$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft File: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft (raw, json) Hash identifier: bMU3xisD1Kdv46kUsbNZE5YPErCTTp0SkqOv50x+HHs= Subject key identifier: A2:1B:BA:DD:40:02:F0:21:FA:06:B6:6F:DA:F1:52:90:30:1B:71:8A Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 7E6E026047E828B36BD5E0C348B43BBA6BA27E07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:08:33 +0000 Manifest this update: Tue 16 Jun 2026 20:03:33 +0000 Manifest next update: Wed 17 Jun 2026 22:30:33 +0000 Files and hashes: 1: 323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa (hash: lq8n0YPrI0ej0qKCbfOlpW4tTPmD0iFL3XzQMezYPDc=) 2: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: gQ+0Ncm6ouGfqCj99PO+6ljzB+BVgCECd3yhaahocOE=) 3: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: p9IaRw5dZMu/RqndUf94zxAMZ/T8mQiwgEQa5hTpOao=) 4: 323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa (hash: oABovF7KdDdlY6+CHjePOcttfLrt7gjFGQnN04lySCo=) 5: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: RWX46rojpF6BQSm8l4yUodE90WBaf+wB8Y4OTAFQ4ME=) 6: 323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa (hash: wYag/KpQxcRCIm84mayvN/ce4e/42pmE6/MAHa5Gds8=) 7: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: /B7YofX/HHM+G+hIOgqx/c64KwEJiJwq2rpXtyQZ30I=) 8: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: hC0faeWGVogeaEgDmuTq2f3+pymLHliitj4mm9RD6Qs=) 9: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: qErBEzbgejKCSlR97tYuadzXafCvSPlaXArCcdt+yEg=) 10: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: NhSbtQsCSZOcv410mYA+T/YK4xT0UEtgj3gs2YcEa4w=) 11: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: 1173I/3m7XkzbM38lD89z6ZiTiudGSDgnrOXK0sI2OM=) 12: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: RJ17Dz/IGt6G1WroLkK6wHoimyT4sJSrPhTKtpoVzzk=) 13: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: RC9a6LW/+eoJDdWzw8/UK2UNfYC2bIi6jAgj1aXZwfs=) 14: 323430303a643934303a3a2f33322d3332203d3e20313336303838.roa (hash: 6v3qgdUIZjmuHWouV9dOsfbIOPcGM+FuLf4il05N+Ek=) 15: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: kX944U5wcZ4ljeI4U/N/cddY4+l6BlmIxGXHq+0AWLc=) 16: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: cPlZWqFm5MVvHANk5QwuMsGCvqASptrnxXG+efFGx5c=) 17: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: iBvTknbLTgdzBBg6hpQI6nAp2/Y+ZQ/SghaasUfpG04=) 18: 323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa (hash: 34GLqmPa0NzJ8OUNPh/1B0CyHBlCIeGKpKQ2WBBDdVw=) 19: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: GVZGNEwcVR+6b1iz+Mf+WaWQxD3aIC0LXDFgR27cdp0=) 20: 323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa (hash: D+h8jX3eqkGKLtVhz2jT7gpvFEWVMRt52UNBLxkGJhs=) 21: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: E4L4DC+KlZnlYuimMn7ht+nOkbQIJbr5xJR5o/xYX8Q=) 22: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: g/IwKgkLM3lX7TTfydNsuy1vblZAv0bCcFnenKOiWnI=) 23: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: oX8mmJjYFncLywEKonSF0YgdnGFD+ctQ155eJaCMAUg=) 24: 323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (hash: ROBi78wuuDs1YynQRORSD7fsHhMgIofWSrauPO5cQ7U=) 25: 323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa (hash: cEoIyEjinxE4GnYC0CNRuXvF+WOLWNhACz4dP/4/xaU=) 26: 323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa (hash: VeUuIEzR0KXaVdDKuIt8qmP7aqg4VDEFHLGvR21XwG0=) 27: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: hVmreBSejl8Ng95zD8+VjoKGoyOFeerqH52Ryd6nA/g=) 28: 323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (hash: pXHANQSmeMdKKdoCjZbWQt7xD53ERPYITVt1C9zayGI=) 29: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: 7/h2zwvZrAQS0wAHrJy9NqwWiyEipm8MyD1COAfe2nQ=) 30: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: nUJ2UcMYUMgp2Ivw4oUIOzI0b/8YqU8NMhh0tUJGG8w=) 31: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: 7VINGDMY1TUq927w0s5kPc4NrKgys1/WpgtYsMIyWe4=) 32: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: GH9tET4mTW+/Gjc8WplZ0ASidCPn/60O8oLirXNQIgM=) 33: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl (hash: lL0rsDShtLO7GCgQz5vRVX0kAiCyzLupqBcbftC7iwg=) 34: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: kC/BQJWqF3hfjk7jxki1g+71uLyOIxW8KkPPgVLxjeg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6e:02:60:47:e8:28:b3:6b:d5:e0:c3:48:b4:3b:ba:6b:a2:7e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: Jun 16 20:03:33 2026 GMT Not After : Jun 17 22:30:33 2026 GMT Subject: CN=A21BBADD4002F021FA06B66FDAF15290301B718A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:62:a6:be:d8:b5:95:39:ae:9a:40:07:02: cb:fa:46:48:fd:39:55:ba:bb:55:35:88:54:29:24: 96:7d:57:09:aa:51:d8:35:5a:d8:3a:74:e4:3d:c9: 56:75:bb:b1:c0:47:1e:6b:81:db:ab:6e:fd:6a:f0: e0:53:1f:3b:dd:06:85:7f:51:c2:5a:c7:43:a4:68: 69:34:b3:46:77:4a:c5:cc:0c:8b:99:50:73:42:bb: e7:0b:5f:f6:42:d7:ab:f4:3f:e9:1b:a7:6a:d9:a1: 42:8d:42:a9:90:84:64:9d:b2:ec:79:33:c5:21:45: b5:aa:34:c4:55:c0:b6:0a:77:a9:e3:c8:89:59:8d: 36:d1:e2:42:5a:3d:2d:e1:54:c1:9c:23:ee:23:1d: e3:b3:40:72:51:28:54:c3:1e:af:fa:86:a6:fe:15: 50:83:6a:0e:96:86:cd:12:ce:21:26:35:55:2c:51: 3e:9b:11:dc:a6:ed:15:d1:dc:77:a8:36:64:b0:80: 35:b9:b3:1b:02:ba:f2:7a:26:80:d0:ba:66:6c:36: 64:1b:cb:a4:19:9f:5c:e0:8a:00:84:f8:be:2d:7d: 13:e2:a2:f3:65:22:b5:a4:d3:5c:f9:c8:f7:00:25: a2:2d:fc:57:da:13:15:56:b8:9a:2d:1a:bc:fb:8c: cd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1B:BA:DD:40:02:F0:21:FA:06:B6:6F:DA:F1:52:90:30:1B:71:8A X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:db:76:92:3e:48:b7:30:e1:b1:ec:b9:af:13:12:39:d1:95: 1b:54:1c:c2:61:a3:d5:b7:b7:fe:88:3e:c0:97:7e:f2:a4:cb: 2f:7b:ea:04:e9:1c:48:e5:fb:37:43:b6:fc:1f:42:5c:0c:51: f7:cb:98:1d:44:2b:b8:ea:16:82:07:9e:49:94:a4:e1:08:28: 7d:9e:87:5f:29:a6:93:cb:1c:44:a2:6f:e7:76:9e:f8:55:9b: 38:55:38:39:1d:df:c5:a5:d1:eb:0a:86:22:71:c0:0c:d7:92: 2d:72:c5:65:48:7e:73:6f:1c:3d:a6:62:d3:e9:76:ee:c4:86: ec:14:79:70:49:29:94:ab:73:95:5e:35:fe:1a:52:ba:5a:dd: e7:d2:cf:ac:59:5a:c8:1d:2e:c3:b8:71:03:9d:5c:ee:56:e4: 1f:7f:98:90:f9:0c:51:3b:a4:70:91:7e:ad:57:f5:46:45:c1: 8b:17:c0:03:f1:72:a3:19:a8:90:a3:5c:7e:13:d0:c7:03:1b: 33:6d:5b:92:63:f6:80:a7:72:80:1e:f7:b0:8c:a7:8a:3d:f9: cc:6c:12:1c:45:01:d6:96:17:99:3d:36:ad:6d:e9:49:1b:32: d9:68:a1:9b:c2:b5:4d:0d:30:bd:5d:9b:a8:f6:e4:15:60:a0: d6:b4:1c:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfm4CYEfoKLNr1eDDSLQ7umuifgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA2MTYyMDAzMzNaFw0yNjA2MTcyMjMwMzNaMDMxMTAvBgNV BAMTKEEyMUJCQURENDAwMkYwMjFGQTA2QjY2RkRBRjE1MjkwMzAxQjcxOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9WKmvti1lTmumkAHAsv6Rkj9 OVW6u1U1iFQpJJZ9VwmqUdg1Wtg6dOQ9yVZ1u7HARx5rgdurbv1q8OBTHzvdBoV/ UcJax0OkaGk0s0Z3SsXMDIuZUHNCu+cLX/ZC16v0P+kbp2rZoUKNQqmQhGSdsux5 M8UhRbWqNMRVwLYKd6njyIlZjTbR4kJaPS3hVMGcI+4jHeOzQHJRKFTDHq/6hqb+ FVCDag6Whs0SziEmNVUsUT6bEdym7RXR3HeoNmSwgDW5sxsCuvJ6JoDQumZsNmQb y6QZn1zgigCE+L4tfRPiovNlIrWk01z5yPcAJaIt/FfaExVWuJotGrz7jM1JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUohu63UAC8CH6BrZv2vFSkDAbcYowHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmNGVjMWMtOTUzNS00Y2JmLTlj N2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlF OUI2OTNCN0NDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfbdpI+SLcw4bHsua8TEjnRlRtUHMJho9W3 t/6IPsCXfvKkyy976gTpHEjl+zdDtvwfQlwMUffLmB1EK7jqFoIHnkmUpOEIKH2e h18pppPLHESib+d2nvhVmzhVODkd38Wl0esKhiJxwAzXki1yxWVIfnNvHD2mYtPp du7EhuwUeXBJKZSrc5VeNf4aUrpa3efSz6xZWsgdLsO4cQOdXO5W5B9/mJD5DFE7 pHCRfq1X9UZFwYsXwAPxcqMZqJCjXH4T0McDGzNtW5Jj9oCncoAe97CMp4o9+cxs EhxFAdaWF5k9Nq1t6UkbMtlooZvCtU0NML1dm6j25BVgoNa0HNA= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:05 2026 by rpki-client