
$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft
File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json)
Hash identifier: TnB+R7MaTIccGMQd2EoTZYTVQjPgSxq+hTgKVroUrVk=
Subject key identifier: 06:2A:26:CA:D5:19:13:48:65:4C:85:8F:E6:C2:88:F3:E4:7A:7D:0B
Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38
Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438
Certificate serial: 05DC8A2A22519DB4CE9257F27D9DF46A66EEFA22
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft
Manifest number: 0125
Signing time: Sat 07 Mar 2026 14:30:46 +0000
Manifest this update: Sat 07 Mar 2026 14:25:46 +0000
Manifest next update: Tue 10 Mar 2026 20:55:46 +0000
Files and hashes: 1: 020EA2304929066809CA6F723574798639D77438.crl (hash: 9i5P9PEhU8GRbco3/JEULIqb9htLzevJiKQQWJruhDs=)
2: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=)
3: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl
rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:dc:8a:2a:22:51:9d:b4:ce:92:57:f2:7d:9d:f4:6a:66:ee:fa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020EA2304929066809CA6F723574798639D77438
Validity
Not Before: Mar 7 14:25:46 2026 GMT
Not After : Mar 10 20:55:46 2026 GMT
Subject: CN=062A26CAD5191348654C858FE6C288F3E47A7D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:4e:1a:32:10:b1:4e:6f:3d:eb:02:f7:f4:
15:fd:c4:a4:f8:01:32:2a:17:8d:9c:71:6a:cc:35:
ad:1d:9c:3e:95:cf:fe:5a:8c:37:77:b4:28:bc:6e:
fc:76:28:13:3c:ed:88:15:c8:da:e8:6f:6f:ff:ba:
e8:53:5e:41:fc:3c:2a:b3:51:0f:66:45:60:38:82:
5b:90:9a:82:99:22:68:54:9f:35:2f:c2:0f:b1:11:
14:2f:fa:7f:67:41:22:7d:c0:1b:96:e4:b2:2a:62:
fc:09:08:69:c7:b6:1a:2c:af:c0:4e:f8:6c:f3:fe:
7a:d8:e5:de:af:22:b8:30:aa:13:80:31:05:46:dd:
5b:85:16:b6:ad:14:cb:36:da:5b:f5:26:b8:27:4a:
6f:65:14:dc:b6:98:f6:cd:05:2a:77:94:1f:5f:47:
05:27:fd:b9:38:31:d0:5b:ed:ed:89:2f:d8:bb:30:
d9:f9:ea:56:7d:4d:f0:3b:80:64:f6:ba:ba:ca:ba:
07:21:94:e8:17:e0:6d:df:da:74:14:77:fe:06:61:
77:c3:a9:a5:ff:16:05:b5:8f:1f:38:08:a5:46:00:
1d:f1:3f:4f:a5:d4:b3:28:fc:b2:62:30:5b:a1:a2:
14:33:74:fe:f0:df:a4:64:38:b6:a1:44:c8:71:21:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2A:26:CA:D5:19:13:48:65:4C:85:8F:E6:C2:88:F3:E4:7A:7D:0B
X509v3 Authority Key Identifier:
keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:40:f5:96:9e:08:76:fc:14:89:ac:43:58:8d:28:e9:c3:f1:
16:f1:9e:1e:09:54:2d:29:93:e6:8d:33:52:7a:06:97:85:12:
a7:d5:b8:37:2a:b9:8b:a9:7f:c5:8d:4a:80:9a:d8:a8:c2:4d:
f7:32:46:3b:7e:0e:bc:ad:58:1a:1c:74:4a:9e:8f:bc:54:be:
d1:cc:19:36:37:e5:f9:61:78:26:2a:e9:bb:b1:1b:a7:10:50:
b4:82:b7:c2:cd:53:11:8e:b7:15:52:5c:d4:3f:74:36:5b:09:
1b:2c:db:a0:e4:e5:b8:bb:22:a0:d5:05:4e:95:29:32:c4:87:
03:8a:8b:b7:b8:19:df:6d:e9:b8:48:c9:07:6c:8f:4d:85:45:
90:45:21:9b:0f:37:4d:0e:af:0d:01:de:f8:fc:dc:1e:50:d2:
01:bd:37:a6:9f:96:e4:4f:c8:61:1f:c7:35:f1:08:56:e3:cd:
6d:47:da:ac:f2:c0:67:2e:63:e3:70:cb:ce:bf:1e:41:6c:ab:
7e:35:3f:2e:1d:bd:00:f0:09:73:2f:40:84:5e:4b:d8:e1:05:
d2:4a:d7:c2:f2:e6:4a:c0:85:22:fe:9f:4f:18:15:df:66:62:
d7:83:bd:79:f6:87:16:8a:c3:f9:d9:b0:72:77:07:fd:9a:f1:
68:22:d5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:51:04 2026 by rpki-client