$ rpki-client -vvf rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft File: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft (raw, json) Hash identifier: fzJE17vv/2p4wKbDcY9Y9hfHopnzuBq6rJ9wA5Fi74A= Subject key identifier: 9D:3D:17:E3:0C:4C:AE:10:D2:E6:98:2B:F7:2A:65:E0:D4:41:1D:CB Authority key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C Certificate issuer: /CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Certificate serial: 17C92DCFF5A0A4DABE38600D5CCC21AAB4053F5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:32:20 +0000 Manifest this update: Tue 12 May 2026 17:27:20 +0000 Manifest next update: Wed 13 May 2026 19:53:20 +0000 Files and hashes: 1: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl (hash: 4/yaFENKLVW3onwsyczGY3Q/5xAJcEVisYXXHMGCIBY=) 2: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: fYYpI3WJuPFtDyZ1cuaw5qt/FLFt1ktSGEKCbigmqt0=) 3: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: 0BOLStdAwiCE9nKO2uD0bAHRwoPOw2CxvrJobarBg+g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c9:2d:cf:f5:a0:a4:da:be:38:60:0d:5c:cc:21:aa:b4:05:3f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Validity Not Before: May 12 17:27:20 2026 GMT Not After : May 13 19:53:20 2026 GMT Subject: CN=9D3D17E30C4CAE10D2E6982BF72A65E0D4411DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:f5:f4:19:cf:51:b7:89:a6:bf:d9:56:a5: 86:0c:59:ba:ca:8c:47:31:51:56:04:b8:8d:b5:84: bf:47:9a:b0:15:d3:9b:9c:47:e4:67:d1:06:ec:d9: 9d:9f:3e:78:36:94:ff:01:45:5b:5f:72:a7:13:cd: 61:e9:b7:48:41:b5:35:11:12:95:6c:dd:e4:13:ca: 7f:1a:14:ea:b3:1c:0e:71:57:8b:98:55:b7:af:2b: fd:13:03:cd:c5:05:ae:15:c0:af:0c:ae:90:63:42: 34:38:a6:82:50:8c:31:dd:cd:75:70:39:fb:cd:22: e1:50:f5:dd:43:53:01:3c:09:65:47:52:7c:3d:97: 0b:dd:fc:67:90:19:b7:69:0a:91:29:35:ff:51:c6: a5:ef:08:6c:88:f6:84:34:2c:61:ab:ed:c8:b3:59: 86:fa:f6:50:63:2a:a8:5f:ad:06:bf:92:94:05:50: b9:fd:c4:cb:f5:17:47:ea:0c:97:cf:bb:10:7b:33: 5d:dc:b9:0b:5b:d1:58:f0:91:16:43:ad:27:93:5d: bf:e0:3c:b8:26:09:e3:bd:37:ae:55:09:83:0c:46: 54:12:41:79:db:89:2a:e0:01:40:ce:aa:aa:ab:5e: 63:41:a8:97:12:50:e6:b9:1a:24:eb:db:0f:72:e5: c6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3D:17:E3:0C:4C:AE:10:D2:E6:98:2B:F7:2A:65:E0:D4:41:1D:CB X509v3 Authority Key Identifier: keyid:02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:19:b2:16:8a:67:71:f4:77:5d:cb:c9:fe:34:02:a2:10:7d: 03:04:20:68:20:f5:77:c5:cd:ab:31:c4:be:43:c8:8b:47:2e: 55:6e:12:e9:c1:ca:a7:3a:c0:be:f8:e0:f3:3b:47:cf:a5:be: a1:48:1c:78:74:3c:4d:fe:8d:26:8d:b2:cd:6b:00:93:e9:79: 75:b7:73:1b:a1:57:12:02:84:4a:17:82:00:cf:b6:b6:c3:cc: 4c:22:2a:3c:c5:d9:9a:d7:9c:82:a1:6f:cc:78:cc:a9:bb:da: 48:01:3c:4d:26:57:dc:c0:be:a7:28:49:79:07:93:1e:6b:6d: 31:b7:ac:1d:9e:65:bb:12:88:d4:9e:2d:8b:e6:8f:07:c3:aa: b3:93:28:6c:2d:0f:21:60:b5:ae:f5:5a:61:94:e7:91:e1:ba: ef:0c:76:e8:d9:f8:4c:8d:62:5f:d2:32:ee:94:f6:38:2a:f5: 4b:2c:bd:47:1b:1e:be:bb:0c:9d:af:81:8d:4a:50:03:c5:38: d7:ad:21:f9:a3:9e:ef:c0:ab:3f:d5:18:f6:d0:c1:4d:10:48: b9:d6:d8:82:ef:ae:76:55:0e:b6:13:d4:80:1d:46:86:7b:d3: ec:51:10:01:fc:89:4e:7c:63:1a:05:95:98:86:1e:74:0e:c5: 13:49:33:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8ktz/WgpNq+OGANXMwhqrQFP1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJDRENC OURCRUUwQzAeFw0yNjA1MTIxNzI3MjBaFw0yNjA1MTMxOTUzMjBaMDMxMTAvBgNV BAMTKDlEM0QxN0UzMEM0Q0FFMTBEMkU2OTgyQkY3MkE2NUUwRDQ0MTFEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZvX0Gc9Rt4mmv9lWpYYMWbrK jEcxUVYEuI21hL9HmrAV05ucR+Rn0Qbs2Z2fPng2lP8BRVtfcqcTzWHpt0hBtTUR EpVs3eQTyn8aFOqzHA5xV4uYVbevK/0TA83FBa4VwK8MrpBjQjQ4poJQjDHdzXVw OfvNIuFQ9d1DUwE8CWVHUnw9lwvd/GeQGbdpCpEpNf9RxqXvCGyI9oQ0LGGr7ciz WYb69lBjKqhfrQa/kpQFULn9xMv1F0fqDJfPuxB7M13cuQtb0VjwkRZDrSeTXb/g PLgmCeO9N65VCYMMRlQSQXnbiSrgAUDOqqqrXmNBqJcSUOa5GiTr2w9y5cY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnT0X4wxMrhDS5pgr9ypl4NRBHcswHwYDVR0j BBgwFoAUAsvmW12vnN3HyXOyY5os3Lnb7gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1 REFGOUNEREM3Qzk3M0IyNjM5QTJDRENCOURCRUUwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkNCRTY1QjVEQUY5Q0REQzdDOTczQjI2MzlBMkNEQ0I5REJF RTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJD RENCOURCRUUwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0ZshaKZ3H0d13Lyf40AqIQfQMEIGgg9XfF zasxxL5DyItHLlVuEunByqc6wL744PM7R8+lvqFIHHh0PE3+jSaNss1rAJPpeXW3 cxuhVxIChEoXggDPtrbDzEwiKjzF2ZrXnIKhb8x4zKm72kgBPE0mV9zAvqcoSXkH kx5rbTG3rB2eZbsSiNSeLYvmjwfDqrOTKGwtDyFgta71WmGU55Hhuu8MdujZ+EyN Yl/SMu6U9jgq9UssvUcbHr67DJ2vgY1KUAPFONetIfmjnu/Aqz/VGPbQwU0QSLnW 2ILvrnZVDrYT1IAdRoZ70+xREAH8iU58YxoFlZiGHnQOxRNJMys= -----END CERTIFICATE-----Generated at Tue May 12 22:40:06 2026 by rpki-client