$ rpki-client -vvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft File: 02A914400077F3E213C8972280DBD775A6B4C27C.mft (raw, json) Hash identifier: uF5Y3NmO1bLWT/TvJcPu1IClbXS/i9gWLeO+183pDqA= Subject key identifier: FB:C2:89:9F:23:0B:7D:BC:CE:F7:26:AC:E9:71:5C:A7:E3:80:0F:E8 Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C Certificate issuer: /CN=02A914400077F3E213C8972280DBD775A6B4C27C Certificate serial: 1FF2E9C965C5D16F236E55783E4BD5EDDF2CEACA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft Manifest number: 0E Signing time: Tue 12 May 2026 11:37:18 +0000 Manifest this update: Tue 12 May 2026 11:32:18 +0000 Manifest next update: Wed 13 May 2026 14:52:18 +0000 Files and hashes: 1: 02A914400077F3E213C8972280DBD775A6B4C27C.crl (hash: RXa7ZTZ4XT6KtLlAkGiVnFid4yRrioFbgbaxXmT/6J4=) 2: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: GtvHkVY9/W43sI4HiI73HEw8h6eq1YXH6SXHhFSgbQc=) 3: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: 7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=) 4: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f2:e9:c9:65:c5:d1:6f:23:6e:55:78:3e:4b:d5:ed:df:2c:ea:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C Validity Not Before: May 12 11:32:18 2026 GMT Not After : May 13 14:52:18 2026 GMT Subject: CN=FBC2899F230B7DBCCEF726ACE9715CA7E3800FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a7:7c:da:89:93:06:a1:e6:b6:27:ef:39:6d: 7e:94:83:8c:7e:c6:68:94:41:83:62:5c:21:6d:b3: fe:50:0e:a0:76:92:dd:73:9c:00:7d:09:8f:80:28: b5:bc:6b:7a:71:01:49:1f:8b:6c:29:96:f8:47:57: f5:dc:49:cb:f8:64:22:3e:d0:82:f8:90:04:83:42: c3:20:b0:9a:95:e7:01:14:9d:0b:c2:92:a4:03:cb: f3:b3:e4:a2:f9:42:89:67:8e:e5:27:32:a9:d5:17: ff:ce:99:99:52:9c:8d:04:8e:fb:02:1e:48:94:34: 20:5d:da:7a:1e:01:b4:5d:62:be:c1:84:e7:62:30: 73:a7:21:33:a7:c6:20:20:3d:41:09:2e:76:0c:c6: 52:94:5e:32:66:30:11:60:00:1f:13:11:dc:c0:34: d5:e1:0e:05:ad:da:52:84:40:3d:d5:47:d1:2a:aa: b4:ac:6c:20:4e:18:4b:38:76:9c:a8:90:e0:71:93: 20:ac:51:a7:7d:37:de:cc:b6:ef:af:a4:6f:47:5b: 71:49:b5:c3:e2:5e:3b:c9:38:0a:b2:dc:c5:b0:21: e4:c6:31:83:ac:ac:9f:60:aa:36:55:92:09:75:89: 21:f8:21:d1:4e:78:c9:25:af:da:5c:cd:67:9c:70: 8a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C2:89:9F:23:0B:7D:BC:CE:F7:26:AC:E9:71:5C:A7:E3:80:0F:E8 X509v3 Authority Key Identifier: keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:8c:0d:e2:5b:8a:b9:77:32:7f:4f:8e:ce:0c:92:00:60:df: a3:52:7d:9c:07:7b:e8:ab:ef:83:6c:7f:63:84:f4:20:3a:aa: 47:41:8f:93:a2:83:a3:12:26:28:a9:2b:ea:85:fe:f3:4b:45: c2:cc:27:16:39:89:69:69:9d:d3:4c:8e:a4:52:ed:fa:57:90: 6d:20:52:13:93:ed:63:4b:9b:de:f0:2c:a8:65:bb:ec:02:4c: af:5e:48:54:08:30:55:7e:4b:73:7b:7a:37:56:e1:49:37:31: a7:fa:ab:6c:8f:94:d9:47:ea:b0:d8:dd:2f:46:e2:29:e9:9f: 81:7c:64:38:14:38:6b:6e:46:9a:22:1c:f1:5d:28:8f:51:44: 7c:2f:ba:34:07:9e:a5:21:50:2e:0c:cb:89:19:ef:a5:0e:d1: 5f:4a:05:d4:55:0d:fe:c2:c9:6d:7d:58:35:5b:8a:e7:40:20: fa:4e:a2:e8:46:f1:48:84:c0:97:25:cd:b1:63:d0:e9:2b:4a: cd:4b:5e:07:8f:6d:ed:59:63:9b:46:8d:d1:c1:37:92:3a:80: d3:3d:2c:79:fc:97:1c:41:03:95:aa:56:c6:8b:3e:c3:7e:b0: 94:d4:76:5c:74:2b:49:7b:dc:56:67:7a:f0:ae:31:2b:b5:26: 3b:89:a9:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/LpyWXF0W8jblV4PkvV7d8s6sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVB NkI0QzI3QzAeFw0yNjA1MTIxMTMyMThaFw0yNjA1MTMxNDUyMThaMDMxMTAvBgNV BAMTKEZCQzI4OTlGMjMwQjdEQkNDRUY3MjZBQ0U5NzE1Q0E3RTM4MDBGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWp3zaiZMGoea2J+85bX6Ug4x+ xmiUQYNiXCFts/5QDqB2kt1znAB9CY+AKLW8a3pxAUkfi2wplvhHV/XcScv4ZCI+ 0IL4kASDQsMgsJqV5wEUnQvCkqQDy/Oz5KL5QolnjuUnMqnVF//OmZlSnI0EjvsC HkiUNCBd2noeAbRdYr7BhOdiMHOnITOnxiAgPUEJLnYMxlKUXjJmMBFgAB8TEdzA NNXhDgWt2lKEQD3VR9EqqrSsbCBOGEs4dpyokOBxkyCsUad9N97Mtu+vpG9HW3FJ tcPiXjvJOAqy3MWwIeTGMYOsrJ9gqjZVkgl1iSH4IdFOeMklr9pczWeccIqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+8KJnyMLfbzO9yas6XFcp+OAD+gwHwYDVR0j BBgwFoAUAqkUQAB38+ITyJcigNvXdaa0wnwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzMzM2ZjgtZTU0Ni00NjJjLTg0MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAw MDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVBNkI0QzI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkE5MTQ0MDAwNzdGM0UyMTNDODk3MjI4MERCRDc3NUE2QjRD MjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3 NzVBNkI0QzI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuMDeJbirl3Mn9Pjs4MkgBg36NSfZwHe+ir 74Nsf2OE9CA6qkdBj5Oig6MSJiipK+qF/vNLRcLMJxY5iWlpndNMjqRS7fpXkG0g UhOT7WNLm97wLKhlu+wCTK9eSFQIMFV+S3N7ejdW4Uk3Maf6q2yPlNlH6rDY3S9G 4inpn4F8ZDgUOGtuRpoiHPFdKI9RRHwvujQHnqUhUC4My4kZ76UO0V9KBdRVDf7C yW19WDVbiudAIPpOouhG8UiEwJclzbFj0OkrSs1LXgePbe1ZY5tGjdHBN5I6gNM9 LHn8lxxBA5WqVsaLPsN+sJTUdlx0K0l73FZnevCuMSu1JjuJqeI= -----END CERTIFICATE-----Generated at Tue May 12 22:20:12 2026 by rpki-client