$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft File: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft (raw, json) Hash identifier: BjXsSuc7JKDHp2769W0FElrrlCq8Sy1p3gNbIRzqRIg= Subject key identifier: A7:07:43:E6:0E:45:F1:0D:51:0B:31:59:DB:FA:64:25:88:25:56:E0 Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 51124A70E9C375B6F78140B88DB110CDFC0F384A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:10:22 +0000 Manifest this update: Tue 12 May 2026 05:05:22 +0000 Manifest next update: Wed 13 May 2026 07:25:22 +0000 Files and hashes: 1: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: qErBEzbgejKCSlR97tYuadzXafCvSPlaXArCcdt+yEg=) 2: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: GVZGNEwcVR+6b1iz+Mf+WaWQxD3aIC0LXDFgR27cdp0=) 3: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: nUJ2UcMYUMgp2Ivw4oUIOzI0b/8YqU8NMhh0tUJGG8w=) 4: 323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (hash: ROBi78wuuDs1YynQRORSD7fsHhMgIofWSrauPO5cQ7U=) 5: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: RJ17Dz/IGt6G1WroLkK6wHoimyT4sJSrPhTKtpoVzzk=) 6: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: RC9a6LW/+eoJDdWzw8/UK2UNfYC2bIi6jAgj1aXZwfs=) 7: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: cPlZWqFm5MVvHANk5QwuMsGCvqASptrnxXG+efFGx5c=) 8: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: oX8mmJjYFncLywEKonSF0YgdnGFD+ctQ155eJaCMAUg=) 9: 323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (hash: pXHANQSmeMdKKdoCjZbWQt7xD53ERPYITVt1C9zayGI=) 10: 323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa (hash: lq8n0YPrI0ej0qKCbfOlpW4tTPmD0iFL3XzQMezYPDc=) 11: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: hVmreBSejl8Ng95zD8+VjoKGoyOFeerqH52Ryd6nA/g=) 12: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: NhSbtQsCSZOcv410mYA+T/YK4xT0UEtgj3gs2YcEa4w=) 13: 323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa (hash: wYag/KpQxcRCIm84mayvN/ce4e/42pmE6/MAHa5Gds8=) 14: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: hC0faeWGVogeaEgDmuTq2f3+pymLHliitj4mm9RD6Qs=) 15: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: kX944U5wcZ4ljeI4U/N/cddY4+l6BlmIxGXHq+0AWLc=) 16: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: /B7YofX/HHM+G+hIOgqx/c64KwEJiJwq2rpXtyQZ30I=) 17: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: 7/h2zwvZrAQS0wAHrJy9NqwWiyEipm8MyD1COAfe2nQ=) 18: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: kC/BQJWqF3hfjk7jxki1g+71uLyOIxW8KkPPgVLxjeg=) 19: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl (hash: Nmo3QOjIPaBOihgXIlpwnV8fRfJ+tL0AQw4EmdMJxXM=) 20: 323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa (hash: VeUuIEzR0KXaVdDKuIt8qmP7aqg4VDEFHLGvR21XwG0=) 21: 323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa (hash: 34GLqmPa0NzJ8OUNPh/1B0CyHBlCIeGKpKQ2WBBDdVw=) 22: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: gQ+0Ncm6ouGfqCj99PO+6ljzB+BVgCECd3yhaahocOE=) 23: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: RWX46rojpF6BQSm8l4yUodE90WBaf+wB8Y4OTAFQ4ME=) 24: 323430303a643934303a3a2f33322d3332203d3e20313336303838.roa (hash: 6v3qgdUIZjmuHWouV9dOsfbIOPcGM+FuLf4il05N+Ek=) 25: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: E4L4DC+KlZnlYuimMn7ht+nOkbQIJbr5xJR5o/xYX8Q=) 26: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: 1173I/3m7XkzbM38lD89z6ZiTiudGSDgnrOXK0sI2OM=) 27: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: g/IwKgkLM3lX7TTfydNsuy1vblZAv0bCcFnenKOiWnI=) 28: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: p9IaRw5dZMu/RqndUf94zxAMZ/T8mQiwgEQa5hTpOao=) 29: 323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa (hash: cEoIyEjinxE4GnYC0CNRuXvF+WOLWNhACz4dP/4/xaU=) 30: 323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa (hash: D+h8jX3eqkGKLtVhz2jT7gpvFEWVMRt52UNBLxkGJhs=) 31: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: 7VINGDMY1TUq927w0s5kPc4NrKgys1/WpgtYsMIyWe4=) 32: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: GH9tET4mTW+/Gjc8WplZ0ASidCPn/60O8oLirXNQIgM=) 33: 323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa (hash: oABovF7KdDdlY6+CHjePOcttfLrt7gjFGQnN04lySCo=) 34: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: iBvTknbLTgdzBBg6hpQI6nAp2/Y+ZQ/SghaasUfpG04=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:12:4a:70:e9:c3:75:b6:f7:81:40:b8:8d:b1:10:cd:fc:0f:38:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: May 12 05:05:22 2026 GMT Not After : May 13 07:25:22 2026 GMT Subject: CN=A70743E60E45F10D510B3159DBFA6425882556E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f3:5e:b7:4e:61:9b:4d:5b:93:b1:8b:de:ec: 99:f8:85:2f:3d:91:f2:a4:8e:4e:e5:48:4d:eb:bc: d8:f8:12:7a:7a:83:5c:cf:f2:78:30:29:8e:3f:ad: b7:41:69:1a:3e:98:1e:ff:82:a0:39:42:5e:17:28: d9:5b:65:85:63:22:17:8a:b3:a3:6e:3d:b2:c4:3a: fa:8b:4b:40:5d:c0:41:2a:1a:37:61:44:9a:db:06: 0e:92:b9:3b:26:ad:f3:fc:4e:90:fb:1a:7a:19:65: 1e:29:f2:51:fe:e0:b6:bc:d0:07:c1:a8:d7:1f:93: d0:70:29:fb:b8:52:cb:21:27:48:23:64:96:69:4e: 7c:e5:5d:fe:c2:b9:f7:21:69:92:0d:c2:da:eb:cd: 14:a7:43:3d:d9:2b:ad:70:2b:4e:cd:36:9c:7b:70: 63:a4:91:7e:85:cc:5c:c7:68:f7:d7:70:48:81:ca: 53:fc:49:7a:5d:aa:3e:33:32:78:75:f9:c7:2a:0d: 5f:ce:c5:87:c3:4a:df:32:a0:22:57:9e:37:69:62: b8:0b:f4:4d:55:5b:1c:3a:a9:ee:c5:93:c3:bd:c5: de:bd:cc:52:7f:5c:41:30:f4:eb:a7:6c:06:b4:9a: 10:06:51:7d:4f:d6:73:f6:f7:35:c4:d0:f6:60:f7: 91:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:07:43:E6:0E:45:F1:0D:51:0B:31:59:DB:FA:64:25:88:25:56:E0 X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d5:1c:10:ef:7d:9f:44:bf:8a:7e:fe:5a:a0:17:7c:dc:00: 7a:cd:71:7b:2f:e9:f4:7e:4f:e1:c0:25:a7:bc:9e:cb:99:1a: f7:b2:77:57:89:1a:6b:2d:98:b7:01:65:e9:41:2f:a9:5e:af: 1f:66:6d:13:ee:d9:ca:b6:65:95:9b:72:0f:fd:fe:86:7f:15: 30:86:76:fe:63:43:6d:60:16:a3:48:5f:7f:f5:f8:05:f5:6e: 2f:e3:5b:27:31:65:19:eb:50:cb:e4:4e:1c:98:2a:b3:dd:8f: 2e:b3:0d:95:d5:5f:a2:d6:35:c8:33:0b:80:59:7a:a3:66:f3: a5:56:56:7b:81:16:d3:27:7a:1b:ea:dc:83:aa:34:bf:d9:96: c4:74:c7:c6:59:35:91:3d:65:60:c9:38:c6:e2:d1:d7:fd:a6: c4:e0:86:0e:da:dd:86:37:9d:55:e6:f4:51:e7:21:cc:63:37: f0:09:7b:ca:77:ad:d6:e1:d9:72:ad:d3:20:62:09:68:16:1a: d0:b6:89:5e:7f:92:0a:8d:8e:8c:20:a2:a8:4b:89:57:66:04: 7a:f5:c0:b7:98:ed:a5:01:d2:96:17:cb:6f:f2:26:ba:72:0d: 13:3a:c5:2e:3c:67:45:ca:08:f2:bc:df:86:a4:23:82:f7:3e: f1:e1:8b:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUURJKcOnDdbb3gUC4jbEQzfwPOEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA1MTIwNTA1MjJaFw0yNjA1MTMwNzI1MjJaMDMxMTAvBgNV BAMTKEE3MDc0M0U2MEU0NUYxMEQ1MTBCMzE1OURCRkE2NDI1ODgyNTU2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm8163TmGbTVuTsYve7Jn4hS89 kfKkjk7lSE3rvNj4Enp6g1zP8ngwKY4/rbdBaRo+mB7/gqA5Ql4XKNlbZYVjIheK s6NuPbLEOvqLS0BdwEEqGjdhRJrbBg6SuTsmrfP8TpD7GnoZZR4p8lH+4La80AfB qNcfk9BwKfu4UsshJ0gjZJZpTnzlXf7CufchaZINwtrrzRSnQz3ZK61wK07NNpx7 cGOkkX6FzFzHaPfXcEiBylP8SXpdqj4zMnh1+ccqDV/OxYfDSt8yoCJXnjdpYrgL 9E1VWxw6qe7Fk8O9xd69zFJ/XEEw9OunbAa0mhAGUX1P1nP29zXE0PZg95EzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpwdD5g5F8Q1RCzFZ2/pkJYglVuAwHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmNGVjMWMtOTUzNS00Y2JmLTlj N2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlF OUI2OTNCN0NDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHVHBDvfZ9Ev4p+/lqgF3zcAHrNcXsv6fR+ T+HAJae8nsuZGveyd1eJGmstmLcBZelBL6lerx9mbRPu2cq2ZZWbcg/9/oZ/FTCG dv5jQ21gFqNIX3/1+AX1bi/jWycxZRnrUMvkThyYKrPdjy6zDZXVX6LWNcgzC4BZ eqNm86VWVnuBFtMnehvq3IOqNL/ZlsR0x8ZZNZE9ZWDJOMbi0df9psTghg7a3YY3 nVXm9FHnIcxjN/AJe8p3rdbh2XKt0yBiCWgWGtC2iV5/kgqNjowgoqhLiVdmBHr1 wLeY7aUB0pYXy2/yJrpyDRM6xS48Z0XKCPK834akI4L3PvHhi2M= -----END CERTIFICATE-----Generated at Tue May 12 22:19:36 2026 by rpki-client