
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
File: 02062A0A8A708F654606A252EFBD31F81D738315.mft (raw, json)
Hash identifier: Tl5BxTQcVFxAckCWlRo8u5ydYDDX1qzC09r/lqjWP00=
Subject key identifier: F2:A4:86:1D:20:E4:C9:21:D5:82:21:B5:BC:C6:FF:75:A6:0F:F3:F3
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Certificate issuer: /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial: 2D16ACC22B081B0938262B9A5F077045FEDE939A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 08:30:32 +0000
Manifest this update: Tue 02 Jun 2026 08:25:32 +0000
Manifest next update: Wed 03 Jun 2026 12:07:32 +0000
Files and hashes: 1: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: EkpGc2+ARUZ09EgZQPHNvR6NBm18LA8bhuyzNll25bM=)
2: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: vHjz5UdeUqbHIkQCC7AtvSrK78oHvCl0MOtP2/FpEcs=)
3: 02062A0A8A708F654606A252EFBD31F81D738315.crl (hash: 2e5nmN/jtryZuxzGUI1p47YhgjiInr3tSYJCYDHl+A4=)
4: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: k/z6SFQYMRP25rBny9yAVOgDZ8IEwiJ/5gKXdBpk2aI=)
5: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: Ky7uspjFyDQxkJaSOJ3m0hG8iIc07DMKvphuqACxnOU=)
6: 323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa (hash: EVQi6mazM653PJFBgl7YFEMCCOBeSklEGrJuFS043Xc=)
7: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: Q4I1ovKyT16FiPygNOO0hXygDOJfZQA7jOOYPptFFvM=)
8: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: tlnA8054TEaiL5K5Or4iY0Fk6myjyN9Bm0Btn/pblxM=)
9: 323030313a6436383a3a2f33322d3332203d3e2037353837.roa (hash: y12R0KalV85Nn3EA/hSixCgLfA/LIEnSC9olzP9svFU=)
10: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: x+fFT+Zpd1POcF5MqSOeMNUWAthajVWLkhVurWez9a8=)
11: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: bnXq8XENZAHIWya2k4ydYwWfQH9btnFm6jqiJZ4Rcfk=)
12: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: ln19Xj+B4lsZrLeIto8uT3WlM8vH3iN38/4gFqnVtU0=)
13: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: SpoZTjV8Tcv0nyd4RXYSHRTLVA2GeIVthtYJ5roslNA=)
14: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: 28iebkfRgFCQlkV8WxdrlGcy0HhJBZpDacDrgwhDclI=)
15: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: bkuXcKf7rKcFVgTYTYwC4lX5McMr7dzcQ9LhU0QIXCA=)
16: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: clTahx455UxlkJYNDCM/wq9LWiMSO2WARDzZ8Sig5Fk=)
17: 323030313a6436383a3a2f33322d3332203d3e203338373539.roa (hash: 8a+k6Urf56bW4XhUqBSneuIVBM3K/B21j/TAuqOETY4=)
18: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: 45WbWMcKeFCrPpVTXhHkMcLTBSuk6N5adzCUQo/XdPw=)
19: 3230322e3138302e312e302f32342d3234203d3e2037353837.roa (hash: gPbGzeqFwHYLDGzFogRo8W1Ry/yCp4EwuhMQI23YMLc=)
20: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: 39PppIz4okrDa5e/DjHZD/mvz7bxldZmw8H0oU4Mnxk=)
21: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: dWhStAj6HzRZyPO6wK8fbaTC6+s5nIuRkrdrVFiEcTg=)
22: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: JKgFMQaINLByyiM950YQkJcRlrQw6yejg4NQUwVUK6M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:16:ac:c2:2b:08:1b:09:38:26:2b:9a:5f:07:70:45:fe:de:93:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
Validity
Not Before: Jun 2 08:25:32 2026 GMT
Not After : Jun 3 12:07:32 2026 GMT
Subject: CN=F2A4861D20E4C921D58221B5BCC6FF75A60FF3F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:8b:29:a3:07:23:74:fd:4c:43:79:7b:e7:
06:cc:62:77:d1:18:b0:c6:08:61:5f:59:ba:45:07:
11:1b:a8:d3:28:a8:6c:ef:9f:24:d5:1f:d7:00:86:
c5:15:13:ac:4b:43:f3:4c:9a:ec:8a:9b:fd:e0:4d:
08:0b:f8:e7:7a:e9:0f:b6:4e:3c:eb:56:38:8a:25:
2b:2c:37:07:83:d7:73:77:ff:12:ba:db:86:21:cb:
c7:21:2c:18:59:31:03:90:a6:ed:df:98:c8:bf:79:
e9:4a:ae:2e:88:35:0c:26:4d:24:44:b6:e5:17:7c:
54:e4:4a:e5:d7:a1:9f:b1:6d:9e:a8:c0:b2:d5:5f:
61:ad:42:fd:7b:5c:61:11:a7:30:e1:96:a4:8d:a9:
8e:f7:4c:1f:92:51:b9:31:11:b2:02:49:09:d0:2f:
a3:38:7d:31:fb:f2:84:36:6e:4c:7c:04:27:7e:51:
78:97:7c:dd:27:22:bc:df:98:fd:10:24:1f:0d:7e:
95:8d:a6:bc:de:3f:b4:a4:c0:0f:ef:f2:38:57:2d:
27:6d:cb:90:82:d4:98:0d:25:ed:63:e9:23:21:cc:
1d:ef:6b:ba:72:87:c9:c8:88:f4:72:1e:4e:0b:bf:
16:fa:79:da:a1:db:d2:aa:9b:6e:ee:0b:11:6a:03:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A4:86:1D:20:E4:C9:21:D5:82:21:B5:BC:C6:FF:75:A6:0F:F3:F3
X509v3 Authority Key Identifier:
keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:19:59:84:71:83:57:bb:9b:46:5b:cc:df:95:5e:0d:8e:3c:
b8:2a:a2:37:7e:89:7d:9f:17:fa:af:a8:6e:e0:e2:91:e1:1a:
14:0f:ca:db:c2:0b:e7:f7:17:b9:37:d3:3f:e4:88:f9:1b:d9:
da:c0:76:b7:7b:45:a7:30:12:5b:f9:83:8b:a3:35:b1:ce:dc:
66:a3:88:34:b9:9b:9f:0d:45:2f:f2:f9:98:b0:63:ad:c2:90:
a1:18:2f:c4:cb:a7:2a:41:54:4d:a0:39:d3:11:8e:2c:7b:f0:
7f:18:01:47:76:97:75:89:f6:20:5c:a6:cd:15:91:21:fb:f4:
14:1e:b8:13:a1:69:9b:cd:3a:91:d3:0f:22:81:9d:8f:75:c3:
93:19:0e:1f:14:1d:da:da:09:d5:98:5a:5a:a6:12:db:3c:d8:
3a:fc:c8:c6:85:d0:03:82:d6:ec:40:1e:64:12:3e:f7:8f:e4:
76:a0:10:7b:1f:a7:5c:96:d2:3d:90:82:58:74:5b:97:4d:51:
d2:01:75:9d:e4:44:32:2b:7a:86:ed:72:ab:ee:c9:cf:62:7c:
e7:fa:d9:86:93:98:90:af:c5:1a:95:37:a3:82:8b:e3:9f:45:
cb:29:e8:36:cb:58:29:b8:29:b4:91:85:3f:20:11:51:6c:62:
c2:36:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:47:44 2026 by rpki-client