
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
File: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft (raw, json)
Hash identifier: o6qXPkcHRUAlHcNcufT2jdw9csLTUc3wkghQxxMRKI0=
Subject key identifier: 9F:03:F8:5F:29:5A:CE:6B:4C:9D:6C:D9:0D:78:DB:15:7C:72:43:A5
Authority key identifier: 02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97
Certificate issuer: /CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
Certificate serial: 3664CD5CDB6230611A70FAB5E0C7FAE6325F06B4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 22:49:11 +0000
Manifest this update: Wed 23 Sep 2026 22:44:11 +0000
Manifest next update: Fri 25 Sep 2026 01:28:11 +0000
Files and hashes: 1: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: 8bk4nM/CpViyJMYTIYd85+JJ5zEQXXgNb/ogzW3MmFM=)
2: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: mckJR6NOoa+yl4WEvk2NXD7USkbc88RSKMqJlOr2OEY=)
3: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl (hash: GlKw5hi0FIbs4ejmsPyFSBFj4U+GskEwn68E4oCdwxc=)
4: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: uqiSzcg0G6eG40rjBlY0LrjMSKV5cIiAMiPhDeDO7GM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl
rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 01:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:64:cd:5c:db:62:30:61:1a:70:fa:b5:e0:c7:fa:e6:32:5f:06:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
Validity
Not Before: Sep 23 22:44:11 2026 GMT
Not After : Sep 25 01:28:11 2026 GMT
Subject: CN=9F03F85F295ACE6B4C9D6CD90D78DB157C7243A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:e7:c9:96:3b:1c:8b:61:45:76:b0:db:f1:
53:ef:42:cb:7c:3e:5a:d7:03:be:68:09:73:7f:e1:
ec:cc:b4:ea:45:7c:05:97:b0:88:86:38:f6:d9:27:
86:ed:28:c9:ec:55:6f:58:c0:c3:84:10:e0:7f:70:
c1:ca:23:94:ee:38:ad:f3:c7:84:1b:b7:89:9b:f2:
ff:7b:9c:c5:2e:01:c5:62:56:44:e6:8b:a0:d0:65:
ad:df:63:85:85:4e:9f:94:25:8a:56:6e:91:0e:38:
8b:b9:10:b8:9d:6b:12:fc:5c:b9:4a:5e:e2:f1:e4:
a4:fd:2c:d1:74:ed:3c:8f:a1:37:38:6c:ce:e7:46:
63:98:35:6f:c0:b2:fb:a8:3e:90:5a:cc:70:45:2f:
af:1a:28:e0:6c:15:9d:78:8b:17:2a:26:7f:4f:c9:
06:eb:6c:80:32:ca:5b:fc:62:3b:a2:65:22:b9:9e:
8a:25:0b:eb:dc:2c:80:b5:60:49:95:2a:1b:6c:d6:
e2:7c:b9:c9:f0:32:17:7c:4b:d1:f1:e1:3e:99:72:
17:fc:0d:a5:d6:ae:69:8e:fe:cf:88:b4:9c:7e:cb:
be:1f:61:3f:40:54:f8:e1:cf:f3:14:76:af:c5:d3:
bd:1d:fc:90:c4:6d:e9:68:af:7d:49:17:c3:e5:bc:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:F8:5F:29:5A:CE:6B:4C:9D:6C:D9:0D:78:DB:15:7C:72:43:A5
X509v3 Authority Key Identifier:
keyid:02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f6:d4:c7:03:d3:04:fb:fa:7d:7c:2a:03:0a:f8:7c:24:1b:
cf:87:2e:a7:6c:b9:39:39:80:ef:ca:1b:d1:7a:ae:85:bb:9f:
4c:a4:c4:31:bf:40:fa:3f:63:0c:a9:d2:18:85:97:5d:73:f6:
76:d0:f6:ef:11:31:ed:3f:cb:e0:1e:2e:4c:c8:0b:49:01:22:
ec:ac:f3:0b:26:8e:55:be:53:0d:c3:52:f3:49:ea:cf:94:20:
09:14:d3:5a:9d:8e:7c:d7:33:a9:cd:4c:63:aa:9b:2f:20:95:
30:d4:72:c7:1c:32:26:ba:e2:56:58:55:40:11:b4:ca:de:85:
c7:10:7a:bc:a0:0f:e0:65:8f:f7:c3:a7:39:34:7f:40:c2:d9:
9f:3e:f9:46:d9:60:1e:63:dd:20:af:7a:46:1b:b6:0b:89:05:
cf:23:1e:1a:27:7f:90:5d:29:f3:75:83:24:6b:9e:16:6b:dd:
9b:49:39:31:3b:6e:44:53:58:20:8d:dc:eb:65:c1:e0:b8:da:
bd:0e:54:8b:2f:bc:50:31:b6:7c:7f:98:c8:c8:c9:21:ad:db:
84:ca:89:7f:ce:2b:c7:32:a5:01:3a:47:f8:3f:38:16:0f:1f:
6f:27:cb:fd:3a:bc:7b:6d:c8:f3:56:f0:4f:a5:4c:c8:27:22:
d6:9e:94:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:23:39 2026 by rpki-client