$ rpki-client -vvf rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft File: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft (raw, json) Hash identifier: u+1sMNhjgaIUUGo2icat77bxLS179URaJerq6Qg2m2g= Subject key identifier: C5:9C:9D:7D:C7:9C:00:16:86:59:17:7E:07:44:35:35:A3:7B:C2:FA Authority key identifier: 02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C Certificate issuer: /CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Certificate serial: 27D2A9329B0F7B7C8932510D09FBF25FA2037D92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:24:53 +0000 Manifest this update: Mon 20 Jul 2026 23:19:53 +0000 Manifest next update: Tue 21 Jul 2026 23:35:53 +0000 Files and hashes: 1: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: fYYpI3WJuPFtDyZ1cuaw5qt/FLFt1ktSGEKCbigmqt0=) 2: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: 0BOLStdAwiCE9nKO2uD0bAHRwoPOw2CxvrJobarBg+g=) 3: 02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl (hash: xK14YD1QzRTU2hZmwsyL0s8yqRRM5xn5Ux2KhLJvgpU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d2:a9:32:9b:0f:7b:7c:89:32:51:0d:09:fb:f2:5f:a2:03:7d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C Validity Not Before: Jul 20 23:19:53 2026 GMT Not After : Jul 21 23:35:53 2026 GMT Subject: CN=C59C9D7DC79C00168659177E07443535A37BC2FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:10:33:e0:51:c5:19:e9:64:70:66:b7:88: 88:27:3e:81:5c:26:e0:34:c0:fa:f7:b6:cf:c0:5b: c7:3d:11:e9:e4:25:5f:cf:6b:e4:b5:93:5d:b5:f9: d1:a8:4b:ff:79:de:f3:24:ac:c1:04:c1:72:30:0f: e9:13:dd:cc:cf:86:1a:a0:5f:44:b1:72:91:03:88: f8:f9:04:54:ea:7f:e1:c5:53:14:a6:47:3c:dd:47: d6:9c:4e:47:b5:ee:a4:52:3c:53:1e:5c:06:4d:d3: 55:b3:39:60:57:58:b8:1c:c4:96:b4:aa:ea:d3:64: e8:7d:0c:cc:c2:7f:b4:35:f0:97:17:a2:31:7a:ea: 0a:53:81:0e:fb:3e:94:53:2a:41:d9:58:67:7b:a3: 3d:69:a1:5a:9d:f8:20:d1:a1:10:e6:97:06:93:0f: 5e:12:ea:b7:38:6b:ee:75:7f:c8:56:1e:aa:24:88: c2:66:57:b2:66:77:3a:b5:f2:1b:7d:4e:40:0b:ed: bd:b3:b0:b6:3e:e6:6c:58:7e:a3:21:fb:f9:b0:13: 5a:4f:76:33:60:42:ed:74:76:41:db:9e:bd:10:af: 40:ce:7c:1b:cb:58:53:28:d8:d6:a9:5b:ad:dd:97: d6:b5:90:81:51:c8:1b:0b:5c:e2:ec:7c:98:ce:93: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9C:9D:7D:C7:9C:00:16:86:59:17:7E:07:44:35:35:A3:7B:C2:FA X509v3 Authority Key Identifier: keyid:02:CB:E6:5B:5D:AF:9C:DD:C7:C9:73:B2:63:9A:2C:DC:B9:DB:EE:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/02CBE65B5DAF9CDDC7C973B2639A2CDCB9DBEE0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:fe:6e:ab:fd:05:04:b3:c7:64:32:64:a2:88:9c:db:81:5c: 9f:8b:41:d9:aa:31:a9:81:49:d4:eb:f8:1f:7b:21:00:8e:d2: 58:70:e2:c2:31:78:b0:d3:6a:b0:70:c8:0f:4d:8d:a5:56:21: 2e:ec:cc:18:d5:27:90:de:8b:45:9d:0f:4d:6e:ec:51:8c:c5: 47:3a:ac:09:50:92:a3:61:71:f5:72:55:07:7a:98:32:cc:79: fb:a1:5f:c5:fc:ed:3e:9f:24:c4:c6:5d:48:a1:3f:8f:a7:b0: ea:e0:c8:cf:6d:ff:e0:6e:f0:df:05:5c:b7:c5:ae:fe:60:b3: 0d:75:82:4e:60:68:55:0b:41:78:b0:b0:0d:0a:d4:f9:b1:8f: 7e:e8:d3:d8:29:72:9e:68:cf:dc:f7:e0:78:5e:07:7e:bf:a8: e3:5a:df:6e:c9:16:62:52:ad:f5:3a:d0:5a:b6:37:47:50:92: 97:a7:58:e0:13:83:57:50:ba:1d:ee:42:f3:bf:86:bd:86:84: 72:82:a0:d9:60:c7:b5:d7:b1:17:73:2f:8d:58:22:41:9c:ea: fd:63:86:4f:a2:ce:1a:88:0c:27:4b:62:2d:76:fe:05:ce:fa: ec:df:06:fe:cf:5e:dc:9d:bf:05:9f:c7:a9:79:9a:9e:52:55: 05:e3:fb:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9KpMpsPe3yJMlENCfvyX6IDfZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJDRENC OURCRUUwQzAeFw0yNjA3MjAyMzE5NTNaFw0yNjA3MjEyMzM1NTNaMDMxMTAvBgNV BAMTKEM1OUM5RDdEQzc5QzAwMTY4NjU5MTc3RTA3NDQzNTM1QTM3QkMyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBihAz4FHFGelkcGa3iIgnPoFc JuA0wPr3ts/AW8c9EenkJV/Pa+S1k121+dGoS/953vMkrMEEwXIwD+kT3czPhhqg X0SxcpEDiPj5BFTqf+HFUxSmRzzdR9acTke17qRSPFMeXAZN01WzOWBXWLgcxJa0 qurTZOh9DMzCf7Q18JcXojF66gpTgQ77PpRTKkHZWGd7oz1poVqd+CDRoRDmlwaT D14S6rc4a+51f8hWHqokiMJmV7Jmdzq18ht9TkAL7b2zsLY+5mxYfqMh+/mwE1pP djNgQu10dkHbnr0Qr0DOfBvLWFMo2NapW63dl9a1kIFRyBsLXOLsfJjOk+83AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxZydfcecABaGWRd+B0Q1NaN7wvowHwYDVR0j BBgwFoAUAsvmW12vnN3HyXOyY5os3Lnb7gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1 REFGOUNEREM3Qzk3M0IyNjM5QTJDRENCOURCRUUwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkNCRTY1QjVEQUY5Q0REQzdDOTczQjI2MzlBMkNEQ0I5REJF RTBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMDJDQkU2NUI1REFGOUNEREM3Qzk3M0IyNjM5QTJD RENCOURCRUUwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGT+bqv9BQSzx2QyZKKInNuBXJ+LQdmqMamB SdTr+B97IQCO0lhw4sIxeLDTarBwyA9NjaVWIS7szBjVJ5Dei0WdD01u7FGMxUc6 rAlQkqNhcfVyVQd6mDLMefuhX8X87T6fJMTGXUihP4+nsOrgyM9t/+Bu8N8FXLfF rv5gsw11gk5gaFULQXiwsA0K1Pmxj37o09gpcp5oz9z34HheB36/qONa327JFmJS rfU60Fq2N0dQkpenWOATg1dQuh3uQvO/hr2GhHKCoNlgx7XXsRdzL41YIkGc6v1j hk+izhqIDCdLYi12/gXO+uzfBv7PXtydvwWfx6l5mp5SVQXj+8I= -----END CERTIFICATE-----Generated at Tue Jul 21 08:32:18 2026 by rpki-client