
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
File: 02062A0A8A708F654606A252EFBD31F81D738315.mft (raw, json)
Hash identifier: Z8xAQzUDNRKZgI8JHVZZVX6G6JtU0khlUD/3W4LpS1k=
Subject key identifier: BC:AB:32:67:A0:90:F8:1C:A8:78:0C:7B:EC:D1:70:BE:AB:72:A6:D2
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Certificate issuer: /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial: 47285F14F132DF839076FAFAA72C162B4622FD68
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
Manifest number: E8
Signing time: Fri 23 Oct 2026 17:46:07 +0000
Manifest this update: Fri 23 Oct 2026 17:41:07 +0000
Manifest next update: Sat 24 Oct 2026 20:30:07 +0000
Files and hashes: 1: 323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa (hash: EVQi6mazM653PJFBgl7YFEMCCOBeSklEGrJuFS043Xc=)
2: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: clTahx455UxlkJYNDCM/wq9LWiMSO2WARDzZ8Sig5Fk=)
3: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: 45WbWMcKeFCrPpVTXhHkMcLTBSuk6N5adzCUQo/XdPw=)
4: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: k/z6SFQYMRP25rBny9yAVOgDZ8IEwiJ/5gKXdBpk2aI=)
5: 02062A0A8A708F654606A252EFBD31F81D738315.crl (hash: +Mcswv00kbjZE5J5cJgWpYpPpDIVxUOyiXkKiBk2f5U=)
6: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: 28iebkfRgFCQlkV8WxdrlGcy0HhJBZpDacDrgwhDclI=)
7: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: EkpGc2+ARUZ09EgZQPHNvR6NBm18LA8bhuyzNll25bM=)
8: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: bnXq8XENZAHIWya2k4ydYwWfQH9btnFm6jqiJZ4Rcfk=)
9: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: dWhStAj6HzRZyPO6wK8fbaTC6+s5nIuRkrdrVFiEcTg=)
10: 323030313a6436383a3a2f33322d3332203d3e2037353837.roa (hash: y12R0KalV85Nn3EA/hSixCgLfA/LIEnSC9olzP9svFU=)
11: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: tlnA8054TEaiL5K5Or4iY0Fk6myjyN9Bm0Btn/pblxM=)
12: 3230322e3138302e312e302f32342d3234203d3e2037353837.roa (hash: gPbGzeqFwHYLDGzFogRo8W1Ry/yCp4EwuhMQI23YMLc=)
13: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: x+fFT+Zpd1POcF5MqSOeMNUWAthajVWLkhVurWez9a8=)
14: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: Q4I1ovKyT16FiPygNOO0hXygDOJfZQA7jOOYPptFFvM=)
15: 323030313a6436383a3a2f33322d3332203d3e203338373539.roa (hash: 8a+k6Urf56bW4XhUqBSneuIVBM3K/B21j/TAuqOETY4=)
16: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: 39PppIz4okrDa5e/DjHZD/mvz7bxldZmw8H0oU4Mnxk=)
17: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: vHjz5UdeUqbHIkQCC7AtvSrK78oHvCl0MOtP2/FpEcs=)
18: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: SpoZTjV8Tcv0nyd4RXYSHRTLVA2GeIVthtYJ5roslNA=)
19: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: bkuXcKf7rKcFVgTYTYwC4lX5McMr7dzcQ9LhU0QIXCA=)
20: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: JKgFMQaINLByyiM950YQkJcRlrQw6yejg4NQUwVUK6M=)
21: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: Ky7uspjFyDQxkJaSOJ3m0hG8iIc07DMKvphuqACxnOU=)
22: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: ln19Xj+B4lsZrLeIto8uT3WlM8vH3iN38/4gFqnVtU0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 20:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:28:5f:14:f1:32:df:83:90:76:fa:fa:a7:2c:16:2b:46:22:fd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
Validity
Not Before: Oct 23 17:41:07 2026 GMT
Not After : Oct 24 20:30:07 2026 GMT
Subject: CN=BCAB3267A090F81CA8780C7BECD170BEAB72A6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:f0:32:5b:01:18:ac:36:32:e6:65:e9:44:
df:69:eb:2b:f3:87:08:bb:ec:2a:94:b8:47:22:f7:
cd:cd:57:51:c3:ca:3f:b0:46:d2:90:40:ef:06:f5:
e9:7a:0c:cf:4c:a9:c8:22:33:bf:be:04:c7:a4:50:
a7:98:ba:f1:48:d7:c4:d1:a7:e2:32:3e:90:ef:c5:
be:bb:76:23:23:07:fb:14:18:99:ea:42:88:96:62:
0e:23:3e:99:57:ba:1a:ad:65:55:28:4a:eb:39:ab:
bc:81:cc:8d:f2:7f:d3:0b:b2:33:59:9d:fc:5c:c1:
47:0b:d3:1b:0c:f9:58:2b:8d:d2:0d:aa:c0:2e:e1:
03:96:b7:e3:c8:cc:4f:d2:55:72:c5:33:34:1e:9a:
f6:fd:b8:c3:12:ce:0f:20:3f:4b:1b:9a:c6:ae:1f:
96:42:ec:78:3d:78:bb:2f:ff:7b:1d:72:05:8e:f5:
bf:f9:c8:30:ed:3b:f3:22:44:74:7b:94:38:56:13:
a4:06:19:b6:27:04:1e:84:9d:bc:01:a4:15:6a:60:
bc:55:48:91:86:30:32:3a:31:7a:a6:b1:21:9a:ba:
0b:15:83:e6:10:9e:00:33:8b:a1:5b:0c:7f:30:72:
5f:40:b8:11:a5:50:eb:de:1a:43:b7:4d:3b:4f:81:
5d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:32:67:A0:90:F8:1C:A8:78:0C:7B:EC:D1:70:BE:AB:72:A6:D2
X509v3 Authority Key Identifier:
keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ae:89:f7:cf:83:c8:cf:b3:55:b4:94:1a:29:0d:ca:e2:a3:
54:2d:cc:e1:e5:4f:d9:1e:ba:b5:bb:7e:d5:09:d8:58:21:fc:
1e:9a:06:df:d6:2b:6c:a1:66:a5:b9:e7:fa:6f:cc:8b:46:87:
69:a3:d9:19:e6:75:0e:fa:57:18:1c:77:96:2f:86:7e:8f:b2:
d6:2d:6c:39:35:b6:00:3c:30:1a:0c:e4:8c:a0:4a:e3:70:d5:
b0:f6:b7:ae:a5:8d:26:20:c3:01:6b:c8:99:da:63:c2:8f:8c:
f8:ec:81:11:b5:b1:62:39:c2:61:65:1f:89:76:6a:2d:0f:ea:
df:e5:a3:21:74:dc:2d:c3:11:a9:1d:79:a6:39:bc:ee:45:23:
fa:7f:72:c4:af:43:ea:15:de:f1:76:78:6f:a1:49:46:b3:82:
23:a6:cf:9a:b3:d3:7f:af:5f:04:25:32:34:4e:c8:25:1d:8f:
7a:f6:00:d4:ed:e5:4c:eb:b0:f7:fb:5d:72:f1:5c:43:f1:3b:
6e:6b:a6:18:95:49:82:8a:2b:60:e7:0b:a9:62:32:d5:7b:86:
6b:ba:49:b7:82:0c:c4:3e:b3:77:b1:e2:8c:08:1d:27:c9:e7:
e0:e5:b9:87:99:cc:00:65:58:be:85:88:b7:8f:6b:6e:67:1c:
56:ff:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:44:41 2026 by rpki-client