$ rpki-client -vvf rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft File: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft (raw, json) Hash identifier: t+DoUcZ9A+lCcQyPcR1idz1U6OyM8cc0ByvBfY/tdq8= Subject key identifier: 5A:F4:15:33:C3:F2:91:17:24:C0:BB:6B:8E:11:3B:76:4B:AA:49:0C Authority key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C Certificate issuer: /CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Certificate serial: 059D8454CBFF135AA5EED18B5556B78452876BFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:06:47 +0000 Manifest this update: Tue 02 Jun 2026 18:01:46 +0000 Manifest next update: Wed 03 Jun 2026 19:30:46 +0000 Files and hashes: 1: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: fYYpI3WJuPFtDyZ1cuaw5qt/FLFt1ktSGEKCbigmqt0=) 2: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: 0BOLStdAwiCE9nKO2uD0bAHRwoPOw2CxvrJobarBg+g=) 3: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl (hash: wIab2qxsYBH5do+tbTQGHViWyx4XjDZhIiRTgQ76FkE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9d:84:54:cb:ff:13:5a:a5:ee:d1:8b:55:56:b7:84:52:87:6b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Validity Not Before: Jun 2 18:01:46 2026 GMT Not After : Jun 3 19:30:46 2026 GMT Subject: CN=5AF41533C3F2911724C0BB6B8E113B764BAA490C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:85:39:b9:06:2f:b6:c7:2e:6b:ab:6d:7e: 5d:19:34:62:b5:c1:8e:3d:6b:ba:ee:c8:72:74:95: cf:c7:d0:64:90:fc:de:39:a3:fc:6b:22:de:05:93: 24:d6:12:d4:b9:5c:67:a9:f3:32:e6:ea:b2:d9:9b: a5:f4:d2:c6:b4:ef:de:4d:5e:dd:95:23:1b:5c:4d: ec:90:ba:f2:12:3c:3d:ac:c6:6f:04:e6:75:c0:36: 1a:e2:23:99:13:35:aa:14:77:b0:f7:d4:9c:07:24: ba:82:32:6c:72:65:2e:25:77:39:2f:f7:ba:0b:63: ac:ae:1f:7f:be:03:87:18:5e:27:4d:a7:b2:f7:35: 31:e4:1b:13:52:e6:94:e4:9f:93:b9:9c:34:6c:9c: ea:02:c9:45:83:d2:39:63:c9:f5:a2:7f:ad:62:c0: a0:d4:9d:e0:c0:a6:5f:32:26:96:a8:8b:e4:cd:cf: 60:6b:64:22:b3:d8:e1:92:cb:70:bc:e8:c1:7a:c3: 55:3c:77:a7:a5:39:52:0a:31:94:a6:2f:d1:65:b7: a2:4f:a9:bd:07:a8:de:ff:71:39:e3:e8:d3:4b:a6: eb:38:aa:c4:5e:29:ea:d4:fb:cc:b2:cb:18:41:51: 4b:81:bd:d3:a6:e5:a2:1e:6a:e8:48:21:1b:5d:8d: 9f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F4:15:33:C3:F2:91:17:24:C0:BB:6B:8E:11:3B:76:4B:AA:49:0C X509v3 Authority Key Identifier: keyid:02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9c:41:b1:85:16:18:da:57:27:c2:7a:d1:79:3e:06:b3:c5: 1f:7a:6e:81:28:22:cf:87:ab:1a:41:c6:a2:e0:e0:1f:4b:be: c4:3f:89:9a:74:29:b3:26:7a:17:cc:25:81:fd:80:81:87:c1: 25:3c:49:e8:5e:c5:80:60:1c:d5:15:87:46:53:0b:ed:1d:c1: c1:ce:21:6c:8d:29:f1:06:9e:f3:14:8c:b4:9d:ba:35:76:45: b4:95:e5:79:33:fa:c7:b1:49:35:f4:70:5c:57:6d:4a:06:4a: 23:52:51:6a:0d:ef:0a:be:ec:47:e3:6c:ec:da:77:71:e7:a6: 9a:20:9a:98:dd:1b:66:f0:4c:c0:9b:9c:ce:76:34:11:98:37: c3:75:9f:c9:ee:c0:9e:83:83:88:01:84:d9:38:f5:62:da:6b: 12:71:8a:4e:4f:f6:c9:4b:4b:f3:20:2e:6e:92:63:ad:c6:b9: 48:78:3f:42:87:76:19:52:f3:e8:44:85:3c:29:df:b2:3a:ef: 56:77:f6:2e:61:e8:4a:28:22:12:4c:6e:9f:65:02:e3:2a:d8: 42:a7:91:51:34:07:48:13:fa:52:1c:8a:da:50:ad:a5:c3:fc: 00:6d:b0:e5:91:e4:a4:4e:e3:dc:e3:54:53:ba:68:f5:78:64: e9:ce:3a:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZ2EVMv/E1ql7tGLVVa3hFKHa/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJDRENC OURCRUUwQzAeFw0yNjA2MDIxODAxNDZaFw0yNjA2MDMxOTMwNDZaMDMxMTAvBgNV BAMTKDVBRjQxNTMzQzNGMjkxMTcyNEMwQkI2QjhFMTEzQjc2NEJBQTQ5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2YU5uQYvtscua6ttfl0ZNGK1 wY49a7ruyHJ0lc/H0GSQ/N45o/xrIt4FkyTWEtS5XGep8zLm6rLZm6X00sa0795N Xt2VIxtcTeyQuvISPD2sxm8E5nXANhriI5kTNaoUd7D31JwHJLqCMmxyZS4ldzkv 97oLY6yuH3++A4cYXidNp7L3NTHkGxNS5pTkn5O5nDRsnOoCyUWD0jljyfWif61i wKDUneDApl8yJpaoi+TNz2BrZCKz2OGSy3C86MF6w1U8d6elOVIKMZSmL9Flt6JP qb0HqN7/cTnj6NNLpus4qsReKerU+8yyyxhBUUuBvdOm5aIeauhIIRtdjZ9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWvQVM8PykRckwLtrjhE7dkuqSQwwHwYDVR0j BBgwFoAUAsvmW12vnN3HyXOyY5os3Lnb7gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1 REFGOUNEREM3Qzk3M0IyNjM5QTJDRENCOURCRUUwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkNCRTY1QjVEQUY5Q0REQzdDOTczQjI2MzlBMkNEQ0I5REJF RTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJD RENCOURCRUUwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJicQbGFFhjaVyfCetF5PgazxR96boEoIs+H qxpBxqLg4B9LvsQ/iZp0KbMmehfMJYH9gIGHwSU8SehexYBgHNUVh0ZTC+0dwcHO IWyNKfEGnvMUjLSdujV2RbSV5Xkz+sexSTX0cFxXbUoGSiNSUWoN7wq+7EfjbOza d3HnppogmpjdG2bwTMCbnM52NBGYN8N1n8nuwJ6Dg4gBhNk49WLaaxJxik5P9slL S/MgLm6SY63GuUh4P0KHdhlS8+hEhTwp37I671Z39i5h6EooIhJMbp9lAuMq2EKn kVE0B0gT+lIcitpQraXD/ABtsOWR5KRO49zjVFO6aPV4ZOnOOvY= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:27 2026 by rpki-client