
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
File: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft (raw, json)
Hash identifier: t0PTiJBcBDPVpQQWggoWXzpTT8PjT6rba3c+vnMSDag=
Subject key identifier: 11:BA:4A:4A:8B:8D:2F:96:8F:09:16:81:E9:60:E6:27:EF:80:A6:2F
Authority key identifier: 02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97
Certificate issuer: /CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
Certificate serial: 6D8EB91268F4F2C8C68EAF812801AC65F567D8EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 11:27:08 +0000
Manifest this update: Tue 12 May 2026 11:22:08 +0000
Manifest next update: Wed 13 May 2026 13:32:08 +0000
Files and hashes: 1: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: 8bk4nM/CpViyJMYTIYd85+JJ5zEQXXgNb/ogzW3MmFM=)
2: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl (hash: BZQshUzYA7UpVbYc9k/Msq8ygF8vxTxVNbe62fb7MFc=)
3: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: uqiSzcg0G6eG40rjBlY0LrjMSKV5cIiAMiPhDeDO7GM=)
4: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: mckJR6NOoa+yl4WEvk2NXD7USkbc88RSKMqJlOr2OEY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl
rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:8e:b9:12:68:f4:f2:c8:c6:8e:af:81:28:01:ac:65:f5:67:d8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
Validity
Not Before: May 12 11:22:08 2026 GMT
Not After : May 13 13:32:08 2026 GMT
Subject: CN=11BA4A4A8B8D2F968F091681E960E627EF80A62F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:12:5b:2e:b9:7a:43:f5:f9:dc:47:d2:4b:
a7:34:fd:6d:f6:02:e5:32:dd:97:56:19:02:de:94:
a1:2f:f6:35:6f:ba:de:7a:fe:bd:f4:ce:39:15:5d:
a7:e1:1f:8d:e2:e4:80:23:68:4b:ec:c9:a1:67:d1:
1b:3b:0c:9e:13:0d:41:a3:0a:82:ad:31:94:3c:fc:
75:2f:45:70:41:31:b3:e9:7d:ba:9a:5a:50:f2:36:
f6:45:1b:14:43:fb:d7:7e:c6:22:29:87:e7:1a:b5:
e4:43:b7:8b:cd:f1:2b:86:1c:c5:cf:9e:31:92:54:
66:34:2f:67:cb:89:d4:06:5a:41:7f:7f:e3:df:55:
66:dc:4c:1c:74:e3:9d:75:b2:df:75:dc:75:57:aa:
1a:59:83:a4:9d:78:37:6f:00:d5:dc:d0:84:03:72:
eb:db:3f:56:8f:10:45:cb:1c:15:7e:18:c5:48:a5:
b7:f8:f3:3f:10:15:b0:41:0b:8c:0e:34:1b:1c:d5:
0e:9d:a2:60:6e:48:87:78:04:70:a8:d5:bd:c6:bb:
22:4c:18:a3:ce:30:05:a6:87:db:03:af:cc:96:59:
4f:fe:93:2b:a3:b1:07:94:ca:b8:58:9d:90:71:d9:
87:29:4a:79:2c:23:fb:bb:30:1f:ab:fe:eb:39:34:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BA:4A:4A:8B:8D:2F:96:8F:09:16:81:E9:60:E6:27:EF:80:A6:2F
X509v3 Authority Key Identifier:
keyid:02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:17:bb:c1:9b:f2:72:a0:85:22:06:da:9a:a7:c8:b8:0d:4d:
58:ac:b3:ef:31:f2:45:93:aa:45:0c:b0:53:64:38:b3:33:e3:
f7:bf:7e:8f:fa:ff:b8:53:02:33:ee:c6:40:83:6b:81:69:62:
ad:0c:c5:86:0c:79:e7:8b:3b:c7:da:f8:69:1e:1b:eb:fb:bf:
fe:da:ab:17:b2:67:e2:f7:95:19:64:77:30:d8:9a:c2:1a:d5:
93:fe:0d:5b:92:cc:5e:25:89:ef:68:ed:53:06:00:4b:0b:ca:
f8:29:76:3b:7b:bf:b8:ee:73:7a:74:de:29:6c:5e:8b:24:f1:
8b:51:89:82:53:be:65:19:c7:2a:73:89:43:5a:8a:8f:18:bc:
63:f2:21:24:2d:84:1a:d8:f6:70:60:09:2e:81:c9:6c:95:49:
42:3f:cd:f4:98:81:83:04:d1:ed:12:a0:3f:0c:d2:24:c3:59:
05:84:f0:33:bd:a2:0b:e2:a7:bd:29:7a:5b:65:e3:b8:c7:52:
cc:9f:41:89:ff:99:26:82:d7:4a:6e:cd:a5:93:7a:9b:13:db:
71:55:da:00:6e:ad:33:2a:76:a8:4a:86:55:d9:6d:c2:d8:8c:
b9:93:67:dc:20:99:4b:6f:3d:fb:60:e1:d5:bd:8a:16:91:43:
78:52:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:00 2026 by rpki-client