$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft File: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft (raw, json) Hash identifier: 1/5zqmGeCjPA6FZfAIkPNJ8J1aXuRwGn07R0l379yrU= Subject key identifier: 4A:A2:F0:27:67:CE:C1:E7:F2:67:11:02:20:27:3D:9C:B9:C0:19:A4 Authority key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C Certificate issuer: /CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Certificate serial: 02F1158F3C9C48467490D0F550954F060E06DEDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft Manifest number: FE Signing time: Sun 08 Nov 2026 23:19:30 +0000 Manifest this update: Sun 08 Nov 2026 23:14:30 +0000 Manifest next update: Tue 10 Nov 2026 00:00:30 +0000 Files and hashes: 1: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: fYYpI3WJuPFtDyZ1cuaw5qt/FLFt1ktSGEKCbigmqt0=) 2: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: 0BOLStdAwiCE9nKO2uD0bAHRwoPOw2CxvrJobarBg+g=) 3: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl (hash: 8txQKQ0DIXMlmm6dXAKEsICH8GDO3FmdU6iBysG8vxU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f1:15:8f:3c:9c:48:46:74:90:d0:f5:50:95:4f:06:0e:06:de:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Validity Not Before: Nov 8 23:14:30 2026 GMT Not After : Nov 10 00:00:30 2026 GMT Subject: CN=4AA2F02767CEC1E7F267110220273D9CB9C019A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:2d:a1:68:29:1a:a3:ea:a5:21:e1:e0:f6: d6:8d:54:77:95:c6:a0:79:b5:76:e4:e4:a5:98:c6: 28:6f:07:3d:fc:b2:01:2b:65:d8:68:f6:2a:91:8a: 47:09:56:45:48:49:e0:e0:ea:e6:c2:13:7f:9f:1f: e7:c5:d4:f3:b4:46:af:76:58:7e:51:3d:73:1e:ef: b9:c6:48:04:c2:2f:ef:07:af:48:e0:91:61:99:46: c6:71:16:6f:d1:11:a8:15:b0:7a:a5:a0:b9:e3:a0: 63:d5:d8:14:86:37:5c:2d:19:80:ed:63:28:fe:c6: 51:58:21:f1:c7:8d:a6:31:87:bf:64:53:25:76:ba: 06:04:2d:48:65:a4:0e:4f:6e:0a:53:fc:9a:e4:ce: d8:43:fb:c5:1d:76:a3:d1:a2:75:91:59:4f:70:32: 54:24:7a:a9:0c:f7:c6:f6:67:4b:4e:6e:e5:c2:ff: b8:3b:5b:16:05:f9:28:b2:c0:11:58:83:6c:3f:c9: 5b:07:32:35:76:62:fa:8b:97:41:dc:fd:52:ff:02: 54:b9:88:c7:b4:7f:8d:91:60:9a:d5:f3:05:08:9a: 96:88:c0:09:ea:cf:4c:f9:17:c0:07:fe:e8:91:fb: 98:a7:c9:a0:cc:51:e3:52:4d:c4:9f:9c:16:3f:f0: b3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A2:F0:27:67:CE:C1:E7:F2:67:11:02:20:27:3D:9C:B9:C0:19:A4 X509v3 Authority Key Identifier: keyid:02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dc:c1:bf:21:fe:ae:29:9d:f9:ae:17:f2:be:d7:aa:b9:d8: df:7a:5f:20:01:0a:fd:2b:49:e6:6f:af:a7:d4:8e:ee:70:93: 57:04:a7:3d:56:3a:1e:91:82:0a:10:89:bd:08:f5:b7:97:c1: 84:90:2c:48:3a:c2:21:60:4d:34:37:01:b5:f1:98:97:a2:26: bd:48:51:76:c4:86:5a:9e:85:5b:20:af:d7:c1:46:5b:e5:3e: df:67:43:15:68:17:cb:ec:dc:ee:72:35:70:2e:a7:a1:55:ce: 23:69:cb:49:cc:f4:2f:2a:ea:0b:b5:6e:4d:58:4c:e0:8b:2c: 50:b2:2a:d8:ae:ba:84:c2:ea:7a:7b:00:b2:f6:ec:a4:f2:e2: a4:57:75:2f:b3:c7:ca:da:ca:fa:fb:e5:84:75:31:e9:e3:e6: 34:11:8b:bd:18:66:13:f4:65:bb:54:f3:2b:0c:ee:bb:60:c2: 24:a5:f8:2f:9f:6f:99:21:b4:c6:03:59:82:0e:8e:82:9e:63: 5d:27:ac:57:39:0c:b9:b9:97:aa:90:42:15:48:55:25:93:0b: 6f:96:10:b5:a7:48:e5:39:4c:47:46:97:bb:2e:99:1f:d2:7f: c7:f6:70:22:80:20:5a:0e:0e:52:9f:31:6f:fa:ab:6e:1e:c3: 6b:f4:66:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvEVjzycSEZ0kND1UJVPBg4G3t4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJDRENC OURCRUUwQzAeFw0yNjExMDgyMzE0MzBaFw0yNjExMTAwMDAwMzBaMDMxMTAvBgNV BAMTKDRBQTJGMDI3NjdDRUMxRTdGMjY3MTEwMjIwMjczRDlDQjlDMDE5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVS2haCkao+qlIeHg9taNVHeV xqB5tXbk5KWYxihvBz38sgErZdho9iqRikcJVkVISeDg6ubCE3+fH+fF1PO0Rq92 WH5RPXMe77nGSATCL+8Hr0jgkWGZRsZxFm/REagVsHqloLnjoGPV2BSGN1wtGYDt Yyj+xlFYIfHHjaYxh79kUyV2ugYELUhlpA5PbgpT/JrkzthD+8UddqPRonWRWU9w MlQkeqkM98b2Z0tObuXC/7g7WxYF+SiywBFYg2w/yVsHMjV2YvqLl0Hc/VL/AlS5 iMe0f42RYJrV8wUImpaIwAnqz0z5F8AH/uiR+5inyaDMUeNSTcSfnBY/8LN9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSqLwJ2fOwefyZxECICc9nLnAGaQwHwYDVR0j BBgwFoAUAsvmW12vnN3HyXOyY5os3Lnb7gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1 REFGOUNEREM3Qzk3M0IyNjM5QTJDRENCOURCRUUwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkNCRTY1QjVEQUY5Q0REQzdDOTczQjI2MzlBMkNEQ0I5REJF RTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJD RENCOURCRUUwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrcwb8h/q4pnfmuF/K+16q52N96XyABCv0r SeZvr6fUju5wk1cEpz1WOh6RggoQib0I9beXwYSQLEg6wiFgTTQ3AbXxmJeiJr1I UXbEhlqehVsgr9fBRlvlPt9nQxVoF8vs3O5yNXAup6FVziNpy0nM9C8q6gu1bk1Y TOCLLFCyKtiuuoTC6np7ALL27KTy4qRXdS+zx8rayvr75YR1Menj5jQRi70YZhP0 ZbtU8ysM7rtgwiSl+C+fb5khtMYDWYIOjoKeY10nrFc5DLm5l6qQQhVIVSWTC2+W ELWnSOU5TEdGl7sumR/Sf8f2cCKAIFoODlKfMW/6q24ew2v0ZrA= -----END CERTIFICATE-----Generated at Mon Nov 9 17:20:58 2026 by rpki-client