$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft File: CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft (raw, json) Hash identifier: 4Rlp+fWTWNSTKhHfN1WW9x7sPr0PQ2ZQPEH15Kucd2g= Subject key identifier: 92:F5:8F:69:F8:4D:25:8D:D5:ED:C8:C4:FF:F0:2B:20:D3:21:E1:30 Authority key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D Certificate issuer: /CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Certificate serial: 797ECD8D97A38E3849F5273FB1D1CC50181FD533 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft Manifest number: DD Signing time: Wed 14 Oct 2026 19:08:49 +0000 Manifest this update: Wed 14 Oct 2026 19:03:49 +0000 Manifest next update: Thu 15 Oct 2026 20:18:49 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: H8aIKDmEKvaPKBbfecYKEblnH3STGcj0MkoXv4D6fxM=) 2: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: qgoD91gK7+McaB5oJcIqhycO0nQvgEjYPEclcWIzrPE=) 3: CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl (hash: UxnWUMwWwO3bJ6rmwyUHVlb5IcmmVqbmhKsUK0mLb1U=) 4: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: z0KglzUoHVHvxkZjD906Xmm3Uuu4IPK6qmYY5Pl0Weo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7e:cd:8d:97:a3:8e:38:49:f5:27:3f:b1:d1:cc:50:18:1f:d5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Validity Not Before: Oct 14 19:03:49 2026 GMT Not After : Oct 15 20:18:49 2026 GMT Subject: CN=92F58F69F84D258DD5EDC8C4FFF02B20D321E130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:97:4b:52:5c:6a:8a:9a:86:50:9d:5e:42: f2:e8:56:12:a9:3c:7e:f8:06:83:a0:8d:f0:4f:16: 55:68:cc:57:21:d6:4f:69:85:5e:4a:89:50:82:ec: 95:7c:0b:96:a2:d0:a2:1b:ca:b4:d7:f9:35:fb:6a: ff:e4:21:24:19:84:94:a0:6b:82:ce:0a:49:74:42: 4e:e9:26:b4:ff:80:d3:1b:19:ad:c5:f8:fb:0d:d7: d8:19:15:3f:2d:05:a3:2d:d0:76:e9:9b:88:c5:4a: 25:67:d4:5c:61:97:31:81:ee:e5:05:84:83:63:d9: 00:73:b0:3b:9b:08:cd:a2:13:9c:cf:62:fb:fa:57: fa:3f:ca:c8:a2:43:73:e8:6d:e7:d3:cd:0b:dd:ec: e2:7c:fd:84:e4:c1:84:11:94:a5:f7:bf:91:34:ed: 79:1d:49:e5:e5:15:47:13:ae:be:07:0b:31:38:5c: ba:59:06:d8:69:5e:88:5b:96:53:97:83:a3:14:d4: 0b:39:ba:23:c4:5f:c1:10:dc:56:dd:f5:94:16:0b: ff:ce:23:59:86:01:32:62:b7:b7:6b:02:aa:76:97: f6:20:b4:12:58:64:ad:9e:e2:73:9a:4b:ce:14:c1: 5c:ca:0a:59:1e:8f:9b:93:b2:ba:37:e4:22:45:9c: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F5:8F:69:F8:4D:25:8D:D5:ED:C8:C4:FF:F0:2B:20:D3:21:E1:30 X509v3 Authority Key Identifier: keyid:CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:27:52:6f:2a:11:34:75:93:5b:c6:eb:fb:0a:18:99:c8:97: 57:cf:ab:99:89:b0:38:67:80:dd:c1:aa:2d:ad:c5:71:e6:16: 31:75:37:a4:be:09:8d:cd:f9:86:22:51:27:5c:ab:39:5f:89: e1:7a:cc:c5:04:94:5d:91:cb:f1:5b:06:5f:77:d7:0b:49:fb: fc:67:72:56:66:83:7e:e2:9e:be:39:fe:91:fd:61:0d:09:51: ec:2f:ce:6a:63:b6:8c:b0:a4:72:6a:b3:7c:9f:f2:c3:e7:d4: c0:fe:d2:76:5e:4f:87:75:c7:28:ec:28:85:d5:ca:08:cc:74: ab:38:6e:c2:cd:fb:d8:1a:d5:05:f9:43:8c:87:47:ef:b1:c5: d8:14:41:be:57:22:13:20:69:ed:15:70:69:ef:37:e8:17:48: 81:2b:68:43:6d:90:72:42:fd:1e:d0:df:ec:14:c8:97:a0:e2: 18:36:4a:8a:86:82:43:1c:c2:c2:ab:c6:f9:38:78:4d:d0:5d: e5:56:d0:ed:33:d3:55:b3:91:82:1d:9f:ba:e5:79:a9:8a:1d: 09:f8:58:ff:74:0b:52:83:db:5d:6d:0b:e3:77:a3:43:dc:d4: b3:e9:d6:54:d4:e5:9a:06:ce:d6:1b:d9:a1:26:6c:12:5d:5d: 6b:8e:76:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeX7NjZejjjhJ9Sc/sdHMUBgf1TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUw Q0ZCNjgzRDAeFw0yNjEwMTQxOTAzNDlaFw0yNjEwMTUyMDE4NDlaMDMxMTAvBgNV BAMTKDkyRjU4RjY5Rjg0RDI1OERENUVEQzhDNEZGRjAyQjIwRDMyMUUxMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhZdLUlxqipqGUJ1eQvLoVhKp PH74BoOgjfBPFlVozFch1k9phV5KiVCC7JV8C5ai0KIbyrTX+TX7av/kISQZhJSg a4LOCkl0Qk7pJrT/gNMbGa3F+PsN19gZFT8tBaMt0Hbpm4jFSiVn1FxhlzGB7uUF hINj2QBzsDubCM2iE5zPYvv6V/o/ysiiQ3PobefTzQvd7OJ8/YTkwYQRlKX3v5E0 7XkdSeXlFUcTrr4HCzE4XLpZBthpXohbllOXg6MU1As5uiPEX8EQ3Fbd9ZQWC//O I1mGATJit7drAqp2l/YgtBJYZK2e4nOaS84UwVzKClkej5uTsro35CJFnPDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkvWPafhNJY3V7cjE//ArINMh4TAwHwYDVR0j BBgwFoAUyuOV60e7TleZDfKD3XuVlQz7aD0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZmM2FlOTctZjUyZS00OTc3LTkwZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0 N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUwQ0ZCNjgzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUUzOTVFQjQ3QkI0RTU3OTkwREYyODNERDdCOTU5NTBDRkI2 ODNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1 OTUwQ0ZCNjgzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAnUm8qETR1k1vG6/sKGJnIl1fPq5mJsDhn gN3Bqi2txXHmFjF1N6S+CY3N+YYiUSdcqzlfieF6zMUElF2Ry/FbBl931wtJ+/xn clZmg37inr45/pH9YQ0JUewvzmpjtoywpHJqs3yf8sPn1MD+0nZeT4d1xyjsKIXV ygjMdKs4bsLN+9ga1QX5Q4yHR++xxdgUQb5XIhMgae0VcGnvN+gXSIEraENtkHJC /R7Q3+wUyJeg4hg2SoqGgkMcwsKrxvk4eE3QXeVW0O0z01WzkYIdn7rleamKHQn4 WP90C1KD211tC+N3o0Pc1LPp1lTU5ZoGztYb2aEmbBJdXWuOdqE= -----END CERTIFICATE-----Generated at Thu Oct 15 06:00:05 2026 by rpki-client