
$ rpki-client -vvf rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft
File: 02AAB50744B5B2355B015A3152AD1101FDD80A06.mft (raw, json)
Hash identifier: VSh67HndfjF/wX3bfCDJFT7RpuTgbbdSb7j+dbj3pMY=
Subject key identifier: 61:EB:C0:54:95:34:F7:4F:B6:04:C9:C5:FB:0F:2E:F5:03:6B:7E:92
Authority key identifier: 02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06
Certificate issuer: /CN=02AAB50744B5B2355B015A3152AD1101FDD80A06
Certificate serial: 5D6EBE2C5E03B51E481909A24DE7845C199F483B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 17:41:14 +0000
Manifest this update: Tue 02 Jun 2026 17:36:14 +0000
Manifest next update: Wed 03 Jun 2026 20:56:14 +0000
Files and hashes: 1: 02AAB50744B5B2355B015A3152AD1101FDD80A06.crl (hash: R/ICfODPJvCdaNkOIpweuqgYfbU5Qr6lquUHUdYM9ZE=)
2: 3130332e3138362e33342e302f32342d3234203d3e20313439363837.roa (hash: I/xRHiSouk0qQoSEfFFc5Esrv4Bnl21g3IwAa+RLLcM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.crl
rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 20:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:6e:be:2c:5e:03:b5:1e:48:19:09:a2:4d:e7:84:5c:19:9f:48:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02AAB50744B5B2355B015A3152AD1101FDD80A06
Validity
Not Before: Jun 2 17:36:14 2026 GMT
Not After : Jun 3 20:56:14 2026 GMT
Subject: CN=61EBC0549534F74FB604C9C5FB0F2EF5036B7E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:85:94:1a:15:bb:69:b3:d3:fe:11:b1:e6:
d1:5a:7b:9b:16:dc:e9:07:2a:63:f5:9c:05:1b:b4:
35:27:d0:9a:33:43:44:22:51:a0:1d:7e:a2:d5:f0:
43:30:1d:94:c1:71:6e:92:48:a2:43:d1:ed:01:af:
81:2e:99:ed:86:7e:d9:29:ef:36:69:e6:77:1b:b8:
50:12:7d:de:ec:c6:07:97:31:1e:f2:b5:b5:b2:5b:
c5:bf:df:12:cd:6e:5c:9b:4e:38:b8:7b:0f:0c:0f:
d2:3b:55:39:2d:45:28:01:1e:e3:40:f6:34:95:b5:
5b:c5:2c:4d:5c:4d:0b:63:b0:03:84:62:69:f5:2f:
f3:6d:be:22:22:67:95:5c:0d:e9:9d:e0:41:72:99:
ba:5f:85:fd:ef:4d:2c:86:83:e2:62:0b:e6:fa:e8:
95:3c:6f:e0:4f:d7:b1:7a:ba:2d:89:ac:68:0a:7d:
6d:35:a9:0b:95:97:03:5e:71:34:6c:0a:45:15:c1:
7a:9e:0f:3d:98:cb:44:1d:fb:d7:91:fd:3f:70:6a:
17:d2:89:65:85:9c:d2:d1:6b:56:b3:1f:10:9a:5a:
a2:02:6d:e5:27:b9:b7:fd:2f:82:7f:b3:b8:db:f1:
10:4a:98:4d:a4:f6:49:2a:c7:b8:ba:df:3a:42:c4:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EB:C0:54:95:34:F7:4F:B6:04:C9:C5:FB:0F:2E:F5:03:6B:7E:92
X509v3 Authority Key Identifier:
keyid:02:AA:B5:07:44:B5:B2:35:5B:01:5A:31:52:AD:11:01:FD:D8:0A:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02AAB50744B5B2355B015A3152AD1101FDD80A06.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/859c7c96-7abb-45ac-a0cb-d7ffd09c1876/0/02AAB50744B5B2355B015A3152AD1101FDD80A06.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:31:1a:90:7d:7a:9c:5f:58:9c:53:4f:37:e4:5e:64:35:03:
50:8f:cb:d2:d2:ff:65:37:ed:57:b9:2a:c3:be:d4:38:d7:e6:
e1:bc:9e:b8:b9:57:b7:89:c4:8e:e4:45:e3:e7:bc:9f:24:fc:
06:c8:c4:7d:5e:d8:9f:17:02:23:ff:62:e6:7f:d6:9d:e6:09:
ea:5b:20:66:56:1c:9e:10:12:e8:30:9c:bb:5e:da:e6:6b:f2:
db:b4:43:04:f3:25:91:dd:9d:74:2e:db:de:e5:16:fe:8f:57:
39:36:14:9c:eb:e4:38:9f:26:c0:3b:f3:72:08:41:d8:0c:4a:
ed:e9:df:96:97:5f:c7:85:39:0f:7d:e7:ec:2f:b9:b0:18:8c:
a0:a4:00:1a:c5:86:76:04:19:55:1e:5c:37:6a:bc:18:6e:31:
7d:09:2f:9d:73:65:f6:db:00:24:fb:d1:54:be:f0:17:7e:35:
27:20:4e:56:1c:5e:8a:fd:aa:e3:32:8e:77:03:0c:8e:76:11:
f8:7a:28:b3:28:2a:8a:f0:2a:3e:bb:86:76:a0:24:8f:9e:2e:
0a:65:b8:ad:6d:22:9e:f8:e1:58:9c:34:30:1b:c8:1c:46:22:
f3:59:fc:34:41:91:1f:ba:eb:56:34:ac:d8:a7:4f:e0:b2:e1:
86:e3:f7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:57:31 2026 by rpki-client