$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft File: 02A914400077F3E213C8972280DBD775A6B4C27C.mft (raw, json) Hash identifier: 7UQXJu5n/MNzwkZ4x+HSn4KIvvnbqmuiXMJot6xB+WU= Subject key identifier: C1:3A:D3:D2:E7:DE:F9:C9:58:C4:CD:FC:6D:A0:B4:15:05:AC:52:73 Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C Certificate issuer: /CN=02A914400077F3E213C8972280DBD775A6B4C27C Certificate serial: 0B1378BF1D212B990A1EA1583A7CEB569B77DF5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:36:36 +0000 Manifest this update: Wed 23 Sep 2026 16:31:36 +0000 Manifest next update: Thu 24 Sep 2026 20:05:36 +0000 Files and hashes: 1: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: GtvHkVY9/W43sI4HiI73HEw8h6eq1YXH6SXHhFSgbQc=) 2: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: 7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=) 3: 02A914400077F3E213C8972280DBD775A6B4C27C.crl (hash: bEuRw4k+bM773Xkl1tiNAEaFbFMLU8dI6NiW0DYlFmE=) 4: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:13:78:bf:1d:21:2b:99:0a:1e:a1:58:3a:7c:eb:56:9b:77:df:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C Validity Not Before: Sep 23 16:31:36 2026 GMT Not After : Sep 24 20:05:36 2026 GMT Subject: CN=C13AD3D2E7DEF9C958C4CDFC6DA0B41505AC5273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:ae:48:f1:48:69:bd:b5:39:e9:5b:ec:18: 39:4a:53:1d:6d:6b:ab:40:88:a0:d9:82:fc:38:51: df:9b:96:f8:6e:3b:e2:11:0c:66:39:35:e0:22:22: 59:de:10:15:e3:2c:95:2d:e7:2e:aa:58:af:75:5b: a1:92:fb:8c:e0:54:93:b9:0c:7b:62:e5:85:d6:dc: 11:60:50:cf:d6:08:33:58:2b:37:68:19:bd:35:9e: 8d:c8:93:bf:b3:a6:d0:d4:37:2d:b5:7f:a6:a8:fe: af:85:fd:89:58:03:fa:9c:b4:37:a0:0d:7b:2f:21: 62:03:00:69:c7:2b:fd:57:4d:a4:50:47:1f:c3:fa: f7:5d:da:a4:82:71:ac:2a:b8:d9:56:c6:a4:00:4d: 3d:3e:6b:02:1b:df:bf:99:fd:d1:55:ea:81:b7:27: 6d:de:3a:e6:9c:73:2f:4b:0a:73:69:d3:20:fb:f8: 4d:57:b2:30:3d:5e:bb:ce:93:b2:fd:bb:fb:61:1e: 07:7d:18:90:0b:22:73:5e:cb:94:5a:60:11:f9:e9: 3e:10:bf:1f:c0:12:18:9e:57:b2:b9:ec:e8:e7:86: c0:b7:f5:8c:6b:1a:70:30:70:0a:35:3e:3e:33:15: 92:5f:a9:18:a6:24:00:07:8e:f7:fd:bf:ba:e5:e0: c6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3A:D3:D2:E7:DE:F9:C9:58:C4:CD:FC:6D:A0:B4:15:05:AC:52:73 X509v3 Authority Key Identifier: keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7c:f6:34:7a:50:08:f3:52:88:5f:d9:50:fa:97:45:7f:7b: ee:dd:4d:0d:bb:62:c7:a3:a6:7d:99:b7:f2:b2:42:4f:dc:d2: 17:84:b5:34:fc:a7:5d:12:2e:f0:11:da:14:5d:ea:34:3d:f2: 39:1d:1e:2a:23:f7:4b:02:39:d0:f2:ee:a9:f6:24:50:11:d8: fc:5e:11:f5:cc:24:f5:f7:2b:c6:d8:dc:cc:5f:15:f0:2c:91: 79:60:b8:72:36:42:1e:26:e1:d3:ec:62:9d:79:bb:3f:7d:1b: 49:08:58:a7:cc:3e:ca:32:29:f9:85:ba:f2:02:fc:3c:da:b1: 97:1d:92:7d:7e:25:9d:c7:d6:21:4e:1e:28:fd:9c:bf:d9:17: 81:93:2c:52:84:fa:7f:63:03:c6:b9:09:cf:19:3f:d8:ee:8a: 04:de:5a:a0:46:36:27:28:32:84:65:7f:a8:8d:11:48:66:b7: c2:6a:22:1e:0c:f3:b1:21:6d:ca:39:86:5a:c7:d1:12:6d:14: 2c:af:8c:ca:a3:9a:af:25:70:53:a5:2b:f1:b7:fd:e8:ca:62: 15:82:d8:74:cd:6a:6e:7d:ab:83:e1:d5:a5:7d:a5:e6:3e:9b: 53:99:6c:1b:b2:ae:9f:ff:a1:8a:39:d3:8c:f9:0e:27:44:ed: 58:95:0e:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxN4vx0hK5kKHqFYOnzrVpt331swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVB NkI0QzI3QzAeFw0yNjA5MjMxNjMxMzZaFw0yNjA5MjQyMDA1MzZaMDMxMTAvBgNV BAMTKEMxM0FEM0QyRTdERUY5Qzk1OEM0Q0RGQzZEQTBCNDE1MDVBQzUyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdwq5I8UhpvbU56VvsGDlKUx1t a6tAiKDZgvw4Ud+blvhuO+IRDGY5NeAiIlneEBXjLJUt5y6qWK91W6GS+4zgVJO5 DHti5YXW3BFgUM/WCDNYKzdoGb01no3Ik7+zptDUNy21f6ao/q+F/YlYA/qctDeg DXsvIWIDAGnHK/1XTaRQRx/D+vdd2qSCcawquNlWxqQATT0+awIb37+Z/dFV6oG3 J23eOuaccy9LCnNp0yD7+E1XsjA9XrvOk7L9u/thHgd9GJALInNey5RaYBH56T4Q vx/AEhieV7K57OjnhsC39YxrGnAwcAo1Pj4zFZJfqRimJAAHjvf9v7rl4MatAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTrT0ufe+clYxM38baC0FQWsUnMwHwYDVR0j BBgwFoAUAqkUQAB38+ITyJcigNvXdaa0wnwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzMzM2ZjgtZTU0Ni00NjJjLTg0MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAw MDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVBNkI0QzI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkE5MTQ0MDAwNzdGM0UyMTNDODk3MjI4MERCRDc3NUE2QjRD MjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3 NzVBNkI0QzI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI589jR6UAjzUohf2VD6l0V/e+7dTQ27Ysej pn2Zt/KyQk/c0heEtTT8p10SLvAR2hRd6jQ98jkdHioj90sCOdDy7qn2JFAR2Pxe EfXMJPX3K8bY3MxfFfAskXlguHI2Qh4m4dPsYp15uz99G0kIWKfMPsoyKfmFuvIC /DzasZcdkn1+JZ3H1iFOHij9nL/ZF4GTLFKE+n9jA8a5Cc8ZP9juigTeWqBGNico MoRlf6iNEUhmt8JqIh4M87Ehbco5hlrH0RJtFCyvjMqjmq8lcFOlK/G3/ejKYhWC 2HTNam59q4Ph1aV9peY+m1OZbBuyrp//oYo504z5DidE7ViVDr8= -----END CERTIFICATE-----Generated at Thu Sep 24 11:41:12 2026 by rpki-client