$ rpki-client -vvf rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft File: CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft (raw, json) Hash identifier: mI1+t44/KifnpLeou7JXjN1caSnf25LH79TsigneGf4= Subject key identifier: 54:96:06:63:FF:CB:75:B0:30:55:E3:6D:50:D1:9F:C6:06:2E:09:37 Authority key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D Certificate issuer: /CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Certificate serial: 2C2001389F31320C90FA262D2F996C350352486F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:54:06 +0000 Manifest this update: Fri 24 Jul 2026 03:49:06 +0000 Manifest next update: Sat 25 Jul 2026 05:23:06 +0000 Files and hashes: 1: CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl (hash: 45qBP7PtzE7linSDcNUOzCQBjCWJB+ls4Ou5t8vRipQ=) 2: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: z0KglzUoHVHvxkZjD906Xmm3Uuu4IPK6qmYY5Pl0Weo=) 3: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: H8aIKDmEKvaPKBbfecYKEblnH3STGcj0MkoXv4D6fxM=) 4: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: qgoD91gK7+McaB5oJcIqhycO0nQvgEjYPEclcWIzrPE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:20:01:38:9f:31:32:0c:90:fa:26:2d:2f:99:6c:35:03:52:48:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Validity Not Before: Jul 24 03:49:06 2026 GMT Not After : Jul 25 05:23:06 2026 GMT Subject: CN=54960663FFCB75B03055E36D50D19FC6062E0937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:b8:48:04:a2:ac:08:55:05:1a:2a:17:ea: 0a:ca:79:fd:cd:80:72:36:a9:0f:24:1b:95:5a:39: 85:a7:7b:5d:60:6b:78:a0:0a:d9:8d:77:cd:22:68: f6:cc:7f:40:a2:52:09:36:a4:40:8a:e8:48:e4:fe: dd:47:e7:c2:3a:cf:7f:c8:49:13:2d:41:3d:7a:82: f1:92:f7:dd:44:9d:d9:d6:b3:60:77:20:51:95:6d: fc:7a:fa:0d:31:24:89:76:63:ad:2a:b1:40:01:dd: fa:dc:dd:0f:c6:31:df:db:cd:e1:32:98:26:79:17: 8e:51:05:e7:f2:ee:cc:b5:39:bb:bd:4a:e1:34:95: ed:49:9e:e6:03:67:40:1c:c4:c6:7d:28:d8:02:60: 47:76:85:18:cd:1a:3a:85:a3:bc:34:58:8b:42:c8: fa:2a:1b:8e:2e:4f:a1:d1:4f:52:2d:5e:f8:ee:8d: 4a:17:8e:01:11:ec:1e:eb:58:3d:99:f0:19:ad:52: 2c:72:f2:54:3c:0f:9d:7c:a3:5c:2f:6f:58:ae:11: ed:af:cd:30:e7:40:b3:e1:04:4a:b6:70:55:74:ee: 00:7b:5f:f2:50:8f:27:0c:f7:a7:14:10:cf:72:3e: f3:14:cd:d4:ce:f6:26:d1:6e:39:ca:8e:01:3a:46: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:96:06:63:FF:CB:75:B0:30:55:E3:6D:50:D1:9F:C6:06:2E:09:37 X509v3 Authority Key Identifier: keyid:CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e9:ec:54:82:53:c6:e4:98:f2:fa:6c:e4:3b:5d:2c:c4:d8: 90:c1:ec:3b:8d:51:e0:96:4f:93:f1:c4:42:eb:db:ac:2f:17: 14:2f:fa:42:90:2c:4e:61:7f:9e:74:60:10:65:5c:00:6c:91: e9:03:6e:a1:6d:1b:17:c0:47:c4:d2:21:81:5c:17:0c:7c:aa: 13:89:15:cc:1f:d8:3f:91:bc:17:16:1a:05:b8:be:6b:8c:a0: b7:37:ea:a9:9b:7f:75:32:ea:c6:41:e5:56:0a:7d:56:e7:0f: 80:e6:a2:e1:f5:99:d2:d7:74:f0:01:3e:d6:ab:9e:21:6f:fe: e3:1e:9f:dc:20:85:90:60:74:94:4c:ab:e6:56:dc:06:43:64: 79:03:61:13:c5:4c:c4:23:44:00:59:48:77:55:4b:f4:2e:2b: 2d:4c:89:77:00:fc:c5:4c:73:3d:14:c4:c4:7e:fe:65:ff:b7: 22:77:8d:91:4f:10:54:14:4e:34:00:47:0e:e1:3f:21:50:ab: 2a:4b:2d:ee:0a:d4:15:bc:03:d4:b0:c1:1e:ea:cd:fd:82:85: f3:bd:49:dc:f0:ac:a0:88:4b:ca:78:6c:21:fe:43:76:0c:4d: 7c:56:cf:35:ad:e2:3d:b4:db:5a:a9:63:97:71:bc:93:b3:76: 31:a4:e3:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCABOJ8xMgyQ+iYtL5lsNQNSSG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUw Q0ZCNjgzRDAeFw0yNjA3MjQwMzQ5MDZaFw0yNjA3MjUwNTIzMDZaMDMxMTAvBgNV BAMTKDU0OTYwNjYzRkZDQjc1QjAzMDU1RTM2RDUwRDE5RkM2MDYyRTA5MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQbhIBKKsCFUFGioX6grKef3N gHI2qQ8kG5VaOYWne11ga3igCtmNd80iaPbMf0CiUgk2pECK6Ejk/t1H58I6z3/I SRMtQT16gvGS991EndnWs2B3IFGVbfx6+g0xJIl2Y60qsUAB3frc3Q/GMd/bzeEy mCZ5F45RBefy7sy1Obu9SuE0le1JnuYDZ0AcxMZ9KNgCYEd2hRjNGjqFo7w0WItC yPoqG44uT6HRT1ItXvjujUoXjgER7B7rWD2Z8BmtUixy8lQ8D518o1wvb1iuEe2v zTDnQLPhBEq2cFV07gB7X/JQjycM96cUEM9yPvMUzdTO9ibRbjnKjgE6RkwTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVJYGY//LdbAwVeNtUNGfxgYuCTcwHwYDVR0j BBgwFoAUyuOV60e7TleZDfKD3XuVlQz7aD0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZmM2FlOTctZjUyZS00OTc3LTkwZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0 N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUwQ0ZCNjgzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUUzOTVFQjQ3QkI0RTU3OTkwREYyODNERDdCOTU5NTBDRkI2 ODNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1 OTUwQ0ZCNjgzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3p7FSCU8bkmPL6bOQ7XSzE2JDB7DuNUeCW T5PxxELr26wvFxQv+kKQLE5hf550YBBlXABskekDbqFtGxfAR8TSIYFcFwx8qhOJ Fcwf2D+RvBcWGgW4vmuMoLc36qmbf3Uy6sZB5VYKfVbnD4DmouH1mdLXdPABPtar niFv/uMen9wghZBgdJRMq+ZW3AZDZHkDYRPFTMQjRABZSHdVS/QuKy1MiXcA/MVM cz0UxMR+/mX/tyJ3jZFPEFQUTjQARw7hPyFQqypLLe4K1BW8A9SwwR7qzf2ChfO9 SdzwrKCIS8p4bCH+Q3YMTXxWzzWt4j2021qpY5dxvJOzdjGk41A= -----END CERTIFICATE-----Generated at Fri Jul 24 20:22:04 2026 by rpki-client