
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
File: 02A914400077F3E213C8972280DBD775A6B4C27C.mft (raw, json)
Hash identifier: zV7S7v5nUeZuYZEPewJhy52KgyhmYRiT8sUZJWWt3FM=
Subject key identifier: A7:39:70:CE:EF:10:CF:DD:D5:F3:83:16:74:2A:B8:14:5B:C9:C1:D4
Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C
Certificate issuer: /CN=02A914400077F3E213C8972280DBD775A6B4C27C
Certificate serial: 58EE3E7982379C5CBE586B5EF207D9EBAA5DE2A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
Manifest number: 60
Signing time: Sun 12 Jul 2026 19:43:45 +0000
Manifest this update: Sun 12 Jul 2026 19:38:45 +0000
Manifest next update: Mon 13 Jul 2026 23:07:45 +0000
Files and hashes: 1: 02A914400077F3E213C8972280DBD775A6B4C27C.crl (hash: 97BZo163aWxy5gpd9u/JQvY5yrePAkSIONMwsCCxZAM=)
2: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: 7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=)
3: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=)
4: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: GtvHkVY9/W43sI4HiI73HEw8h6eq1YXH6SXHhFSgbQc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl
rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 23:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ee:3e:79:82:37:9c:5c:be:58:6b:5e:f2:07:d9:eb:aa:5d:e2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C
Validity
Not Before: Jul 12 19:38:45 2026 GMT
Not After : Jul 13 23:07:45 2026 GMT
Subject: CN=A73970CEEF10CFDDD5F38316742AB8145BC9C1D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:cf:43:7a:1a:82:27:54:20:44:75:4e:ef:
37:2f:bd:1e:78:c1:4b:f4:4a:d8:c7:bb:f3:07:d1:
bc:d8:51:d5:39:17:1e:cb:32:ad:80:94:be:e8:8f:
06:8a:f9:01:43:c5:9f:10:34:1c:df:d5:d1:10:46:
fa:ad:3c:6a:d4:84:3a:69:be:50:ea:2c:d4:87:6d:
bc:33:ad:c3:ed:3c:be:38:7d:d9:16:bb:f9:3b:d8:
17:0c:50:48:f4:22:7a:ff:ba:77:8f:c7:45:dd:15:
5f:f5:44:e3:11:b7:bb:87:76:fd:84:e2:ff:c1:96:
c1:63:34:0c:ca:3f:75:70:44:c6:4f:9f:77:03:a4:
75:03:23:b8:7c:24:f4:49:bf:75:a7:65:33:85:d3:
7e:45:5a:e3:4d:0a:d0:b0:8f:15:68:1d:57:cf:9a:
c0:05:f6:7e:ec:11:b7:56:16:cd:a8:a4:78:9a:6a:
ec:95:e0:18:c9:db:57:68:58:73:3a:5c:d3:5e:ee:
e9:f9:8d:a6:04:55:a3:00:79:a4:1c:b2:80:9c:02:
db:5b:89:69:af:07:49:d4:2f:eb:63:13:b8:5b:36:
76:66:c7:b3:2a:3c:37:93:43:6b:bf:4d:2f:a0:82:
0b:4a:99:94:1c:cb:04:15:a6:b7:d1:6e:d8:39:3e:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:39:70:CE:EF:10:CF:DD:D5:F3:83:16:74:2A:B8:14:5B:C9:C1:D4
X509v3 Authority Key Identifier:
keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d7:4c:5d:8e:09:fe:4c:09:b1:eb:fe:a7:29:25:43:c9:19:
ee:22:e4:31:7f:ce:e7:f9:c2:b7:7e:c2:26:a7:c0:23:4d:f5:
ac:ac:c8:43:9d:d8:a4:a5:a2:eb:74:b1:28:57:ed:4a:e8:67:
b9:cd:1c:f1:31:92:7f:c2:f4:26:dc:83:7e:b8:ec:23:d0:12:
d4:43:6d:94:aa:66:7c:cc:f2:da:8a:8e:c8:d7:fb:9d:5c:3c:
83:d9:4b:27:b2:3c:1d:e0:1d:7c:90:5e:9c:15:82:82:5a:b0:
39:ca:cf:dc:56:23:91:b4:57:b1:5c:74:3a:d7:28:8c:91:25:
80:07:f5:8d:f8:0f:32:ed:73:4e:93:b9:ae:33:67:50:9e:1d:
f3:0a:b9:b7:de:4c:f5:9e:9e:82:a8:0a:94:4e:68:61:b8:b2:
5c:b2:ee:4e:a8:a4:fc:a1:32:28:b3:be:80:15:e9:0a:99:d1:
06:6a:5b:2c:27:2a:1a:88:d8:b8:c8:f3:af:f9:5b:26:f5:25:
9a:74:62:a5:fc:bb:56:bd:d4:46:0e:30:96:ff:7e:53:02:4d:
18:a6:dc:29:d8:ec:e0:62:75:21:53:3e:4f:f4:79:1b:0a:d4:
13:26:36:a6:29:47:ad:cb:9c:6e:fe:7f:db:1f:15:63:6c:8f:
98:d7:c6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 09:49:11 2026 by rpki-client