$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft File: CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft (raw, json) Hash identifier: pZj5ZevY7h954m28p1FEl7bmLGWDfBtQaGAlg0zYmS8= Subject key identifier: AD:57:94:39:5C:F2:99:A9:0B:AA:02:97:2A:46:2E:C9:A7:74:98:5A Authority key identifier: CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 Certificate issuer: /CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Certificate serial: 3DBE6DDB81B344D393E99FCCD27F13FA8277BA39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 15:12:35 +0000 Manifest this update: Tue 16 Jun 2026 15:07:35 +0000 Manifest next update: Wed 17 Jun 2026 18:34:35 +0000 Files and hashes: 1: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: CHKJIH+fJABznZsBmBVESLsgPUznf5glQmQTYMsLlJ0=) 2: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: i1H+ReQBHn9JCYQi5CWfxN7OhwjtzW41V0M/jyxFA08=) 3: CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl (hash: C/BOFyfN/ukukQZzCAWvI0FyzyoUlNg5r99IRsn31aI=) 4: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: mWR29teFlpS2QFv6Te8ENnUPdsf5nVL4GnQAxRUQqGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:be:6d:db:81:b3:44:d3:93:e9:9f:cc:d2:7f:13:fa:82:77:ba:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Validity Not Before: Jun 16 15:07:35 2026 GMT Not After : Jun 17 18:34:35 2026 GMT Subject: CN=AD5794395CF299A90BAA02972A462EC9A774985A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:91:2b:49:c7:4c:57:d9:d9:64:9d:fe:3e:94: 18:a7:20:e9:2f:ff:73:ee:d6:32:b4:d9:f9:cc:01: d7:f8:55:89:60:97:6e:44:b1:72:db:e4:21:a6:29: 4f:ea:dc:5f:5e:e4:ae:1f:ea:ec:3a:5c:90:d8:bf: e6:69:75:67:4c:d4:4e:62:cd:87:07:55:dc:0c:94: dd:ff:e6:20:8d:62:79:6d:1f:9b:6f:e1:f0:7a:0c: 84:1a:90:1f:b1:58:63:8c:1e:01:7b:00:b6:ac:1c: 6d:72:1d:58:38:d7:42:71:0c:b8:3b:24:6a:24:b7: 40:7a:29:82:b7:f4:ba:07:18:84:c1:a1:c3:9a:87: 6f:99:5b:ff:ae:de:32:f7:95:9c:9d:35:14:6f:e9: 1d:5c:e5:ef:f6:2a:45:99:1b:e1:08:d4:87:46:a7: e4:4b:96:80:06:3c:79:a8:1b:ae:1c:35:a3:94:63: 02:ef:a6:7b:0f:4e:fe:e0:5f:51:59:e2:dc:44:c8: d6:71:f7:c4:70:c6:96:60:62:fc:19:5c:7b:2b:a3: 6d:b5:58:30:66:3e:30:27:0b:0c:4d:c6:da:73:73: d6:0e:48:ab:f7:a7:26:66:34:45:25:8c:c9:85:76: ae:e0:da:d4:c1:d0:a6:38:26:1b:ca:ae:c2:71:2d: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:57:94:39:5C:F2:99:A9:0B:AA:02:97:2A:46:2E:C9:A7:74:98:5A X509v3 Authority Key Identifier: keyid:CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dd:74:49:9f:cc:1b:e5:13:31:26:1d:19:37:ee:2f:4a:6d: 0b:e3:83:9a:3a:71:1b:8b:98:62:80:64:d9:cd:9a:34:d4:f4: e2:25:31:8f:4c:15:55:74:6a:93:4c:61:a5:5a:d2:25:2b:03: cd:03:9f:f0:5f:d6:e7:94:34:09:99:a2:ce:33:81:11:39:2e: e8:15:3d:2e:11:eb:d2:17:82:77:7e:ed:2c:68:c9:65:05:f8: ba:45:51:f5:1c:84:8d:cf:e0:4d:66:a4:e7:09:68:a7:c0:d3: 2a:21:3c:18:2d:99:e4:66:d8:50:df:07:8a:8c:97:29:e6:44: be:1e:36:91:1f:28:ad:27:db:5a:a0:47:d2:1e:02:89:a5:ad: a7:f5:4f:74:2d:29:69:bc:e9:09:f0:44:e1:86:3f:1e:92:5b: 7c:36:d3:49:67:14:d2:eb:89:d8:74:73:ea:41:e0:d4:1f:0f: 71:28:a5:2e:57:69:3b:58:ac:fe:77:58:63:0f:64:95:c1:69: f0:f2:72:c2:06:2d:a8:81:76:2f:3d:a0:7d:f0:8b:f7:9b:a7: a3:3f:f6:80:ca:fd:2d:63:69:57:6b:2c:c6:55:51:e8:76:32: 90:e2:a8:3c:dd:5a:d1:9e:c4:8a:f7:58:da:e6:6c:4a:81:34: 1a:fe:20:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPb5t24GzRNOT6Z/M0n8T+oJ3ujkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2NjRG QzIwRUFFMDAeFw0yNjA2MTYxNTA3MzVaFw0yNjA2MTcxODM0MzVaMDMxMTAvBgNV BAMTKEFENTc5NDM5NUNGMjk5QTkwQkFBMDI5NzJBNDYyRUM5QTc3NDk4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdkStJx0xX2dlknf4+lBinIOkv /3Pu1jK02fnMAdf4VYlgl25EsXLb5CGmKU/q3F9e5K4f6uw6XJDYv+ZpdWdM1E5i zYcHVdwMlN3/5iCNYnltH5tv4fB6DIQakB+xWGOMHgF7ALasHG1yHVg410JxDLg7 JGokt0B6KYK39LoHGITBocOah2+ZW/+u3jL3lZydNRRv6R1c5e/2KkWZG+EI1IdG p+RLloAGPHmoG64cNaOUYwLvpnsPTv7gX1FZ4txEyNZx98RwxpZgYvwZXHsro221 WDBmPjAnCwxNxtpzc9YOSKv3pyZmNEUljMmFdq7g2tTB0KY4JhvKrsJxLSVBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrVeUOVzymakLqgKXKkYuyad0mFowHwYDVR0j BBgwFoAUyuk5xa2pAVhOkAcft+UGZPwg6uAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzlmM2M3NjktY2ZiMS00MjA2LTlmNTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVB REE5MDE1ODRFOTAwNzFGQjdFNTA2NjRGQzIwRUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUU5MzlDNUFEQTkwMTU4NEU5MDA3MUZCN0U1MDY2NEZDMjBF QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2 NjRGQzIwRUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzddEmfzBvlEzEmHRk37i9KbQvjg5o6cRuL mGKAZNnNmjTU9OIlMY9MFVV0apNMYaVa0iUrA80Dn/Bf1ueUNAmZos4zgRE5LugV PS4R69IXgnd+7SxoyWUF+LpFUfUchI3P4E1mpOcJaKfA0yohPBgtmeRm2FDfB4qM lynmRL4eNpEfKK0n21qgR9IeAomlraf1T3QtKWm86QnwROGGPx6SW3w200lnFNLr idh0c+pB4NQfD3EopS5XaTtYrP53WGMPZJXBafDycsIGLaiBdi89oH3wi/ebp6M/ 9oDK/S1jaVdrLMZVUeh2MpDiqDzdWtGexIr3WNrmbEqBNBr+IKs= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:45 2026 by rpki-client