
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
File: 02062A0A8A708F654606A252EFBD31F81D738315.mft (raw, json)
Hash identifier: 99ssgRZpNmBj7okv0OHage2YynBDKLJf07RU81S6DOs=
Subject key identifier: 92:F1:C5:2B:E7:BB:17:7B:8E:AB:61:BF:4B:62:C6:C5:FA:49:C1:3D
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Certificate issuer: /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial: 3F48D4612B37AFDEC3F756C0BA5AC1A51F3D6E99
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 20:02:22 +0000
Manifest this update: Wed 02 Sep 2026 19:57:22 +0000
Manifest next update: Thu 03 Sep 2026 23:54:22 +0000
Files and hashes: 1: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: EkpGc2+ARUZ09EgZQPHNvR6NBm18LA8bhuyzNll25bM=)
2: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: SpoZTjV8Tcv0nyd4RXYSHRTLVA2GeIVthtYJ5roslNA=)
3: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: x+fFT+Zpd1POcF5MqSOeMNUWAthajVWLkhVurWez9a8=)
4: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: k/z6SFQYMRP25rBny9yAVOgDZ8IEwiJ/5gKXdBpk2aI=)
5: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: ln19Xj+B4lsZrLeIto8uT3WlM8vH3iN38/4gFqnVtU0=)
6: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: bnXq8XENZAHIWya2k4ydYwWfQH9btnFm6jqiJZ4Rcfk=)
7: 3230322e3138302e312e302f32342d3234203d3e2037353837.roa (hash: gPbGzeqFwHYLDGzFogRo8W1Ry/yCp4EwuhMQI23YMLc=)
8: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: tlnA8054TEaiL5K5Or4iY0Fk6myjyN9Bm0Btn/pblxM=)
9: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: dWhStAj6HzRZyPO6wK8fbaTC6+s5nIuRkrdrVFiEcTg=)
10: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: 45WbWMcKeFCrPpVTXhHkMcLTBSuk6N5adzCUQo/XdPw=)
11: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: Q4I1ovKyT16FiPygNOO0hXygDOJfZQA7jOOYPptFFvM=)
12: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: Ky7uspjFyDQxkJaSOJ3m0hG8iIc07DMKvphuqACxnOU=)
13: 323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa (hash: EVQi6mazM653PJFBgl7YFEMCCOBeSklEGrJuFS043Xc=)
14: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: 39PppIz4okrDa5e/DjHZD/mvz7bxldZmw8H0oU4Mnxk=)
15: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: JKgFMQaINLByyiM950YQkJcRlrQw6yejg4NQUwVUK6M=)
16: 323030313a6436383a3a2f33322d3332203d3e203338373539.roa (hash: 8a+k6Urf56bW4XhUqBSneuIVBM3K/B21j/TAuqOETY4=)
17: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: clTahx455UxlkJYNDCM/wq9LWiMSO2WARDzZ8Sig5Fk=)
18: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: vHjz5UdeUqbHIkQCC7AtvSrK78oHvCl0MOtP2/FpEcs=)
19: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: 28iebkfRgFCQlkV8WxdrlGcy0HhJBZpDacDrgwhDclI=)
20: 02062A0A8A708F654606A252EFBD31F81D738315.crl (hash: SHNgyxRpUezTtu+oVJK3U93K8yHdVs9O7hXWOEmAbVc=)
21: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: bkuXcKf7rKcFVgTYTYwC4lX5McMr7dzcQ9LhU0QIXCA=)
22: 323030313a6436383a3a2f33322d3332203d3e2037353837.roa (hash: y12R0KalV85Nn3EA/hSixCgLfA/LIEnSC9olzP9svFU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 23:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:48:d4:61:2b:37:af:de:c3:f7:56:c0:ba:5a:c1:a5:1f:3d:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
Validity
Not Before: Sep 2 19:57:22 2026 GMT
Not After : Sep 3 23:54:22 2026 GMT
Subject: CN=92F1C52BE7BB177B8EAB61BF4B62C6C5FA49C13D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:6d:e3:70:08:29:8a:c4:e1:fb:ba:64:e7:
1f:37:09:d0:20:45:cb:ef:ba:a4:6a:16:30:aa:6d:
83:49:b4:b9:3c:67:2c:b0:59:c3:9c:7e:bf:9c:fe:
94:4a:59:fe:36:60:5a:9d:f1:10:2e:4b:11:f0:7a:
cc:0f:7b:33:e4:31:3f:14:aa:7f:3a:63:ab:d9:cd:
97:b6:fc:6e:1f:68:f1:be:dd:fe:53:1b:72:b6:f9:
a4:cf:79:d2:60:b6:3a:6e:e6:16:fa:1f:d0:f0:c5:
df:ac:87:d6:b7:bd:92:c2:2a:be:88:ee:2a:da:8c:
da:85:8e:05:e0:b7:58:f8:b4:5e:64:8f:e4:e3:6c:
b3:99:f2:f6:f1:b2:d6:0c:52:e4:29:3b:07:49:b4:
8b:90:f7:b0:b7:bc:d4:76:e3:80:5f:72:d6:40:f1:
06:fd:e5:46:9e:63:f1:82:bc:33:4b:8c:17:a2:a0:
e5:70:c6:af:69:02:c1:4a:80:3c:05:b2:e2:ab:6a:
4b:e9:77:74:e6:8c:37:bb:e3:75:75:e7:15:d4:2d:
0a:67:72:29:88:85:c9:92:26:0b:2c:86:fb:49:d4:
28:48:ca:d2:ba:b2:fa:4d:c1:d9:3e:65:b7:df:12:
f7:51:99:44:e6:bb:7c:3e:8f:0b:4d:f3:6c:ca:7d:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F1:C5:2B:E7:BB:17:7B:8E:AB:61:BF:4B:62:C6:C5:FA:49:C1:3D
X509v3 Authority Key Identifier:
keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7b:f0:cb:8a:bd:17:20:dd:79:81:25:c4:e9:fc:a5:3f:9d:
b4:2e:04:1f:ac:7c:d1:7b:b3:d1:14:b0:f2:77:bd:c0:81:65:
0c:fc:33:5d:6c:4c:9d:02:da:66:c7:df:af:d9:60:8b:71:59:
55:42:29:0f:9b:47:61:bf:1a:de:52:70:0f:3a:a4:c3:c6:f7:
d8:89:92:26:a6:ab:27:31:fa:8e:93:9d:f0:d3:e2:88:83:a5:
38:f2:d5:39:a7:f4:7a:71:56:71:c7:dc:d9:fb:8d:d3:9e:de:
92:17:af:d7:b4:bd:cf:9f:e9:7f:ee:a2:bd:4f:73:70:aa:fa:
d3:fe:0e:e0:e6:31:6c:c6:d6:39:a2:ec:7d:58:55:af:44:40:
af:d7:a6:58:77:78:4b:45:55:cc:a1:4a:b4:9d:22:35:89:f7:
42:d1:0b:79:2e:26:2d:65:cd:fd:53:b6:33:a4:2d:9e:02:be:
20:88:de:fd:95:40:5b:fb:7c:60:03:99:ae:bd:eb:e9:3d:cd:
d5:ea:1e:62:c1:fe:b9:4c:69:4c:1a:a7:02:7c:8e:a1:85:92:
7f:3e:f5:3b:84:3c:94:7b:b7:b0:ce:eb:97:14:77:35:98:be:
6b:05:ce:82:8d:08:e5:58:db:78:7d:7f:b5:49:8a:0f:3b:45:
a2:fe:be:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 13:04:00 2026 by rpki-client