$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft File: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft (raw, json) Hash identifier: alfWr/HQXe+vjZvU1otLTDgwSitA+zbUeGmXQBQZVH8= Subject key identifier: 8D:B3:B8:30:65:7C:6F:CC:F7:10:9D:0E:15:27:D5:F6:1E:D2:32:1B Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 644C8840A4F1F16EFDFA727F5D8D853DC337BB86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 21:47:10 +0000 Manifest this update: Tue 02 Jun 2026 21:42:10 +0000 Manifest next update: Wed 03 Jun 2026 22:06:10 +0000 Files and hashes: 1: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: RC9a6LW/+eoJDdWzw8/UK2UNfYC2bIi6jAgj1aXZwfs=) 2: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: qErBEzbgejKCSlR97tYuadzXafCvSPlaXArCcdt+yEg=) 3: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: nUJ2UcMYUMgp2Ivw4oUIOzI0b/8YqU8NMhh0tUJGG8w=) 4: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: GVZGNEwcVR+6b1iz+Mf+WaWQxD3aIC0LXDFgR27cdp0=) 5: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: kC/BQJWqF3hfjk7jxki1g+71uLyOIxW8KkPPgVLxjeg=) 6: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: hVmreBSejl8Ng95zD8+VjoKGoyOFeerqH52Ryd6nA/g=) 7: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: g/IwKgkLM3lX7TTfydNsuy1vblZAv0bCcFnenKOiWnI=) 8: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: iBvTknbLTgdzBBg6hpQI6nAp2/Y+ZQ/SghaasUfpG04=) 9: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: 1173I/3m7XkzbM38lD89z6ZiTiudGSDgnrOXK0sI2OM=) 10: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: /B7YofX/HHM+G+hIOgqx/c64KwEJiJwq2rpXtyQZ30I=) 11: 323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa (hash: D+h8jX3eqkGKLtVhz2jT7gpvFEWVMRt52UNBLxkGJhs=) 12: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: oX8mmJjYFncLywEKonSF0YgdnGFD+ctQ155eJaCMAUg=) 13: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: kX944U5wcZ4ljeI4U/N/cddY4+l6BlmIxGXHq+0AWLc=) 14: 323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa (hash: 34GLqmPa0NzJ8OUNPh/1B0CyHBlCIeGKpKQ2WBBDdVw=) 15: 323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (hash: ROBi78wuuDs1YynQRORSD7fsHhMgIofWSrauPO5cQ7U=) 16: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: NhSbtQsCSZOcv410mYA+T/YK4xT0UEtgj3gs2YcEa4w=) 17: 323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa (hash: wYag/KpQxcRCIm84mayvN/ce4e/42pmE6/MAHa5Gds8=) 18: 323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (hash: pXHANQSmeMdKKdoCjZbWQt7xD53ERPYITVt1C9zayGI=) 19: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: RWX46rojpF6BQSm8l4yUodE90WBaf+wB8Y4OTAFQ4ME=) 20: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: E4L4DC+KlZnlYuimMn7ht+nOkbQIJbr5xJR5o/xYX8Q=) 21: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: 7/h2zwvZrAQS0wAHrJy9NqwWiyEipm8MyD1COAfe2nQ=) 22: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: 7VINGDMY1TUq927w0s5kPc4NrKgys1/WpgtYsMIyWe4=) 23: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: RJ17Dz/IGt6G1WroLkK6wHoimyT4sJSrPhTKtpoVzzk=) 24: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: gQ+0Ncm6ouGfqCj99PO+6ljzB+BVgCECd3yhaahocOE=) 25: 323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa (hash: oABovF7KdDdlY6+CHjePOcttfLrt7gjFGQnN04lySCo=) 26: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: cPlZWqFm5MVvHANk5QwuMsGCvqASptrnxXG+efFGx5c=) 27: 323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa (hash: lq8n0YPrI0ej0qKCbfOlpW4tTPmD0iFL3XzQMezYPDc=) 28: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: p9IaRw5dZMu/RqndUf94zxAMZ/T8mQiwgEQa5hTpOao=) 29: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl (hash: MlPVkKaBQD2zl52TCRo33DBmVRwnRHOZTEogORzifRs=) 30: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: GH9tET4mTW+/Gjc8WplZ0ASidCPn/60O8oLirXNQIgM=) 31: 323430303a643934303a3a2f33322d3332203d3e20313336303838.roa (hash: 6v3qgdUIZjmuHWouV9dOsfbIOPcGM+FuLf4il05N+Ek=) 32: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: hC0faeWGVogeaEgDmuTq2f3+pymLHliitj4mm9RD6Qs=) 33: 323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa (hash: cEoIyEjinxE4GnYC0CNRuXvF+WOLWNhACz4dP/4/xaU=) 34: 323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa (hash: VeUuIEzR0KXaVdDKuIt8qmP7aqg4VDEFHLGvR21XwG0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 22:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4c:88:40:a4:f1:f1:6e:fd:fa:72:7f:5d:8d:85:3d:c3:37:bb:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: Jun 2 21:42:10 2026 GMT Not After : Jun 3 22:06:10 2026 GMT Subject: CN=8DB3B830657C6FCCF7109D0E1527D5F61ED2321B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:e3:fb:ea:59:08:84:de:59:bc:63:2f:0c:32: e0:92:15:60:a2:cb:15:76:20:13:e1:b7:38:95:d7: 32:33:0a:41:35:72:a6:87:f3:bf:c6:9d:fc:8d:5d: be:94:88:76:0d:43:c5:75:22:76:03:d2:a7:c2:4a: 68:31:83:ae:ca:e8:65:f5:36:7b:c8:80:de:f5:c5: a7:36:8f:73:70:f0:3e:ef:c7:1d:9b:76:12:4e:be: 21:af:9a:7e:04:41:b2:71:78:4b:68:e6:48:d5:e1: 1c:89:66:11:16:e7:98:37:f7:7e:41:8e:72:77:88: cd:09:fa:a0:19:8c:4a:82:bf:c6:f8:06:24:18:6f: 9c:69:75:01:1d:e7:75:ad:76:f8:68:82:31:c2:70: 28:15:a6:a4:e1:7a:d0:ec:1b:b1:49:2d:8d:13:e2: 68:36:de:12:1e:e4:93:18:eb:cf:db:23:2c:2d:79: a0:53:68:34:85:9f:64:d7:ea:da:b6:1f:c5:a4:c9: 6e:a5:09:b3:88:c9:1f:8f:c3:4a:7f:1c:ad:5d:a4: a1:ae:43:14:53:ea:9d:2a:cb:12:90:6f:e2:e0:03: 8a:2e:5e:79:8a:a2:27:0d:55:3c:29:7a:84:c5:85: 6f:26:90:64:39:a5:d9:ca:f2:76:0c:91:b4:17:e1: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B3:B8:30:65:7C:6F:CC:F7:10:9D:0E:15:27:D5:F6:1E:D2:32:1B X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9b:41:c4:08:17:6d:5b:60:0f:4c:de:80:83:76:cc:67:a3: 1d:98:43:9a:34:c6:f7:29:d5:b1:e4:16:8b:2f:72:44:a6:79: 18:e6:3a:42:73:f5:92:ec:58:8a:70:85:61:d1:44:a7:88:d4: a4:7b:2a:13:22:14:49:b9:bf:4b:d5:07:89:0c:56:08:c1:1f: ba:5b:ef:9d:d0:b8:09:dd:6f:9a:cb:69:68:0a:45:23:24:59: d2:89:91:69:78:a2:5d:dd:27:78:89:df:8d:64:a6:9c:84:2b: 02:06:bc:fc:18:e8:0d:11:2d:89:eb:59:9f:0a:3a:af:db:da: 74:e5:bf:b8:32:08:e9:53:4a:a7:47:e3:24:d7:9d:22:00:5c: b8:30:47:6d:53:87:1f:2b:7d:2d:3d:7e:e6:27:ad:9a:48:c9: 18:84:1d:5f:fa:df:c6:11:59:0a:8b:57:85:60:54:b0:66:31: 5b:29:1b:08:62:e5:63:25:96:7e:bf:3c:f2:f2:34:2a:1b:5f: 5d:a3:e7:2b:d0:f6:73:7f:7a:5e:96:b5:4e:f4:79:73:4c:d4: 9d:4e:76:84:5e:23:6a:8d:e2:18:47:89:aa:e6:71:ce:22:32: 38:96:91:f6:96:9a:76:5a:44:13:7c:c3:af:02:58:23:3a:d4: 2c:21:90:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZEyIQKTx8W79+nJ/XY2FPcM3u4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA2MDIyMTQyMTBaFw0yNjA2MDMyMjA2MTBaMDMxMTAvBgNV BAMTKDhEQjNCODMwNjU3QzZGQ0NGNzEwOUQwRTE1MjdENUY2MUVEMjMyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD94/vqWQiE3lm8Yy8MMuCSFWCi yxV2IBPhtziV1zIzCkE1cqaH87/GnfyNXb6UiHYNQ8V1InYD0qfCSmgxg67K6GX1 NnvIgN71xac2j3Nw8D7vxx2bdhJOviGvmn4EQbJxeEto5kjV4RyJZhEW55g3935B jnJ3iM0J+qAZjEqCv8b4BiQYb5xpdQEd53WtdvhogjHCcCgVpqThetDsG7FJLY0T 4mg23hIe5JMY68/bIywteaBTaDSFn2TX6tq2H8WkyW6lCbOIyR+Pw0p/HK1dpKGu QxRT6p0qyxKQb+LgA4ouXnmKoicNVTwpeoTFhW8mkGQ5pdnK8nYMkbQX4VXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjbO4MGV8b8z3EJ0OFSfV9h7SMhswHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmNGVjMWMtOTUzNS00Y2JmLTlj N2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlF OUI2OTNCN0NDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+bQcQIF21bYA9M3oCDdsxnox2YQ5o0xvcp 1bHkFosvckSmeRjmOkJz9ZLsWIpwhWHRRKeI1KR7KhMiFEm5v0vVB4kMVgjBH7pb 753QuAndb5rLaWgKRSMkWdKJkWl4ol3dJ3iJ341kppyEKwIGvPwY6A0RLYnrWZ8K Oq/b2nTlv7gyCOlTSqdH4yTXnSIAXLgwR21Thx8rfS09fuYnrZpIyRiEHV/638YR WQqLV4VgVLBmMVspGwhi5WMlln6/PPLyNCobX12j5yvQ9nN/el6WtU70eXNM1J1O doReI2qN4hhHiarmcc4iMjiWkfaWmnZaRBN8w68CWCM61CwhkAE= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:45 2026 by rpki-client