$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft File: 02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft (raw, json) Hash identifier: ug6TEKdqDLhJZxA9DbkwjylNJLX+HINXB2x3Nwx96vk= Subject key identifier: 2D:15:19:7E:7B:71:05:C5:8B:46:78:CC:B6:7E:62:35:01:65:1D:0B Authority key identifier: 02:C3:F1:7E:0D:80:95:42:F2:AF:03:C8:B7:41:DB:92:8B:4A:04:DA Certificate issuer: /CN=02C3F17E0D809542F2AF03C8B741DB928B4A04DA Certificate serial: 6C65EDA0BAA0F0A15974E4BA2EB62F83558AA870 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 06:57:05 +0000 Manifest this update: Thu 17 Sep 2026 06:52:05 +0000 Manifest next update: Fri 18 Sep 2026 07:22:05 +0000 Files and hashes: 1: 02C3F17E0D809542F2AF03C8B741DB928B4A04DA.crl (hash: 0jpGaYAmQZ7v08ljgGL6CfbxekIrOp5h7X5vFEHGSBo=) 2: 3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa (hash: m+/JYxA11ei8CCwmEdzoEURJAmFOVe4xHWxQv9o89w4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.crl rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:65:ed:a0:ba:a0:f0:a1:59:74:e4:ba:2e:b6:2f:83:55:8a:a8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02C3F17E0D809542F2AF03C8B741DB928B4A04DA Validity Not Before: Sep 17 06:52:05 2026 GMT Not After : Sep 18 07:22:05 2026 GMT Subject: CN=2D15197E7B7105C58B4678CCB67E623501651D0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:35:19:b2:1a:35:95:ef:3a:22:be:32:74:d0: c4:25:29:c0:5f:8f:6d:ec:94:a5:73:8f:59:21:3c: e4:96:cf:fe:37:d8:ff:3f:e1:10:5f:5d:92:74:f8: 52:de:97:7c:d1:35:3b:ef:8b:fd:be:31:7c:de:5b: 86:69:c3:84:8c:14:46:20:d5:86:bf:0c:db:25:f9: 63:5c:b2:78:fc:9c:83:75:aa:5e:57:87:98:62:27: ed:3c:94:21:64:6b:26:59:c0:07:37:be:11:c1:6d: 14:37:6f:81:df:b9:af:9b:d2:08:b5:b3:3c:d0:c5: 02:be:33:90:38:57:73:37:51:f8:9f:af:eb:0b:09: 13:82:ca:02:3b:69:19:ec:68:7f:ed:ff:c6:97:79: f5:ee:2d:da:db:2d:27:dc:92:63:8a:40:cb:3c:ac: cd:4d:25:66:c3:1d:c6:3c:29:b0:04:a2:b5:65:26: 29:ec:5c:50:ff:d3:87:0d:e6:68:12:8c:b5:f6:53: 79:cb:39:30:30:89:1a:79:bb:3f:20:2c:b5:bd:a6: 14:ce:e0:03:03:9d:e5:f8:68:32:1f:fd:e3:68:21: 14:83:b6:ec:e8:0a:bb:f8:e0:53:d7:fe:4d:0d:29: 71:06:ac:6c:ec:c9:0b:50:b3:31:8d:0a:16:0a:77: d0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:15:19:7E:7B:71:05:C5:8B:46:78:CC:B6:7E:62:35:01:65:1D:0B X509v3 Authority Key Identifier: keyid:02:C3:F1:7E:0D:80:95:42:F2:AF:03:C8:B7:41:DB:92:8B:4A:04:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/02C3F17E0D809542F2AF03C8B741DB928B4A04DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:63:ae:9d:2a:4f:05:86:01:76:e3:c0:57:04:e4:67:c0:7c: 56:dd:79:61:07:f8:7e:e7:db:f9:68:25:f4:51:8f:9b:bb:a2: 04:63:e3:6d:f6:e7:9d:d6:55:ee:e5:d3:73:58:a2:29:26:e6: 2d:84:04:61:ca:8d:d4:11:59:90:24:48:52:8c:70:58:c4:fa: 4b:16:74:10:08:58:a8:a1:f4:1e:e4:d9:ff:77:22:9c:e7:bd: 97:f2:5b:f6:c1:a0:0a:73:23:de:80:69:34:c0:8d:d1:3c:23: 07:92:33:04:ff:23:4a:aa:e6:2d:ab:d4:27:b1:0a:27:16:b4: 42:cc:54:38:d5:cb:1d:27:41:e5:11:c5:6b:81:ca:14:6d:5f: 0f:dd:ba:5e:d9:e1:53:c0:e1:ac:3c:37:f2:74:24:70:10:03: 0e:98:b0:97:06:ff:c1:54:d6:33:84:f9:9d:a3:ab:e5:f3:3b: 2e:57:2f:05:ec:9d:0e:59:6e:ae:8a:a6:38:fb:d6:b1:b9:d6: 47:4f:a8:a4:16:12:71:5c:ac:24:67:19:1c:22:e2:ad:cd:36: 36:67:47:33:d3:50:38:84:a9:7b:c0:b4:8a:1b:0f:ba:4c:fd: b0:24:cf:c5:15:5a:83:6e:34:e0:eb:93:e1:41:68:75:9d:f4: 35:49:e0:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGXtoLqg8KFZdOS6LrYvg1WKqHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDM0YxN0UwRDgwOTU0MkYyQUYwM0M4Qjc0MURCOTI4 QjRBMDREQTAeFw0yNjA5MTcwNjUyMDVaFw0yNjA5MTgwNzIyMDVaMDMxMTAvBgNV BAMTKDJEMTUxOTdFN0I3MTA1QzU4QjQ2NzhDQ0I2N0U2MjM1MDE2NTFEMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaNRmyGjWV7zoivjJ00MQlKcBf j23slKVzj1khPOSWz/432P8/4RBfXZJ0+FLel3zRNTvvi/2+MXzeW4Zpw4SMFEYg 1Ya/DNsl+WNcsnj8nIN1ql5Xh5hiJ+08lCFkayZZwAc3vhHBbRQ3b4Hfua+b0gi1 szzQxQK+M5A4V3M3Ufifr+sLCROCygI7aRnsaH/t/8aXefXuLdrbLSfckmOKQMs8 rM1NJWbDHcY8KbAEorVlJinsXFD/04cN5mgSjLX2U3nLOTAwiRp5uz8gLLW9phTO 4AMDneX4aDIf/eNoIRSDtuzoCrv44FPX/k0NKXEGrGzsyQtQszGNChYKd9BzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULRUZfntxBcWLRnjMtn5iNQFlHQswHwYDVR0j BBgwFoAUAsPxfg2AlULyrwPIt0HbkotKBNowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZjMDY0NTUtMTVjMC00ZjNkLTgxM2ItYzA3YmVmNzhmMDI1LzAvMDJDM0YxN0Uw RDgwOTU0MkYyQUYwM0M4Qjc0MURCOTI4QjRBMDREQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkMzRjE3RTBEODA5NTQyRjJBRjAzQzhCNzQxREI5MjhCNEEw NERBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZjMDY0NTUtMTVjMC00ZjNkLTgx M2ItYzA3YmVmNzhmMDI1LzAvMDJDM0YxN0UwRDgwOTU0MkYyQUYwM0M4Qjc0MURC OTI4QjRBMDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdjrp0qTwWGAXbjwFcE5GfAfFbdeWEH+H7n 2/loJfRRj5u7ogRj4232553WVe7l03NYoikm5i2EBGHKjdQRWZAkSFKMcFjE+ksW dBAIWKih9B7k2f93IpznvZfyW/bBoApzI96AaTTAjdE8IweSMwT/I0qq5i2r1Cex CicWtELMVDjVyx0nQeURxWuByhRtXw/dul7Z4VPA4aw8N/J0JHAQAw6YsJcG/8FU 1jOE+Z2jq+XzOy5XLwXsnQ5Zbq6Kpjj71rG51kdPqKQWEnFcrCRnGRwi4q3NNjZn RzPTUDiEqXvAtIobD7pM/bAkz8UVWoNuNODrk+FBaHWd9DVJ4PY= -----END CERTIFICATE-----Generated at Thu Sep 17 09:20:48 2026 by rpki-client