
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
File: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft (raw, json)
Hash identifier: uUrNYsPX+8Ro5CfsoZRFcqpFXeoecoxwdldEgVdgDuE=
Subject key identifier: BA:93:B8:B8:7E:F5:5B:4F:57:EA:7D:BE:3D:B4:1F:A3:85:11:4E:AC
Authority key identifier: 02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97
Certificate issuer: /CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
Certificate serial: 36F6FC09E787B546FD68EA70FA861BCFB21E8188
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
Manifest number: 0107
Signing time: Sun 15 Nov 2026 10:47:23 +0000
Manifest this update: Sun 15 Nov 2026 10:42:23 +0000
Manifest next update: Mon 16 Nov 2026 14:33:23 +0000
Files and hashes: 1: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: 8bk4nM/CpViyJMYTIYd85+JJ5zEQXXgNb/ogzW3MmFM=)
2: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl (hash: 9Uxv6KKCwzvTcmk4kVgFDAssW8Pei+SB0XgQ7l8hNzM=)
3: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: uqiSzcg0G6eG40rjBlY0LrjMSKV5cIiAMiPhDeDO7GM=)
4: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: mckJR6NOoa+yl4WEvk2NXD7USkbc88RSKMqJlOr2OEY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl
rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 10:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:f6:fc:09:e7:87:b5:46:fd:68:ea:70:fa:86:1b:cf:b2:1e:81:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997
Validity
Not Before: Nov 15 10:42:23 2026 GMT
Not After : Nov 16 14:33:23 2026 GMT
Subject: CN=BA93B8B87EF55B4F57EA7DBE3DB41FA385114EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:ed:e7:8d:52:b0:8d:d5:bf:9f:12:ae:a5:
53:d2:ad:d7:d3:1e:53:f6:3b:c6:eb:ad:80:5e:3a:
fb:10:85:6d:8c:3a:82:06:57:52:5a:d6:fe:00:b7:
06:88:69:a3:fa:ff:a4:44:f7:c1:10:0f:81:db:dc:
0d:35:f9:a9:aa:46:41:0f:9f:48:3e:e8:8f:0e:12:
6c:84:fc:32:b8:8d:44:7d:4b:b2:4a:8a:8c:7b:6d:
b1:7e:49:06:06:b3:c5:01:12:9f:1c:18:6d:e2:61:
b8:9e:2e:1e:8b:1c:9e:10:b6:fd:4a:a0:b0:2a:a0:
ee:28:0a:d7:c5:26:a5:49:e2:bf:c3:6a:b4:64:69:
7f:c8:f2:57:55:a0:a1:64:93:d7:34:13:d7:0c:0f:
7c:c1:a7:33:da:ee:0d:60:90:99:30:d8:be:6f:db:
f2:6e:dd:3a:a8:21:dc:16:da:a8:82:e5:22:39:82:
9f:45:0d:23:9e:98:02:d3:46:b8:0f:63:35:b8:c0:
6c:44:70:44:1d:8e:ef:ac:1a:91:14:06:3e:dc:2d:
6d:3f:a4:87:73:fc:57:33:a3:5d:ca:cd:d7:d4:d3:
a5:a3:70:2d:46:57:8e:9d:d0:bb:b3:98:65:93:25:
8e:69:ee:d2:6e:b7:26:d9:c8:db:c3:c2:84:e3:38:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:93:B8:B8:7E:F5:5B:4F:57:EA:7D:BE:3D:B4:1F:A3:85:11:4E:AC
X509v3 Authority Key Identifier:
keyid:02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e6:96:95:80:b9:aa:81:5d:6b:8e:10:a2:57:92:60:44:aa:
c6:0f:2b:d1:2c:63:03:4f:9d:19:42:e1:6b:40:2f:26:66:b5:
72:9c:97:77:82:1f:de:3a:3f:48:05:04:31:d7:99:e4:2d:9e:
41:96:d4:7f:7a:43:33:4a:e7:0f:25:3d:3b:57:0b:24:8e:ef:
a6:f7:23:86:f3:19:23:21:d8:31:13:6d:56:2e:04:9b:07:a9:
8f:4a:c1:cc:d1:cb:11:b2:a6:14:6b:c9:a4:8a:9d:de:10:a8:
7b:e0:3e:06:28:9c:20:31:ab:55:dd:3e:fd:19:bc:b0:0c:a4:
12:54:b0:cd:ab:3b:fe:cf:59:e6:b8:dc:7c:f0:9c:04:90:02:
4b:b1:16:97:7b:83:b9:f1:cb:82:54:79:27:c9:82:a8:ad:32:
5c:07:51:4c:b9:0c:72:70:1d:b1:8e:ca:ce:c0:c2:e0:59:c4:
2a:2c:9d:ce:57:34:75:8c:7d:1c:c4:6b:80:09:8c:11:52:fb:
9c:ae:93:22:e1:96:1a:3b:6b:37:4d:be:93:ea:64:61:ff:14:
dd:a2:4e:53:07:8b:91:1d:ce:7b:b5:6a:ad:c9:1e:ad:3b:1e:
48:92:41:da:31:11:34:c6:59:be:00:e0:6a:80:f8:e7:07:a3:
12:1b:7a:77
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUNvb8CeeHtUb9aOpw+oYbz7IegYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJGODZENzkzMDY2NkFDOUIwODA5RDdBRTQyQzIwQjFE
MjlDQTk5NzAeFw0yNjExMTUxMDQyMjNaFw0yNjExMTYxNDMzMjNaMDMxMTAvBgNV
BAMTKEJBOTNCOEI4N0VGNTVCNEY1N0VBN0RCRTNEQjQxRkEzODUxMTRFQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7u+3njVKwjdW/nxKupVPSrdfT
HlP2O8brrYBeOvsQhW2MOoIGV1Ja1v4AtwaIaaP6/6RE98EQD4Hb3A01+amqRkEP
n0g+6I8OEmyE/DK4jUR9S7JKiox7bbF+SQYGs8UBEp8cGG3iYbieLh6LHJ4Qtv1K
oLAqoO4oCtfFJqVJ4r/DarRkaX/I8ldVoKFkk9c0E9cMD3zBpzPa7g1gkJkw2L5v
2/Ju3TqoIdwW2qiC5SI5gp9FDSOemALTRrgPYzW4wGxEcEQdju+sGpEUBj7cLW0/
pIdz/Fczo13KzdfU06WjcC1GV46d0LuzmGWTJY5p7tJutybZyNvDwoTjONZZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUupO4uH71W09X6n2+PbQfo4URTqwwHwYDVR0j
BBgwFoAUAvhteTBmasmwgJ165CwgsdKcqZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWUzMTQ4NTgtYjMzYS00YjY1LTlhNTUtZGNlNDFlMjIzODczLzAvMDJGODZENzkz
MDY2NkFDOUIwODA5RDdBRTQyQzIwQjFEMjlDQTk5Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMkY4NkQ3OTMwNjY2QUM5QjA4MDlEN0FFNDJDMjBCMUQyOUNB
OTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh
NTUtZGNlNDFlMjIzODczLzAvMDJGODZENzkzMDY2NkFDOUIwODA5RDdBRTQyQzIw
QjFEMjlDQTk5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEzmlpWAuaqBXWuOEKJXkmBEqsYPK9EsYwNP
nRlC4WtALyZmtXKcl3eCH946P0gFBDHXmeQtnkGW1H96QzNK5w8lPTtXCySO76b3
I4bzGSMh2DETbVYuBJsHqY9KwczRyxGyphRryaSKnd4QqHvgPgYonCAxq1XdPv0Z
vLAMpBJUsM2rO/7PWea43HzwnASQAkuxFpd7g7nxy4JUeSfJgqitMlwHUUy5DHJw
HbGOys7AwuBZxCosnc5XNHWMfRzEa4AJjBFS+5yukyLhlho7azdNvpPqZGH/FN2i
TlMHi5Edznu1aq3JHq07HkiSQdoxETTGWb4A4GqA+OcHoxIbenc=
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:56:32 2026 by rpki-client