$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft File: CAEDA7AE02DCD4B182D96F433016148B66C99993.mft (raw, json) Hash identifier: jdWYn/NCTRma40Ie/O2X7iNmAsGHPPDnXpUZ7eiqK7o= Subject key identifier: E0:9E:93:D0:FB:91:69:B3:6F:AE:AB:61:87:92:63:C5:1C:3A:6E:7B Authority key identifier: CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93 Certificate issuer: /CN=CAEDA7AE02DCD4B182D96F433016148B66C99993 Certificate serial: 389D29450431F0CC47CFC599E9A69AAB447C469C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:57:52 +0000 Manifest this update: Tue 02 Jun 2026 18:52:52 +0000 Manifest next update: Wed 03 Jun 2026 19:11:52 +0000 Files and hashes: 1: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (hash: dGWYPEIN0OvivsS5tklp+El8kTIto83bjZq7fW6iScg=) 2: CAEDA7AE02DCD4B182D96F433016148B66C99993.crl (hash: oADPcQq6bWQYdUwY0No+bl74qoZ/WELJ7gtG9nCMesQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:9d:29:45:04:31:f0:cc:47:cf:c5:99:e9:a6:9a:ab:44:7c:46:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAEDA7AE02DCD4B182D96F433016148B66C99993 Validity Not Before: Jun 2 18:52:52 2026 GMT Not After : Jun 3 19:11:52 2026 GMT Subject: CN=E09E93D0FB9169B36FAEAB61879263C51C3A6E7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:46:ca:77:b4:2a:32:e0:2f:73:2a:ab:68: 1c:b1:bc:22:5e:9d:35:59:b4:a6:c4:0d:81:4a:bb: b7:6e:38:9a:98:47:26:e6:ed:a8:9f:89:95:2c:1b: 8f:ed:92:89:81:f9:92:8a:19:53:30:01:10:c0:b8: 3a:0b:e4:3c:d1:8a:1a:3e:63:6c:92:19:81:40:3d: c9:61:f2:c1:ba:61:7c:dd:ed:b9:30:47:fb:1f:dd: bd:a6:82:e1:ba:2d:37:8c:7c:ad:57:87:42:16:d9: 4b:4e:25:cd:18:42:e4:99:18:30:65:88:6e:c8:49: 91:b6:2e:cc:87:57:80:a1:e5:de:79:60:b8:17:db: 59:e8:62:ab:31:9d:f5:26:7f:b5:94:4f:7e:a4:1d: 20:39:b5:b6:e9:6c:14:bc:8c:31:2b:22:68:94:a3: 0a:d8:85:b6:13:1e:ea:fc:8a:23:e3:bc:7c:1b:6b: 9c:53:ed:c8:48:78:69:9f:4e:e8:ed:8f:4d:1e:d5: a7:0e:74:6e:58:e4:c8:60:97:d1:30:07:8e:60:cf: 3a:43:46:b2:df:fc:3e:38:8a:03:62:93:31:46:bd: 86:8d:76:89:97:16:11:b7:6a:11:68:e2:7e:c1:5d: f1:d0:24:d7:f7:3f:e1:2b:dd:19:ad:94:44:33:78: 6e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9E:93:D0:FB:91:69:B3:6F:AE:AB:61:87:92:63:C5:1C:3A:6E:7B X509v3 Authority Key Identifier: keyid:CA:ED:A7:AE:02:DC:D4:B1:82:D9:6F:43:30:16:14:8B:66:C9:99:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAEDA7AE02DCD4B182D96F433016148B66C99993.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/CAEDA7AE02DCD4B182D96F433016148B66C99993.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:eb:b6:de:0d:39:52:34:f8:78:54:52:91:2e:6e:3b:68:f3: 11:c6:07:7a:90:32:83:45:04:af:23:2d:04:6f:f4:8b:da:23: 87:8c:7e:4c:14:f3:e7:1c:7b:a3:60:44:20:cb:11:64:07:68: e9:0e:6a:96:8f:3a:91:f2:fd:16:0e:d9:fb:66:55:57:ce:c4: 99:8f:c0:28:9e:cd:6a:e5:40:b9:1d:fd:f4:06:11:90:1b:02: 3b:8f:ec:76:23:d9:c8:e3:f1:1d:e3:91:96:a4:63:d5:1c:5c: c1:50:09:ca:8b:45:15:8b:8e:90:3f:5e:2f:c0:37:9e:fb:29: 15:26:a1:14:8b:04:55:7f:c6:8a:fb:3c:08:61:23:44:24:d4: a5:ec:43:08:f7:de:cf:41:f3:1a:2b:97:bf:d1:7e:e9:32:39: 78:e6:42:9e:65:91:13:18:70:21:4d:ac:84:28:12:25:2e:7b: 92:70:c9:b3:91:28:a5:40:d7:0d:8a:07:41:bd:f7:3d:ca:ef: dd:a1:f0:49:e9:f2:8f:c3:b3:18:3d:2c:f2:9e:fa:91:68:ce: 44:d8:7e:61:f6:1c:f9:a6:57:87:47:95:6e:f3:d4:a8:7f:30: a7:28:bb:2d:2e:31:9b:0e:7a:e5:e9:10:42:36:03:0e:f6:31: 79:b4:74:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJ0pRQQx8MxHz8WZ6aaaq0R8RpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFREE3QUUwMkRDRDRCMTgyRDk2RjQzMzAxNjE0OEI2 NkM5OTk5MzAeFw0yNjA2MDIxODUyNTJaFw0yNjA2MDMxOTExNTJaMDMxMTAvBgNV BAMTKEUwOUU5M0QwRkI5MTY5QjM2RkFFQUI2MTg3OTI2M0M1MUMzQTZFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdz0bKd7QqMuAvcyqraByxvCJe nTVZtKbEDYFKu7duOJqYRybm7aifiZUsG4/tkomB+ZKKGVMwARDAuDoL5DzRiho+ Y2ySGYFAPclh8sG6YXzd7bkwR/sf3b2mguG6LTeMfK1Xh0IW2UtOJc0YQuSZGDBl iG7ISZG2LsyHV4Ch5d55YLgX21noYqsxnfUmf7WUT36kHSA5tbbpbBS8jDErImiU owrYhbYTHur8iiPjvHwba5xT7chIeGmfTujtj00e1acOdG5Y5Mhgl9EwB45gzzpD RrLf/D44igNikzFGvYaNdomXFhG3ahFo4n7BXfHQJNf3P+Er3RmtlEQzeG5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4J6T0PuRabNvrqthh5JjxRw6bnswHwYDVR0j BBgwFoAUyu2nrgLc1LGC2W9DMBYUi2bJmZMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGQ0NmE1NjQtNjM0Ny00MGVmLWJhZDMtNGRhYWUzMDZkNDIxLzAvQ0FFREE3QUUw MkRDRDRCMTgyRDk2RjQzMzAxNjE0OEI2NkM5OTk5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUVEQTdBRTAyRENENEIxODJEOTZGNDMzMDE2MTQ4QjY2Qzk5 OTkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGQ0NmE1NjQtNjM0Ny00MGVmLWJh ZDMtNGRhYWUzMDZkNDIxLzAvQ0FFREE3QUUwMkRDRDRCMTgyRDk2RjQzMzAxNjE0 OEI2NkM5OTk5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDrtt4NOVI0+HhUUpEubjto8xHGB3qQMoNF BK8jLQRv9IvaI4eMfkwU8+cce6NgRCDLEWQHaOkOapaPOpHy/RYO2ftmVVfOxJmP wCiezWrlQLkd/fQGEZAbAjuP7HYj2cjj8R3jkZakY9UcXMFQCcqLRRWLjpA/Xi/A N577KRUmoRSLBFV/xor7PAhhI0Qk1KXsQwj33s9B8xorl7/RfukyOXjmQp5lkRMY cCFNrIQoEiUue5JwybORKKVA1w2KB0G99z3K792h8Enp8o/Dsxg9LPKe+pFozkTY fmH2HPmmV4dHlW7z1Kh/MKcouy0uMZsOeuXpEEI2Aw72MXm0dII= -----END CERTIFICATE-----Generated at Wed Jun 3 03:49:50 2026 by rpki-client