$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft File: CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft (raw, json) Hash identifier: nnJcsWASllw4UxMV7SnTwc4fse6hGUxBXsg0+0JvNaU= Subject key identifier: 15:D8:56:27:BC:82:1D:F0:27:7D:46:6B:BE:40:82:0E:EE:3E:A9:0B Authority key identifier: CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 Certificate issuer: /CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Certificate serial: 627BAAF289CA6B07C7E825367390DD35E8D513E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 08:15:46 +0000 Manifest this update: Thu 24 Sep 2026 08:10:46 +0000 Manifest next update: Fri 25 Sep 2026 08:57:46 +0000 Files and hashes: 1: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: i1H+ReQBHn9JCYQi5CWfxN7OhwjtzW41V0M/jyxFA08=) 2: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: mWR29teFlpS2QFv6Te8ENnUPdsf5nVL4GnQAxRUQqGI=) 3: CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl (hash: ujdIu9viDGlzaSKoKJOSCxvz7yO6PjRmWZsQp1EnmZk=) 4: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: CHKJIH+fJABznZsBmBVESLsgPUznf5glQmQTYMsLlJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7b:aa:f2:89:ca:6b:07:c7:e8:25:36:73:90:dd:35:e8:d5:13:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Validity Not Before: Sep 24 08:10:46 2026 GMT Not After : Sep 25 08:57:46 2026 GMT Subject: CN=15D85627BC821DF0277D466BBE40820EEE3EA90B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:90:b4:98:54:e3:57:82:2e:8e:6e:ab:a1: 2e:a6:23:59:ea:44:f2:67:d1:01:f9:2d:80:f7:6d: d9:64:78:3c:22:13:10:56:81:47:53:96:d9:4e:e0: 7b:dd:19:cc:39:ef:e7:1f:0c:ef:f1:1a:40:a2:d0: 3d:90:0d:1a:b8:cc:bb:82:1e:c2:95:3a:95:fb:99: 6f:f6:33:84:fd:40:02:85:66:c6:21:25:27:08:b1: a1:04:eb:16:b3:a3:a2:61:30:5c:fb:6a:94:5a:a6: cd:69:a4:d4:a8:29:8c:f8:d3:96:b4:a7:26:d1:b8: b2:f2:6e:fc:5f:c6:9d:69:b6:bc:4e:b9:40:c5:5b: ff:42:30:65:0d:a6:e1:3f:37:72:47:00:54:29:2c: 0b:ae:73:56:e5:31:15:d9:4f:ed:20:10:bc:7d:c5: 13:3c:b3:5f:f1:9d:53:e8:11:db:03:0b:95:88:90: 9b:2b:18:99:15:06:0f:a5:60:d0:a6:7f:81:0d:52: 77:32:e9:fb:94:94:30:8e:b6:8c:21:90:99:28:10: cc:d1:00:7a:b8:cd:e8:57:aa:06:43:1b:20:b7:0f: e0:03:d8:e5:f4:36:12:d3:e4:48:b0:98:16:45:02: e4:20:34:b0:58:de:e3:55:98:6d:25:1c:02:27:46: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D8:56:27:BC:82:1D:F0:27:7D:46:6B:BE:40:82:0E:EE:3E:A9:0B X509v3 Authority Key Identifier: keyid:CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:20:f9:06:af:60:08:07:d5:2f:0d:b2:b6:2c:b2:d7:de:b3: cf:8b:ec:1b:3d:7c:02:4d:0f:32:b3:e3:23:d5:d4:d8:ac:3f: e8:b7:24:29:c6:f7:9d:8c:e5:41:05:e3:e8:7e:f2:cc:1c:99: a5:9b:ca:c9:95:6b:eb:cd:b1:b4:f6:43:1d:9f:83:28:35:d5: d8:d2:ef:1a:ca:49:6a:8d:f7:38:1f:4f:6e:f7:05:ac:b1:23: cc:4e:3d:e5:f6:e4:ce:6c:d7:4f:e4:c9:1b:e7:a0:f3:ca:45: 85:66:7b:f3:5a:2c:a1:38:7e:16:59:92:86:85:01:b5:ba:2f: 3f:fc:f9:eb:0a:0e:18:40:a3:19:11:20:d5:19:49:cd:fb:f4: 2e:19:7f:5e:c8:ba:2e:89:37:55:35:16:03:0c:b2:e8:0b:cf: a7:7c:9e:f3:d3:b6:94:7e:f3:d6:3a:bb:8f:45:75:29:83:c9: b7:60:b3:45:bd:a4:37:fc:77:d5:b4:45:4d:91:10:cf:24:a8: 80:4b:eb:6b:7f:84:68:58:47:1b:50:28:50:48:9a:34:59:71: a3:7b:12:94:e0:f1:a9:88:f9:5f:8b:a9:3e:5c:7e:f6:ac:11: 30:d3:4b:e4:6d:80:2a:42:48:3f:33:a4:43:f8:2e:d4:ba:33: 23:ed:c9:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnuq8onKawfH6CU2c5DdNejVE+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2NjRG QzIwRUFFMDAeFw0yNjA5MjQwODEwNDZaFw0yNjA5MjUwODU3NDZaMDMxMTAvBgNV BAMTKDE1RDg1NjI3QkM4MjFERjAyNzdENDY2QkJFNDA4MjBFRUUzRUE5MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvaJC0mFTjV4Iujm6roS6mI1nq RPJn0QH5LYD3bdlkeDwiExBWgUdTltlO4HvdGcw57+cfDO/xGkCi0D2QDRq4zLuC HsKVOpX7mW/2M4T9QAKFZsYhJScIsaEE6xazo6JhMFz7apRaps1ppNSoKYz405a0 pybRuLLybvxfxp1ptrxOuUDFW/9CMGUNpuE/N3JHAFQpLAuuc1blMRXZT+0gELx9 xRM8s1/xnVPoEdsDC5WIkJsrGJkVBg+lYNCmf4ENUncy6fuUlDCOtowhkJkoEMzR AHq4zehXqgZDGyC3D+AD2OX0NhLT5EiwmBZFAuQgNLBY3uNVmG0lHAInRjdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFdhWJ7yCHfAnfUZrvkCCDu4+qQswHwYDVR0j BBgwFoAUyuk5xa2pAVhOkAcft+UGZPwg6uAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzlmM2M3NjktY2ZiMS00MjA2LTlmNTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVB REE5MDE1ODRFOTAwNzFGQjdFNTA2NjRGQzIwRUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUU5MzlDNUFEQTkwMTU4NEU5MDA3MUZCN0U1MDY2NEZDMjBF QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2 NjRGQzIwRUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcg+QavYAgH1S8NsrYsstfes8+L7Bs9fAJN DzKz4yPV1NisP+i3JCnG952M5UEF4+h+8swcmaWbysmVa+vNsbT2Qx2fgyg11djS 7xrKSWqN9zgfT273BayxI8xOPeX25M5s10/kyRvnoPPKRYVme/NaLKE4fhZZkoaF AbW6Lz/8+esKDhhAoxkRINUZSc379C4Zf17Iui6JN1U1FgMMsugLz6d8nvPTtpR+ 89Y6u49FdSmDybdgs0W9pDf8d9W0RU2REM8kqIBL62t/hGhYRxtQKFBImjRZcaN7 EpTg8amI+V+LqT5cfvasETDTS+RtgCpCSD8zpEP4LtS6MyPtyVI= -----END CERTIFICATE-----Generated at Thu Sep 24 19:11:50 2026 by rpki-client