$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft File: CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft (raw, json) Hash identifier: 4kJcvNMFIdW53pTzI/iOmiv2Ly36pKgsMnWxDtg+BYw= Subject key identifier: 46:FE:95:A9:55:04:69:09:73:F3:B4:14:87:F6:AB:63:65:C7:FD:EE Authority key identifier: CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 Certificate issuer: /CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Certificate serial: 56C17C24343B9C7295494C3A4E63759CD2A87893 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:33:35 +0000 Manifest this update: Fri 24 Jul 2026 03:28:35 +0000 Manifest next update: Sat 25 Jul 2026 06:49:35 +0000 Files and hashes: 1: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: mWR29teFlpS2QFv6Te8ENnUPdsf5nVL4GnQAxRUQqGI=) 2: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: CHKJIH+fJABznZsBmBVESLsgPUznf5glQmQTYMsLlJ0=) 3: CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl (hash: J1EYvDUswMeh7lIc3uRdfGGs+WQIfMYofzmz7YOYjKw=) 4: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: i1H+ReQBHn9JCYQi5CWfxN7OhwjtzW41V0M/jyxFA08=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c1:7c:24:34:3b:9c:72:95:49:4c:3a:4e:63:75:9c:d2:a8:78:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Validity Not Before: Jul 24 03:28:35 2026 GMT Not After : Jul 25 06:49:35 2026 GMT Subject: CN=46FE95A95504690973F3B41487F6AB6365C7FDEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:91:b9:72:3a:ed:13:f2:c4:15:be:68:9a: 55:09:70:50:5b:03:18:d3:ca:90:d2:db:fe:f5:96: 3b:af:f7:45:b2:2f:f3:ea:23:49:a6:07:7e:fe:85: 7d:bd:d6:83:c8:19:4b:76:c0:0b:2b:99:37:89:d3: ab:e8:bf:38:e9:27:1e:38:e7:b7:a2:93:8f:71:eb: 74:50:e9:c1:65:40:86:a2:12:dd:8f:32:a9:fd:9d: ab:8b:15:18:39:91:e0:cc:73:e1:48:36:79:f9:56: 77:59:9f:c9:c2:79:27:0a:7e:d4:96:cd:19:d9:82: a5:58:c0:b3:70:5b:c9:f3:9a:54:6a:70:ce:c2:7a: 10:23:d0:3f:75:26:1a:d6:93:a1:72:27:62:a5:8e: ec:5b:50:24:77:12:76:77:e4:e7:b6:ec:5d:a9:f5: 1b:45:05:3d:53:61:c4:b0:91:04:07:20:91:dc:bb: ba:9c:83:47:38:f7:72:42:cb:21:56:71:90:ae:f9: 90:05:5e:6c:b0:29:e8:74:2a:d7:ec:37:a9:5a:fd: 8b:7d:ae:6b:bc:3c:06:46:e2:0b:4c:f6:ed:22:a9: 2a:7a:31:b2:d9:2e:cc:b1:d1:dd:2c:08:7d:a6:2c: 8f:5d:f1:2c:bc:97:eb:3b:e7:d9:9f:d2:e0:5c:3a: 8f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FE:95:A9:55:04:69:09:73:F3:B4:14:87:F6:AB:63:65:C7:FD:EE X509v3 Authority Key Identifier: keyid:CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:85:94:9f:94:7d:9d:55:8d:44:50:ee:b4:61:0b:45:fb:73: c7:b9:8e:f3:31:92:0f:42:23:bf:91:62:b6:77:f4:d5:12:99: 6f:d2:b5:5c:15:4c:9b:b0:c2:20:93:18:cc:d6:cf:a2:ac:5d: b8:52:71:90:4a:ae:ce:2b:e9:4c:1e:6d:02:4a:8e:71:29:97: 33:b6:ca:35:ed:a0:32:72:4d:8e:b9:eb:65:40:fa:f1:e3:2d: f7:5d:63:e9:40:39:76:64:d5:5a:b8:cf:04:e6:56:75:7e:68: f6:3e:94:d9:10:99:0a:43:7b:84:48:45:f3:78:c9:43:71:08: 39:14:f1:f2:c1:4b:d8:e8:42:7c:3a:9b:a9:36:fd:b6:d9:56: 03:0b:bb:47:53:bb:b7:7a:ba:14:36:98:04:37:50:9f:a6:ca: 21:79:40:78:b0:41:00:2f:0c:28:5e:c1:ed:67:34:f8:6c:b9: a7:8a:23:97:29:2d:28:00:67:84:bd:8b:d6:e0:70:9b:da:84: 7a:ee:fb:af:1f:d3:55:52:df:d3:75:2b:d1:b7:5a:1a:98:c1: ca:b3:a2:17:c7:9e:8c:59:15:e0:7a:c9:8a:dd:55:0f:8b:56: b0:92:a8:8c:6a:7d:45:23:f3:e8:9e:20:37:04:be:da:ef:6a: f2:28:27:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVsF8JDQ7nHKVSUw6TmN1nNKoeJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2NjRG QzIwRUFFMDAeFw0yNjA3MjQwMzI4MzVaFw0yNjA3MjUwNjQ5MzVaMDMxMTAvBgNV BAMTKDQ2RkU5NUE5NTUwNDY5MDk3M0YzQjQxNDg3RjZBQjYzNjVDN0ZERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn75G5cjrtE/LEFb5omlUJcFBb AxjTypDS2/71ljuv90WyL/PqI0mmB37+hX291oPIGUt2wAsrmTeJ06vovzjpJx44 57eik49x63RQ6cFlQIaiEt2PMqn9nauLFRg5keDMc+FINnn5VndZn8nCeScKftSW zRnZgqVYwLNwW8nzmlRqcM7CehAj0D91JhrWk6FyJ2KljuxbUCR3EnZ35Oe27F2p 9RtFBT1TYcSwkQQHIJHcu7qcg0c493JCyyFWcZCu+ZAFXmywKeh0KtfsN6la/Yt9 rmu8PAZG4gtM9u0iqSp6MbLZLsyx0d0sCH2mLI9d8Sy8l+s759mf0uBcOo/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURv6VqVUEaQlz87QUh/arY2XH/e4wHwYDVR0j BBgwFoAUyuk5xa2pAVhOkAcft+UGZPwg6uAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzlmM2M3NjktY2ZiMS00MjA2LTlmNTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVB REE5MDE1ODRFOTAwNzFGQjdFNTA2NjRGQzIwRUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUU5MzlDNUFEQTkwMTU4NEU5MDA3MUZCN0U1MDY2NEZDMjBF QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2 NjRGQzIwRUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuFlJ+UfZ1VjURQ7rRhC0X7c8e5jvMxkg9C I7+RYrZ39NUSmW/StVwVTJuwwiCTGMzWz6KsXbhScZBKrs4r6UwebQJKjnEplzO2 yjXtoDJyTY6562VA+vHjLfddY+lAOXZk1Vq4zwTmVnV+aPY+lNkQmQpDe4RIRfN4 yUNxCDkU8fLBS9joQnw6m6k2/bbZVgMLu0dTu7d6uhQ2mAQ3UJ+myiF5QHiwQQAv DChewe1nNPhsuaeKI5cpLSgAZ4S9i9bgcJvahHru+68f01VS39N1K9G3WhqYwcqz ohfHnoxZFeB6yYrdVQ+LVrCSqIxqfUUj8+ieIDcEvtrvavIoJw4= -----END CERTIFICATE-----Generated at Fri Jul 24 08:27:24 2026 by rpki-client