$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft File: 02A914400077F3E213C8972280DBD775A6B4C27C.mft (raw, json) Hash identifier: qQSjVwOVpXvdbAoeTEkba6yOP/TVg9Wi0b4MGI3c/HY= Subject key identifier: 20:7A:ED:E4:BB:64:3A:B3:BB:DB:15:D0:1D:BD:36:A2:69:5E:9D:07 Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C Certificate issuer: /CN=02A914400077F3E213C8972280DBD775A6B4C27C Certificate serial: 1ACFF5008333A60BD2272FAB24C77113B2ED6058 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:10:02 +0000 Manifest this update: Thu 23 Jul 2026 12:05:02 +0000 Manifest next update: Fri 24 Jul 2026 15:29:02 +0000 Files and hashes: 1: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=) 2: 02A914400077F3E213C8972280DBD775A6B4C27C.crl (hash: qj28V8Es8XIvoPISlmrkWqd52ewa8SgygoCOcpIMOTU=) 3: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: 7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=) 4: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: GtvHkVY9/W43sI4HiI73HEw8h6eq1YXH6SXHhFSgbQc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cf:f5:00:83:33:a6:0b:d2:27:2f:ab:24:c7:71:13:b2:ed:60:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C Validity Not Before: Jul 23 12:05:02 2026 GMT Not After : Jul 24 15:29:02 2026 GMT Subject: CN=207AEDE4BB643AB3BBDB15D01DBD36A2695E9D07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:51:54:51:ed:95:c5:64:8d:44:db:be:f1: a0:a3:47:65:f8:c0:ab:8a:45:25:f2:a9:f2:f0:17: ba:c2:55:ad:70:32:fd:b8:92:cf:5f:4c:77:3b:c0: 01:98:b2:5d:d2:23:f4:f4:88:41:9f:3c:42:01:8e: 52:80:d4:42:a2:00:63:10:b2:c3:8b:99:37:87:fc: e3:b2:dd:46:ea:e4:36:d3:01:82:e9:1d:7f:6e:75: db:69:27:fd:11:55:cd:08:49:4f:47:1d:f2:dc:f3: d3:f8:f8:4c:ff:f2:c5:23:ff:38:79:44:ea:20:a2: ef:85:df:22:b4:66:fc:9b:2f:e6:95:0a:ab:f9:37: a2:be:a2:8b:a4:bc:ed:a5:ae:8d:b5:81:0c:10:cf: a1:7d:90:bd:3e:cd:33:1c:60:f1:a6:f8:c5:0f:12: f0:70:ab:61:cf:27:15:04:34:f5:8e:2b:9b:b2:35: bc:4d:65:de:4c:65:a8:d8:23:c0:ac:ae:4e:ab:b4: 48:04:8b:1f:13:1a:76:c1:3b:6f:00:87:cf:e0:fe: 39:7e:5b:cf:f6:25:18:d8:f6:04:5c:00:69:b2:80: f8:b9:56:08:ff:1c:cd:f7:4e:f0:30:bf:c1:d4:9f: 56:c0:96:f3:b1:e2:ac:f2:5f:28:70:60:7e:26:9b: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:ED:E4:BB:64:3A:B3:BB:DB:15:D0:1D:BD:36:A2:69:5E:9D:07 X509v3 Authority Key Identifier: keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:99:b2:15:18:ec:e0:ad:6e:5e:70:91:17:a9:f9:53:bd:60: 9a:18:65:03:70:fc:19:5e:1e:9e:1e:8b:dd:4c:c3:82:28:6e: b0:cd:16:fc:9d:cb:e7:b3:64:ab:ae:ff:ef:d9:2b:fd:47:37: 88:a3:4a:97:b0:5e:85:40:27:91:d3:67:57:ef:d0:e6:76:ee: 97:dc:3f:10:b9:39:a2:af:52:f9:89:a7:dd:a9:90:b2:e5:06: b8:c5:e0:b0:8f:48:13:27:f3:14:b1:1d:c2:0d:78:54:19:12: 22:94:f9:0f:b5:d1:89:68:0e:3b:a6:3b:1d:8b:1c:e3:20:d7: 5e:bd:d7:a5:e4:40:20:3a:46:10:b9:70:dd:30:44:01:35:08: d5:95:78:e4:06:93:a1:1d:31:d1:89:b8:de:da:d9:3d:ff:53: b7:aa:8c:83:3b:0e:86:c8:e6:d3:8c:d7:7d:83:0f:f9:d5:21: fd:27:b9:53:a6:db:29:41:26:b3:18:99:81:e9:fb:89:7f:bc: ee:a0:f8:d8:67:99:53:d1:09:75:d2:4a:cd:fe:d9:d3:fe:48: c6:1b:cb:1c:f0:ce:c3:ca:15:7f:17:f0:ce:27:2d:c4:15:a7: 93:2c:78:90:f9:90:1f:b6:24:20:e1:b8:bd:37:3a:0f:09:be: 26:1e:17:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGs/1AIMzpgvSJy+rJMdxE7LtYFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVB NkI0QzI3QzAeFw0yNjA3MjMxMjA1MDJaFw0yNjA3MjQxNTI5MDJaMDMxMTAvBgNV BAMTKDIwN0FFREU0QkI2NDNBQjNCQkRCMTVEMDFEQkQzNkEyNjk1RTlEMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xlFUUe2VxWSNRNu+8aCjR2X4 wKuKRSXyqfLwF7rCVa1wMv24ks9fTHc7wAGYsl3SI/T0iEGfPEIBjlKA1EKiAGMQ ssOLmTeH/OOy3Ubq5DbTAYLpHX9uddtpJ/0RVc0ISU9HHfLc89P4+Ez/8sUj/zh5 ROogou+F3yK0ZvybL+aVCqv5N6K+ooukvO2lro21gQwQz6F9kL0+zTMcYPGm+MUP EvBwq2HPJxUENPWOK5uyNbxNZd5MZajYI8Csrk6rtEgEix8TGnbBO28Ah8/g/jl+ W8/2JRjY9gRcAGmygPi5Vgj/HM33TvAwv8HUn1bAlvOx4qzyXyhwYH4mm0uVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIHrt5LtkOrO72xXQHb02omlenQcwHwYDVR0j BBgwFoAUAqkUQAB38+ITyJcigNvXdaa0wnwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzMzM2ZjgtZTU0Ni00NjJjLTg0MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAw MDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVBNkI0QzI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkE5MTQ0MDAwNzdGM0UyMTNDODk3MjI4MERCRDc3NUE2QjRD MjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3 NzVBNkI0QzI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeZshUY7OCtbl5wkRep+VO9YJoYZQNw/Ble Hp4ei91Mw4IobrDNFvydy+ezZKuu/+/ZK/1HN4ijSpewXoVAJ5HTZ1fv0OZ27pfc PxC5OaKvUvmJp92pkLLlBrjF4LCPSBMn8xSxHcINeFQZEiKU+Q+10YloDjumOx2L HOMg116916XkQCA6RhC5cN0wRAE1CNWVeOQGk6EdMdGJuN7a2T3/U7eqjIM7DobI 5tOM132DD/nVIf0nuVOm2ylBJrMYmYHp+4l/vO6g+NhnmVPRCXXSSs3+2dP+SMYb yxzwzsPKFX8X8M4nLcQVp5MseJD5kB+2JCDhuL03Og8JviYeF74= -----END CERTIFICATE-----Generated at Fri Jul 24 08:47:04 2026 by rpki-client