$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft File: 02A914400077F3E213C8972280DBD775A6B4C27C.mft (raw, json) Hash identifier: 2bYUcSmuFUDrhqSKpHSnN7F55ttEOaMnCBZ8cispNK4= Subject key identifier: 6C:29:D3:1C:D5:88:47:B8:DC:E2:1E:8C:22:7C:B5:FB:21:35:72:83 Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C Certificate issuer: /CN=02A914400077F3E213C8972280DBD775A6B4C27C Certificate serial: 4B13E8E1A46E71B77F699803A0442038C4B23FF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 09:25:58 +0000 Manifest this update: Sun 15 Nov 2026 09:20:58 +0000 Manifest next update: Mon 16 Nov 2026 13:09:58 +0000 Files and hashes: 1: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=) 2: 02A914400077F3E213C8972280DBD775A6B4C27C.crl (hash: aIgW7ha0OFzqx5cyj63Hw3qbvzaO3e1jPSUh15Snbk4=) 3: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: 7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=) 4: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: GtvHkVY9/W43sI4HiI73HEw8h6eq1YXH6SXHhFSgbQc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:13:e8:e1:a4:6e:71:b7:7f:69:98:03:a0:44:20:38:c4:b2:3f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C Validity Not Before: Nov 15 09:20:58 2026 GMT Not After : Nov 16 13:09:58 2026 GMT Subject: CN=6C29D31CD58847B8DCE21E8C227CB5FB21357283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b8:e2:80:27:77:6e:04:b9:b0:7d:9d:04:c3: 14:40:ab:0b:3f:7c:3e:b1:f0:8f:f1:aa:2c:b9:1a: 8b:4b:44:d4:b2:78:99:8a:07:ff:b1:e5:fe:bb:b9: b0:c0:5d:99:c8:83:89:de:f2:6c:c9:a8:fc:e2:35: 1d:3f:94:57:cd:93:71:d9:a1:b5:79:b2:0c:00:4c: 5b:0c:f2:3b:18:22:c1:9f:7a:89:80:37:f7:b0:9f: cc:5a:78:88:f9:6b:a1:84:55:78:a3:fe:5e:45:9a: f3:78:b8:df:48:65:68:dc:30:05:a0:8e:a0:f5:bc: 84:ed:91:b4:6c:05:16:65:a9:f6:fe:a1:91:4e:88: b7:9c:b5:e1:a8:3c:76:3b:57:5a:17:37:91:31:4f: 53:7b:d9:66:24:79:32:57:d1:83:b8:dd:bd:6f:19: 9f:6f:d8:50:00:b8:ce:1c:37:0b:a1:1f:ea:54:92: 05:c6:0f:47:23:e7:a0:2a:a7:4f:1e:c0:88:f1:c6: 78:0a:ba:67:e6:bb:36:a4:b4:04:ce:da:df:00:13: 27:5b:1a:4b:7b:e3:ef:3d:6f:93:24:c9:08:a9:30: b7:fc:62:0e:ab:2f:91:3f:c6:59:8f:88:ef:2b:ff: d2:2f:13:74:41:9e:23:d6:9e:53:6f:6c:cc:d3:e6: 72:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:29:D3:1C:D5:88:47:B8:DC:E2:1E:8C:22:7C:B5:FB:21:35:72:83 X509v3 Authority Key Identifier: keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bc:7c:fe:92:8f:67:89:58:a8:e0:49:10:e2:dc:e6:fc:1a: 86:45:b5:54:04:9f:4a:75:27:30:f1:84:e9:f4:e2:a7:7a:32: 32:98:eb:80:b4:92:b4:77:a0:17:a5:f7:45:f5:09:45:b3:e3: 48:10:18:0c:91:79:b0:c2:8b:fd:95:b2:c0:06:cc:63:04:7f: 6d:57:ae:f7:10:73:b4:58:e4:05:9a:f3:dd:d2:0c:4f:89:88: 6c:ee:31:cc:9e:4a:9a:79:c1:8d:28:f3:92:76:3c:00:d6:4e: e2:0c:a6:9a:91:fc:71:33:c9:f7:b0:81:e2:06:82:da:44:c5: 66:2e:ae:c1:86:38:d6:67:1f:fb:6d:bd:15:73:0e:a5:71:55: aa:64:a5:d4:fb:e0:d6:a5:f9:c0:32:ad:c0:aa:23:20:d7:c9: d1:34:b9:2d:54:a6:53:14:37:e1:d2:0f:ed:c9:6a:a5:70:f1: 25:cf:3b:66:fc:85:85:3b:bc:8a:20:8f:a5:a7:60:e9:9b:3e: 16:2d:93:14:b6:c0:de:4f:61:74:9e:a2:12:29:7f:5e:2a:24: 3b:28:01:4b:56:e3:b8:a8:d8:17:4d:47:5f:9b:a9:49:0f:6a: a0:a0:bb:c2:f4:10:fd:39:46:80:b5:d2:8c:02:cc:d7:31:0a: ee:6d:e1:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxPo4aRucbd/aZgDoEQgOMSyP/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVB NkI0QzI3QzAeFw0yNjExMTUwOTIwNThaFw0yNjExMTYxMzA5NThaMDMxMTAvBgNV BAMTKDZDMjlEMzFDRDU4ODQ3QjhEQ0UyMUU4QzIyN0NCNUZCMjEzNTcyODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyuOKAJ3duBLmwfZ0EwxRAqws/ fD6x8I/xqiy5GotLRNSyeJmKB/+x5f67ubDAXZnIg4ne8mzJqPziNR0/lFfNk3HZ obV5sgwATFsM8jsYIsGfeomAN/ewn8xaeIj5a6GEVXij/l5FmvN4uN9IZWjcMAWg jqD1vITtkbRsBRZlqfb+oZFOiLecteGoPHY7V1oXN5ExT1N72WYkeTJX0YO43b1v GZ9v2FAAuM4cNwuhH+pUkgXGD0cj56Aqp08ewIjxxngKumfmuzaktATO2t8AEydb Gkt74+89b5MkyQipMLf8Yg6rL5E/xlmPiO8r/9IvE3RBniPWnlNvbMzT5nJfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbCnTHNWIR7jc4h6MIny1+yE1coMwHwYDVR0j BBgwFoAUAqkUQAB38+ITyJcigNvXdaa0wnwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzMzM2ZjgtZTU0Ni00NjJjLTg0MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAw MDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVBNkI0QzI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkE5MTQ0MDAwNzdGM0UyMTNDODk3MjI4MERCRDc3NUE2QjRD MjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3 NzVBNkI0QzI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy8fP6Sj2eJWKjgSRDi3Ob8GoZFtVQEn0p1 JzDxhOn04qd6MjKY64C0krR3oBel90X1CUWz40gQGAyRebDCi/2VssAGzGMEf21X rvcQc7RY5AWa893SDE+JiGzuMcyeSpp5wY0o85J2PADWTuIMppqR/HEzyfewgeIG gtpExWYursGGONZnH/ttvRVzDqVxVapkpdT74Nal+cAyrcCqIyDXydE0uS1UplMU N+HSD+3JaqVw8SXPO2b8hYU7vIogj6WnYOmbPhYtkxS2wN5PYXSeohIpf14qJDso AUtW47io2BdNR1+bqUkPaqCgu8L0EP05RoC10owCzNcxCu5t4Xc= -----END CERTIFICATE-----Generated at Sun Nov 15 21:21:58 2026 by rpki-client