
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
File: 02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft (raw, json)
Hash identifier: ZhKlxbMFfBysRHZ47r4w6ZGbJzVXkApgu24Z9tfMafc=
Subject key identifier: AA:BB:EB:EF:1D:B0:B1:F1:13:56:A6:C4:73:6F:79:9F:67:4E:F6:E0
Authority key identifier: 02:A3:40:15:CF:1F:98:FC:B2:24:0C:5F:C9:1E:82:6B:CA:AE:C1:67
Certificate issuer: /CN=02A34015CF1F98FCB2240C5FC91E826BCAAEC167
Certificate serial: 43B76A9876363F720CD83914218D2EFEFC895B69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
Manifest number: EC
Signing time: Sun 25 Oct 2026 08:01:25 +0000
Manifest this update: Sun 25 Oct 2026 07:56:25 +0000
Manifest next update: Mon 26 Oct 2026 11:36:25 +0000
Files and hashes: 1: 02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl (hash: w9BlOmtbw2rQHKibVhl38/WBwDEXdWtZRYS4EBldxOY=)
2: 3130332e3138352e3235322e302f32342d3234203d3e20313439393132.roa (hash: oJ8l8dMFPY8CyTy4Q0yxOCLUg4RyDgditXXqmbGk6Sg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl
rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 11:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b7:6a:98:76:36:3f:72:0c:d8:39:14:21:8d:2e:fe:fc:89:5b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02A34015CF1F98FCB2240C5FC91E826BCAAEC167
Validity
Not Before: Oct 25 07:56:25 2026 GMT
Not After : Oct 26 11:36:25 2026 GMT
Subject: CN=AABBEBEF1DB0B1F11356A6C4736F799F674EF6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:42:5b:b2:42:e5:90:89:22:47:ef:86:58:
69:a7:13:58:4e:5c:7f:6c:72:a3:22:a6:c1:98:ea:
8c:a1:d5:48:45:04:13:04:80:3f:4d:52:c7:13:e2:
d4:22:41:8f:be:0c:dc:46:7d:af:64:df:ed:64:4e:
9d:1c:77:56:6d:34:aa:93:f1:c0:2b:aa:a5:8f:25:
df:7b:49:2a:6c:7b:44:8b:5f:70:51:e4:bb:57:88:
f5:09:a2:6f:29:59:21:aa:f7:ee:57:05:09:5b:05:
d6:5f:dc:20:84:45:62:1a:57:a7:76:f7:fb:13:66:
d6:a7:84:c0:7e:36:e0:c4:1a:f7:da:17:1d:cf:fd:
5f:74:34:54:ed:32:54:e1:1a:68:2d:53:3a:2b:36:
99:30:86:2b:da:7c:46:58:54:c7:ef:d3:76:e0:7f:
4c:54:dc:3a:48:ed:a5:6d:b5:37:f1:78:88:55:5c:
c3:31:b0:4e:d2:e1:35:89:4e:4d:02:57:92:80:c4:
77:b8:ff:a0:1f:40:64:2a:44:b9:7d:bf:89:fd:d6:
6b:b1:d2:48:d4:f8:b6:07:f5:3a:d9:ec:d0:f6:5a:
e0:ff:86:06:ab:f4:74:b2:e3:83:c5:36:09:f1:b2:
d4:0a:df:cf:62:e5:78:79:4c:45:42:6a:3d:21:e2:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BB:EB:EF:1D:B0:B1:F1:13:56:A6:C4:73:6F:79:9F:67:4E:F6:E0
X509v3 Authority Key Identifier:
keyid:02:A3:40:15:CF:1F:98:FC:B2:24:0C:5F:C9:1E:82:6B:CA:AE:C1:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/02A34015CF1F98FCB2240C5FC91E826BCAAEC167.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cc:41:d3:15:ea:f1:e7:75:f8:6a:57:8e:d8:6f:30:91:ae:
1a:82:d6:21:67:f7:32:db:98:61:16:93:1c:39:f8:1d:ba:35:
f2:23:d0:81:98:fb:b4:e1:0e:27:9f:0c:27:38:04:7d:6c:f2:
fa:b6:73:a8:69:db:85:49:da:d4:d3:65:f9:ec:29:07:42:e1:
96:11:56:4e:80:df:2d:61:14:b4:68:62:8a:a2:56:d7:d2:f0:
ea:9e:3a:35:6e:cb:43:ae:5f:f3:c0:1b:8d:e6:fe:54:65:d4:
aa:27:c0:64:38:f6:29:84:04:75:0e:f2:67:99:eb:a4:f5:eb:
7a:f0:86:a0:d1:f2:c9:64:3a:8f:a7:f5:e2:93:85:64:9b:d2:
73:9b:5e:3b:24:ec:d2:59:55:42:64:f6:54:07:a0:3e:f9:91:
4f:93:88:77:d5:bd:4e:f7:91:43:63:d9:02:4f:4c:5c:20:9d:
18:31:90:f2:12:ff:6f:22:96:37:ad:ae:fc:9c:fc:cd:d3:7a:
a1:74:d8:2e:62:2b:1e:e3:11:c2:26:18:1b:83:c6:72:af:ec:
ba:7b:32:cb:f9:bf:a6:a0:a7:cd:b2:f6:c3:0e:1e:38:f5:47:
e2:86:f5:60:99:75:3f:a4:ba:7e:15:47:89:ee:3e:ae:ae:c0:
49:87:36:f0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQ7dqmHY2P3IM2DkUIY0u/vyJW2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJBMzQwMTVDRjFGOThGQ0IyMjQwQzVGQzkxRTgyNkJD
QUFFQzE2NzAeFw0yNjEwMjUwNzU2MjVaFw0yNjEwMjYxMTM2MjVaMDMxMTAvBgNV
BAMTKEFBQkJFQkVGMURCMEIxRjExMzU2QTZDNDczNkY3OTlGNjc0RUY2RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChv0JbskLlkIkiR++GWGmnE1hO
XH9scqMipsGY6oyh1UhFBBMEgD9NUscT4tQiQY++DNxGfa9k3+1kTp0cd1ZtNKqT
8cArqqWPJd97SSpse0SLX3BR5LtXiPUJom8pWSGq9+5XBQlbBdZf3CCERWIaV6d2
9/sTZtanhMB+NuDEGvfaFx3P/V90NFTtMlThGmgtUzorNpkwhivafEZYVMfv03bg
f0xU3DpI7aVttTfxeIhVXMMxsE7S4TWJTk0CV5KAxHe4/6AfQGQqRLl9v4n91mux
0kjU+LYH9TrZ7ND2WuD/hgar9HSy44PFNgnxstQK389i5Xh5TEVCaj0h4r3JAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqrvr7x2wsfETVqbEc295n2dO9uAwHwYDVR0j
BBgwFoAUAqNAFc8fmPyyJAxfyR6Ca8quwWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTUyM2QwNjAtYjdhNS00NDU1LTk5NDAtNGZiN2M3MDQ0MzBmLzAvMDJBMzQwMTVD
RjFGOThGQ0IyMjQwQzVGQzkxRTgyNkJDQUFFQzE2Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMkEzNDAxNUNGMUY5OEZDQjIyNDBDNUZDOTFFODI2QkNBQUVD
MTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5
NDAtNGZiN2M3MDQ0MzBmLzAvMDJBMzQwMTVDRjFGOThGQ0IyMjQwQzVGQzkxRTgy
NkJDQUFFQzE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJPMQdMV6vHndfhqV47YbzCRrhqC1iFn9zLb
mGEWkxw5+B26NfIj0IGY+7ThDiefDCc4BH1s8vq2c6hp24VJ2tTTZfnsKQdC4ZYR
Vk6A3y1hFLRoYoqiVtfS8OqeOjVuy0OuX/PAG43m/lRl1KonwGQ49imEBHUO8meZ
66T163rwhqDR8slkOo+n9eKThWSb0nObXjsk7NJZVUJk9lQHoD75kU+TiHfVvU73
kUNj2QJPTFwgnRgxkPIS/28iljetrvyc/M3TeqF02C5iKx7jEcImGBuDxnKv7Lp7
Msv5v6agp82y9sMOHjj1R+KG9WCZdT+kun4VR4nuPq6uwEmHNvA=
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:47:58 2026 by rpki-client