$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft File: CAEDA7AE02DCD4B182D96F433016148B66C99993.mft (raw, json) Hash identifier: wsMKWK1HazLwmYZJRTBZlRbfHFyUqmeoyXxTnlA1j2E= Subject key identifier: 44:68:A7:84:54:05:22:00:D2:7C:6E:5B:FE:3B:75:D9:BA:AB:72:95 Authority key identifier: CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93 Certificate issuer: /CN=CAEDA7AE02DCD4B182D96F433016148B66C99993 Certificate serial: 04B72974FED80E9D11C4218E39198EC799D07221 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 14:04:02 +0000 Manifest this update: Mon 20 Jul 2026 13:59:02 +0000 Manifest next update: Tue 21 Jul 2026 14:39:02 +0000 Files and hashes: 1: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: dGWYPEIN0OvivsS5tklp+El8kTIto83bjZq7fW6iScg=) 2: CAEDA7AE02DCD4B182D96F433016148B66C99993.crl (hash: PgzTUg0G4CY4Yz+ur17AF+0um93uwQ6sMVw9IwRGzpg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b7:29:74:fe:d8:0e:9d:11:c4:21:8e:39:19:8e:c7:99:d0:72:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAEDA7AE02DCD4B182D96F433016148B66C99993 Validity Not Before: Jul 20 13:59:02 2026 GMT Not After : Jul 21 14:39:02 2026 GMT Subject: CN=4468A78454052200D27C6E5BFE3B75D9BAAB7295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:90:bc:96:ee:c6:0d:d0:9a:3f:3d:1e:10:a3: 25:da:7e:cb:2e:08:2a:c6:f3:e5:05:d9:a9:d0:68: 3b:a8:cc:66:d3:6c:25:ed:f2:8e:76:99:1e:da:75: b5:8d:20:29:24:18:a5:f5:74:51:03:75:e5:8a:89: 5d:d2:7f:8d:6d:04:b4:c9:24:11:50:b8:4e:92:ed: 58:ea:d6:54:10:88:a1:ce:7b:3c:e8:c4:0d:b1:66: eb:c9:08:aa:2b:e8:4f:29:17:76:6c:47:d5:ca:b3: e5:55:4a:2a:91:9c:d7:2a:21:f1:12:6c:a3:11:95: 4b:d3:b8:55:82:da:53:45:db:f8:b9:1a:1d:b2:fc: 2f:b9:56:92:38:d5:a3:f6:d8:e4:6a:46:8d:73:41: e8:b5:57:1d:c5:84:43:97:2e:91:f8:05:89:26:7d: 08:30:93:33:e4:ce:8a:6a:ab:6b:d7:bf:17:82:27: ae:b1:30:d8:40:8b:1f:e4:94:3a:4b:15:6a:28:fa: 35:fc:c1:c0:24:b1:4b:80:4f:e9:30:c8:ea:73:f1: 75:4a:15:ac:f8:10:b2:93:67:22:91:c4:27:27:5a: 82:d3:e5:4b:f6:31:b7:86:30:ba:d2:b7:a8:ff:e4: e1:d4:da:c9:ac:9a:99:d9:a2:fe:70:39:76:32:6b: 41:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:68:A7:84:54:05:22:00:D2:7C:6E:5B:FE:3B:75:D9:BA:AB:72:95 X509v3 Authority Key Identifier: keyid:CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:db:67:78:c1:eb:81:d0:53:93:d4:d2:a9:72:76:b8:cf:6b: f6:df:cf:0a:de:65:67:15:ea:f0:cc:ba:73:99:ba:ca:66:ea: 4f:4c:51:fc:26:e1:a4:c3:70:29:81:17:0f:73:58:f2:fa:68: f2:cb:7c:16:4f:08:3c:df:6c:72:6f:f0:df:2a:c0:92:b5:bd: 25:b3:94:07:d2:b9:14:52:77:1b:c7:fe:0a:40:a1:5a:26:22: af:1f:28:20:22:58:01:cc:33:68:9a:7f:3a:6f:c2:ea:cc:16: 9f:1b:81:aa:91:84:e0:86:35:f1:0d:ff:89:d6:bf:76:ad:71: 12:2a:6c:d3:0b:42:4f:ad:be:8d:5b:2e:ee:29:e2:90:69:03: 32:88:0a:2f:4a:6f:a6:4a:4b:af:f9:5f:d6:be:d9:81:4f:ec: cb:30:e5:af:93:d7:01:e1:0a:89:57:69:84:80:a3:76:ae:17: 2d:8e:cc:ad:70:44:94:b6:86:dc:1b:e2:3a:91:19:98:ab:e2: f8:04:46:8b:58:a5:de:30:d6:32:a0:92:a2:ed:57:22:ac:df: 13:6b:04:c6:93:62:d3:17:49:45:ad:90:be:5b:ec:0d:2f:f5: 35:dd:05:ea:2b:a1:3f:03:f1:ab:e0:e3:09:71:ec:fd:2e:57: f5:68:b8:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLcpdP7YDp0RxCGOORmOx5nQciEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFREE3QUUwMkRDRDRCMTgyRDk2RjQzMzAxNjE0OEI2 NkM5OTk5MzAeFw0yNjA3MjAxMzU5MDJaFw0yNjA3MjExNDM5MDJaMDMxMTAvBgNV BAMTKDQ0NjhBNzg0NTQwNTIyMDBEMjdDNkU1QkZFM0I3NUQ5QkFBQjcyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDskLyW7sYN0Jo/PR4QoyXafssu CCrG8+UF2anQaDuozGbTbCXt8o52mR7adbWNICkkGKX1dFEDdeWKiV3Sf41tBLTJ JBFQuE6S7Vjq1lQQiKHOezzoxA2xZuvJCKor6E8pF3ZsR9XKs+VVSiqRnNcqIfES bKMRlUvTuFWC2lNF2/i5Gh2y/C+5VpI41aP22ORqRo1zQei1Vx3FhEOXLpH4BYkm fQgwkzPkzopqq2vXvxeCJ66xMNhAix/klDpLFWoo+jX8wcAksUuAT+kwyOpz8XVK Faz4ELKTZyKRxCcnWoLT5Uv2MbeGMLrSt6j/5OHU2smsmpnZov5wOXYya0EZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURGinhFQFIgDSfG5b/jt12bqrcpUwHwYDVR0j BBgwFoAUyu2nrgLc1LGC2W9DMBYUi2bJmZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ0NmE1NjQtNjM0Ny00MGVmLWJhZDMtNGRhYWUzMDZkNDIxLzAvQ0FFREE3QUUw MkRDRDRCMTgyRDk2RjQzMzAxNjE0OEI2NkM5OTk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUVEQTdBRTAyRENENEIxODJEOTZGNDMzMDE2MTQ4QjY2Qzk5 OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh ZDMtNGRhYWUzMDZkNDIxLzAvQ0FFREE3QUUwMkRDRDRCMTgyRDk2RjQzMzAxNjE0 OEI2NkM5OTk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfbZ3jB64HQU5PU0qlydrjPa/bfzwreZWcV 6vDMunOZuspm6k9MUfwm4aTDcCmBFw9zWPL6aPLLfBZPCDzfbHJv8N8qwJK1vSWz lAfSuRRSdxvH/gpAoVomIq8fKCAiWAHMM2iafzpvwurMFp8bgaqRhOCGNfEN/4nW v3atcRIqbNMLQk+tvo1bLu4p4pBpAzKICi9Kb6ZKS6/5X9a+2YFP7Msw5a+T1wHh ColXaYSAo3auFy2OzK1wRJS2htwb4jqRGZir4vgERotYpd4w1jKgkqLtVyKs3xNr BMaTYtMXSUWtkL5b7A0v9TXdBeoroT8D8avg4wlx7P0uV/VouIY= -----END CERTIFICATE-----Generated at Tue Jul 21 07:01:34 2026 by rpki-client