$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft File: CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft (raw, json) Hash identifier: bQz5Z0xSRjW0VC03tQ8eZkF5lTkbdax1MfOB0TLP24c= Subject key identifier: 91:23:0F:DC:E8:5F:4F:D0:E4:65:99:DF:AC:16:EB:56:00:BE:7D:F9 Authority key identifier: CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 Certificate issuer: /CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Certificate serial: 05E27E88C3EEF8440A66226F4C547AC7999BCBC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 08:59:16 +0000 Manifest this update: Tue 03 Nov 2026 08:54:16 +0000 Manifest next update: Wed 04 Nov 2026 12:10:16 +0000 Files and hashes: 1: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: CHKJIH+fJABznZsBmBVESLsgPUznf5glQmQTYMsLlJ0=) 2: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: i1H+ReQBHn9JCYQi5CWfxN7OhwjtzW41V0M/jyxFA08=) 3: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: mWR29teFlpS2QFv6Te8ENnUPdsf5nVL4GnQAxRUQqGI=) 4: CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl (hash: S2gzugYLV2NhvHSXlIh1wdiRlBy/nMBxBj/RB78r0s0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e2:7e:88:c3:ee:f8:44:0a:66:22:6f:4c:54:7a:c7:99:9b:cb:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Validity Not Before: Nov 3 08:54:16 2026 GMT Not After : Nov 4 12:10:16 2026 GMT Subject: CN=91230FDCE85F4FD0E46599DFAC16EB5600BE7DF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:aa:d2:1c:0b:36:ab:29:a6:ca:33:14:63:b5: 88:bd:c5:a3:88:72:a4:9d:e6:41:4f:dc:69:1d:97: 86:94:2d:7b:24:97:a7:91:45:1d:aa:ad:c4:64:fd: 23:d6:d8:dd:e4:7e:d5:7b:92:14:2b:23:14:1c:6a: 40:f6:d9:16:2b:cc:eb:22:11:3e:ac:74:81:1d:90: 65:a7:62:59:3b:f7:a1:e9:0b:50:fc:5c:6a:09:84: 10:d9:9a:88:6e:45:fe:dc:fb:c4:0a:6a:aa:9c:f1: a2:7f:b5:70:90:2e:55:4c:a6:16:7f:b2:51:70:29: bc:4c:62:d1:8a:7a:92:c4:a3:d5:88:e8:f8:94:d8: 9b:bd:32:86:76:8f:5c:e4:8f:69:76:d7:61:81:5c: d7:1e:cd:79:60:92:48:f9:45:d4:b6:ac:10:a7:f3: 46:03:91:98:f3:d1:19:86:ad:27:3f:05:52:7b:37: aa:34:23:f4:b4:54:4a:fa:12:74:6f:32:b0:d8:74: 96:48:7e:55:4f:b8:89:52:52:78:c2:02:8c:30:80: c3:c6:f0:ce:2d:32:97:d9:1f:ac:81:1e:2b:be:30: 7a:b1:95:e9:1e:e1:9b:d9:08:6b:55:fd:a4:33:ba: 2f:ab:1c:c2:fe:2f:f6:9c:c5:af:af:3d:59:11:ca: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:23:0F:DC:E8:5F:4F:D0:E4:65:99:DF:AC:16:EB:56:00:BE:7D:F9 X509v3 Authority Key Identifier: keyid:CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ec:c4:17:97:a3:16:72:b4:c6:99:74:93:9f:99:e7:88:eb: 19:16:6a:42:ec:f2:4f:a2:1a:06:25:d7:42:19:d1:df:da:cc: dd:13:78:58:9b:c6:e2:dc:a9:10:1f:d2:7d:b5:1b:46:1e:17: b8:da:ca:97:73:b6:c3:09:85:ab:33:fb:3c:0a:e7:0f:a5:18: 7c:d0:16:30:ad:2f:fa:54:25:4f:4e:d6:e5:87:14:06:f1:10: ed:e7:2a:26:7c:a8:04:14:fe:64:05:db:0d:1b:85:dd:02:94: 4c:8a:b3:7f:ee:85:d4:a1:7d:cc:8e:b0:45:7b:60:c9:5f:51: c0:25:5e:59:78:37:88:4a:1e:25:1c:62:c4:c5:10:20:fa:fc: 79:89:29:8a:de:61:2e:1a:ea:29:c8:60:79:d7:34:73:60:7a: 6a:d3:8a:f3:ed:7f:db:05:fd:f8:aa:f3:d6:d6:11:11:a2:f9: 31:ce:5d:1d:8d:72:e6:95:26:fc:92:3c:5b:80:cb:f1:4e:36: 3b:ea:21:0c:ea:74:d9:74:b6:91:26:93:50:24:ca:be:92:69: 50:20:75:45:fa:26:eb:2a:73:d4:17:c5:c9:61:38:0a:0d:84: a1:cb:3d:d8:1b:d6:56:30:6d:95:f2:9e:de:b3:97:11:25:87: 95:b0:a6:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBeJ+iMPu+EQKZiJvTFR6x5mby8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2NjRG QzIwRUFFMDAeFw0yNjExMDMwODU0MTZaFw0yNjExMDQxMjEwMTZaMDMxMTAvBgNV BAMTKDkxMjMwRkRDRTg1RjRGRDBFNDY1OTlERkFDMTZFQjU2MDBCRTdERjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhqtIcCzarKabKMxRjtYi9xaOI cqSd5kFP3Gkdl4aULXskl6eRRR2qrcRk/SPW2N3kftV7khQrIxQcakD22RYrzOsi ET6sdIEdkGWnYlk796HpC1D8XGoJhBDZmohuRf7c+8QKaqqc8aJ/tXCQLlVMphZ/ slFwKbxMYtGKepLEo9WI6PiU2Ju9MoZ2j1zkj2l212GBXNcezXlgkkj5RdS2rBCn 80YDkZjz0RmGrSc/BVJ7N6o0I/S0VEr6EnRvMrDYdJZIflVPuIlSUnjCAowwgMPG 8M4tMpfZH6yBHiu+MHqxleke4ZvZCGtV/aQzui+rHML+L/acxa+vPVkRyv43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkSMP3OhfT9DkZZnfrBbrVgC+ffkwHwYDVR0j BBgwFoAUyuk5xa2pAVhOkAcft+UGZPwg6uAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzlmM2M3NjktY2ZiMS00MjA2LTlmNTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVB REE5MDE1ODRFOTAwNzFGQjdFNTA2NjRGQzIwRUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUU5MzlDNUFEQTkwMTU4NEU5MDA3MUZCN0U1MDY2NEZDMjBF QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2 NjRGQzIwRUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbsxBeXoxZytMaZdJOfmeeI6xkWakLs8k+i GgYl10IZ0d/azN0TeFibxuLcqRAf0n21G0YeF7jaypdztsMJhasz+zwK5w+lGHzQ FjCtL/pUJU9O1uWHFAbxEO3nKiZ8qAQU/mQF2w0bhd0ClEyKs3/uhdShfcyOsEV7 YMlfUcAlXll4N4hKHiUcYsTFECD6/HmJKYreYS4a6inIYHnXNHNgemrTivPtf9sF /fiq89bWERGi+THOXR2NcuaVJvySPFuAy/FONjvqIQzqdNl0tpEmk1Akyr6SaVAg dUX6Jusqc9QXxclhOAoNhKHLPdgb1lYwbZXynt6zlxElh5Wwpuk= -----END CERTIFICATE-----Generated at Tue Nov 3 20:50:37 2026 by rpki-client