$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json) Hash identifier: tmbRpDVAcxCq550x8/67ZRjtNMNl3/qm48RfDeR13JM= Subject key identifier: 98:FE:E0:FB:C0:ED:3E:AB:8F:C1:AC:F9:97:C5:9A:CF:CB:8E:31:86 Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 7A62C4B0D82E79E94C0A9FBCAF54C7BDCADFB90A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft Manifest number: 056B Signing time: Fri 17 Apr 2026 19:40:53 +0000 Manifest this update: Fri 17 Apr 2026 19:35:53 +0000 Manifest next update: Mon 20 Apr 2026 22:09:53 +0000 Files and hashes: 1: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: v/7ran+LbpNjrqX1RHFype1oMMhPH41KySlfJ2YHOQA=) 2: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=) 3: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=) 4: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: 1AWd4OZCytjnMLGGQ3mn/VpwNeJ1KA7954S/Uarlfug=) 5: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: o2Fqju9m16OPUHuFcH3wb0i9qMLN8qQR+7Sxr2BaVt4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 22:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:62:c4:b0:d8:2e:79:e9:4c:0a:9f:bc:af:54:c7:bd:ca:df:b9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: Apr 17 19:35:53 2026 GMT Not After : Apr 20 22:09:53 2026 GMT Subject: CN=98FEE0FBC0ED3EAB8FC1ACF997C59ACFCB8E3186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:30:ab:e0:d2:dc:28:85:51:4f:fe:9c:99: 90:74:be:6e:0a:07:03:ab:0d:47:30:a1:08:5d:25: 99:ac:39:4f:e2:2f:30:72:77:cb:db:0b:4d:c2:b9: f4:1f:75:5d:ef:10:0d:c1:b5:4c:de:65:c5:1a:a1: d8:7c:3e:ec:30:19:df:22:51:66:f1:91:b2:11:d2: 57:5d:bc:d8:94:94:c4:c6:3b:af:89:13:97:f6:17: f8:18:32:19:7b:ed:0c:70:45:64:dd:32:62:0a:1a: c7:df:bd:42:b9:9b:66:06:14:6a:06:e8:84:fd:6e: c4:75:7b:7d:cb:43:76:a7:0d:81:bf:b3:2c:60:33: 86:fb:cb:d2:fd:e9:1e:03:b3:8f:f1:5e:35:22:95: af:1a:19:9b:f7:71:e0:b1:85:0a:87:ee:02:fe:2d: 7a:fa:64:b2:df:91:c1:1e:88:89:87:9f:52:cc:5b: 8d:76:77:f0:01:ea:65:fa:00:a6:87:bf:ab:85:80: f1:88:aa:5e:96:1c:cf:e9:e6:ef:7f:76:0a:af:36: 55:8f:d8:ea:40:de:58:2a:37:9e:a2:44:74:0a:ac: 40:3f:4b:94:85:2f:09:fa:6b:c3:22:4b:37:cc:69: 11:4a:f6:35:bb:de:6a:93:93:b4:6f:9f:20:44:6a: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FE:E0:FB:C0:ED:3E:AB:8F:C1:AC:F9:97:C5:9A:CF:CB:8E:31:86 X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ff:05:31:ee:d3:dc:cd:d1:1b:9d:f1:ce:d2:47:72:7c:1d: 47:92:b4:1b:44:d6:94:c0:5c:b7:a7:73:77:00:ee:34:94:ac: 1b:86:d4:b7:2f:74:95:c0:2f:6b:46:10:88:75:92:6a:d9:18: 7c:5b:03:f2:5a:a9:51:c3:f3:08:90:02:ce:10:a8:bf:21:66: e5:bb:96:fb:e0:f2:4f:84:c3:2f:95:60:de:46:80:d9:02:4b: 42:d2:b4:99:0d:a7:c7:00:42:c5:54:9e:c5:13:ef:aa:8b:b4: 6d:85:23:db:0c:2a:31:6f:0c:47:d9:c3:14:9c:c6:11:aa:e6: c8:b4:ad:26:e7:c0:34:93:4e:76:ea:ee:02:0d:46:a9:50:e9: 7f:18:3b:a0:e6:9a:7d:ab:f2:57:d2:c3:e3:06:81:3d:2a:e0: c9:7e:b9:95:f8:44:0e:a1:cb:9a:83:9e:a2:60:db:6b:70:66: c5:ad:bd:20:42:dc:94:ad:c0:7e:85:1d:61:aa:55:88:da:aa: 58:5c:7d:7e:02:b4:b7:5f:f3:86:9b:c1:ba:66:21:d6:e3:18: 82:cd:0a:c6:af:7f:22:7b:fa:e0:37:2d:3f:4e:b4:88:f4:5f: eb:c5:f9:d1:a0:6e:17:c2:f0:d8:c0:b5:3a:db:2c:7d:a0:eb: 6c:b7:67:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemLEsNgueelMCp+8r1THvcrfuQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNjA0MTcxOTM1NTNaFw0yNjA0MjAyMjA5NTNaMDMxMTAvBgNV BAMTKDk4RkVFMEZCQzBFRDNFQUI4RkMxQUNGOTk3QzU5QUNGQ0I4RTMxODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gTCr4NLcKIVRT/6cmZB0vm4K BwOrDUcwoQhdJZmsOU/iLzByd8vbC03CufQfdV3vEA3BtUzeZcUaodh8PuwwGd8i UWbxkbIR0lddvNiUlMTGO6+JE5f2F/gYMhl77QxwRWTdMmIKGsffvUK5m2YGFGoG 6IT9bsR1e33LQ3anDYG/syxgM4b7y9L96R4Ds4/xXjUila8aGZv3ceCxhQqH7gL+ LXr6ZLLfkcEeiImHn1LMW412d/AB6mX6AKaHv6uFgPGIql6WHM/p5u9/dgqvNlWP 2OpA3lgqN56iRHQKrEA/S5SFLwn6a8MiSzfMaRFK9jW73mqTk7RvnyBEarIxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmP7g+8DtPquPwaz5l8Waz8uOMYYwHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5 QzkzQjA2NEMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFT/BTHu09zN0Rud8c7SR3J8HUeStBtE1pTA XLenc3cA7jSUrBuG1LcvdJXAL2tGEIh1kmrZGHxbA/JaqVHD8wiQAs4QqL8hZuW7 lvvg8k+Ewy+VYN5GgNkCS0LStJkNp8cAQsVUnsUT76qLtG2FI9sMKjFvDEfZwxSc xhGq5si0rSbnwDSTTnbq7gINRqlQ6X8YO6Dmmn2r8lfSw+MGgT0q4Ml+uZX4RA6h y5qDnqJg22twZsWtvSBC3JStwH6FHWGqVYjaqlhcfX4CtLdf84abwbpmIdbjGILN CsavfyJ7+uA3LT9OtIj0X+vF+dGgbhfC8NjAtTrbLH2g62y3Z00= -----END CERTIFICATE-----Generated at Fri Apr 17 22:46:44 2026 by rpki-client