
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
File: 2702EC259515C0960B0BFF36647679F0CA781E52.mft (raw, json)
Hash identifier: OHsTysKFnrSwZBhVnIGjqv5tWVbzp8gqQP9e+lM2R4o=
Subject key identifier: 06:04:D3:2C:F1:D6:ED:6D:77:4F:57:9E:27:DD:81:E6:A6:04:E8:5F
Authority key identifier: 27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
Certificate issuer: /CN=2702EC259515C0960B0BFF36647679F0CA781E52
Certificate serial: 47B92137B4662FA3459394796F38DCAD1ED4C0A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 00:54:38 +0000
Manifest this update: Thu 17 Sep 2026 00:49:38 +0000
Manifest next update: Fri 18 Sep 2026 03:47:38 +0000
Files and hashes: 1: 3130332e3133382e36322e302f32332d3234203d3e20313338383433.roa (hash: vNMbKB+jjAGCqgxCSWzjKIMOhXwlS0DnqcWYtGqskho=)
2: 3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa (hash: /lklKRwQXzQQDya+GH3WUkfxs3Rw/gHVRuuz1tcXoUE=)
3: 323430343a636263303a3a2f34302d3430203d3e20313338383433.roa (hash: g1km73POKKg69MSbDnEF0CkpP2rF3ZrF65BD2T6WTQc=)
4: 323430343a636263303a3a2f33322d3332203d3e20313338383433.roa (hash: SF5csYZOV6O0/pz/yzpUeG3NGqNwVVPBe+gjRAAxx1w=)
5: 3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa (hash: MvYURtqKvXgJtHDe+bGVN+qQ+GvO+Bbw/63OedWxccg=)
6: 2702EC259515C0960B0BFF36647679F0CA781E52.crl (hash: ynF/oSfhpraxMFxby1BfnEtxKL0oCE4Pj9wSLiyxvMk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b9:21:37:b4:66:2f:a3:45:93:94:79:6f:38:dc:ad:1e:d4:c0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2702EC259515C0960B0BFF36647679F0CA781E52
Validity
Not Before: Sep 17 00:49:38 2026 GMT
Not After : Sep 18 03:47:38 2026 GMT
Subject: CN=0604D32CF1D6ED6D774F579E27DD81E6A604E85F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:f2:88:fa:45:9d:b9:6b:a6:30:3f:f5:7a:
b3:b9:3c:98:f8:c8:e2:64:da:d9:04:e1:f7:be:ab:
97:a9:41:ea:a1:a9:9f:90:88:87:8d:79:63:ed:f5:
96:14:b0:bb:ac:77:15:28:5e:85:b4:28:1e:36:ea:
4f:7d:b3:90:4d:92:de:9a:66:aa:e7:8a:9d:14:aa:
31:85:bf:dd:14:46:76:d3:83:73:7d:00:f1:13:5f:
ae:27:66:54:c9:91:0a:a9:06:75:e8:ca:19:2a:99:
24:86:c8:54:11:e1:d3:33:53:f3:85:b2:44:b6:68:
ab:1e:60:0d:47:27:7e:51:10:18:41:bb:44:44:4f:
33:2b:f6:6e:3f:cd:96:bd:9f:e2:c9:57:2d:ba:8d:
42:8a:34:f0:d3:f8:4f:20:65:17:b8:0c:41:42:73:
7e:50:3e:37:c7:44:48:a5:ac:de:e2:e1:b9:50:45:
0b:5d:fd:00:95:de:54:e8:b3:aa:fa:64:29:3b:bb:
d8:6c:02:eb:2c:72:78:a9:e4:86:c4:0d:a3:ba:4b:
7f:ca:8e:f1:a4:ec:5a:19:58:f4:a2:74:93:0c:01:
1c:fe:f7:e1:5c:aa:c8:96:9c:be:1e:89:a0:20:ad:
f0:7a:f5:3d:86:39:f3:80:d8:73:59:c7:1a:7e:03:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:04:D3:2C:F1:D6:ED:6D:77:4F:57:9E:27:DD:81:E6:A6:04:E8:5F
X509v3 Authority Key Identifier:
keyid:27:02:EC:25:95:15:C0:96:0B:0B:FF:36:64:76:79:F0:CA:78:1E:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2702EC259515C0960B0BFF36647679F0CA781E52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/2702EC259515C0960B0BFF36647679F0CA781E52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:67:89:21:a0:81:31:65:d8:7b:ad:6c:4b:ec:4c:f0:88:31:
f0:5a:2b:4a:1d:2e:e8:a1:cd:8a:3c:9d:1f:5e:9b:42:33:bf:
70:fd:3f:63:cf:1a:22:03:35:04:16:c4:36:e7:c2:c2:af:79:
b5:be:b3:65:60:5f:1b:fb:21:4b:a9:b7:98:b0:ca:bc:32:71:
29:36:63:d8:18:b5:38:41:ce:f1:5e:6d:48:2c:fb:1c:9b:89:
01:0c:1e:07:c8:06:d3:06:83:ac:69:a3:9e:e3:f4:e0:f0:57:
fe:8b:35:2c:91:05:b7:ff:2d:ed:f9:19:7e:69:22:f3:36:c5:
f0:54:65:99:6b:e0:77:e9:3f:5a:65:79:46:68:b8:6e:f4:15:
0e:e3:c4:33:93:d5:c2:51:ec:28:2e:d0:62:76:56:88:28:89:
88:79:30:53:9f:ab:87:34:92:db:b9:02:6f:cc:a0:29:51:22:
b0:3e:db:34:42:2e:1d:b3:cc:ad:9c:f5:d0:39:54:3b:0a:4d:
e8:6e:2c:38:78:db:f9:e4:ce:45:c7:08:30:36:1c:74:71:34:
80:b8:b9:54:41:9d:a8:3e:88:99:36:2d:49:9d:64:1c:b6:ce:
e9:18:cd:26:e3:47:a1:b1:aa:85:3f:f0:d3:81:0f:05:3d:3c:
be:61:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:52:14 2026 by rpki-client