$ rpki-client -vvf rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft File: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft (raw, json) Hash identifier: NA7QGY9E7acHjDlNp2ASt1WSXsX0oS0Atk1E6HOFwHM= Subject key identifier: 6C:38:3B:21:1A:24:B1:7A:18:41:BF:DE:15:F1:D7:81:5C:81:32:B2 Authority key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C Certificate issuer: /CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Certificate serial: 2D5456F55066C15E7333C58599DF6D6926F60F55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:02:04 +0000 Manifest this update: Tue 16 Jun 2026 18:57:04 +0000 Manifest next update: Wed 17 Jun 2026 22:30:04 +0000 Files and hashes: 1: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: fYYpI3WJuPFtDyZ1cuaw5qt/FLFt1ktSGEKCbigmqt0=) 2: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: 0BOLStdAwiCE9nKO2uD0bAHRwoPOw2CxvrJobarBg+g=) 3: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl (hash: HHwaup27ME1FtzNqzReYdzvXzVG8MKiVs8o2jyRgI2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:54:56:f5:50:66:c1:5e:73:33:c5:85:99:df:6d:69:26:f6:0f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Validity Not Before: Jun 16 18:57:04 2026 GMT Not After : Jun 17 22:30:04 2026 GMT Subject: CN=6C383B211A24B17A1841BFDE15F1D7815C8132B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:1f:97:44:0a:50:dd:29:b0:53:56:0e:b6: 6a:11:4e:e0:7c:74:aa:dc:b0:ba:a3:bc:ba:3d:e4: 62:19:54:22:16:f5:a3:cd:5b:1b:79:ab:23:f0:c7: e6:4c:ce:4a:ad:2a:98:9a:95:2b:b7:e3:4a:02:92: 11:29:59:f4:70:7c:76:54:49:1f:23:99:5f:cc:67: 5e:63:3b:39:56:85:c4:bb:3c:2e:0c:e2:19:80:10: e8:3e:fa:59:ac:06:5c:53:d0:0b:75:15:ea:a5:b4: c1:c0:e3:42:90:3a:f7:d5:23:7e:40:ab:6e:69:85: 50:76:ed:16:66:f6:4f:fd:a7:f9:75:49:f1:66:ab: 42:94:f3:e6:90:9b:e1:3a:fb:12:4f:50:a6:2f:ef: e6:72:e3:1d:e4:44:86:eb:2f:99:94:0d:09:1f:6f: ee:1e:a0:4a:50:13:e0:c0:e3:fc:ec:10:7c:b0:b9: bb:c8:61:50:44:cf:53:51:e5:39:47:68:6c:b3:87: 4f:60:aa:db:8d:66:8f:3f:51:8a:4c:c0:ea:a6:a6: 46:26:37:95:d5:f4:ca:72:50:18:87:67:8c:59:20: 52:3c:94:48:2f:81:66:62:e6:93:74:35:05:ff:99: 78:3b:2e:63:65:d7:f1:4b:a5:e5:cd:68:94:76:07: 19:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:38:3B:21:1A:24:B1:7A:18:41:BF:DE:15:F1:D7:81:5C:81:32:B2 X509v3 Authority Key Identifier: keyid:02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fd:a2:03:d2:bf:08:39:99:51:c8:c0:4e:10:22:32:52:c9: 19:a5:dc:6c:6f:9f:e9:ed:24:a3:33:ce:12:58:34:61:4e:6a: a5:2e:8d:c0:af:7a:de:e9:df:3e:e7:d0:01:7c:7a:69:ee:69: 02:77:d2:8f:f3:be:55:39:57:c4:7b:08:5d:3e:7f:4e:c7:9b: 69:02:e3:48:fd:d8:4b:5a:a6:d0:6e:6d:9b:6d:73:5c:e2:2b: 62:47:0b:50:d0:65:f5:b6:53:c0:44:dc:36:e3:d4:89:ba:9c: 92:19:ec:91:7d:8c:85:dd:c6:47:42:3f:a3:2e:3c:b3:ed:21: 20:ce:c0:3f:9a:66:7f:17:ab:7b:8d:7b:db:f9:bf:8a:6d:55: cf:28:ff:b1:17:5e:1f:88:f9:aa:aa:30:28:5a:fc:e8:e7:44: 8a:35:25:68:03:7b:f2:f5:0b:86:a5:40:08:f0:0c:ff:a6:02: c4:39:5a:71:8f:28:a7:e6:82:91:be:5a:15:1c:a2:a0:e8:9c: 52:75:8b:7e:f3:54:80:1d:81:e8:ed:dc:85:a2:cb:eb:11:cb: 65:57:2b:a4:c5:bf:09:ae:16:20:2a:82:e6:56:2d:95:37:96: 61:5f:54:12:90:db:e6:61:1b:70:5d:c5:98:0a:e6:fe:fe:77: 50:a1:2b:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVRW9VBmwV5zM8WFmd9taSb2D1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJDRENC OURCRUUwQzAeFw0yNjA2MTYxODU3MDRaFw0yNjA2MTcyMjMwMDRaMDMxMTAvBgNV BAMTKDZDMzgzQjIxMUEyNEIxN0ExODQxQkZERTE1RjFENzgxNUM4MTMyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVR+XRApQ3SmwU1YOtmoRTuB8 dKrcsLqjvLo95GIZVCIW9aPNWxt5qyPwx+ZMzkqtKpialSu340oCkhEpWfRwfHZU SR8jmV/MZ15jOzlWhcS7PC4M4hmAEOg++lmsBlxT0At1FeqltMHA40KQOvfVI35A q25phVB27RZm9k/9p/l1SfFmq0KU8+aQm+E6+xJPUKYv7+Zy4x3kRIbrL5mUDQkf b+4eoEpQE+DA4/zsEHywubvIYVBEz1NR5TlHaGyzh09gqtuNZo8/UYpMwOqmpkYm N5XV9MpyUBiHZ4xZIFI8lEgvgWZi5pN0NQX/mXg7LmNl1/FLpeXNaJR2BxknAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbDg7IRoksXoYQb/eFfHXgVyBMrIwHwYDVR0j BBgwFoAUAsvmW12vnN3HyXOyY5os3Lnb7gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1 REFGOUNEREM3Qzk3M0IyNjM5QTJDRENCOURCRUUwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkNCRTY1QjVEQUY5Q0REQzdDOTczQjI2MzlBMkNEQ0I5REJF RTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJD RENCOURCRUUwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX9ogPSvwg5mVHIwE4QIjJSyRml3Gxvn+nt JKMzzhJYNGFOaqUujcCvet7p3z7n0AF8emnuaQJ30o/zvlU5V8R7CF0+f07Hm2kC 40j92EtaptBubZttc1ziK2JHC1DQZfW2U8BE3Dbj1Im6nJIZ7JF9jIXdxkdCP6Mu PLPtISDOwD+aZn8Xq3uNe9v5v4ptVc8o/7EXXh+I+aqqMCha/OjnRIo1JWgDe/L1 C4alQAjwDP+mAsQ5WnGPKKfmgpG+WhUcoqDonFJ1i37zVIAdgejt3IWiy+sRy2VX K6TFvwmuFiAqguZWLZU3lmFfVBKQ2+ZhG3BdxZgK5v7+d1ChK9w= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:38 2026 by rpki-client