$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft File: CAEDA7AE02DCD4B182D96F433016148B66C99993.mft (raw, json) Hash identifier: ShwSQ5KOwV0To8svs3awXLyc9PvGo7Q7ro6GhZg9b+o= Subject key identifier: 7C:B0:FD:6C:87:7E:1D:9E:D6:AF:33:46:77:00:9B:C6:C5:6D:88:81 Authority key identifier: CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93 Certificate issuer: /CN=CAEDA7AE02DCD4B182D96F433016148B66C99993 Certificate serial: 1BFDFFB2A0F9CEF1DC0B32351F7F06FCEF16D620 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:13:29 +0000 Manifest this update: Wed 23 Sep 2026 18:08:29 +0000 Manifest next update: Thu 24 Sep 2026 18:44:29 +0000 Files and hashes: 1: CAEDA7AE02DCD4B182D96F433016148B66C99993.crl (hash: t/ZSpaxMQYx2VsRjF4oU362vLykNSUGcAscfUw/bspc=) 2: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: dGWYPEIN0OvivsS5tklp+El8kTIto83bjZq7fW6iScg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fd:ff:b2:a0:f9:ce:f1:dc:0b:32:35:1f:7f:06:fc:ef:16:d6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAEDA7AE02DCD4B182D96F433016148B66C99993 Validity Not Before: Sep 23 18:08:29 2026 GMT Not After : Sep 24 18:44:29 2026 GMT Subject: CN=7CB0FD6C877E1D9ED6AF334677009BC6C56D8881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:6f:db:ec:9e:23:9c:6d:47:ed:5a:34:91: 6d:0a:31:71:e3:e0:4a:78:bd:3a:09:ff:35:ae:64: b3:aa:39:f8:80:3f:c9:00:68:89:84:85:05:41:19: 86:48:ad:e5:d4:5d:0b:1f:bd:b2:19:c2:01:f6:dc: 5b:84:b5:c3:ac:72:66:2f:27:24:83:8c:bf:e8:75: c9:f6:98:35:19:f2:f3:8a:f4:21:a0:d0:5a:02:09: f1:5d:cb:c1:a2:47:de:f5:ac:cf:b9:1f:4c:da:e8: 15:c7:10:36:a9:a9:07:6c:c2:8a:de:74:29:77:32: 20:0d:9e:5b:60:fa:3d:f7:2b:e8:04:89:e7:d2:59: a3:2a:1e:ea:ab:0d:8e:f0:5d:5f:04:f2:08:25:79: b3:84:94:67:72:e0:70:3e:4e:13:da:02:74:d5:2d: 97:7a:92:0d:bf:4e:a1:11:29:7c:a2:e9:ba:c9:e1: 45:5f:fc:50:1b:b8:3f:07:99:10:f9:c2:25:b8:1d: 16:39:74:de:c5:d3:08:e7:94:91:e1:75:63:2c:43: bb:b7:7e:ac:d6:c7:08:e8:71:15:b3:06:d3:28:1b: fc:14:bc:70:c2:1e:04:46:bf:c7:43:c8:fe:ce:bc: d7:47:a9:9a:c1:a3:8a:60:6b:27:02:df:a9:f0:05: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B0:FD:6C:87:7E:1D:9E:D6:AF:33:46:77:00:9B:C6:C5:6D:88:81 X509v3 Authority Key Identifier: keyid:CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d3:37:48:20:45:bc:1e:b2:a6:e9:9f:81:e6:1b:7c:89:cc: db:4b:e9:3e:9a:05:25:e7:08:95:f9:71:7f:dd:d3:5f:4f:8a: 77:93:51:6a:4c:21:c8:95:96:c0:d4:77:58:b9:e5:c6:09:41: 5f:3b:a5:21:4a:25:52:53:2b:3b:32:da:27:fe:3f:56:16:76: b3:a5:d4:1d:b9:7a:53:44:ad:97:d0:0e:26:47:6f:07:c2:0d: 48:71:c2:9e:2b:61:c6:67:41:7b:99:02:4c:da:20:36:4d:96: f7:14:e2:d9:9f:cd:fd:69:d5:af:a3:4a:48:90:60:2f:92:b3: 31:eb:b4:a2:71:4c:f0:a2:93:84:65:0f:f9:1a:43:45:08:06: 75:d0:25:c3:9b:4c:e7:77:62:26:8d:c6:33:5c:bc:19:df:b4: b4:3b:d1:1e:2a:ae:aa:24:04:d4:dd:ee:4a:9b:b4:cf:61:33: fc:db:50:00:9d:c4:9b:44:df:31:0a:32:68:9b:da:fc:73:0a: 7d:06:ed:e7:bb:6b:f1:e6:fd:f3:8d:a8:62:b9:d5:7b:0c:7b: f2:54:f7:95:4d:a2:b7:f6:d5:41:55:b1:ec:b6:e1:9d:e5:2e: e3:85:dd:fe:65:d2:df:fe:74:a1:25:c8:60:37:33:92:2a:49: d4:56:b7:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/3/sqD5zvHcCzI1H38G/O8W1iAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFREE3QUUwMkRDRDRCMTgyRDk2RjQzMzAxNjE0OEI2 NkM5OTk5MzAeFw0yNjA5MjMxODA4MjlaFw0yNjA5MjQxODQ0MjlaMDMxMTAvBgNV BAMTKDdDQjBGRDZDODc3RTFEOUVENkFGMzM0Njc3MDA5QkM2QzU2RDg4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxG/b7J4jnG1H7Vo0kW0KMXHj 4Ep4vToJ/zWuZLOqOfiAP8kAaImEhQVBGYZIreXUXQsfvbIZwgH23FuEtcOscmYv JySDjL/odcn2mDUZ8vOK9CGg0FoCCfFdy8GiR971rM+5H0za6BXHEDapqQdswore dCl3MiANnltg+j33K+gEiefSWaMqHuqrDY7wXV8E8gglebOElGdy4HA+ThPaAnTV LZd6kg2/TqERKXyi6brJ4UVf/FAbuD8HmRD5wiW4HRY5dN7F0wjnlJHhdWMsQ7u3 fqzWxwjocRWzBtMoG/wUvHDCHgRGv8dDyP7OvNdHqZrBo4pgaycC36nwBV/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfLD9bId+HZ7WrzNGdwCbxsVtiIEwHwYDVR0j BBgwFoAUyu2nrgLc1LGC2W9DMBYUi2bJmZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ0NmE1NjQtNjM0Ny00MGVmLWJhZDMtNGRhYWUzMDZkNDIxLzAvQ0FFREE3QUUw MkRDRDRCMTgyRDk2RjQzMzAxNjE0OEI2NkM5OTk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUVEQTdBRTAyRENENEIxODJEOTZGNDMzMDE2MTQ4QjY2Qzk5 OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh ZDMtNGRhYWUzMDZkNDIxLzAvQ0FFREE3QUUwMkRDRDRCMTgyRDk2RjQzMzAxNjE0 OEI2NkM5OTk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHTN0ggRbwesqbpn4HmG3yJzNtL6T6aBSXn CJX5cX/d019PineTUWpMIciVlsDUd1i55cYJQV87pSFKJVJTKzsy2if+P1YWdrOl 1B25elNErZfQDiZHbwfCDUhxwp4rYcZnQXuZAkzaIDZNlvcU4tmfzf1p1a+jSkiQ YC+SszHrtKJxTPCik4RlD/kaQ0UIBnXQJcObTOd3YiaNxjNcvBnftLQ70R4qrqok BNTd7kqbtM9hM/zbUACdxJtE3zEKMmib2vxzCn0G7ee7a/Hm/fONqGK51XsMe/JU 95VNorf21UFVsey24Z3lLuOF3f5l0t/+dKElyGA3M5IqSdRWt1U= -----END CERTIFICATE-----Generated at Wed Sep 23 21:48:10 2026 by rpki-client