=)
5: 323430343a636263303a3a2f34302d3430203d3e20313338383433.roa (hash: g1km73POKKg69MSbDnEF0CkpP2rF3ZrF65BD2T6WTQc=)
6: 3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa (hash: MvYURtqKvXgJtHDe+bGVN+qQ+GvO+Bbw/63OedWxccg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e3:4c:9b:38:1f:19:a8:ef:1f:e8:9d:2a:3f:cd:64:c6:65:06:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2702EC259515C0960B0BFF36647679F0CA781E52
Validity
Not Before: Jul 28 13:48:32 2026 GMT
Not After : Jul 29 17:46:32 2026 GMT
Subject: CN=0FEC0E91138462770A97BCC78FDE69D9DB71F3C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:e1:92:38:42:71:61:55:e8:e8:be:d6:70:
9e:cc:03:85:96:ba:0d:f1:50:da:2b:2f:40:3e:81:
79:1b:71:61:d7:18:14:41:c3:ee:90:bf:72:22:72:
9e:c1:cf:81:2d:b9:ae:c8:90:12:d5:21:3d:4d:e7:
e1:40:62:21:18:7c:b3:9b:66:d1:60:68:c6:8c:6b:
e2:5e:b9:c1:77:30:54:dd:ab:0d:d4:a9:3e:fa:94:
c0:ce:95:60:34:99:3c:a7:af:04:71:06:b5:24:3e:
7d:c8:68:c9:ca:50:25:a0:12:4f:20:e7:05:c9:e7:
0c:23:e3:37:58:47:dc:af:dd:25:ff:32:3c:4f:62:
31:1c:ad:11:08:73:08:a6:3d:c8:64:93:e8:0a:44:
cb:88:3a:ee:b9:8d:b4:55:bc:90:1c:ed:40:64:f9:
d1:2b:09:b6:01:20:1a:20:4c:69:8c:8a:ba:99:42:
fc:c7:69:2f:87:fc:92:d4:e7:d7:a5:dc:f2:f9:50:
40:21:39:b7:8d:1a:cd:3b:37:4c:c5:b9:d6:c6:52:
70:72:0a:4d:db:14:9f:ff:21:6c:73:04:f7:4d:7d:
cf:58:a9:9d:45:4a:58:48:d8:21:d0:61:38:62:d9:
c5:bc:61:9b:71:87:bb:ca:5c:78:d2:26:d9:25:0a:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EC:0E:91:13:84:62:77:0A:97:BC:C7:8F:DE:69:D9:DB:71:F3:C7
X509v3 Authority Key Identifier:
keyid:27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:39:fd:2b:9a:ff:85:49:0b:cd:26:3c:6f:dc:36:3b:08:76:
27:cf:f0:10:25:c8:fe:bc:a8:b4:58:5b:db:51:d0:94:50:1c:
6c:e1:3c:00:9f:76:b5:bb:0d:0e:c7:c8:a2:ec:67:fd:21:b9:
77:ba:10:dc:6f:e4:17:d0:26:f9:5b:bd:d6:c2:9d:e9:28:c3:
72:28:c0:a2:81:50:fa:53:f0:b0:b3:5a:01:6c:27:80:1c:d0:
08:95:c5:30:cf:70:16:67:75:60:29:56:8c:16:7f:18:5e:51:
e1:13:66:d7:7b:20:49:31:cd:f8:50:db:d4:9b:dc:d4:90:4b:
ad:08:46:bf:79:6c:68:c2:94:3d:2a:b5:b2:21:07:97:85:ca:
bf:bd:5f:af:2e:56:4f:e8:4f:bd:5f:d4:cf:9a:75:2c:dc:c4:
8e:52:bd:d3:52:84:bc:df:b0:1b:7a:d2:ec:3b:6e:44:ac:7a:
5d:81:dc:ee:95:04:f3:db:c3:bb:de:fe:63:a9:3f:81:39:12:
e1:a2:1d:60:f9:69:ac:ed:bf:1d:2c:48:31:cd:5a:a2:5d:a7:
cc:a6:ab:51:74:3a:53:06:e0:b1:17:80:ee:9c:a3:30:54:2b:
ea:cc:79:98:40:0a:bd:39:19:70:99:33:44:6d:e2:5f:6c:6d:
2e:12:0b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:44:19 2026 by rpki-client