$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft File: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft (raw, json) Hash identifier: ZAktqrh7gpe9wsmlJmxdoq1AL5xxht7zs5kVJQLdeQI= Subject key identifier: E4:0A:A1:68:70:FE:6F:39:7F:C4:5A:83:7C:5F:64:0F:C5:7B:FA:39 Authority key identifier: 02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97 Certificate issuer: /CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997 Certificate serial: 02D18676D5F7F53C8F2C7F3726448019776A50AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft Manifest number: BE Signing time: Mon 21 Sep 2026 13:53:44 +0000 Manifest this update: Mon 21 Sep 2026 13:48:44 +0000 Manifest next update: Tue 22 Sep 2026 15:12:44 +0000 Files and hashes: 1: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: 8bk4nM/CpViyJMYTIYd85+JJ5zEQXXgNb/ogzW3MmFM=) 2: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: uqiSzcg0G6eG40rjBlY0LrjMSKV5cIiAMiPhDeDO7GM=) 3: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl (hash: r3PWp+wR4TRc3QjFHWfz8JlYLs2vKXkhUKm16ucLCQg=) 4: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: mckJR6NOoa+yl4WEvk2NXD7USkbc88RSKMqJlOr2OEY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d1:86:76:d5:f7:f5:3c:8f:2c:7f:37:26:44:80:19:77:6a:50:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997 Validity Not Before: Sep 21 13:48:44 2026 GMT Not After : Sep 22 15:12:44 2026 GMT Subject: CN=E40AA16870FE6F397FC45A837C5F640FC57BFA39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:29:44:55:f4:3c:cd:d4:ff:ae:f7:90:40: ed:90:a0:89:88:ba:88:b3:6e:d2:43:59:c2:50:1b: 51:22:70:36:3f:fa:d4:a7:c5:1f:57:66:43:4d:4f: ed:eb:07:c8:94:fa:4e:db:c7:b3:14:71:80:a1:f8: 21:2d:e0:a9:04:46:3e:fb:c8:86:6f:66:2c:10:0c: a4:0c:50:15:9d:8b:4b:3b:b2:70:e4:e4:b6:dd:ef: 59:e9:f1:03:9e:7d:f1:5e:26:38:4b:3f:0d:0c:f4: b2:54:ca:c1:5a:91:b1:f1:a1:62:8f:d6:9e:88:40: 54:6d:6d:da:09:da:e6:05:40:05:09:22:c3:d4:a3: 0e:30:8c:b3:ec:74:a4:0d:30:98:a2:12:03:44:bb: 55:6f:47:fc:85:f8:ac:d0:22:4b:64:7c:0c:1f:bb: f5:c3:0e:5d:32:23:5f:55:20:c1:82:e9:56:de:dc: a3:22:cb:30:4e:39:7a:42:d5:e8:6f:b6:11:6b:1c: ef:66:ec:81:26:17:4a:85:e0:ea:9b:d3:08:d1:aa: f8:f8:f2:3f:22:68:ce:f3:5a:47:d5:e3:c5:b0:49: 6d:20:ed:0b:f5:42:ad:fd:57:b8:a6:41:75:88:9e: 1c:32:13:5b:7f:9f:38:61:13:9a:f1:66:a6:8b:6f: 9a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0A:A1:68:70:FE:6F:39:7F:C4:5A:83:7C:5F:64:0F:C5:7B:FA:39 X509v3 Authority Key Identifier: keyid:02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:93:ae:1d:58:ff:e6:98:b3:96:04:f3:ff:79:33:89:63:09: 50:21:2d:f6:70:b3:50:bd:2c:a8:7c:0c:6e:3d:fe:fb:02:50: fc:4b:c3:ba:9e:30:12:4b:51:a3:36:71:ce:e0:7a:09:99:09: c8:97:a5:cb:bf:0e:9d:39:fc:00:33:79:d7:02:bd:98:da:82: 24:81:d9:a4:02:be:b6:2a:b3:2d:08:cb:b9:9b:89:77:e2:96: 67:c4:51:c4:e0:14:f4:b4:0b:a5:79:de:32:22:43:d5:4d:bd: a4:56:27:d5:a9:d5:af:bf:d9:ca:c2:f8:01:24:bd:c7:70:77: 05:d7:cd:78:4a:6d:b8:75:05:03:8e:2c:bd:9d:bd:db:0b:04: bf:95:d5:22:0c:17:f2:4f:2d:d7:ac:ee:62:41:ab:14:ad:16: e6:a3:c0:46:7a:ff:e6:8e:65:5d:34:74:fa:61:d7:10:96:bf: 07:3d:e8:da:65:45:b1:1d:dd:6f:f4:1e:d6:5e:81:39:e4:8e: c1:7a:b0:c9:23:e3:23:88:39:40:44:ff:2d:e6:f2:a1:ce:bc: 6c:aa:89:3e:e9:0b:c7:dc:09:15:d8:24:36:a4:17:2a:21:df: 07:3e:43:ad:ef:84:2a:4a:b1:14:76:cd:ce:f2:98:ce:41:16: 93:72:ad:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtGGdtX39TyPLH83JkSAGXdqUK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJGODZENzkzMDY2NkFDOUIwODA5RDdBRTQyQzIwQjFE MjlDQTk5NzAeFw0yNjA5MjExMzQ4NDRaFw0yNjA5MjIxNTEyNDRaMDMxMTAvBgNV BAMTKEU0MEFBMTY4NzBGRTZGMzk3RkM0NUE4MzdDNUY2NDBGQzU3QkZBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWClEVfQ8zdT/rveQQO2QoImI uoizbtJDWcJQG1EicDY/+tSnxR9XZkNNT+3rB8iU+k7bx7MUcYCh+CEt4KkERj77 yIZvZiwQDKQMUBWdi0s7snDk5Lbd71np8QOeffFeJjhLPw0M9LJUysFakbHxoWKP 1p6IQFRtbdoJ2uYFQAUJIsPUow4wjLPsdKQNMJiiEgNEu1VvR/yF+KzQIktkfAwf u/XDDl0yI19VIMGC6Vbe3KMiyzBOOXpC1ehvthFrHO9m7IEmF0qF4Oqb0wjRqvj4 8j8iaM7zWkfV48WwSW0g7Qv1Qq39V7imQXWInhwyE1t/nzhhE5rxZqaLb5o1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5AqhaHD+bzl/xFqDfF9kD8V7+jkwHwYDVR0j BBgwFoAUAvhteTBmasmwgJ165CwgsdKcqZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWUzMTQ4NTgtYjMzYS00YjY1LTlhNTUtZGNlNDFlMjIzODczLzAvMDJGODZENzkz MDY2NkFDOUIwODA5RDdBRTQyQzIwQjFEMjlDQTk5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkY4NkQ3OTMwNjY2QUM5QjA4MDlEN0FFNDJDMjBCMUQyOUNB OTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh NTUtZGNlNDFlMjIzODczLzAvMDJGODZENzkzMDY2NkFDOUIwODA5RDdBRTQyQzIw QjFEMjlDQTk5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyTrh1Y/+aYs5YE8/95M4ljCVAhLfZws1C9 LKh8DG49/vsCUPxLw7qeMBJLUaM2cc7gegmZCciXpcu/Dp05/AAzedcCvZjagiSB 2aQCvrYqsy0Iy7mbiXfilmfEUcTgFPS0C6V53jIiQ9VNvaRWJ9Wp1a+/2crC+AEk vcdwdwXXzXhKbbh1BQOOLL2dvdsLBL+V1SIMF/JPLdes7mJBqxStFuajwEZ6/+aO ZV00dPph1xCWvwc96NplRbEd3W/0HtZegTnkjsF6sMkj4yOIOUBE/y3m8qHOvGyq iT7pC8fcCRXYJDakFyoh3wc+Q63vhCpKsRR2zc7ymM5BFpNyrdQ= -----END CERTIFICATE-----Generated at Mon Sep 21 19:49:38 2026 by rpki-client