$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft File: CAEDA7AE02DCD4B182D96F433016148B66C99993.mft (raw, json) Hash identifier: cUNFWoSmEbmIcMytsats5FfgiHC8w805mDwjN46UtwI= Subject key identifier: CE:B5:BA:8C:38:08:7F:26:53:63:2F:20:C0:48:DC:AE:EA:D9:54:CB Authority key identifier: CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93 Certificate issuer: /CN=CAEDA7AE02DCD4B182D96F433016148B66C99993 Certificate serial: 5DE8E217A585A03839CD38B9A3B844B5C3DBA2D0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:38:40 +0000 Manifest this update: Tue 12 May 2026 13:33:40 +0000 Manifest next update: Wed 13 May 2026 17:37:40 +0000 Files and hashes: 1: CAEDA7AE02DCD4B182D96F433016148B66C99993.crl (hash: DxwYUgLXf2zb/JRnULH7R65TOKGzvcwKERLFs2e1hd8=) 2: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: dGWYPEIN0OvivsS5tklp+El8kTIto83bjZq7fW6iScg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e8:e2:17:a5:85:a0:38:39:cd:38:b9:a3:b8:44:b5:c3:db:a2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAEDA7AE02DCD4B182D96F433016148B66C99993 Validity Not Before: May 12 13:33:40 2026 GMT Not After : May 13 17:37:40 2026 GMT Subject: CN=CEB5BA8C38087F2653632F20C048DCAEEAD954CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7b:9c:cf:d1:1d:b9:7d:4d:87:a2:64:34:2f: 5c:0a:44:6a:a3:a6:21:84:4f:67:b4:91:1e:2d:f9: 13:36:06:80:58:72:ae:fb:5f:04:e9:5d:22:29:c4: 7c:94:df:49:53:a2:f0:e2:0d:22:2c:4e:31:6b:1c: c9:d3:b5:54:7f:69:df:98:6c:72:97:25:e4:bc:ff: 0b:e6:00:d9:92:a4:fd:23:aa:7e:d5:d9:fb:e6:c5: 60:4c:32:1a:5f:74:ce:1a:21:96:b6:45:c5:d8:ea: 9e:60:59:27:86:4d:71:80:bf:43:bb:4c:4e:eb:ac: 67:ad:ec:0c:12:24:ee:95:b2:cd:08:c4:22:a9:6f: 88:6b:a7:52:50:be:13:24:29:6b:73:dc:b9:92:c2: ba:84:c8:ee:74:ec:a3:f3:fc:bd:e6:d8:c8:4a:61: 2e:4b:9b:8d:1f:8c:e9:d2:b5:4f:7c:19:f0:28:df: d2:14:72:08:29:5c:f2:8b:33:ba:e2:2a:9c:37:98: fc:12:06:d3:fb:bb:ec:56:c7:f7:22:bf:fc:46:ca: 21:ac:27:71:24:aa:9c:09:cd:b5:aa:b0:47:57:23: 84:ec:91:29:c2:06:60:ca:f9:43:89:72:da:30:9d: 72:f7:e3:a9:46:b6:e7:9b:fc:25:8b:23:42:ee:13: 01:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B5:BA:8C:38:08:7F:26:53:63:2F:20:C0:48:DC:AE:EA:D9:54:CB X509v3 Authority Key Identifier: keyid:CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e9:44:d6:6b:cd:77:89:b5:d6:d1:35:6c:c1:a8:9a:3e:ea: 9e:56:e6:97:d5:d0:69:5c:53:68:10:ff:68:d0:95:4d:8d:47: 2a:7c:8c:be:36:1c:5c:ce:45:86:a5:3f:d1:8e:72:49:38:33: ce:34:e2:99:47:82:3f:39:d8:42:3d:e4:34:47:d6:c0:5a:90: e6:8e:fa:ac:8a:a4:7a:c0:62:59:4e:0e:3c:31:1d:0f:2a:fc: 8a:6f:d2:cc:82:a9:53:9a:42:e2:0d:36:2e:1a:b2:2b:3d:19: 35:c4:1e:ff:32:e0:68:db:d6:cb:7c:a2:56:71:74:70:0d:86: 1e:52:d9:78:f9:cc:d3:69:eb:80:bb:7e:b4:94:c9:11:fc:ff: 27:56:a3:e3:40:37:f7:71:fb:be:9e:34:07:d4:0a:20:0a:61: e1:53:a3:30:4f:44:8b:77:46:a4:87:27:12:f1:68:e4:c0:0f: eb:bf:8a:8f:d0:30:fe:8b:a4:c1:2a:ac:db:df:d5:46:e0:6f: a9:da:6b:07:d2:60:a6:ef:ae:a6:a4:4c:88:44:21:9e:47:d6: c8:02:99:ad:b0:04:90:63:b3:bd:bc:69:51:11:dd:04:11:40: 07:11:1a:e9:10:f5:17:70:a8:5a:3f:53:a8:24:e8:f4:55:3a: e3:6f:28:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXejiF6WFoDg5zTi5o7hEtcPbotAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFREE3QUUwMkRDRDRCMTgyRDk2RjQzMzAxNjE0OEI2 NkM5OTk5MzAeFw0yNjA1MTIxMzMzNDBaFw0yNjA1MTMxNzM3NDBaMDMxMTAvBgNV BAMTKENFQjVCQThDMzgwODdGMjY1MzYzMkYyMEMwNDhEQ0FFRUFEOTU0Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCke5zP0R25fU2HomQ0L1wKRGqj piGET2e0kR4t+RM2BoBYcq77XwTpXSIpxHyU30lTovDiDSIsTjFrHMnTtVR/ad+Y bHKXJeS8/wvmANmSpP0jqn7V2fvmxWBMMhpfdM4aIZa2RcXY6p5gWSeGTXGAv0O7 TE7rrGet7AwSJO6Vss0IxCKpb4hrp1JQvhMkKWtz3LmSwrqEyO507KPz/L3m2MhK YS5Lm40fjOnStU98GfAo39IUcggpXPKLM7riKpw3mPwSBtP7u+xWx/civ/xGyiGs J3EkqpwJzbWqsEdXI4TskSnCBmDK+UOJctownXL346lGtueb/CWLI0LuEwHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzrW6jDgIfyZTYy8gwEjcrurZVMswHwYDVR0j BBgwFoAUyu2nrgLc1LGC2W9DMBYUi2bJmZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ0NmE1NjQtNjM0Ny00MGVmLWJhZDMtNGRhYWUzMDZkNDIxLzAvQ0FFREE3QUUw MkRDRDRCMTgyRDk2RjQzMzAxNjE0OEI2NkM5OTk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUVEQTdBRTAyRENENEIxODJEOTZGNDMzMDE2MTQ4QjY2Qzk5 OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh ZDMtNGRhYWUzMDZkNDIxLzAvQ0FFREE3QUUwMkRDRDRCMTgyRDk2RjQzMzAxNjE0 OEI2NkM5OTk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/pRNZrzXeJtdbRNWzBqJo+6p5W5pfV0Glc U2gQ/2jQlU2NRyp8jL42HFzORYalP9GOckk4M8404plHgj852EI95DRH1sBakOaO +qyKpHrAYllODjwxHQ8q/Ipv0syCqVOaQuINNi4asis9GTXEHv8y4Gjb1st8olZx dHANhh5S2Xj5zNNp64C7frSUyRH8/ydWo+NAN/dx+76eNAfUCiAKYeFTozBPRIt3 RqSHJxLxaOTAD+u/io/QMP6LpMEqrNvf1Ubgb6naawfSYKbvrqakTIhEIZ5H1sgC ma2wBJBjs728aVER3QQRQAcRGukQ9RdwqFo/U6gk6PRVOuNvKA0= -----END CERTIFICATE-----Generated at Tue May 12 23:45:48 2026 by rpki-client