$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft File: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft (raw, json) Hash identifier: 4kUg7zomlOiDj+gBi5BNju75jHj9oswQMgEhg27CcQU= Subject key identifier: FB:C9:23:03:64:82:3B:DB:E4:C1:A1:4A:00:9A:B4:48:93:08:71:11 Authority key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C Certificate issuer: /CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Certificate serial: 2E697A3B287C09FA73A48177E96C6166F0699F94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft Manifest number: BE Signing time: Mon 21 Sep 2026 08:01:31 +0000 Manifest this update: Mon 21 Sep 2026 07:56:31 +0000 Manifest next update: Tue 22 Sep 2026 09:04:31 +0000 Files and hashes: 1: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: 0BOLStdAwiCE9nKO2uD0bAHRwoPOw2CxvrJobarBg+g=) 2: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: fYYpI3WJuPFtDyZ1cuaw5qt/FLFt1ktSGEKCbigmqt0=) 3: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl (hash: z3OFxQ2NyQxK2lb8RH3iQxx3B8AtfCJFVNUwp+Tf/3Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:69:7a:3b:28:7c:09:fa:73:a4:81:77:e9:6c:61:66:f0:69:9f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Validity Not Before: Sep 21 07:56:31 2026 GMT Not After : Sep 22 09:04:31 2026 GMT Subject: CN=FBC9230364823BDBE4C1A14A009AB44893087111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:17:71:21:a9:a2:bd:22:51:d3:5d:21:c1: 86:4d:8c:cd:7b:97:27:79:b0:e3:c9:07:fe:3b:14: 9b:9f:4b:29:ad:51:4d:52:87:02:a0:70:6b:f6:89: dc:3f:7b:bf:56:22:56:50:85:41:7e:d0:f4:2f:1d: 31:8f:1b:bf:f6:0a:ac:71:e5:d4:5c:23:a7:f8:86: 50:a4:d5:ac:2c:99:03:77:3c:d2:7d:01:2e:e6:39: 32:85:48:7f:55:2c:68:cb:f7:c7:37:fc:9e:d7:af: b1:96:de:24:10:35:3e:aa:06:d4:87:a5:11:b1:c6: ae:8c:fa:2c:19:ef:af:99:c3:1b:36:ac:12:2e:5e: 0f:78:81:d7:65:d1:80:f1:e6:ec:b5:65:8b:0e:4a: 8f:df:86:e9:05:17:ab:f6:28:85:0e:ca:3f:65:7a: 9b:0b:8f:a6:fc:94:eb:68:9e:51:07:d0:4a:f8:bd: d5:4f:01:f9:6a:47:25:0d:49:87:c0:80:66:4d:e7: 86:7b:cd:89:25:c7:23:7c:ac:40:ca:54:4d:df:5e: f1:f3:22:a5:97:dd:71:06:ab:50:4a:cf:8f:8c:fb: 8b:0b:04:db:3b:3d:a9:5e:99:14:12:62:11:6b:77: cd:47:53:e4:d5:78:5f:48:25:35:a9:59:2a:28:17: 99:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C9:23:03:64:82:3B:DB:E4:C1:A1:4A:00:9A:B4:48:93:08:71:11 X509v3 Authority Key Identifier: keyid:02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:04:05:94:48:43:2e:ef:02:80:ab:4a:35:5b:d5:e1:67:0e: bc:86:fc:3a:6b:9e:85:04:2b:58:32:de:ee:d9:f6:41:bc:53: ea:ef:d9:8f:83:89:f7:f3:de:8c:e3:28:d7:b3:fe:51:95:9d: 2c:bc:0b:b1:49:84:5b:31:39:dc:4c:9e:2f:cc:58:1e:01:3e: 65:e1:ab:a7:e4:dc:d9:33:30:4b:28:05:da:5e:38:19:33:2c: ac:1c:6f:fe:db:35:75:de:99:41:95:d9:c1:a7:90:59:f9:c3: 6f:6d:28:ba:34:bf:6f:65:99:ec:a9:fe:12:3a:57:b0:b5:a7: f2:79:f1:30:8f:ef:fa:ce:b7:9d:33:fc:84:cf:cf:ff:90:62: 60:ad:e3:97:ad:d3:f5:b1:1e:bb:ba:16:d0:09:ab:c8:35:74: 4d:d8:40:07:5a:de:2a:3b:1e:52:3d:c3:07:6b:0e:31:5f:4f: f6:92:cd:1d:34:d3:ad:8f:92:15:dc:a9:c8:69:0d:66:47:a7: 1e:86:21:20:8d:f7:fa:cf:0a:75:17:73:65:e3:a4:2a:45:19: 8d:e0:b6:e9:2d:64:31:be:e7:a0:16:fa:7f:40:b8:18:8e:b1: 5b:7e:6f:09:5d:2f:da:11:d5:b1:81:0e:ac:12:31:47:14:74: 5b:1c:8d:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULml6Oyh8CfpzpIF36WxhZvBpn5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJDRENC OURCRUUwQzAeFw0yNjA5MjEwNzU2MzFaFw0yNjA5MjIwOTA0MzFaMDMxMTAvBgNV BAMTKEZCQzkyMzAzNjQ4MjNCREJFNEMxQTE0QTAwOUFCNDQ4OTMwODcxMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxRdxIamivSJR010hwYZNjM17 lyd5sOPJB/47FJufSymtUU1ShwKgcGv2idw/e79WIlZQhUF+0PQvHTGPG7/2Cqxx 5dRcI6f4hlCk1awsmQN3PNJ9AS7mOTKFSH9VLGjL98c3/J7Xr7GW3iQQNT6qBtSH pRGxxq6M+iwZ76+Zwxs2rBIuXg94gddl0YDx5uy1ZYsOSo/fhukFF6v2KIUOyj9l epsLj6b8lOtonlEH0Er4vdVPAflqRyUNSYfAgGZN54Z7zYklxyN8rEDKVE3fXvHz IqWX3XEGq1BKz4+M+4sLBNs7PalemRQSYhFrd81HU+TVeF9IJTWpWSooF5kpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+8kjA2SCO9vkwaFKAJq0SJMIcREwHwYDVR0j BBgwFoAUAsvmW12vnN3HyXOyY5os3Lnb7gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1 REFGOUNEREM3Qzk3M0IyNjM5QTJDRENCOURCRUUwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkNCRTY1QjVEQUY5Q0REQzdDOTczQjI2MzlBMkNEQ0I5REJF RTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJD RENCOURCRUUwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwEBZRIQy7vAoCrSjVb1eFnDryG/DprnoUE K1gy3u7Z9kG8U+rv2Y+Diffz3ozjKNez/lGVnSy8C7FJhFsxOdxMni/MWB4BPmXh q6fk3NkzMEsoBdpeOBkzLKwcb/7bNXXemUGV2cGnkFn5w29tKLo0v29lmeyp/hI6 V7C1p/J58TCP7/rOt50z/ITPz/+QYmCt45et0/WxHru6FtAJq8g1dE3YQAda3io7 HlI9wwdrDjFfT/aSzR00062PkhXcqchpDWZHpx6GISCN9/rPCnUXc2XjpCpFGY3g tuktZDG+56AW+n9AuBiOsVt+bwldL9oR1bGBDqwSMUcUdFscjUM= -----END CERTIFICATE-----Generated at Mon Sep 21 16:24:46 2026 by rpki-client