
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
File: 02062A0A8A708F654606A252EFBD31F81D738315.mft (raw, json)
Hash identifier: WKhadF/lOnp/dsvzvdw1LEPXpWuYKmRvyRSjSjZavXQ=
Subject key identifier: 65:E2:CE:A6:EC:06:6E:8E:44:0D:7E:3A:F3:EA:6C:A8:8E:F4:DF:C9
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Certificate issuer: /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial: 393A0D95B21B879A83BDFED2835AE5F27D01ECC9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
Manifest number: CC
Signing time: Fri 02 Oct 2026 22:28:47 +0000
Manifest this update: Fri 02 Oct 2026 22:23:47 +0000
Manifest next update: Sun 04 Oct 2026 00:40:47 +0000
Files and hashes: 1: 323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa (hash: EVQi6mazM653PJFBgl7YFEMCCOBeSklEGrJuFS043Xc=)
2: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: Q4I1ovKyT16FiPygNOO0hXygDOJfZQA7jOOYPptFFvM=)
3: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: dWhStAj6HzRZyPO6wK8fbaTC6+s5nIuRkrdrVFiEcTg=)
4: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: ln19Xj+B4lsZrLeIto8uT3WlM8vH3iN38/4gFqnVtU0=)
5: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: clTahx455UxlkJYNDCM/wq9LWiMSO2WARDzZ8Sig5Fk=)
6: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: tlnA8054TEaiL5K5Or4iY0Fk6myjyN9Bm0Btn/pblxM=)
7: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: SpoZTjV8Tcv0nyd4RXYSHRTLVA2GeIVthtYJ5roslNA=)
8: 323030313a6436383a3a2f33322d3332203d3e2037353837.roa (hash: y12R0KalV85Nn3EA/hSixCgLfA/LIEnSC9olzP9svFU=)
9: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: 45WbWMcKeFCrPpVTXhHkMcLTBSuk6N5adzCUQo/XdPw=)
10: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: vHjz5UdeUqbHIkQCC7AtvSrK78oHvCl0MOtP2/FpEcs=)
11: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: EkpGc2+ARUZ09EgZQPHNvR6NBm18LA8bhuyzNll25bM=)
12: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: bkuXcKf7rKcFVgTYTYwC4lX5McMr7dzcQ9LhU0QIXCA=)
13: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: 39PppIz4okrDa5e/DjHZD/mvz7bxldZmw8H0oU4Mnxk=)
14: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: Ky7uspjFyDQxkJaSOJ3m0hG8iIc07DMKvphuqACxnOU=)
15: 02062A0A8A708F654606A252EFBD31F81D738315.crl (hash: XZHDqxhd7arrby1CZi7zfh1EZ3TsQim8xBNeygs4xV0=)
16: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: 28iebkfRgFCQlkV8WxdrlGcy0HhJBZpDacDrgwhDclI=)
17: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: bnXq8XENZAHIWya2k4ydYwWfQH9btnFm6jqiJZ4Rcfk=)
18: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: JKgFMQaINLByyiM950YQkJcRlrQw6yejg4NQUwVUK6M=)
19: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: k/z6SFQYMRP25rBny9yAVOgDZ8IEwiJ/5gKXdBpk2aI=)
20: 3230322e3138302e312e302f32342d3234203d3e2037353837.roa (hash: gPbGzeqFwHYLDGzFogRo8W1Ry/yCp4EwuhMQI23YMLc=)
21: 323030313a6436383a3a2f33322d3332203d3e203338373539.roa (hash: 8a+k6Urf56bW4XhUqBSneuIVBM3K/B21j/TAuqOETY4=)
22: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: x+fFT+Zpd1POcF5MqSOeMNUWAthajVWLkhVurWez9a8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:3a:0d:95:b2:1b:87:9a:83:bd:fe:d2:83:5a:e5:f2:7d:01:ec:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
Validity
Not Before: Oct 2 22:23:47 2026 GMT
Not After : Oct 4 00:40:47 2026 GMT
Subject: CN=65E2CEA6EC066E8E440D7E3AF3EA6CA88EF4DFC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:49:53:60:40:9a:75:d5:4d:b3:b9:3f:9d:39:
a1:41:28:8b:c2:48:de:76:07:7c:67:ce:39:3f:ba:
95:c1:12:10:2c:c3:84:2f:2b:52:ee:e0:8e:aa:57:
f4:3c:c0:ec:fd:0d:33:c0:54:56:1b:34:cb:ea:29:
67:c3:87:fb:fd:61:1f:7c:49:50:ae:73:fe:1b:fe:
37:87:a5:ed:66:7e:d8:85:b9:77:56:d2:49:3a:4a:
bb:b0:5e:1a:a0:8c:25:09:25:36:82:83:e0:d0:ec:
74:5a:ec:a5:05:68:de:37:b6:6b:bc:99:22:d3:4c:
76:cf:d6:dc:4b:66:6c:46:b8:ac:23:dc:c3:fe:62:
57:cc:39:9f:1a:50:bc:d9:8a:06:0b:e4:69:10:ca:
53:6f:f0:34:d4:46:54:1b:d9:ed:8e:1e:08:d6:22:
9a:6d:55:c7:02:27:94:b6:b0:e0:b1:d2:b9:23:f7:
61:42:7f:47:51:58:e7:fb:ce:8d:48:fb:a0:87:95:
d3:f9:a9:f5:9b:e9:d2:9d:cf:31:5e:ff:3c:38:b0:
3e:e8:45:d6:f0:8f:e6:11:75:d1:66:75:32:16:f2:
9c:e8:16:30:ea:3d:e9:cc:33:dd:37:4b:fc:1e:b2:
ff:55:bb:8c:33:1f:14:c2:cb:bb:2b:4e:94:3a:f6:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:CE:A6:EC:06:6E:8E:44:0D:7E:3A:F3:EA:6C:A8:8E:F4:DF:C9
X509v3 Authority Key Identifier:
keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6a:bd:50:b4:1a:de:a6:27:e9:18:a2:9b:9a:df:d3:65:c9:
dd:ac:d7:c5:e4:80:54:a8:a4:46:42:b0:6b:3d:e9:b0:ff:b5:
20:bb:bc:d2:4c:25:e0:f3:95:45:74:3a:a6:e4:61:25:da:4f:
00:d2:d7:20:90:8b:5d:4a:d9:7b:23:97:44:6d:6e:b8:5c:36:
62:4a:65:85:e4:64:0b:3d:03:ad:29:a2:12:97:30:2b:1d:36:
1e:06:3b:5f:81:40:52:42:d4:a1:eb:9d:a2:82:43:63:c2:b2:
d5:bb:e7:a7:d5:4d:1a:3c:f0:74:b4:d6:3a:b4:69:6b:f7:74:
fc:44:93:90:61:c4:db:24:da:0f:11:d5:1e:18:91:ae:24:2d:
cb:27:92:a6:66:f4:0d:c4:d0:8b:29:20:be:3e:1b:6f:af:be:
94:98:bb:e0:0f:1e:a5:da:36:bb:42:c5:46:84:b4:8c:9d:a4:
5c:72:04:3a:2b:5b:c7:86:8e:af:a8:b7:45:cd:71:73:9d:75:
cd:55:9e:85:cb:ba:93:69:d9:85:0c:de:7f:47:c1:76:5b:be:
99:b1:00:47:50:70:ea:71:5a:30:3d:eb:cb:01:49:a3:c4:94:
38:85:ba:38:bc:36:9d:85:4d:30:4d:cc:78:54:b4:92:e1:2a:
bd:d4:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:04:57 2026 by rpki-client