$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft File: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft (raw, json) Hash identifier: atpG7zR/evIWDPMp+PLRppfUEdbVUUMfim0CywEUtJU= Subject key identifier: 3B:93:DE:CA:6B:C9:C7:72:24:F9:48:B9:83:76:3D:3D:02:00:1A:92 Authority key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C Certificate issuer: /CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Certificate serial: 776D25B171084E4D0FD61B669B70FFB3A7FE1672 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 14:08:36 +0000 Manifest this update: Wed 23 Sep 2026 14:03:36 +0000 Manifest next update: Thu 24 Sep 2026 15:34:36 +0000 Files and hashes: 1: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: fYYpI3WJuPFtDyZ1cuaw5qt/FLFt1ktSGEKCbigmqt0=) 2: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: 0BOLStdAwiCE9nKO2uD0bAHRwoPOw2CxvrJobarBg+g=) 3: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl (hash: NG5ThkOKJNGTT/Cgmv4PjQMCIxg7wDR0TXB2MI1/U0k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6d:25:b1:71:08:4e:4d:0f:d6:1b:66:9b:70:ff:b3:a7:fe:16:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Validity Not Before: Sep 23 14:03:36 2026 GMT Not After : Sep 24 15:34:36 2026 GMT Subject: CN=3B93DECA6BC9C77224F948B983763D3D02001A92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:ec:5c:3a:14:91:eb:8a:84:2e:5f:33:31: a5:00:aa:54:f8:ea:da:19:f2:9d:c1:b3:5d:90:43: c8:18:26:35:0f:6d:bd:9d:cf:34:24:f4:c1:f9:cf: 27:a5:0e:58:8d:06:51:2d:1c:16:a5:36:9b:88:f6: 1e:ca:2d:65:a6:4d:52:5c:f9:f4:a5:f7:ff:6e:b8: cc:1a:a4:e0:e9:91:33:c7:e5:e1:d9:4b:8b:a6:79: 78:9e:d3:04:49:6a:45:a0:45:d9:ca:28:36:43:4f: 49:63:1a:c7:21:42:ae:c5:7e:ce:68:ce:65:11:71: 61:b0:a8:97:a4:75:dc:7f:af:96:98:02:fb:e0:5f: 09:fb:0e:33:b3:19:e3:63:f2:ce:51:dc:44:39:c0: 7e:2d:61:66:51:81:1f:e8:9e:95:6e:16:df:19:f0: 97:32:41:ee:81:0d:7c:85:87:b0:b3:cd:18:df:be: 48:e7:99:53:26:6f:21:2f:6b:95:65:8e:a8:0d:03: c8:57:db:19:96:13:d0:97:93:28:da:ec:17:bc:8d: 58:3d:da:7f:4b:81:79:d7:49:f6:a7:30:c3:44:29: 97:8c:12:5c:49:5d:d5:7c:09:85:38:66:24:d6:b1: 98:7e:c2:50:4a:1d:2a:f6:fb:0f:b5:eb:62:0f:84: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:93:DE:CA:6B:C9:C7:72:24:F9:48:B9:83:76:3D:3D:02:00:1A:92 X509v3 Authority Key Identifier: keyid:02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d5:b6:d9:ab:af:45:69:b0:08:2c:5c:22:e5:4b:0c:47:e0: f3:98:da:db:66:35:bd:86:3a:97:d6:f8:be:3a:28:85:ba:c3: 9c:ec:20:5d:f0:fd:21:1e:d6:f5:f2:74:4d:a9:da:d5:2b:a8: c3:71:6d:31:63:e6:47:cf:39:9c:3f:60:37:dd:dc:24:23:8a: 5f:da:90:2e:a0:22:cb:df:b8:fb:5f:10:54:43:ad:78:34:e1: 6d:48:53:d4:35:4a:d5:83:ba:ee:a4:5f:a0:8b:b1:de:53:8b: 71:86:ca:0a:02:df:c5:04:ef:bf:76:bc:d4:1c:9e:3a:ba:61: 61:7c:d4:6d:ef:6e:db:79:0a:0a:57:c3:93:37:65:35:4a:ce: 1a:55:70:fd:39:22:4b:6b:33:73:81:0d:3f:cd:74:cd:3e:7f: 06:09:16:70:ce:d2:e5:74:17:09:b1:aa:2b:a5:cb:31:63:c1: 62:f3:62:1e:c9:13:30:34:50:a9:42:4d:30:95:2d:ce:72:17: 07:02:d8:ec:28:96:81:b6:d9:e0:92:20:a4:a4:59:38:1e:7a: f3:c4:a2:50:19:fe:cd:aa:c0:73:6a:af:73:f8:5b:bc:4a:bd: 8d:dd:a4:7d:c5:3f:ba:8e:d4:b0:84:cb:20:4a:40:2d:d7:13: d3:6b:d0:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd20lsXEITk0P1htmm3D/s6f+FnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJDRENC OURCRUUwQzAeFw0yNjA5MjMxNDAzMzZaFw0yNjA5MjQxNTM0MzZaMDMxMTAvBgNV BAMTKDNCOTNERUNBNkJDOUM3NzIyNEY5NDhCOTgzNzYzRDNEMDIwMDFBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+OxcOhSR64qELl8zMaUAqlT4 6toZ8p3Bs12QQ8gYJjUPbb2dzzQk9MH5zyelDliNBlEtHBalNpuI9h7KLWWmTVJc +fSl9/9uuMwapODpkTPH5eHZS4umeXie0wRJakWgRdnKKDZDT0ljGschQq7Ffs5o zmURcWGwqJekddx/r5aYAvvgXwn7DjOzGeNj8s5R3EQ5wH4tYWZRgR/onpVuFt8Z 8JcyQe6BDXyFh7CzzRjfvkjnmVMmbyEva5VljqgNA8hX2xmWE9CXkyja7Be8jVg9 2n9LgXnXSfanMMNEKZeMElxJXdV8CYU4ZiTWsZh+wlBKHSr2+w+162IPhGRtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO5PeymvJx3Ik+Ui5g3Y9PQIAGpIwHwYDVR0j BBgwFoAUAsvmW12vnN3HyXOyY5os3Lnb7gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1 REFGOUNEREM3Qzk3M0IyNjM5QTJDRENCOURCRUUwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkNCRTY1QjVEQUY5Q0REQzdDOTczQjI2MzlBMkNEQ0I5REJF RTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJD RENCOURCRUUwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfVttmrr0VpsAgsXCLlSwxH4POY2ttmNb2G OpfW+L46KIW6w5zsIF3w/SEe1vXydE2p2tUrqMNxbTFj5kfPOZw/YDfd3CQjil/a kC6gIsvfuPtfEFRDrXg04W1IU9Q1StWDuu6kX6CLsd5Ti3GGygoC38UE7792vNQc njq6YWF81G3vbtt5CgpXw5M3ZTVKzhpVcP05IktrM3OBDT/NdM0+fwYJFnDO0uV0 FwmxqiulyzFjwWLzYh7JEzA0UKlCTTCVLc5yFwcC2OwoloG22eCSIKSkWTgeevPE olAZ/s2qwHNqr3P4W7xKvY3dpH3FP7qO1LCEyyBKQC3XE9Nr0LE= -----END CERTIFICATE-----Generated at Thu Sep 24 00:58:51 2026 by rpki-client