
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
File: 02A8ED077C03E43C338DFC14D6192E46DA534B52.mft (raw, json)
Hash identifier: vEVg1unwpg+Wq1/d4WnU324rPrT/ZCXiqmoIrfuQ6TU=
Subject key identifier: 35:C6:AA:29:20:0C:6D:D9:38:BC:6F:02:4E:98:13:B9:FA:52:DA:65
Authority key identifier: 02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
Certificate issuer: /CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Certificate serial: 7D878634B52859E602BB6129B3B78F072B011976
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
Manifest number: 9B
Signing time: Wed 26 Aug 2026 07:20:23 +0000
Manifest this update: Wed 26 Aug 2026 07:15:23 +0000
Manifest next update: Thu 27 Aug 2026 09:52:23 +0000
Files and hashes: 1: 02A8ED077C03E43C338DFC14D6192E46DA534B52.crl (hash: WZGcfLIMfiaUMAqYEEmNnEo/CqKbyG9c0jPJ4DXJItw=)
2: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: d3o2aJg5sY9JGfN+Wb+JV5Ly3qfvYxcESwubxcNcZ8g=)
3: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: 3pwrvYXUcXwtoiYb2fFzF/R5rpxEebJsT3YYZEfo+OM=)
4: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 5QRCY/F26LQx+cpm0T1M7MYTi3ygt+T6ugETEbjQYdg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 09:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:87:86:34:b5:28:59:e6:02:bb:61:29:b3:b7:8f:07:2b:01:19:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A8ED077C03E43C338DFC14D6192E46DA534B52
Validity
Not Before: Aug 26 07:15:23 2026 GMT
Not After : Aug 27 09:52:23 2026 GMT
Subject: CN=35C6AA29200C6DD938BC6F024E9813B9FA52DA65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:69:31:bf:f3:fd:d0:47:f1:86:bc:bf:d0:
f0:8e:b1:2b:c6:6a:54:3c:68:63:bc:b0:8b:57:4c:
1d:59:b4:3d:46:20:4b:58:1d:70:f6:b6:61:6a:4d:
a2:35:c1:b3:f7:8c:73:db:14:09:bf:d8:51:e8:e8:
ba:ac:ed:8f:40:d4:66:b1:3d:84:4f:d8:b2:ca:4b:
60:4f:f7:0d:6d:72:8d:d7:68:ff:48:4d:05:c3:f4:
0e:1f:b4:58:75:61:56:ea:1a:57:1e:5d:4f:df:58:
23:83:ff:f6:d1:07:03:47:4c:54:e6:95:2a:a8:ca:
40:64:60:0a:d7:e3:6e:1d:a0:e1:6a:fe:92:49:2f:
6c:7f:a1:a5:e0:8b:92:a4:a0:c2:ae:af:66:85:08:
17:79:c8:a1:38:46:95:10:52:7b:7f:cc:7d:76:19:
2a:1b:44:f4:95:81:e2:68:e4:02:ea:ec:cd:4d:87:
1a:aa:de:1e:32:d0:6a:be:c0:dd:9e:82:65:bf:88:
09:47:5f:bd:fe:47:fd:31:eb:8f:64:66:45:7c:b1:
20:72:b2:12:fd:0d:86:ee:87:a3:3c:e6:ba:d4:75:
58:d8:46:7f:30:e8:26:72:11:5c:63:7e:e1:75:36:
63:19:12:24:11:4d:18:a7:99:39:71:50:bb:28:8a:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C6:AA:29:20:0C:6D:D9:38:BC:6F:02:4E:98:13:B9:FA:52:DA:65
X509v3 Authority Key Identifier:
keyid:02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ed:5a:3c:23:61:a2:4d:9d:94:0d:fb:b0:07:d9:45:25:21:
3b:4c:50:4e:b1:1c:eb:3b:92:f2:07:f2:27:f0:7d:b3:33:54:
bf:dc:e8:3b:21:6a:99:69:5e:57:6e:8a:00:4f:d4:39:de:23:
ca:6a:2d:1c:9b:7c:1b:c9:39:87:b5:7a:fb:79:bd:88:98:74:
eb:71:35:a6:e3:3e:f0:55:ae:f4:56:bb:ea:1e:2b:2b:23:f0:
19:4c:a4:5c:f1:4f:b5:20:b2:94:6c:d3:4c:5a:1b:3c:9a:e1:
be:09:76:51:c4:43:c7:95:d3:89:94:a9:6e:4b:27:a0:2a:eb:
d4:7d:42:ee:d0:5a:8c:d4:43:79:17:9d:e5:3a:db:68:c1:20:
0d:b9:e5:9b:33:97:1f:d8:21:ba:40:46:20:05:1b:63:8c:d9:
be:26:4a:b4:c7:ca:aa:7d:03:86:7c:16:56:19:aa:03:65:e3:
fe:24:dd:9c:6c:05:9c:c1:15:c4:6a:f5:a5:f7:e3:fc:ca:ed:
f7:3d:cb:da:7c:ba:e1:a6:c5:e5:1c:55:19:b4:e0:70:39:9d:
d6:d7:e1:d6:1b:e9:27:ca:66:04:31:c5:cd:60:64:22:30:f1:
24:57:64:18:e1:b0:4f:76:33:d2:c6:e9:de:e9:ca:38:63:e9:
04:4b:a7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:35:08 2026 by rpki-client