$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft File: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft (raw, json) Hash identifier: FKnCBKpEzEUWTKf4YzbFIJd8YUhrJyaJ2ExRxOxtphc= Subject key identifier: 9E:11:D2:8A:4B:22:52:FA:5E:A0:AF:72:D7:0B:56:B0:B3:2F:9D:16 Authority key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C Certificate issuer: /CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Certificate serial: 577DEA8604DA4DED3737D988D1B64B587CAC9C53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 01:39:43 +0000 Manifest this update: Mon 02 Nov 2026 01:34:43 +0000 Manifest next update: Tue 03 Nov 2026 04:34:43 +0000 Files and hashes: 1: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl (hash: tR8h+gVsDI8hhFmhP2eBplNMyUJblrOBH2wds2506Hw=) 2: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: fYYpI3WJuPFtDyZ1cuaw5qt/FLFt1ktSGEKCbigmqt0=) 3: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: 0BOLStdAwiCE9nKO2uD0bAHRwoPOw2CxvrJobarBg+g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7d:ea:86:04:da:4d:ed:37:37:d9:88:d1:b6:4b:58:7c:ac:9c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Validity Not Before: Nov 2 01:34:43 2026 GMT Not After : Nov 3 04:34:43 2026 GMT Subject: CN=9E11D28A4B2252FA5EA0AF72D70B56B0B32F9D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:2c:2c:ed:ce:41:dc:73:b1:58:b3:5c:53: 00:8c:c4:83:4e:c5:bc:3a:6d:30:98:9d:fa:d4:ba: e2:97:95:24:e2:e4:9d:8f:87:09:44:2a:ee:24:ae: 02:a6:5f:79:09:4a:8a:ab:a6:63:bd:af:92:36:92: 5f:5e:f8:71:d9:1e:fe:ba:12:14:c1:da:3f:e6:67: ac:48:91:1f:22:01:05:40:d3:fe:a6:e8:7a:fb:f3: c4:57:07:cf:e2:dd:b1:05:a2:51:4f:8d:53:2a:dc: d4:41:8a:f4:a0:27:49:ca:a0:50:1b:fe:42:25:da: fa:ef:c9:d8:45:b6:68:ed:55:8b:d9:10:66:bb:09: e7:89:b6:f9:a2:31:8e:fb:6f:f0:68:5c:04:40:ac: 4a:09:7d:7b:61:5c:0d:2a:82:69:25:54:83:fc:4e: 82:be:01:76:53:b8:a2:b3:e5:1c:ad:d8:53:f9:4f: 6c:e9:e8:65:b2:10:3e:de:1f:22:c8:f6:65:22:16: 7a:bb:2e:0c:ee:70:27:fc:76:31:4f:d3:97:4a:fa: db:c8:91:d3:18:fb:48:55:b8:f1:1d:9e:92:f1:f0: 3c:fc:f7:02:09:c2:b6:ee:39:92:60:39:98:3b:ff: b8:58:7e:64:30:60:ad:7f:fa:b0:9e:31:6d:a5:18: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:11:D2:8A:4B:22:52:FA:5E:A0:AF:72:D7:0B:56:B0:B3:2F:9D:16 X509v3 Authority Key Identifier: keyid:02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:21:90:1d:d2:2e:58:b2:6c:3b:6a:c6:09:00:81:0c:62:fb: a8:e0:d4:48:3f:a8:bd:10:c5:57:ed:1a:25:98:48:5d:15:51: eb:ed:2e:f2:e7:65:cf:53:e5:fa:22:bc:5a:c3:0e:a5:5a:17: d1:e5:1f:3c:1d:d9:22:5c:98:79:fc:1e:17:e7:8d:69:f3:24: 59:f7:8e:ba:ff:15:51:20:b7:30:41:61:14:4b:55:27:53:a0: 3d:14:91:b3:80:a7:73:64:06:23:98:69:ae:54:1c:8f:40:32: 8b:22:b8:2b:e2:e6:eb:88:21:ea:1d:ac:1a:b6:cf:b8:d2:d9: a3:60:29:3e:ba:5c:df:3a:18:8a:61:a2:92:9a:66:96:c8:34: 7b:58:51:6a:46:21:f9:8e:59:94:db:8f:54:5f:d2:2f:50:14: bc:e7:99:31:9a:13:fb:d7:15:5c:4e:62:ef:1c:1c:58:ab:0d: ae:72:c6:a0:8c:90:af:3b:64:fb:9d:4c:ef:b1:3e:e9:a4:5f: fd:f2:b7:5f:58:f5:d1:2c:8c:a6:91:61:01:b0:d4:10:7b:3d: 78:78:a4:e3:d5:4a:92:2e:fd:77:68:f8:e3:b2:7a:73:84:f2: f6:ed:1e:af:6a:f8:9d:0d:ad:a1:96:d8:32:9b:28:e2:a9:25: b0:8c:f4:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV33qhgTaTe03N9mI0bZLWHysnFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJDRENC OURCRUUwQzAeFw0yNjExMDIwMTM0NDNaFw0yNjExMDMwNDM0NDNaMDMxMTAvBgNV BAMTKDlFMTFEMjhBNEIyMjUyRkE1RUEwQUY3MkQ3MEI1NkIwQjMyRjlEMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7liws7c5B3HOxWLNcUwCMxINO xbw6bTCYnfrUuuKXlSTi5J2PhwlEKu4krgKmX3kJSoqrpmO9r5I2kl9e+HHZHv66 EhTB2j/mZ6xIkR8iAQVA0/6m6Hr788RXB8/i3bEFolFPjVMq3NRBivSgJ0nKoFAb /kIl2vrvydhFtmjtVYvZEGa7CeeJtvmiMY77b/BoXARArEoJfXthXA0qgmklVIP8 ToK+AXZTuKKz5Ryt2FP5T2zp6GWyED7eHyLI9mUiFnq7LgzucCf8djFP05dK+tvI kdMY+0hVuPEdnpLx8Dz89wIJwrbuOZJgOZg7/7hYfmQwYK1/+rCeMW2lGJZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnhHSiksiUvpeoK9y1wtWsLMvnRYwHwYDVR0j BBgwFoAUAsvmW12vnN3HyXOyY5os3Lnb7gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1 REFGOUNEREM3Qzk3M0IyNjM5QTJDRENCOURCRUUwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkNCRTY1QjVEQUY5Q0REQzdDOTczQjI2MzlBMkNEQ0I5REJF RTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJD RENCOURCRUUwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJchkB3SLliybDtqxgkAgQxi+6jg1Eg/qL0Q xVftGiWYSF0VUevtLvLnZc9T5foivFrDDqVaF9HlHzwd2SJcmHn8HhfnjWnzJFn3 jrr/FVEgtzBBYRRLVSdToD0UkbOAp3NkBiOYaa5UHI9AMosiuCvi5uuIIeodrBq2 z7jS2aNgKT66XN86GIphopKaZpbINHtYUWpGIfmOWZTbj1Rf0i9QFLznmTGaE/vX FVxOYu8cHFirDa5yxqCMkK87ZPudTO+xPumkX/3yt19Y9dEsjKaRYQGw1BB7PXh4 pOPVSpIu/Xdo+OOyenOE8vbtHq9q+J0NraGW2DKbKOKpJbCM9Nc= -----END CERTIFICATE-----Generated at Mon Nov 2 19:20:58 2026 by rpki-client