$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft File: CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft (raw, json) Hash identifier: vsAUPLGu23ljUsNxqf4H7+9CYKYkyDa927K9pThmE5c= Subject key identifier: 47:22:E7:EA:0C:A8:AB:03:C2:B8:07:44:AA:FC:2D:52:F3:70:1F:81 Authority key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D Certificate issuer: /CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Certificate serial: 2B62832AC215A71ED1EF31AF31E9B27EE3D29CF8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 11:41:22 +0000 Manifest this update: Thu 03 Sep 2026 11:36:22 +0000 Manifest next update: Fri 04 Sep 2026 12:38:22 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: H8aIKDmEKvaPKBbfecYKEblnH3STGcj0MkoXv4D6fxM=) 2: CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl (hash: 5i6Fr7hFgeS5FbAd7p/JJDWr8uiVKyE+3vBVnW1B82o=) 3: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: qgoD91gK7+McaB5oJcIqhycO0nQvgEjYPEclcWIzrPE=) 4: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: z0KglzUoHVHvxkZjD906Xmm3Uuu4IPK6qmYY5Pl0Weo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:62:83:2a:c2:15:a7:1e:d1:ef:31:af:31:e9:b2:7e:e3:d2:9c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Validity Not Before: Sep 3 11:36:22 2026 GMT Not After : Sep 4 12:38:22 2026 GMT Subject: CN=4722E7EA0CA8AB03C2B80744AAFC2D52F3701F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:a9:02:bd:11:fb:d6:e4:17:d7:cc:9a:65: 40:49:e7:05:4b:b9:e5:04:09:30:45:fa:e0:d8:36: e2:72:35:4b:37:0e:f1:6f:17:d2:ca:b3:fb:f3:cd: cd:c9:30:16:c4:0e:2b:70:09:cf:3e:e6:0a:d8:2f: 6d:0d:c0:4d:04:33:5b:25:b6:b6:b5:fa:10:57:54: 04:48:36:de:2b:6d:ee:c9:8c:fe:47:39:d2:38:0e: 8c:1e:b9:41:c1:f5:6a:82:44:f3:1f:3a:47:0e:1e: 57:69:99:95:1a:81:99:59:0f:84:ca:d8:a7:a8:00: c2:28:e6:a1:3a:95:a3:ee:15:9b:b7:f9:f8:9b:c7: 5d:a1:41:b0:a0:1f:6b:67:29:aa:59:0b:de:38:bb: fc:4b:17:9a:02:c6:8b:25:3d:24:56:c1:4f:30:a6: cd:46:9e:90:c6:9a:d8:66:a4:ed:58:74:31:78:f8: a1:05:08:98:11:c9:1c:51:c7:46:92:6c:b6:4c:75: 27:63:5c:8e:aa:71:04:0e:04:7e:ec:1e:00:49:be: a6:e5:e8:76:41:3a:c6:4a:16:cb:4b:aa:33:e1:fc: 47:76:69:22:d4:9a:f8:d4:3e:1f:91:65:60:4c:81: 6b:6c:6d:91:42:d1:4b:3e:8d:10:c1:42:c0:bd:ce: 83:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:22:E7:EA:0C:A8:AB:03:C2:B8:07:44:AA:FC:2D:52:F3:70:1F:81 X509v3 Authority Key Identifier: keyid:CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:51:26:7d:38:cd:b0:91:fa:9c:61:47:21:a8:04:b7:2c:52: d6:c2:f2:80:8f:34:18:2f:dc:3b:55:e7:12:32:e8:92:e0:f2: 67:cd:ed:2e:4c:ee:f9:84:c9:49:3f:9e:8a:df:32:0a:4a:88: ee:8c:78:1c:71:2d:58:64:da:09:ba:be:dc:fb:b3:10:81:46: ce:63:c6:94:b1:0b:63:83:7c:f6:2c:ac:12:fc:1e:a0:c6:93: ef:de:98:1c:b6:c8:57:9e:9d:0f:49:79:7c:84:a8:f1:cf:fd: fc:74:a7:5e:4a:c1:9b:91:a0:5a:4e:8c:a4:38:e6:31:1b:c5: b1:55:59:72:49:d9:18:6c:4c:bb:4f:b5:ee:ca:68:6a:ff:69: d6:fe:80:b7:c9:bb:6f:2c:87:c7:2e:b1:c2:a5:16:dc:e3:a6: 48:04:50:a3:1e:10:6b:8f:8c:c2:6e:36:bc:09:2a:23:ba:d8: c2:f1:70:57:57:28:f9:a3:80:c3:7d:12:0b:f5:e4:28:d9:26: 8b:2d:40:18:fe:50:ba:c9:65:b0:1a:75:f5:2a:d5:b3:6f:3d: 0f:c4:99:70:67:97:51:1d:19:b8:27:fa:b0:1a:e3:50:ba:6b: 6e:fd:b6:8b:5d:d1:79:97:94:98:d6:d0:66:b3:07:86:3c:16: 1f:c9:cd:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK2KDKsIVpx7R7zGvMemyfuPSnPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUw Q0ZCNjgzRDAeFw0yNjA5MDMxMTM2MjJaFw0yNjA5MDQxMjM4MjJaMDMxMTAvBgNV BAMTKDQ3MjJFN0VBMENBOEFCMDNDMkI4MDc0NEFBRkMyRDUyRjM3MDFGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/qkCvRH71uQX18yaZUBJ5wVL ueUECTBF+uDYNuJyNUs3DvFvF9LKs/vzzc3JMBbEDitwCc8+5grYL20NwE0EM1sl tra1+hBXVARINt4rbe7JjP5HOdI4DoweuUHB9WqCRPMfOkcOHldpmZUagZlZD4TK 2KeoAMIo5qE6laPuFZu3+fibx12hQbCgH2tnKapZC944u/xLF5oCxoslPSRWwU8w ps1GnpDGmthmpO1YdDF4+KEFCJgRyRxRx0aSbLZMdSdjXI6qcQQOBH7sHgBJvqbl 6HZBOsZKFstLqjPh/Ed2aSLUmvjUPh+RZWBMgWtsbZFC0Us+jRDBQsC9zoNxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURyLn6gyoqwPCuAdEqvwtUvNwH4EwHwYDVR0j BBgwFoAUyuOV60e7TleZDfKD3XuVlQz7aD0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZmM2FlOTctZjUyZS00OTc3LTkwZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0 N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUwQ0ZCNjgzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUUzOTVFQjQ3QkI0RTU3OTkwREYyODNERDdCOTU5NTBDRkI2 ODNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1 OTUwQ0ZCNjgzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRRJn04zbCR+pxhRyGoBLcsUtbC8oCPNBgv 3DtV5xIy6JLg8mfN7S5M7vmEyUk/norfMgpKiO6MeBxxLVhk2gm6vtz7sxCBRs5j xpSxC2ODfPYsrBL8HqDGk+/emBy2yFeenQ9JeXyEqPHP/fx0p15KwZuRoFpOjKQ4 5jEbxbFVWXJJ2RhsTLtPte7KaGr/adb+gLfJu28sh8cuscKlFtzjpkgEUKMeEGuP jMJuNrwJKiO62MLxcFdXKPmjgMN9Egv15CjZJostQBj+ULrJZbAadfUq1bNvPQ/E mXBnl1EdGbgn+rAa41C6a279totd0XmXlJjW0GazB4Y8Fh/JzSo= -----END CERTIFICATE-----Generated at Thu Sep 3 13:06:59 2026 by rpki-client