$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft File: CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft (raw, json) Hash identifier: FeEF4eYovbLnO7EbL3UWR5wd5WBnHQQvLPhFmdxURLU= Subject key identifier: 96:B7:D7:9D:91:45:55:B2:8C:1E:66:64:BF:BA:13:A1:F9:D6:82:64 Authority key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D Certificate issuer: /CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Certificate serial: 3D4AB57327168A92677708276A3C93BC84436AB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft Manifest number: C7 Signing time: Mon 28 Sep 2026 10:38:04 +0000 Manifest this update: Mon 28 Sep 2026 10:33:04 +0000 Manifest next update: Tue 29 Sep 2026 11:29:04 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: H8aIKDmEKvaPKBbfecYKEblnH3STGcj0MkoXv4D6fxM=) 2: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: z0KglzUoHVHvxkZjD906Xmm3Uuu4IPK6qmYY5Pl0Weo=) 3: CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl (hash: I4L6dteDAx1GlU2R+jE+R2kiy/0aHpdN990/ju7+cd8=) 4: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: qgoD91gK7+McaB5oJcIqhycO0nQvgEjYPEclcWIzrPE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 11:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4a:b5:73:27:16:8a:92:67:77:08:27:6a:3c:93:bc:84:43:6a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Validity Not Before: Sep 28 10:33:04 2026 GMT Not After : Sep 29 11:29:04 2026 GMT Subject: CN=96B7D79D914555B28C1E6664BFBA13A1F9D68264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:c6:f6:2a:78:91:23:8b:05:42:4e:16:55: 88:9f:5d:bc:90:3a:cd:8c:46:33:86:55:32:b4:34: 25:06:b0:f2:c4:b6:f1:aa:e6:73:4d:f9:86:99:80: 14:ee:0c:d3:55:95:cf:76:a3:f5:3d:1a:dd:66:8d: b4:08:5f:f9:0b:9c:16:be:92:a0:58:94:af:56:8f: e7:9a:cd:c7:b4:76:45:38:cd:e3:17:c3:64:26:6e: ef:6a:57:67:5e:30:78:d0:2d:1a:76:d7:68:2d:58: fc:92:43:38:01:cb:c9:19:ad:25:62:b9:12:07:27: da:8d:65:80:50:cf:7e:6c:67:c1:c8:c7:8d:af:38: f3:02:b7:82:0f:d6:28:66:7a:21:e9:0c:5c:a6:29: 49:9d:09:93:77:f8:c8:68:8a:31:e5:eb:c9:85:06: ec:a6:9a:89:79:60:fe:09:17:bc:4b:75:89:dc:b2: 07:54:9e:86:52:f1:05:fb:5b:15:82:69:de:02:9f: 2a:46:79:62:3e:63:74:6f:1e:18:09:df:12:6f:61: 25:cc:89:2c:a9:d0:28:d2:9c:79:21:8f:a1:46:ab: 56:70:38:2b:45:bc:34:b1:12:d3:b9:e7:bf:a4:d6: 28:9a:d7:ee:94:77:cc:de:3c:a0:ac:d6:d3:46:69: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B7:D7:9D:91:45:55:B2:8C:1E:66:64:BF:BA:13:A1:F9:D6:82:64 X509v3 Authority Key Identifier: keyid:CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a9:1d:28:4b:24:12:09:7d:11:56:c9:2e:c0:f9:91:14:33: 37:f8:85:d8:26:58:78:1a:35:67:59:5a:aa:99:f0:c7:be:24: 86:b3:89:75:2f:b1:08:9e:86:6f:cd:bf:23:b4:d1:6b:9f:6a: 9f:c5:98:75:e8:29:0a:88:56:d1:80:c5:89:e1:49:88:d4:08: 0c:b5:d1:8a:c2:40:25:84:2e:99:f0:8a:9a:22:99:1b:03:01: 66:d0:df:3d:38:41:2a:4a:e1:ba:70:53:31:ce:2a:ac:d3:dd: 6a:d5:81:99:77:18:dc:39:d3:46:5e:f9:98:7d:87:4f:91:9d: 93:6a:d9:d8:83:c4:f6:c3:1a:d9:e6:fd:fb:7c:08:98:27:ec: 2b:2f:20:78:be:1a:71:dd:93:bb:52:66:95:33:0c:cd:f5:f1: d9:85:a9:cb:c7:db:d6:a0:54:58:b3:7e:e2:ea:ab:41:e4:98: 8f:a7:98:18:2f:98:8d:55:cf:b9:d8:11:c6:21:d3:ef:ed:09: 62:78:8d:59:19:6f:0b:3a:76:d2:42:b0:2d:ce:b7:de:0f:d9: 53:68:48:eb:a3:4a:a1:56:30:ef:33:83:80:67:eb:f9:65:2c: c5:e8:ed:3a:02:c9:62:6b:1a:7d:f1:4b:68:89:25:61:f8:0b: b6:b1:85:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUq1cycWipJndwgnajyTvIRDarkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUw Q0ZCNjgzRDAeFw0yNjA5MjgxMDMzMDRaFw0yNjA5MjkxMTI5MDRaMDMxMTAvBgNV BAMTKDk2QjdENzlEOTE0NTU1QjI4QzFFNjY2NEJGQkExM0ExRjlENjgyNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxsb2KniRI4sFQk4WVYifXbyQ Os2MRjOGVTK0NCUGsPLEtvGq5nNN+YaZgBTuDNNVlc92o/U9Gt1mjbQIX/kLnBa+ kqBYlK9Wj+eazce0dkU4zeMXw2Qmbu9qV2deMHjQLRp212gtWPySQzgBy8kZrSVi uRIHJ9qNZYBQz35sZ8HIx42vOPMCt4IP1ihmeiHpDFymKUmdCZN3+MhoijHl68mF Buymmol5YP4JF7xLdYncsgdUnoZS8QX7WxWCad4CnypGeWI+Y3RvHhgJ3xJvYSXM iSyp0CjSnHkhj6FGq1ZwOCtFvDSxEtO557+k1iia1+6Ud8zePKCs1tNGaa2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlrfXnZFFVbKMHmZkv7oTofnWgmQwHwYDVR0j BBgwFoAUyuOV60e7TleZDfKD3XuVlQz7aD0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZmM2FlOTctZjUyZS00OTc3LTkwZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0 N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUwQ0ZCNjgzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUUzOTVFQjQ3QkI0RTU3OTkwREYyODNERDdCOTU5NTBDRkI2 ODNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1 OTUwQ0ZCNjgzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGpHShLJBIJfRFWyS7A+ZEUMzf4hdgmWHga NWdZWqqZ8Me+JIaziXUvsQiehm/NvyO00Wufap/FmHXoKQqIVtGAxYnhSYjUCAy1 0YrCQCWELpnwipoimRsDAWbQ3z04QSpK4bpwUzHOKqzT3WrVgZl3GNw500Ze+Zh9 h0+RnZNq2diDxPbDGtnm/ft8CJgn7CsvIHi+GnHdk7tSZpUzDM318dmFqcvH29ag VFizfuLqq0HkmI+nmBgvmI1Vz7nYEcYh0+/tCWJ4jVkZbws6dtJCsC3Ot94P2VNo SOujSqFWMO8zg4Bn6/llLMXo7ToCyWJrGn3xS2iJJWH4C7axhUk= -----END CERTIFICATE-----Generated at Mon Sep 28 21:45:43 2026 by rpki-client