
$ rpki-client -vvf rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
File: 02A8ED077C03E43C338DFC14D6192E46DA534B52.mft (raw, json)
Hash identifier: J2kNPGt1FfxILYSyXraYk3OpmxWBmT6DaoAlejqjtss=
Subject key identifier: 4F:F9:2F:F2:FD:58:C7:88:D4:4A:CA:4F:22:01:61:F1:D6:7D:F0:A6
Authority key identifier: 02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
Certificate issuer: /CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Certificate serial: 7038284C3B59522E89E171AE849F794D9E8047EC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
Manifest number: 4F
Signing time: Tue 30 Jun 2026 07:24:25 +0000
Manifest this update: Tue 30 Jun 2026 07:19:25 +0000
Manifest next update: Wed 01 Jul 2026 08:10:25 +0000
Files and hashes: 1: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: 3pwrvYXUcXwtoiYb2fFzF/R5rpxEebJsT3YYZEfo+OM=)
2: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 5QRCY/F26LQx+cpm0T1M7MYTi3ygt+T6ugETEbjQYdg=)
3: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: d3o2aJg5sY9JGfN+Wb+JV5Ly3qfvYxcESwubxcNcZ8g=)
4: 02A8ED077C03E43C338DFC14D6192E46DA534B52.crl (hash: FaINOKlHiDfuJJc+T692mynqLEyyev8kjU9SXMl+P1U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 08:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:38:28:4c:3b:59:52:2e:89:e1:71:ae:84:9f:79:4d:9e:80:47:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Validity
Not Before: Jun 30 07:19:25 2026 GMT
Not After : Jul 1 08:10:25 2026 GMT
Subject: CN=4FF92FF2FD58C788D44ACA4F220161F1D67DF0A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:4d:cc:1d:9b:ea:54:84:c2:2e:25:63:c2:
cf:1b:16:90:01:c2:0b:cd:b1:1d:c5:01:e2:59:a3:
f6:64:4a:15:cb:1e:db:9a:3e:47:10:73:38:f5:02:
78:b4:46:c3:71:bd:80:07:8b:3d:f0:ba:0f:b1:79:
ce:ae:d6:1e:1e:76:ce:d2:02:b2:ba:ed:eb:2c:33:
9f:53:ed:8a:cd:0e:fe:a4:02:bb:a8:e2:29:61:47:
39:51:e4:eb:6f:35:4f:31:a3:87:2a:cd:f6:54:85:
c9:32:9b:91:63:9e:43:45:61:b9:45:d1:97:9d:bf:
69:20:38:b4:b6:04:3f:50:08:dc:69:d3:d4:5d:c1:
a9:32:15:b1:81:af:a6:5a:95:27:59:2c:c3:25:88:
c1:b3:dc:76:f4:0e:3d:ee:31:05:85:43:96:bf:2b:
e4:f9:72:4d:7c:c3:b3:e8:26:47:83:7c:a5:5f:e9:
43:9d:44:db:d6:2f:d6:e1:5c:93:b8:fa:8e:81:c9:
89:85:ac:a8:a4:54:60:5d:02:d6:60:61:1a:8c:32:
a7:19:35:95:09:40:a3:11:84:be:a6:f5:d5:08:ad:
e9:14:62:63:88:cf:80:b5:fc:e9:61:d4:c0:d8:55:
ad:1c:3e:85:02:59:00:10:67:67:05:64:de:66:60:
dd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F9:2F:F2:FD:58:C7:88:D4:4A:CA:4F:22:01:61:F1:D6:7D:F0:A6
X509v3 Authority Key Identifier:
keyid:02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:03:8d:03:e6:2e:32:95:fa:8b:99:c7:c9:a3:f5:41:5f:94:
0c:18:e1:bf:ca:a4:08:f1:39:e0:29:41:2f:64:93:ea:12:30:
b7:09:4b:ee:7d:e2:e6:80:11:e0:85:05:35:43:2b:87:9b:5c:
b6:df:ec:4a:12:e4:d6:b1:8c:b5:53:a8:89:4e:75:b3:ff:2e:
21:02:9b:81:c1:aa:8b:82:75:11:7e:f6:3c:63:d7:d2:ee:84:
fe:16:f6:7b:71:5e:5f:ae:d5:88:0d:17:a7:3e:cf:03:b2:6a:
41:f9:61:4c:0d:6f:6e:32:27:45:ca:32:81:55:1f:c8:fa:7f:
be:8c:c0:e1:01:3e:0a:a7:19:25:9a:ab:50:91:f5:fa:fd:09:
5f:ab:c4:44:3c:07:cb:60:51:8d:b0:eb:39:70:b2:9e:62:43:
0e:81:fb:cd:de:7d:ed:0c:37:96:69:cd:a7:44:1a:63:04:fc:
cc:31:a5:66:d1:d6:47:84:70:7b:a7:a3:36:28:db:59:2c:57:
00:db:0a:69:15:cc:94:21:ed:c9:73:34:c9:a8:77:93:ef:c9:
ac:9d:21:51:9b:bc:18:c7:9d:ab:18:82:2b:b5:56:15:14:95:
33:43:1d:5d:62:c0:57:4e:20:6a:78:a3:db:66:cc:33:e1:37:
f1:83:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 14:19:38 2026 by rpki-client