$ rpki-client -vvf rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft File: 02A8ED077C03E43C338DFC14D6192E46DA534B52.mft (raw, json) Hash identifier: uvtcUnMdtjfiICLHNY5z6kktAwkcn+uOBEMT3sB40CY= Subject key identifier: D9:78:34:D6:88:80:D9:5B:E4:EF:43:D9:75:88:AC:C8:D6:2B:22:12 Authority key identifier: 02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52 Certificate issuer: /CN=02A8ED077C03E43C338DFC14D6192E46DA534B52 Certificate serial: 1EB3C8F957BBF67381D144ABD4A5407794F16918 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:49:22 +0000 Manifest this update: Tue 12 May 2026 18:44:22 +0000 Manifest next update: Wed 13 May 2026 21:34:22 +0000 Files and hashes: 1: 3130332e3132312e3134392e302f32342d3234203d3e203538333639.roa (hash: d3o2aJg5sY9JGfN+Wb+JV5Ly3qfvYxcESwubxcNcZ8g=) 2: 02A8ED077C03E43C338DFC14D6192E46DA534B52.crl (hash: DucGgW/TkBiVZ3UDg5Sco/yEwES2TWopA59HkFhgE1o=) 3: 3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (hash: 5QRCY/F26LQx+cpm0T1M7MYTi3ygt+T6ugETEbjQYdg=) 4: 3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (hash: 3pwrvYXUcXwtoiYb2fFzF/R5rpxEebJsT3YYZEfo+OM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b3:c8:f9:57:bb:f6:73:81:d1:44:ab:d4:a5:40:77:94:f1:69:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02A8ED077C03E43C338DFC14D6192E46DA534B52 Validity Not Before: May 12 18:44:22 2026 GMT Not After : May 13 21:34:22 2026 GMT Subject: CN=D97834D68880D95BE4EF43D97588ACC8D62B2212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:22:d5:c3:9e:ec:03:2e:c5:cd:8a:4c:86:56: 11:63:62:56:c3:05:48:ed:b9:a6:38:91:4a:8f:fe: 42:25:26:40:59:e5:b2:2b:c0:25:28:27:6a:a2:a1: d2:78:d6:0f:d8:3c:80:9e:f8:b7:2c:9e:2e:cf:30: b8:7d:b7:3b:b9:48:6c:36:29:a0:cd:dc:8e:c3:3d: 51:2c:ca:69:67:9f:2f:55:f6:41:f5:b1:3c:2f:c1: 1b:07:53:7b:49:d1:9d:3d:3d:7f:a0:0c:f7:15:97: 6b:f3:2c:bf:29:ed:fe:e3:21:bb:62:ba:64:28:30: b0:80:cb:3e:a6:b6:f7:07:64:1a:b6:e9:d9:1d:3d: ce:17:b8:00:75:aa:e0:98:33:84:c4:b1:4a:3d:f6: 61:83:8f:05:6b:f6:83:b3:b3:f0:93:36:aa:7d:3e: f8:7b:ee:f9:e0:f7:12:f9:19:87:b1:38:43:cb:ac: 91:3e:89:e8:19:3a:ce:c8:1c:4b:04:63:46:e7:79: 4d:9d:5d:58:21:98:f5:02:06:6d:86:d3:28:d0:ab: c2:64:d7:1c:f4:a0:a0:c8:ba:2f:36:2c:01:01:87: c8:7c:c3:3d:43:6c:04:88:b3:b3:22:5f:36:fc:89: 8e:1e:c3:d8:f6:6f:9d:90:3d:c3:17:3e:5e:f1:e8: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:78:34:D6:88:80:D9:5B:E4:EF:43:D9:75:88:AC:C8:D6:2B:22:12 X509v3 Authority Key Identifier: keyid:02:A8:ED:07:7C:03:E4:3C:33:8D:FC:14:D6:19:2E:46:DA:53:4B:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A8ED077C03E43C338DFC14D6192E46DA534B52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/02A8ED077C03E43C338DFC14D6192E46DA534B52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0c:19:8d:e7:e1:e9:33:2a:25:c8:77:2d:61:6a:ad:c1:29: 7c:bf:b2:8f:98:5e:90:66:3a:4f:82:8e:ed:9b:42:50:bd:10: ab:37:bd:df:de:b2:6f:3c:31:38:88:5c:07:e4:c5:3d:9b:f9: 6b:88:58:8b:82:c0:d0:b5:c6:51:d8:44:3c:e8:ee:0d:fe:98: 2c:96:ab:e0:42:e5:a9:9a:7b:27:5f:a8:12:89:49:e4:8e:31: a6:e5:49:b5:ac:69:63:f5:f1:9d:00:ce:05:d8:b6:4e:d0:a7: d3:bd:d3:ed:41:b2:17:bf:4d:33:bf:dd:42:f0:27:94:ab:56: 73:3e:66:fe:9a:87:f1:9c:6f:e5:76:69:85:ef:7f:66:46:b5: 6b:5b:23:11:ed:a3:e1:25:00:33:89:f0:42:29:8c:19:9c:fc: 8f:d6:95:d3:95:61:9d:40:ec:36:3e:c6:0e:91:26:e7:78:c1: b9:80:39:9e:41:a0:8c:65:24:c5:31:b0:17:63:64:34:6f:42: 4c:4b:f1:49:b8:45:d6:a1:f2:09:df:04:6b:90:f8:19:cc:ac: cf:5b:7e:57:a0:b9:e6:20:7f:23:42:28:51:52:64:86:af:16: 40:52:1d:98:c9:7b:a4:d9:75:cd:9b:47:27:0f:59:e4:ba:a7: 17:58:fe:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrPI+Ve79nOB0USr1KVAd5TxaRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBOEVEMDc3QzAzRTQzQzMzOERGQzE0RDYxOTJFNDZE QTUzNEI1MjAeFw0yNjA1MTIxODQ0MjJaFw0yNjA1MTMyMTM0MjJaMDMxMTAvBgNV BAMTKEQ5NzgzNEQ2ODg4MEQ5NUJFNEVGNDNEOTc1ODhBQ0M4RDYyQjIyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzItXDnuwDLsXNikyGVhFjYlbD BUjtuaY4kUqP/kIlJkBZ5bIrwCUoJ2qiodJ41g/YPICe+Lcsni7PMLh9tzu5SGw2 KaDN3I7DPVEsymlnny9V9kH1sTwvwRsHU3tJ0Z09PX+gDPcVl2vzLL8p7f7jIbti umQoMLCAyz6mtvcHZBq26dkdPc4XuAB1quCYM4TEsUo99mGDjwVr9oOzs/CTNqp9 Pvh77vng9xL5GYexOEPLrJE+iegZOs7IHEsEY0bneU2dXVghmPUCBm2G0yjQq8Jk 1xz0oKDIui82LAEBh8h8wz1DbASIs7MiXzb8iY4ew9j2b52QPcMXPl7x6GMtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Xg01oiA2Vvk70PZdYisyNYrIhIwHwYDVR0j BBgwFoAUAqjtB3wD5DwzjfwU1hkuRtpTS1IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTNiMTQ2YTItNzcxNS00NTlmLTgyNDQtOGIzMmEzNjQ2NjNjLzAvMDJBOEVEMDc3 QzAzRTQzQzMzOERGQzE0RDYxOTJFNDZEQTUzNEI1Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkE4RUQwNzdDMDNFNDNDMzM4REZDMTRENjE5MkU0NkRBNTM0 QjUyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTNiMTQ2YTItNzcxNS00NTlmLTgy NDQtOGIzMmEzNjQ2NjNjLzAvMDJBOEVEMDc3QzAzRTQzQzMzOERGQzE0RDYxOTJF NDZEQTUzNEI1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8MGY3n4ekzKiXIdy1haq3BKXy/so+YXpBm Ok+Cju2bQlC9EKs3vd/esm88MTiIXAfkxT2b+WuIWIuCwNC1xlHYRDzo7g3+mCyW q+BC5amaeydfqBKJSeSOMablSbWsaWP18Z0AzgXYtk7Qp9O90+1Bshe/TTO/3ULw J5SrVnM+Zv6ah/Gcb+V2aYXvf2ZGtWtbIxHto+ElADOJ8EIpjBmc/I/WldOVYZ1A 7DY+xg6RJud4wbmAOZ5BoIxlJMUxsBdjZDRvQkxL8Um4Rdah8gnfBGuQ+BnMrM9b flegueYgfyNCKFFSZIavFkBSHZjJe6TZdc2bRycPWeS6pxdY/ko= -----END CERTIFICATE-----Generated at Wed May 13 00:53:56 2026 by rpki-client