$ rpki-client -vvf rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft File: CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft (raw, json) Hash identifier: y8cPUEjm9xZ+OWbvZ2x1sndwWVadQJNI6SvpKxzvdYk= Subject key identifier: AE:9D:B0:62:16:BD:2B:CF:4D:02:02:A8:D6:D2:8B:69:F9:51:B7:F9 Authority key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D Certificate issuer: /CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Certificate serial: 5D680D790FC572FD6DA416D06F2954964938CC13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft Manifest number: 10 Signing time: Wed 13 May 2026 08:56:08 +0000 Manifest this update: Wed 13 May 2026 08:51:08 +0000 Manifest next update: Thu 14 May 2026 12:32:08 +0000 Files and hashes: 1: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: z0KglzUoHVHvxkZjD906Xmm3Uuu4IPK6qmYY5Pl0Weo=) 2: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: qgoD91gK7+McaB5oJcIqhycO0nQvgEjYPEclcWIzrPE=) 3: CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl (hash: K6X/9M4qxpidzGAq52rwOWXQ8j8tkPjqG/MEkrj/gVU=) 4: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: H8aIKDmEKvaPKBbfecYKEblnH3STGcj0MkoXv4D6fxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:68:0d:79:0f:c5:72:fd:6d:a4:16:d0:6f:29:54:96:49:38:cc:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Validity Not Before: May 13 08:51:08 2026 GMT Not After : May 14 12:32:08 2026 GMT Subject: CN=AE9DB06216BD2BCF4D0202A8D6D28B69F951B7F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:eb:40:0a:32:f5:e0:7d:53:86:8b:32:bd: 6f:25:92:4c:a1:d4:55:37:e6:18:2c:48:cf:01:72: e9:35:e4:4e:63:0f:ac:7b:5a:b2:25:a4:14:17:4b: 32:58:24:d7:35:9e:4f:36:5f:29:98:45:de:a1:99: 59:22:ab:22:d3:d6:33:cb:29:87:a7:28:46:75:62: 27:2d:86:01:e7:17:e4:3e:99:14:57:13:b4:6d:87: 4b:e3:5e:dd:49:8d:6b:7b:a5:34:17:a1:50:a8:bd: ef:3b:7c:3e:dd:49:8e:7a:24:87:9a:df:de:28:b5: 89:02:1c:ff:35:09:56:05:e6:cb:df:58:fa:57:41: 8b:b1:d4:ee:f5:3a:e2:29:9e:0d:b5:5e:eb:8f:b7: 87:13:62:81:36:f1:5d:39:67:90:da:3b:7c:4a:d5: 70:9c:6e:61:2a:27:70:26:9b:9d:70:01:ca:fb:00: 44:b2:a7:02:5e:8a:73:3f:4b:e8:8d:86:4b:f0:e8: f9:26:d4:1e:0d:3e:84:7e:c1:df:bd:76:51:eb:86: e6:2e:2b:a3:80:9a:74:58:c5:ed:bb:2f:5e:b1:31: 14:46:bb:21:a8:61:9e:a6:5e:b5:20:8a:76:9e:79: 8a:b6:0c:c0:8e:48:ad:e7:26:23:21:a5:a2:44:62: d2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9D:B0:62:16:BD:2B:CF:4D:02:02:A8:D6:D2:8B:69:F9:51:B7:F9 X509v3 Authority Key Identifier: keyid:CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:38:b3:b4:97:77:4c:e1:81:be:7f:a8:74:b4:d7:35:61:58: 18:1a:0e:3f:13:12:aa:bf:ba:ed:5c:fb:b5:04:68:b2:a9:f4: f2:b0:78:87:49:32:cf:b3:e7:75:a2:c1:18:93:69:b9:93:92: c1:49:89:29:1c:a3:56:df:dc:5c:0f:39:fd:7b:f6:06:15:76: ef:7e:31:88:cf:e7:9b:3d:eb:73:72:7e:ab:1b:58:3c:1c:0f: 4f:ec:57:fc:2c:03:0d:ff:a3:f3:57:ae:2c:f5:15:3c:37:17: 08:c9:f2:9b:f4:10:b0:49:5b:80:e8:c9:f8:38:de:15:41:e3: d4:b0:e6:81:1b:23:5a:02:13:60:ce:48:8c:56:d7:86:3d:0c: 42:f1:21:f9:17:10:dd:f2:ed:26:b8:b6:bb:98:6a:0f:9b:27: e4:a3:58:4b:70:7b:9b:f0:cb:53:aa:a2:ce:1f:5b:ad:9c:42: 2e:6c:e7:e0:28:62:fa:7a:6d:a4:be:cc:1e:9f:24:dd:94:12: 84:b5:18:59:3a:79:8e:06:68:a2:6a:d9:49:d2:77:c1:95:49: 08:84:eb:a7:3d:b5:27:1e:ed:07:49:a5:91:2d:70:4e:33:4c: 9a:4f:51:0a:08:69:fd:53:44:19:89:61:21:0c:a7:1e:b7:04: cd:2a:41:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWgNeQ/Fcv1tpBbQbylUlkk4zBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUw Q0ZCNjgzRDAeFw0yNjA1MTMwODUxMDhaFw0yNjA1MTQxMjMyMDhaMDMxMTAvBgNV BAMTKEFFOURCMDYyMTZCRDJCQ0Y0RDAyMDJBOEQ2RDI4QjY5Rjk1MUI3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yutACjL14H1ThosyvW8lkkyh 1FU35hgsSM8Bcuk15E5jD6x7WrIlpBQXSzJYJNc1nk82XymYRd6hmVkiqyLT1jPL KYenKEZ1YicthgHnF+Q+mRRXE7Rth0vjXt1JjWt7pTQXoVCove87fD7dSY56JIea 394otYkCHP81CVYF5svfWPpXQYux1O71OuIpng21XuuPt4cTYoE28V05Z5DaO3xK 1XCcbmEqJ3Amm51wAcr7AESypwJeinM/S+iNhkvw6Pkm1B4NPoR+wd+9dlHrhuYu K6OAmnRYxe27L16xMRRGuyGoYZ6mXrUginaeeYq2DMCOSK3nJiMhpaJEYtJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrp2wYha9K89NAgKo1tKLaflRt/kwHwYDVR0j BBgwFoAUyuOV60e7TleZDfKD3XuVlQz7aD0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZmM2FlOTctZjUyZS00OTc3LTkwZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0 N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUwQ0ZCNjgzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUUzOTVFQjQ3QkI0RTU3OTkwREYyODNERDdCOTU5NTBDRkI2 ODNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1 OTUwQ0ZCNjgzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE44s7SXd0zhgb5/qHS01zVhWBgaDj8TEqq/ uu1c+7UEaLKp9PKweIdJMs+z53WiwRiTabmTksFJiSkco1bf3FwPOf179gYVdu9+ MYjP55s963NyfqsbWDwcD0/sV/wsAw3/o/NXriz1FTw3FwjJ8pv0ELBJW4Doyfg4 3hVB49Sw5oEbI1oCE2DOSIxW14Y9DELxIfkXEN3y7Sa4truYag+bJ+SjWEtwe5vw y1Oqos4fW62cQi5s5+AoYvp6baS+zB6fJN2UEoS1GFk6eY4GaKJq2UnSd8GVSQiE 66c9tSce7QdJpZEtcE4zTJpPUQoIaf1TRBmJYSEMpx63BM0qQfM= -----END CERTIFICATE-----Generated at Wed May 13 13:05:29 2026 by rpki-client