$ rpki-client -vvf rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft File: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft (raw, json) Hash identifier: ph5GoxRFRDh/4jVwAt+nFARq5x5IFOHOmxmWx6eyCrw= Subject key identifier: 71:6F:78:BF:31:F8:E6:52:87:BA:63:65:7C:4C:AB:9D:CF:40:A2:20 Authority key identifier: 02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97 Certificate issuer: /CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997 Certificate serial: 75FF2D9362538679D043FA31B4E0EF6AD97EAD23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 16:24:44 +0000 Manifest this update: Tue 02 Jun 2026 16:19:44 +0000 Manifest next update: Wed 03 Jun 2026 17:17:44 +0000 Files and hashes: 1: 02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl (hash: W0xvwGydKl2GIEbnX1TonIA1p+5y3Ff91tgHZ5r/hqs=) 2: 3130332e3139302e36312e302f32342d3234203d3e20313439393031.roa (hash: 8bk4nM/CpViyJMYTIYd85+JJ5zEQXXgNb/ogzW3MmFM=) 3: 3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (hash: uqiSzcg0G6eG40rjBlY0LrjMSKV5cIiAMiPhDeDO7GM=) 4: 3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (hash: mckJR6NOoa+yl4WEvk2NXD7USkbc88RSKMqJlOr2OEY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 17:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ff:2d:93:62:53:86:79:d0:43:fa:31:b4:e0:ef:6a:d9:7e:ad:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02F86D7930666AC9B0809D7AE42C20B1D29CA997 Validity Not Before: Jun 2 16:19:44 2026 GMT Not After : Jun 3 17:17:44 2026 GMT Subject: CN=716F78BF31F8E65287BA63657C4CAB9DCF40A220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:82:b1:86:66:c3:2d:20:58:f1:d2:b7:b7: 15:1e:b1:14:45:92:cb:ba:07:1c:71:a5:b2:44:1d: f7:6e:95:ec:30:2a:64:8f:b2:b2:63:83:5a:ba:11: ba:2c:a3:bc:9d:38:c2:10:a8:df:bd:6e:12:5e:90: 20:dd:86:a6:42:11:8c:4a:ec:a2:15:6a:0a:3a:cc: c4:1f:66:c2:d4:7f:51:5d:b7:51:2c:f0:81:36:db: cf:f9:00:08:b9:d6:ae:c4:5a:4f:67:45:a8:12:c8: fc:f6:25:ed:32:ab:d9:f3:6c:9b:fe:22:24:8d:cf: ec:7b:ad:30:e5:41:a6:07:71:d0:60:ec:e8:fb:57: 11:9d:a0:ed:32:08:b3:f0:83:a8:05:0a:92:1e:d3: 49:ef:00:08:31:e2:51:18:05:18:16:72:20:bc:58: 06:11:b6:2a:17:47:e9:fd:a0:9f:b5:ea:a9:2f:99: 05:72:cc:33:97:29:56:00:2f:d0:41:06:d4:be:ad: cf:12:42:32:2e:99:90:6a:52:1e:89:2e:52:ba:d7: 3f:be:2e:86:c5:68:e5:d6:49:d5:82:a5:1f:1e:32: 0c:4d:d5:52:d8:26:41:be:d8:f5:11:5a:84:2f:27: 8f:6e:d1:ca:5a:f7:d2:cf:70:ca:bf:9a:cd:e0:d1: b1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6F:78:BF:31:F8:E6:52:87:BA:63:65:7C:4C:AB:9D:CF:40:A2:20 X509v3 Authority Key Identifier: keyid:02:F8:6D:79:30:66:6A:C9:B0:80:9D:7A:E4:2C:20:B1:D2:9C:A9:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02F86D7930666AC9B0809D7AE42C20B1D29CA997.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/02F86D7930666AC9B0809D7AE42C20B1D29CA997.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:52:de:e6:8a:9c:9b:f1:a0:ef:83:77:35:c3:f9:59:ef:33: 19:66:98:6f:e3:46:f7:5b:90:13:9e:23:6c:12:88:51:a0:f2: 28:f2:69:80:48:bf:06:12:06:8d:20:6a:e0:ba:2a:f7:69:c5: 17:0c:f8:07:63:e0:03:aa:c4:0a:83:a0:f0:1f:ec:27:4e:da: e0:c8:ff:03:1b:7f:d3:08:f1:25:82:25:6d:0e:8e:04:6b:21: f1:7a:e8:75:d4:1c:e3:a4:09:76:82:7d:52:65:59:8a:27:6e: 48:6b:f6:99:a0:f0:dd:1c:6f:63:e7:5e:2e:f1:c9:47:80:09: 6e:57:81:15:ec:e1:44:91:2c:4c:e9:61:13:42:aa:3a:c9:2d: be:58:89:b9:c3:3d:c6:a7:59:21:a4:88:54:b1:f6:26:e9:8e: 53:b0:7a:89:f8:24:3f:1e:95:fc:89:ad:70:97:d6:85:b4:02: 6b:98:83:9f:6a:6d:57:0e:4f:3f:0a:e8:3e:9f:a2:02:69:04: e5:68:0f:2c:88:54:95:49:32:46:5e:1e:1b:cd:21:3d:f6:dd: 50:41:59:06:d0:84:a6:24:e5:28:4e:eb:3f:f3:34:0a:90:a1: ad:f5:db:9f:7e:8d:25:77:a2:2e:4b:51:6e:32:2e:b6:70:6c: ff:46:fa:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdf8tk2JThnnQQ/oxtODvatl+rSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJGODZENzkzMDY2NkFDOUIwODA5RDdBRTQyQzIwQjFE MjlDQTk5NzAeFw0yNjA2MDIxNjE5NDRaFw0yNjA2MDMxNzE3NDRaMDMxMTAvBgNV BAMTKDcxNkY3OEJGMzFGOEU2NTI4N0JBNjM2NTdDNENBQjlEQ0Y0MEEyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XoKxhmbDLSBY8dK3txUesRRF ksu6BxxxpbJEHfdulewwKmSPsrJjg1q6Eboso7ydOMIQqN+9bhJekCDdhqZCEYxK 7KIVago6zMQfZsLUf1Fdt1Es8IE228/5AAi51q7EWk9nRagSyPz2Je0yq9nzbJv+ IiSNz+x7rTDlQaYHcdBg7Oj7VxGdoO0yCLPwg6gFCpIe00nvAAgx4lEYBRgWciC8 WAYRtioXR+n9oJ+16qkvmQVyzDOXKVYAL9BBBtS+rc8SQjIumZBqUh6JLlK61z++ LobFaOXWSdWCpR8eMgxN1VLYJkG+2PURWoQvJ49u0cpa99LPcMq/ms3g0bEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcW94vzH45lKHumNlfEyrnc9AoiAwHwYDVR0j BBgwFoAUAvhteTBmasmwgJ165CwgsdKcqZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWUzMTQ4NTgtYjMzYS00YjY1LTlhNTUtZGNlNDFlMjIzODczLzAvMDJGODZENzkz MDY2NkFDOUIwODA5RDdBRTQyQzIwQjFEMjlDQTk5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkY4NkQ3OTMwNjY2QUM5QjA4MDlEN0FFNDJDMjBCMUQyOUNB OTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWUzMTQ4NTgtYjMzYS00YjY1LTlh NTUtZGNlNDFlMjIzODczLzAvMDJGODZENzkzMDY2NkFDOUIwODA5RDdBRTQyQzIw QjFEMjlDQTk5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFS3uaKnJvxoO+DdzXD+VnvMxlmmG/jRvdb kBOeI2wSiFGg8ijyaYBIvwYSBo0gauC6KvdpxRcM+Adj4AOqxAqDoPAf7CdO2uDI /wMbf9MI8SWCJW0OjgRrIfF66HXUHOOkCXaCfVJlWYonbkhr9pmg8N0cb2PnXi7x yUeACW5XgRXs4USRLEzpYRNCqjrJLb5YibnDPcanWSGkiFSx9ibpjlOweon4JD8e lfyJrXCX1oW0AmuYg59qbVcOTz8K6D6fogJpBOVoDyyIVJVJMkZeHhvNIT323VBB WQbQhKYk5ShO6z/zNAqQoa31259+jSV3oi5LUW4yLrZwbP9G+ig= -----END CERTIFICATE-----Generated at Wed Jun 3 04:11:51 2026 by rpki-client