$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft File: 02A914400077F3E213C8972280DBD775A6B4C27C.mft (raw, json) Hash identifier: oJC39pmVBlsAdTEs907NoC00HBQPcRm9cxsKW+JDFuU= Subject key identifier: 0A:3E:F3:C4:99:0A:9F:8C:CC:33:4F:86:17:7A:38:AE:97:E6:0A:98 Authority key identifier: 02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C Certificate issuer: /CN=02A914400077F3E213C8972280DBD775A6B4C27C Certificate serial: 6FBC6B8DC38638114F8E6BF313AEBED67EC75759 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft Manifest number: EB Signing time: Sun 25 Oct 2026 14:50:12 +0000 Manifest this update: Sun 25 Oct 2026 14:45:12 +0000 Manifest next update: Mon 26 Oct 2026 15:42:12 +0000 Files and hashes: 1: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: 7K61pTbrZ/wXrVu+ND+CKuJN541gJOWkRBEe8DSD5VY=) 2: 02A914400077F3E213C8972280DBD775A6B4C27C.crl (hash: kmknNtDtCQr1PXB+PiuqjZANyEJx+4X7LdGNTjPQ4Q0=) 3: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: GtvHkVY9/W43sI4HiI73HEw8h6eq1YXH6SXHhFSgbQc=) 4: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: MqhWF/9kEJruTy9GHUvbvPqeSAr4kmVz23GSZ1AI124=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:bc:6b:8d:c3:86:38:11:4f:8e:6b:f3:13:ae:be:d6:7e:c7:57:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02A914400077F3E213C8972280DBD775A6B4C27C Validity Not Before: Oct 25 14:45:12 2026 GMT Not After : Oct 26 15:42:12 2026 GMT Subject: CN=0A3EF3C4990A9F8CCC334F86177A38AE97E60A98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:b5:ce:0a:47:a4:c8:7e:2b:73:5d:f8:e8: 06:a1:d0:c6:ef:66:2a:06:46:95:cf:10:0a:c7:33: f2:ed:f2:d5:0a:39:20:79:7c:65:0b:46:4c:02:55: 40:35:d6:b7:cc:98:e8:40:aa:80:05:2f:e7:8d:d5: ea:2e:42:d0:c3:a3:ff:00:aa:18:da:c8:72:29:a4: 99:8b:75:11:b9:8e:82:b6:be:aa:e7:43:c2:e3:7e: 78:cb:b7:f8:49:02:6b:4c:59:4a:0d:70:88:76:9b: 6c:2e:e2:32:e5:24:65:c7:57:d6:4a:74:81:dc:88: 42:93:08:19:f2:ba:3f:10:1b:b5:e2:88:96:a7:22: 97:d4:65:25:e8:4c:6c:69:7e:bc:25:eb:b8:32:23: 6f:39:0b:20:94:6f:23:e3:ab:7a:bd:a6:cf:93:eb: 50:23:24:dd:be:bf:e7:9a:f8:60:e2:a7:13:c2:7a: f1:bd:73:d9:aa:a8:2e:eb:ae:a4:c9:5b:72:73:36: 33:39:02:25:44:37:89:60:c2:8d:93:31:93:a2:4d: 2e:f0:89:ae:67:66:1c:fe:2d:53:cf:ee:76:6f:a4: a2:a7:c7:44:e0:4e:bf:1d:5b:e4:1e:b2:d0:be:45: 00:b8:60:92:44:73:bc:49:09:80:bb:99:79:49:0c: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3E:F3:C4:99:0A:9F:8C:CC:33:4F:86:17:7A:38:AE:97:E6:0A:98 X509v3 Authority Key Identifier: keyid:02:A9:14:40:00:77:F3:E2:13:C8:97:22:80:DB:D7:75:A6:B4:C2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02A914400077F3E213C8972280DBD775A6B4C27C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/02A914400077F3E213C8972280DBD775A6B4C27C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:23:1c:bc:63:5b:ae:fb:1f:80:ed:90:11:35:64:00:52:37: a1:fd:67:ba:dd:b5:f3:c9:d5:60:4b:d0:a4:d2:31:52:88:bc: 13:f3:12:17:48:d4:f4:22:a6:ec:71:18:e4:fd:52:73:48:58: 1f:a6:7a:0d:ba:37:ff:71:52:a5:e7:4d:a5:1d:d4:f1:71:e4: be:9c:69:70:4e:c8:e2:3e:12:75:7e:6d:25:dd:9e:97:43:3c: 15:c7:db:93:29:33:95:26:74:f1:00:d3:e1:07:be:01:c0:16: 68:57:38:52:0c:fe:df:34:41:31:39:bb:91:21:17:cf:5a:fd: 0e:45:74:5f:10:d9:09:7c:9e:32:f5:db:fb:9d:40:a3:b3:21: 6b:58:8a:a0:96:73:ce:d6:b2:37:03:88:39:79:a4:a5:9b:19: 1a:28:ae:43:6d:24:14:d4:46:69:10:c8:18:38:dc:36:ce:7c: 2a:4c:90:0b:a1:f2:5b:e4:90:47:ee:35:e0:29:85:5c:56:dd: 7e:bf:03:50:65:c1:2b:92:11:08:86:21:e8:81:18:73:01:c0: c9:6e:10:79:12:6a:0a:6e:c3:4d:f2:5b:e5:dc:0f:f9:b7:64: d8:a7:4e:7c:40:c6:4a:d4:5b:14:52:49:30:ac:c3:29:21:91: 14:4b:62:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb7xrjcOGOBFPjmvzE66+1n7HV1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVB NkI0QzI3QzAeFw0yNjEwMjUxNDQ1MTJaFw0yNjEwMjYxNTQyMTJaMDMxMTAvBgNV BAMTKDBBM0VGM0M0OTkwQTlGOENDQzMzNEY4NjE3N0EzOEFFOTdFNjBBOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVW7XOCkekyH4rc1346Aah0Mbv ZioGRpXPEArHM/Lt8tUKOSB5fGULRkwCVUA11rfMmOhAqoAFL+eN1eouQtDDo/8A qhjayHIppJmLdRG5joK2vqrnQ8LjfnjLt/hJAmtMWUoNcIh2m2wu4jLlJGXHV9ZK dIHciEKTCBnyuj8QG7XiiJanIpfUZSXoTGxpfrwl67gyI285CyCUbyPjq3q9ps+T 61AjJN2+v+ea+GDipxPCevG9c9mqqC7rrqTJW3JzNjM5AiVEN4lgwo2TMZOiTS7w ia5nZhz+LVPP7nZvpKKnx0TgTr8dW+QestC+RQC4YJJEc7xJCYC7mXlJDMc9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCj7zxJkKn4zMM0+GF3o4rpfmCpgwHwYDVR0j BBgwFoAUAqkUQAB38+ITyJcigNvXdaa0wnwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTQzMzM2ZjgtZTU0Ni00NjJjLTg0MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAw MDc3RjNFMjEzQzg5NzIyODBEQkQ3NzVBNkI0QzI3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMkE5MTQ0MDAwNzdGM0UyMTNDODk3MjI4MERCRDc3NUE2QjRD MjdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvMDJBOTE0NDAwMDc3RjNFMjEzQzg5NzIyODBEQkQ3 NzVBNkI0QzI3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4jHLxjW677H4DtkBE1ZABSN6H9Z7rdtfPJ 1WBL0KTSMVKIvBPzEhdI1PQipuxxGOT9UnNIWB+meg26N/9xUqXnTaUd1PFx5L6c aXBOyOI+EnV+bSXdnpdDPBXH25MpM5UmdPEA0+EHvgHAFmhXOFIM/t80QTE5u5Eh F89a/Q5FdF8Q2Ql8njL12/udQKOzIWtYiqCWc87WsjcDiDl5pKWbGRoorkNtJBTU RmkQyBg43DbOfCpMkAuh8lvkkEfuNeAphVxW3X6/A1BlwSuSEQiGIeiBGHMBwMlu EHkSagpuw03yW+XcD/m3ZNinTnxAxkrUWxRSSTCswykhkRRLYlE= -----END CERTIFICATE-----Generated at Mon Oct 26 04:06:20 2026 by rpki-client