$ rpki-client -vvf rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft File: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft (raw, json) Hash identifier: Uwve65v/bvPz6Pck5mNbdS+W3Bm2ZYbH3IpnAu7dWXg= Subject key identifier: 87:FD:16:78:E1:95:7A:C3:7F:7B:B9:B6:25:9E:7B:F1:D7:61:3D:98 Authority key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C Certificate issuer: /CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Certificate serial: 6F269F95EFBB3FF460B7B126B90B939C912F8141 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:10:49 +0000 Manifest this update: Thu 23 Jul 2026 21:05:49 +0000 Manifest next update: Fri 24 Jul 2026 23:57:49 +0000 Files and hashes: 1: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl (hash: VgeO6oaKJRDpFTX82Ijah160N7PHABnl81A8rOsRF+8=) 2: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: 0BOLStdAwiCE9nKO2uD0bAHRwoPOw2CxvrJobarBg+g=) 3: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: fYYpI3WJuPFtDyZ1cuaw5qt/FLFt1ktSGEKCbigmqt0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:26:9f:95:ef:bb:3f:f4:60:b7:b1:26:b9:0b:93:9c:91:2f:81:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Validity Not Before: Jul 23 21:05:49 2026 GMT Not After : Jul 24 23:57:49 2026 GMT Subject: CN=87FD1678E1957AC37F7BB9B6259E7BF1D7613D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:d8:6b:b5:5c:d6:ae:ac:3f:c7:b1:38:df: 89:b3:04:03:95:3e:23:61:95:a2:13:c5:1f:47:f7: fd:54:da:2d:7f:ee:26:72:1c:0d:90:92:66:25:3f: 9c:cf:46:9a:0c:76:9b:34:ff:c1:c4:85:02:2e:97: bb:e3:e2:a3:43:6b:dd:58:be:5b:e4:7e:00:79:cb: 0f:56:25:7c:b5:c0:53:ed:72:54:d1:9e:cc:3c:47: aa:73:41:11:f0:38:5d:9d:df:f1:5d:87:1b:b3:0a: e5:b3:d0:35:00:ec:c4:de:05:48:4a:3a:b8:a0:20: d3:3b:24:e1:43:98:87:55:19:3c:f4:09:12:b5:d7: f2:25:ef:f6:c6:fd:b3:a1:a7:8e:79:87:29:4c:61: e7:d1:a2:67:d7:f1:54:42:18:f7:0f:90:72:c7:79: 32:3c:56:83:f3:0b:dd:cb:6d:37:ed:63:df:de:93: 28:7f:f7:06:90:22:66:e1:80:74:c6:c6:d5:9f:3f: 47:d1:0e:5c:9b:7b:fc:a0:dd:ea:d6:25:82:f5:c0: 7e:ec:52:1f:38:50:f7:e4:8b:9b:36:78:f2:87:40: b1:17:bd:a2:46:23:fb:e7:d1:1b:58:a1:8c:ad:f3: 9a:45:a3:b8:aa:99:0e:da:1c:3d:ba:41:8e:45:63: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FD:16:78:E1:95:7A:C3:7F:7B:B9:B6:25:9E:7B:F1:D7:61:3D:98 X509v3 Authority Key Identifier: keyid:02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b0:f0:63:dd:6f:eb:4c:95:e1:ae:17:20:68:a9:fe:84:b1: e3:74:60:b5:56:db:a5:6f:2b:b0:aa:12:0b:1d:b2:1e:ee:2b: 03:6b:db:2b:4f:70:05:79:63:32:e7:79:aa:0a:42:da:a0:ec: 3f:a9:7f:c0:19:cd:06:de:ab:58:fa:f4:d0:29:f3:a0:a4:7d: 85:28:43:91:23:0c:14:9c:fe:bb:08:c6:24:19:ce:9e:d2:63: d7:36:a1:a3:e5:3c:47:f6:b8:c2:2d:3e:f9:9a:c1:c7:05:e7: 3f:21:09:f8:e8:4c:19:4b:15:91:97:9a:8d:d8:c5:3c:a0:cd: 02:5b:46:e0:48:8f:b2:68:f0:15:64:8e:c4:00:ef:bd:1b:a9: 8f:04:9c:83:05:07:8f:6d:d7:5a:28:09:66:da:11:2c:18:ed: 2d:da:7b:0d:c2:b3:a7:29:b2:00:1f:ee:7c:2f:1d:da:a0:df: d8:6f:f9:56:07:74:21:3c:fc:3b:fc:7f:10:92:2a:7e:82:54: 17:08:ea:36:84:64:7e:e9:d5:19:24:8d:85:04:e6:94:a0:60: 79:dc:b6:86:80:7c:2b:6e:11:f9:a2:d6:a1:75:4e:ba:79:2b: fe:75:9f:1e:24:89:2d:e7:23:97:f6:82:81:1e:67:b0:6d:67: b7:ee:94:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbyafle+7P/Rgt7EmuQuTnJEvgUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJDRENC OURCRUUwQzAeFw0yNjA3MjMyMTA1NDlaFw0yNjA3MjQyMzU3NDlaMDMxMTAvBgNV BAMTKDg3RkQxNjc4RTE5NTdBQzM3RjdCQjlCNjI1OUU3QkYxRDc2MTNEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZNhrtVzWrqw/x7E434mzBAOV PiNhlaITxR9H9/1U2i1/7iZyHA2QkmYlP5zPRpoMdps0/8HEhQIul7vj4qNDa91Y vlvkfgB5yw9WJXy1wFPtclTRnsw8R6pzQRHwOF2d3/FdhxuzCuWz0DUA7MTeBUhK OrigINM7JOFDmIdVGTz0CRK11/Il7/bG/bOhp455hylMYefRomfX8VRCGPcPkHLH eTI8VoPzC93LbTftY9/ekyh/9waQImbhgHTGxtWfP0fRDlybe/yg3erWJYL1wH7s Uh84UPfki5s2ePKHQLEXvaJGI/vn0RtYoYyt85pFo7iqmQ7aHD26QY5FY47tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh/0WeOGVesN/e7m2JZ578ddhPZgwHwYDVR0j BBgwFoAUAsvmW12vnN3HyXOyY5os3Lnb7gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1 REFGOUNEREM3Qzk3M0IyNjM5QTJDRENCOURCRUUwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkNCRTY1QjVEQUY5Q0REQzdDOTczQjI2MzlBMkNEQ0I5REJF RTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJD RENCOURCRUUwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmw8GPdb+tMleGuFyBoqf6EseN0YLVW26Vv K7CqEgsdsh7uKwNr2ytPcAV5YzLneaoKQtqg7D+pf8AZzQbeq1j69NAp86CkfYUo Q5EjDBSc/rsIxiQZzp7SY9c2oaPlPEf2uMItPvmawccF5z8hCfjoTBlLFZGXmo3Y xTygzQJbRuBIj7Jo8BVkjsQA770bqY8EnIMFB49t11ooCWbaESwY7S3aew3Cs6cp sgAf7nwvHdqg39hv+VYHdCE8/Dv8fxCSKn6CVBcI6jaEZH7p1RkkjYUE5pSgYHnc toaAfCtuEfmi1qF1Trp5K/51nx4kiS3nI5f2goEeZ7BtZ7fulHs= -----END CERTIFICATE-----Generated at Fri Jul 24 02:29:54 2026 by rpki-client