$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft File: CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft (raw, json) Hash identifier: 0K7KgZWxe+jQ0PdSTyVWQhXBKRF58kwMf466G+mYADk= Subject key identifier: B3:66:BA:08:91:2E:6A:27:71:F6:91:66:86:43:9B:CE:3C:A0:29:E1 Authority key identifier: CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 Certificate issuer: /CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Certificate serial: 0588D401792B9798D8B9F5C738C5378E0C29D1D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:59:34 +0000 Manifest this update: Tue 12 May 2026 14:54:34 +0000 Manifest next update: Wed 13 May 2026 15:22:34 +0000 Files and hashes: 1: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: mWR29teFlpS2QFv6Te8ENnUPdsf5nVL4GnQAxRUQqGI=) 2: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: i1H+ReQBHn9JCYQi5CWfxN7OhwjtzW41V0M/jyxFA08=) 3: CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl (hash: LjUyqfmd7dHuH70VT1TMMSexlUMg9RhkXyk7ghFXTVg=) 4: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: CHKJIH+fJABznZsBmBVESLsgPUznf5glQmQTYMsLlJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:88:d4:01:79:2b:97:98:d8:b9:f5:c7:38:c5:37:8e:0c:29:d1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Validity Not Before: May 12 14:54:34 2026 GMT Not After : May 13 15:22:34 2026 GMT Subject: CN=B366BA08912E6A2771F6916686439BCE3CA029E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:a6:6c:34:aa:a9:29:c1:08:c9:42:12:bb: 67:5f:d5:f8:45:78:5a:25:0e:93:c0:b1:bb:fe:8f: de:50:aa:e0:36:48:1f:cb:1d:dd:44:d2:65:cc:34: 08:f3:1a:98:d8:41:38:21:c8:29:c9:98:2f:4e:72: d3:6b:b7:f6:d7:98:e6:e5:e5:ab:cf:3b:d7:44:e6: 7d:83:46:12:d0:94:7e:00:df:1d:c0:b2:98:c2:48: 62:19:88:8a:2a:13:15:85:5c:0e:36:39:de:58:4d: 56:3d:66:f5:de:70:22:6a:98:09:3c:9b:cc:e2:a5: 63:1f:19:e7:55:b9:cf:f9:b3:9b:08:77:0d:94:fc: 0f:c2:9b:70:b3:89:3e:2b:c4:f9:f2:5d:89:47:11: 25:51:ff:78:d5:19:57:9e:d5:c4:21:ce:5e:6b:9e: af:23:ba:33:a5:02:bd:74:90:76:a5:87:ce:a8:77: 93:41:87:1d:01:71:e0:e6:fe:91:f7:6d:46:df:4c: ff:4d:55:59:6d:3d:d3:83:6f:d5:e2:cd:a0:1c:e5: fc:e5:cc:f3:bd:1f:4e:2d:ff:a5:1e:05:01:bd:cf: b2:a0:13:84:02:03:e1:9b:0d:3c:ae:ba:81:ba:6d: 7f:8f:43:e3:df:0a:71:19:4e:bc:0a:27:05:2b:88: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:66:BA:08:91:2E:6A:27:71:F6:91:66:86:43:9B:CE:3C:A0:29:E1 X509v3 Authority Key Identifier: keyid:CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e4:ab:fc:a1:74:b2:36:d6:c2:85:6f:1a:55:c1:eb:8d:a6: 4e:6a:5a:09:29:4e:a6:bd:c3:5a:da:ee:58:f7:cb:fd:f1:4c: 47:9c:22:c2:86:dd:37:20:9b:7f:9f:7e:b9:50:33:db:b5:bd: ab:dd:b2:f7:0c:04:48:d7:97:f9:5a:df:5e:46:1d:60:b2:fd: a2:5a:9f:20:07:d4:95:72:ca:73:d9:a2:9d:cc:9e:95:04:d3: ae:a0:33:b6:0d:ee:6e:84:58:26:4a:ec:47:58:e9:98:93:07: 6a:34:a5:3c:fb:f0:74:c0:2a:cd:8a:5a:21:6b:3f:88:a7:2e: b4:f2:28:29:d1:67:f5:7b:a8:4d:0b:88:d2:39:57:3a:cd:5b: 02:76:9b:44:9b:5f:89:54:75:30:ff:f5:5f:8b:ba:3a:25:32: e4:51:e7:fa:f2:88:16:65:4c:5a:39:a1:79:88:d9:ed:80:b9: d2:e3:a0:ec:35:c5:e4:56:9f:27:01:db:8f:3e:33:24:7b:fd: 50:97:4a:c2:f3:0d:66:ef:02:64:dc:59:15:33:35:b0:79:5b: 46:8a:8b:42:04:06:b7:94:47:99:35:c2:ea:5c:4f:3e:ab:90: 00:8d:d1:b4:20:aa:ed:de:03:e8:34:76:03:5b:88:ec:22:ae: d9:69:92:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYjUAXkrl5jYufXHOMU3jgwp0dEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2NjRG QzIwRUFFMDAeFw0yNjA1MTIxNDU0MzRaFw0yNjA1MTMxNTIyMzRaMDMxMTAvBgNV BAMTKEIzNjZCQTA4OTEyRTZBMjc3MUY2OTE2Njg2NDM5QkNFM0NBMDI5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQ6ZsNKqpKcEIyUISu2df1fhF eFolDpPAsbv+j95QquA2SB/LHd1E0mXMNAjzGpjYQTghyCnJmC9OctNrt/bXmObl 5avPO9dE5n2DRhLQlH4A3x3AspjCSGIZiIoqExWFXA42Od5YTVY9ZvXecCJqmAk8 m8zipWMfGedVuc/5s5sIdw2U/A/Cm3CziT4rxPnyXYlHESVR/3jVGVee1cQhzl5r nq8jujOlAr10kHalh86od5NBhx0BceDm/pH3bUbfTP9NVVltPdODb9XizaAc5fzl zPO9H04t/6UeBQG9z7KgE4QCA+GbDTyuuoG6bX+PQ+PfCnEZTrwKJwUriMzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs2a6CJEuaidx9pFmhkObzjygKeEwHwYDVR0j BBgwFoAUyuk5xa2pAVhOkAcft+UGZPwg6uAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzlmM2M3NjktY2ZiMS00MjA2LTlmNTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVB REE5MDE1ODRFOTAwNzFGQjdFNTA2NjRGQzIwRUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUU5MzlDNUFEQTkwMTU4NEU5MDA3MUZCN0U1MDY2NEZDMjBF QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2 NjRGQzIwRUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLkq/yhdLI21sKFbxpVweuNpk5qWgkpTqa9 w1ra7lj3y/3xTEecIsKG3Tcgm3+ffrlQM9u1vavdsvcMBEjXl/la315GHWCy/aJa nyAH1JVyynPZop3MnpUE066gM7YN7m6EWCZK7EdY6ZiTB2o0pTz78HTAKs2KWiFr P4inLrTyKCnRZ/V7qE0LiNI5VzrNWwJ2m0SbX4lUdTD/9V+LujolMuRR5/ryiBZl TFo5oXmI2e2AudLjoOw1xeRWnycB248+MyR7/VCXSsLzDWbvAmTcWRUzNbB5W0aK i0IEBreUR5k1wupcTz6rkACN0bQgqu3eA+g0dgNbiOwirtlpktU= -----END CERTIFICATE-----Generated at Wed May 13 04:48:03 2026 by rpki-client