$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft File: CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft (raw, json) Hash identifier: eBnfflwVh+FIdxZErpiK8xHVCgyMc+ObDJS8kr2N3yU= Subject key identifier: 95:95:A5:6D:29:D5:B8:DB:F3:BA:9F:1C:D8:FF:D1:09:29:38:E7:25 Authority key identifier: CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 Certificate issuer: /CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Certificate serial: 542CCBC8B2E34F9247F3C26DBA2A9B8A37F0A067 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 03:10:32 +0000 Manifest this update: Tue 22 Sep 2026 03:05:32 +0000 Manifest next update: Wed 23 Sep 2026 03:32:32 +0000 Files and hashes: 1: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: i1H+ReQBHn9JCYQi5CWfxN7OhwjtzW41V0M/jyxFA08=) 2: CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl (hash: YHdZFpcVwf8rXTwfAZasAe2qiwGBt6rvWwRMYVKTv3k=) 3: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: CHKJIH+fJABznZsBmBVESLsgPUznf5glQmQTYMsLlJ0=) 4: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: mWR29teFlpS2QFv6Te8ENnUPdsf5nVL4GnQAxRUQqGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2c:cb:c8:b2:e3:4f:92:47:f3:c2:6d:ba:2a:9b:8a:37:f0:a0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Validity Not Before: Sep 22 03:05:32 2026 GMT Not After : Sep 23 03:32:32 2026 GMT Subject: CN=9595A56D29D5B8DBF3BA9F1CD8FFD1092938E725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:90:ec:c2:b0:11:ec:e4:83:48:ca:cc:94:b1: 06:63:85:93:61:c6:90:8a:e5:c3:c1:b8:79:0a:c2: e4:2a:af:a0:d9:c5:8d:93:62:55:36:f3:0b:a3:ef: 9b:86:f8:ae:9d:69:71:8b:89:65:7a:7e:3f:8a:b9: 3b:ce:f6:49:d4:bf:59:ba:db:e1:b2:2c:ed:9d:14: 09:48:75:59:6c:6c:ea:eb:3e:ab:ae:c1:c7:0d:a7: 23:ef:0f:a5:7f:3d:d0:b7:0d:cc:f5:14:7e:6c:4d: 1d:d9:f3:34:8d:43:17:40:c5:c7:da:24:11:af:19: 00:1d:5e:5a:ec:92:46:b6:76:c5:a8:60:7c:b2:ff: 8b:ac:ad:56:d1:aa:7b:48:f8:d5:5b:ed:e2:ab:17: 1d:20:bc:c6:e1:11:a5:d2:e2:8e:e0:94:bd:6a:d6: 2c:88:45:1c:4f:e3:41:79:cd:99:19:08:ae:f5:6a: d3:fe:08:b8:cc:ee:21:af:d3:49:31:ad:a3:5c:53: e9:cc:7e:fd:aa:b0:f7:d4:15:ea:83:c3:3b:58:24: 77:2d:61:76:5d:0e:9c:af:ea:53:cb:52:1b:5e:59: 84:70:70:ae:94:dc:96:23:0d:ca:da:1c:98:c4:6f: 9c:66:8a:66:69:76:1d:f7:25:01:f0:4e:7b:40:ae: 4c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:95:A5:6D:29:D5:B8:DB:F3:BA:9F:1C:D8:FF:D1:09:29:38:E7:25 X509v3 Authority Key Identifier: keyid:CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ae:64:69:6b:14:7e:71:8a:5a:05:c7:79:fe:ec:7c:24:c0: 39:98:0f:46:f2:98:04:14:2a:23:59:28:16:b7:a5:f6:14:45: b8:53:d9:c2:04:f0:17:16:e7:bf:86:b0:86:b9:1e:b1:32:ac: e0:25:29:f4:a8:fd:6f:48:7a:d3:ae:ad:87:d2:36:e8:ce:82: 75:a7:cd:74:a3:2f:c8:c3:8f:f5:1b:cd:f6:83:e6:b5:95:30: 80:d0:d8:9b:6b:2b:b5:33:26:01:34:f5:c5:17:77:9f:f5:30: d4:59:75:8c:6a:42:69:74:84:cd:f2:44:f8:6e:37:07:69:59: e7:50:b2:c7:18:a3:e9:f1:f0:56:a0:2a:0a:75:89:e2:61:a7: f0:0f:a3:22:1f:67:c0:39:a5:44:73:1f:b9:bc:1d:ba:30:36: e7:eb:cc:f4:cc:b1:b4:75:0d:45:8c:a5:f7:26:c9:46:97:22: b4:40:aa:f6:62:23:f5:dd:78:4f:b6:d5:ba:ae:b9:e5:56:86: 2a:c6:69:df:01:33:0d:01:2a:89:09:e4:8d:2a:21:31:f1:02: 4b:e4:ce:9f:c8:ec:d9:b9:32:d9:df:26:b5:16:4f:8a:8b:85: 4b:4d:5c:65:c1:a8:d9:15:7f:15:ba:bf:ca:a5:5a:a9:8e:b0: 09:55:a3:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCzLyLLjT5JH88JtuiqbijfwoGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2NjRG QzIwRUFFMDAeFw0yNjA5MjIwMzA1MzJaFw0yNjA5MjMwMzMyMzJaMDMxMTAvBgNV BAMTKDk1OTVBNTZEMjlENUI4REJGM0JBOUYxQ0Q4RkZEMTA5MjkzOEU3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgkOzCsBHs5INIysyUsQZjhZNh xpCK5cPBuHkKwuQqr6DZxY2TYlU28wuj75uG+K6daXGLiWV6fj+KuTvO9knUv1m6 2+GyLO2dFAlIdVlsbOrrPquuwccNpyPvD6V/PdC3Dcz1FH5sTR3Z8zSNQxdAxcfa JBGvGQAdXlrskka2dsWoYHyy/4usrVbRqntI+NVb7eKrFx0gvMbhEaXS4o7glL1q 1iyIRRxP40F5zZkZCK71atP+CLjM7iGv00kxraNcU+nMfv2qsPfUFeqDwztYJHct YXZdDpyv6lPLUhteWYRwcK6U3JYjDcraHJjEb5xmimZpdh33JQHwTntArkzvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlZWlbSnVuNvzup8c2P/RCSk45yUwHwYDVR0j BBgwFoAUyuk5xa2pAVhOkAcft+UGZPwg6uAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzlmM2M3NjktY2ZiMS00MjA2LTlmNTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVB REE5MDE1ODRFOTAwNzFGQjdFNTA2NjRGQzIwRUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUU5MzlDNUFEQTkwMTU4NEU5MDA3MUZCN0U1MDY2NEZDMjBF QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2 NjRGQzIwRUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmuZGlrFH5xiloFx3n+7HwkwDmYD0bymAQU KiNZKBa3pfYURbhT2cIE8BcW57+GsIa5HrEyrOAlKfSo/W9IetOurYfSNujOgnWn zXSjL8jDj/UbzfaD5rWVMIDQ2JtrK7UzJgE09cUXd5/1MNRZdYxqQml0hM3yRPhu NwdpWedQsscYo+nx8FagKgp1ieJhp/APoyIfZ8A5pURzH7m8HbowNufrzPTMsbR1 DUWMpfcmyUaXIrRAqvZiI/XdeE+21bquueVWhirGad8BMw0BKokJ5I0qITHxAkvk zp/I7Nm5MtnfJrUWT4qLhUtNXGXBqNkVfxW6v8qlWqmOsAlVo44= -----END CERTIFICATE-----Generated at Tue Sep 22 18:22:26 2026 by rpki-client