$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft File: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft (raw, json) Hash identifier: RGr+qqOho0cGghszXRQqk45/C6gsEPEdarJqm1P45Yk= Subject key identifier: 22:F0:6F:15:06:AD:7A:2A:47:D4:1D:F4:BA:55:F7:0B:01:ED:F5:54 Authority key identifier: CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 Certificate issuer: /CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Certificate serial: 3E33AE839B5C4072EF682C633AC54C031C46DF5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:01:44 +0000 Manifest this update: Tue 12 May 2026 05:56:44 +0000 Manifest next update: Wed 13 May 2026 06:46:44 +0000 Files and hashes: 1: CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl (hash: pBsH+e8yZEFo7H55GFEjSNnunzRt2CYDDWkr3tczbnw=) 2: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: FIEaDVHIseW71OoASUCYpCwzUw7yf/gVIj4IdH47VZ0=) 3: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: oj9tQCvDwCV4p4Hr9N9eWTF7U8CpjCR1vEULrbqMjA8=) 4: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: tc2Aw1xglXhbLRMp6kuTfOMbUtYtC4WfWamomx8fpaI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:33:ae:83:9b:5c:40:72:ef:68:2c:63:3a:c5:4c:03:1c:46:df:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784 Validity Not Before: May 12 05:56:44 2026 GMT Not After : May 13 06:46:44 2026 GMT Subject: CN=22F06F1506AD7A2A47D41DF4BA55F70B01EDF554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5e:ae:0f:fc:4b:08:2c:ea:48:33:97:5e:3d: 57:3e:5f:93:53:d6:fa:d6:15:f9:3b:10:f5:1a:70: 5a:db:05:27:0f:50:a8:77:a0:3b:a0:a6:24:dd:5b: cc:41:e5:c5:5e:bb:b3:45:84:66:e5:11:97:86:18: 8a:8f:ca:dd:1d:ff:63:83:14:01:01:21:a3:eb:cc: ab:6c:29:89:79:28:de:45:a4:04:c3:7f:4e:d6:ab: e8:8c:6b:1b:84:63:e8:30:78:c7:e5:e0:18:32:2a: 0e:26:15:f9:12:f3:16:12:c7:3c:80:55:df:2f:2c: e8:71:f5:db:7b:6a:f6:cb:f7:a5:07:c8:0b:fa:1d: 3c:72:cd:53:85:63:62:11:33:16:d2:5e:74:b9:71: 15:23:0b:6c:d1:ab:0d:f9:42:e2:e4:59:11:ae:70: af:60:7a:ad:17:a8:a0:02:0b:fa:a0:87:46:5d:51: b3:47:1b:30:6c:3c:6b:48:03:95:29:9c:9a:c5:7c: 88:85:69:4a:5e:91:23:93:5b:d1:23:83:9d:1f:85: 0d:49:c9:37:fc:12:fe:61:02:b1:05:c0:1a:79:e2: 91:2d:51:20:e3:90:e0:fe:8d:b6:65:00:a1:7b:7d: 5c:55:0c:b7:da:49:2b:69:3c:09:e0:04:ee:b3:81: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F0:6F:15:06:AD:7A:2A:47:D4:1D:F4:BA:55:F7:0B:01:ED:F5:54 X509v3 Authority Key Identifier: keyid:CA:C3:A4:F2:1B:C8:F4:DF:A7:4E:85:15:1F:8B:3E:91:67:DA:57:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/CAC3A4F21BC8F4DFA74E85151F8B3E9167DA5784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:29:29:df:39:e0:3d:20:15:db:90:b4:b9:2e:77:f9:4a:92: d1:e6:33:fb:ec:3c:2f:32:b2:92:97:0e:ca:e6:4a:cf:9e:85: 3b:c4:73:87:ce:f1:c1:a6:a4:d0:11:2c:8b:00:e4:d9:a6:24: 00:5f:85:68:db:bc:e2:db:17:3a:bb:17:99:08:c7:5e:07:ed: 64:73:cf:6a:3c:71:44:00:42:cf:cc:45:59:a4:cf:7a:b6:79: c1:56:e6:f9:c0:24:df:d1:cf:61:96:f8:36:15:f4:c7:c6:bf: 96:97:97:8a:d5:09:db:b4:df:6d:2d:25:4c:3b:87:0b:ec:a5: 1b:cf:81:a1:3c:fa:b0:e5:09:ab:65:62:04:88:44:b1:a6:cc: f3:d3:15:0d:94:a2:a3:51:7a:ee:07:b0:64:4c:6d:a6:35:02: 0c:a0:97:ec:24:4e:44:77:e5:61:d1:68:93:9a:3b:66:4b:4d: 44:7a:02:7b:b7:71:61:71:c8:16:fe:2e:72:2d:69:36:1f:01: 4a:bf:58:41:80:72:1d:55:eb:b9:f4:8b:2c:45:7e:b8:75:c6: c5:19:38:7b:2b:b0:5e:87:16:9e:64:a3:b1:61:b5:fb:1c:45: 2b:86:ed:9d:f9:a6:70:f6:7b:40:d4:a0:59:72:d2:c2:b0:c3: be:9b:28:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPjOug5tcQHLvaCxjOsVMAxxG31wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2 N0RBNTc4NDAeFw0yNjA1MTIwNTU2NDRaFw0yNjA1MTMwNjQ2NDRaMDMxMTAvBgNV BAMTKDIyRjA2RjE1MDZBRDdBMkE0N0Q0MURGNEJBNTVGNzBCMDFFREY1NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaXq4P/EsILOpIM5dePVc+X5NT 1vrWFfk7EPUacFrbBScPUKh3oDugpiTdW8xB5cVeu7NFhGblEZeGGIqPyt0d/2OD FAEBIaPrzKtsKYl5KN5FpATDf07Wq+iMaxuEY+gweMfl4BgyKg4mFfkS8xYSxzyA Vd8vLOhx9dt7avbL96UHyAv6HTxyzVOFY2IRMxbSXnS5cRUjC2zRqw35QuLkWRGu cK9geq0XqKACC/qgh0ZdUbNHGzBsPGtIA5UpnJrFfIiFaUpekSOTW9Ejg50fhQ1J yTf8Ev5hArEFwBp54pEtUSDjkOD+jbZlAKF7fVxVDLfaSStpPAngBO6zgQvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIvBvFQateipH1B30ulX3CwHt9VQwHwYDVR0j BBgwFoAUysOk8hvI9N+nToUVH4s+kWfaV4QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhiOTg3MjItMWNiNC00MGQ0LWFjOGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIx QkM4RjRERkE3NEU4NTE1MUY4QjNFOTE2N0RBNTc4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUMzQTRGMjFCQzhGNERGQTc0RTg1MTUxRjhCM0U5MTY3REE1 Nzg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvQ0FDM0E0RjIxQkM4RjRERkE3NEU4NTE1MUY4QjNF OTE2N0RBNTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0pKd854D0gFduQtLkud/lKktHmM/vsPC8y spKXDsrmSs+ehTvEc4fO8cGmpNARLIsA5NmmJABfhWjbvOLbFzq7F5kIx14H7WRz z2o8cUQAQs/MRVmkz3q2ecFW5vnAJN/Rz2GW+DYV9MfGv5aXl4rVCdu0320tJUw7 hwvspRvPgaE8+rDlCatlYgSIRLGmzPPTFQ2UoqNReu4HsGRMbaY1Agygl+wkTkR3 5WHRaJOaO2ZLTUR6Anu3cWFxyBb+LnItaTYfAUq/WEGAch1V67n0iyxFfrh1xsUZ OHsrsF6HFp5ko7FhtfscRSuG7Z35pnD2e0DUoFly0sKww76bKBc= -----END CERTIFICATE-----Generated at Tue May 12 22:52:02 2026 by rpki-client