
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
File: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft (raw, json)
Hash identifier: /Fjwl2bkVRcXBTpGEQ305F9j4gMDxad4NgkPodc5vPg=
Subject key identifier: AB:A3:F3:FD:FA:49:07:82:D7:2F:4A:4F:E3:C7:63:5C:67:1F:44:DC
Authority key identifier: 1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF
Certificate issuer: /CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF
Certificate serial: 68292173B35A401603423E774367450CF6BD31E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
Manifest number: 38
Signing time: Sat 13 Jun 2026 08:18:57 +0000
Manifest this update: Sat 13 Jun 2026 08:13:57 +0000
Manifest next update: Sun 14 Jun 2026 10:56:57 +0000
Files and hashes: 1: 1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl (hash: hH9DHpADZZBR5UTMznY0FIlOStnq9wu0oacj+LUk/8E=)
2: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: Je18gPRqgq+WsGNVuHao3MPV58XjK3X72Kp18GA2rlA=)
3: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: G3yTjAsTBJcMcArecaYX/yOP7athsjKmul3O/4eoKrU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl
rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 10:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:29:21:73:b3:5a:40:16:03:42:3e:77:43:67:45:0c:f6:bd:31:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A2902CA140E59A2AE35FF32B4F6D120A03741DF
Validity
Not Before: Jun 13 08:13:57 2026 GMT
Not After : Jun 14 10:56:57 2026 GMT
Subject: CN=ABA3F3FDFA490782D72F4A4FE3C7635C671F44DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:32:49:2f:ef:74:79:44:16:26:95:88:30:
cd:81:89:c6:b6:4f:74:54:02:a8:81:e9:27:74:63:
5c:c3:94:0c:3d:53:ab:17:81:59:73:a6:8d:f9:ff:
5c:bc:21:0f:20:45:72:9a:4a:46:cf:1d:8a:92:a6:
66:1d:d3:b1:2d:e3:2c:81:fd:70:ea:87:bc:6a:db:
cf:6b:c8:80:a0:4f:9b:8c:46:f2:b1:64:9e:b2:7a:
bf:0d:52:99:0f:52:8b:33:1c:83:86:15:03:58:3b:
da:ef:1b:b3:8e:d1:94:47:fb:40:ed:80:bb:3d:51:
db:91:f4:98:68:ee:90:6f:57:c1:16:8c:e7:0a:06:
99:bb:e5:f7:ed:ae:cd:19:ab:53:f6:d8:60:af:c2:
7c:ab:e1:0d:a7:11:b6:cc:22:ae:53:f7:72:6c:8c:
ca:4c:7f:a4:3a:97:eb:c8:3d:db:9f:d8:2b:58:42:
04:63:bb:a9:68:17:f8:82:3e:2c:ec:5d:94:76:dd:
67:aa:ef:ee:94:a7:08:c5:14:ec:28:a0:48:09:92:
e6:f7:11:d1:04:d2:cb:32:74:e0:7b:f1:4d:ef:4d:
06:23:79:bb:34:af:f3:04:ed:bc:b4:68:58:7c:2d:
1f:81:08:54:91:e7:10:d0:b3:39:03:90:d8:2c:38:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A3:F3:FD:FA:49:07:82:D7:2F:4A:4F:E3:C7:63:5C:67:1F:44:DC
X509v3 Authority Key Identifier:
keyid:1A:29:02:CA:14:0E:59:A2:AE:35:FF:32:B4:F6:D1:20:A0:37:41:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/1A2902CA140E59A2AE35FF32B4F6D120A03741DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ce:3f:2e:b8:d1:df:00:77:05:d8:a4:eb:64:53:d8:2f:8f:
64:1b:b3:31:c0:c1:59:63:5c:e2:73:7c:34:fc:a5:0c:ff:ea:
55:13:4e:46:51:76:77:49:1a:ea:0a:7d:8a:20:4a:6f:e3:19:
8b:b2:e9:5e:83:82:bd:ee:f2:24:13:52:6b:f4:7b:a2:3e:0a:
ec:12:fa:95:f2:22:18:f8:0c:c1:24:36:d5:10:56:6c:90:ba:
94:a3:e5:c9:d8:e6:b0:9e:ea:4f:35:66:94:5f:80:0c:5a:ef:
78:40:58:2b:f8:41:66:9b:b2:de:d5:f5:f0:af:23:97:36:81:
a3:bf:92:0a:60:28:a6:6e:b9:95:eb:f0:d2:42:58:75:f7:22:
b5:b0:81:10:13:1b:5e:4f:38:1b:a1:f4:73:61:85:a8:91:88:
c4:16:07:8f:9f:e8:87:4a:bc:66:7a:29:9a:3b:6b:3f:8a:96:
ad:e9:ce:5d:50:6a:6d:3b:4c:0c:0b:f0:76:a4:e7:83:05:de:
01:eb:c6:70:49:9a:d3:4a:b8:e8:ac:b9:f1:21:c0:ca:99:4e:
69:ef:3d:bc:df:76:f5:c2:11:18:c5:82:d1:5c:e6:ff:00:bb:
ca:90:b7:4e:1a:fc:81:d8:0f:c2:ff:f8:ca:60:67:84:53:b1:
11:6e:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:40:31 2026 by rpki-client