$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft File: CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft (raw, json) Hash identifier: 03ULfaxV9T6TChm3HW2JfB1ZeFQEiheaimztXIbNIXg= Subject key identifier: 1C:A2:0C:CC:C2:07:A1:4E:78:79:9B:0C:72:A9:EE:58:30:6B:32:EB Authority key identifier: CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 Certificate issuer: /CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Certificate serial: 6C4F4F6A37A9E99AA4CB80BC5AC05A158A4D810D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft Manifest number: 2C Signing time: Wed 03 Jun 2026 02:22:35 +0000 Manifest this update: Wed 03 Jun 2026 02:17:35 +0000 Manifest next update: Thu 04 Jun 2026 05:28:35 +0000 Files and hashes: 1: CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl (hash: I09VX1a3vFkhAC5LMBNUPwTzSKl4AOfEHPMV7Cm7Z64=) 2: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: CHKJIH+fJABznZsBmBVESLsgPUznf5glQmQTYMsLlJ0=) 3: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: i1H+ReQBHn9JCYQi5CWfxN7OhwjtzW41V0M/jyxFA08=) 4: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: mWR29teFlpS2QFv6Te8ENnUPdsf5nVL4GnQAxRUQqGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 04:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4f:4f:6a:37:a9:e9:9a:a4:cb:80:bc:5a:c0:5a:15:8a:4d:81:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Validity Not Before: Jun 3 02:17:35 2026 GMT Not After : Jun 4 05:28:35 2026 GMT Subject: CN=1CA20CCCC207A14E78799B0C72A9EE58306B32EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:fb:08:de:c6:c6:85:49:a2:5d:c2:e6:b9: 7f:e1:13:2a:91:9b:be:b1:65:d3:ec:5a:46:8b:7e: f0:f3:02:d9:e9:f3:4c:23:0a:96:d1:55:f9:c6:ce: f3:f6:f4:b5:a5:33:11:ec:07:28:0a:da:03:49:ca: 4c:d9:be:6e:36:fa:94:39:03:4f:01:46:db:51:d1: e7:c7:fb:3b:92:7c:42:77:02:06:d2:69:d7:60:ff: d9:cd:2b:5a:b6:22:89:6a:6c:a2:5f:24:4a:00:f7: 7b:81:a0:71:74:34:6a:33:28:21:be:92:8a:40:4a: a7:eb:c3:e6:63:62:54:08:40:66:6b:98:11:f4:59: 2e:7c:10:a4:d2:f3:da:94:8d:6d:08:5f:38:c1:e5: 5d:ed:ab:12:ac:5d:c8:99:d7:89:e1:65:ed:fa:5a: e5:82:e8:92:4c:f0:6b:4e:b1:dd:24:0d:96:67:ba: a5:93:fa:0d:16:01:82:7d:ac:51:02:3f:d8:1c:7b: 13:43:1c:30:dd:90:a2:db:1d:7c:65:3c:bf:8f:1a: d6:9f:b9:39:93:3e:a2:4c:ac:42:c9:d7:cc:cd:b3: aa:c4:e6:2a:3e:e5:44:f2:85:75:d3:e2:99:a0:a4: a0:95:56:7d:fc:b0:ff:9e:0f:58:0d:40:69:1a:3a: 1d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A2:0C:CC:C2:07:A1:4E:78:79:9B:0C:72:A9:EE:58:30:6B:32:EB X509v3 Authority Key Identifier: keyid:CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f1:d9:be:3b:26:8e:f6:ec:e9:b7:87:17:c0:76:e4:22:29: a5:97:1a:48:03:11:1c:53:6a:90:43:90:a4:62:c2:92:9d:52: e9:ea:33:a5:0c:35:4e:54:77:0a:ab:c0:4d:ea:db:0f:cb:9c: d7:99:90:e5:95:f5:1c:94:94:48:49:0c:98:19:f6:e4:86:35: 3e:ba:4a:fc:1b:05:a7:26:0f:69:d0:c1:12:53:59:c2:0c:e9: 72:22:ba:7b:6c:7f:a9:64:45:32:4d:26:9a:d3:f4:05:48:78: 0d:01:87:7b:b9:d5:72:75:f3:46:22:9f:29:a1:de:de:20:dd: 6c:a9:bf:ca:6a:06:d8:ba:fb:c8:76:a9:27:88:46:2a:91:38: 41:62:3b:4b:71:3a:4e:78:eb:77:01:18:54:6a:6c:2e:60:70: 4c:fe:b0:27:b0:71:2a:04:2f:fa:c1:7c:2e:6b:68:68:c7:50: 3e:78:ac:64:38:68:80:b6:24:80:55:d5:03:46:5c:64:f8:a2: 6c:96:ca:7a:d7:77:4e:50:76:96:6b:80:c7:ed:48:2d:88:26: 91:3c:1d:82:6a:b9:94:ce:7f:8f:96:00:f3:d3:85:02:ce:ac: 7c:f5:3e:d2:18:9f:26:32:51:11:5e:50:8d:70:5f:fa:9f:05: 14:98:a2:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbE9Pajep6Zqky4C8WsBaFYpNgQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2NjRG QzIwRUFFMDAeFw0yNjA2MDMwMjE3MzVaFw0yNjA2MDQwNTI4MzVaMDMxMTAvBgNV BAMTKDFDQTIwQ0NDQzIwN0ExNEU3ODc5OUIwQzcyQTlFRTU4MzA2QjMyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2W/sI3sbGhUmiXcLmuX/hEyqR m76xZdPsWkaLfvDzAtnp80wjCpbRVfnGzvP29LWlMxHsBygK2gNJykzZvm42+pQ5 A08BRttR0efH+zuSfEJ3AgbSaddg/9nNK1q2IolqbKJfJEoA93uBoHF0NGozKCG+ kopASqfrw+ZjYlQIQGZrmBH0WS58EKTS89qUjW0IXzjB5V3tqxKsXciZ14nhZe36 WuWC6JJM8GtOsd0kDZZnuqWT+g0WAYJ9rFECP9gcexNDHDDdkKLbHXxlPL+PGtaf uTmTPqJMrELJ18zNs6rE5io+5UTyhXXT4pmgpKCVVn38sP+eD1gNQGkaOh1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHKIMzMIHoU54eZsMcqnuWDBrMuswHwYDVR0j BBgwFoAUyuk5xa2pAVhOkAcft+UGZPwg6uAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzlmM2M3NjktY2ZiMS00MjA2LTlmNTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVB REE5MDE1ODRFOTAwNzFGQjdFNTA2NjRGQzIwRUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUU5MzlDNUFEQTkwMTU4NEU5MDA3MUZCN0U1MDY2NEZDMjBF QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2 NjRGQzIwRUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3x2b47Jo727Om3hxfAduQiKaWXGkgDERxT apBDkKRiwpKdUunqM6UMNU5UdwqrwE3q2w/LnNeZkOWV9RyUlEhJDJgZ9uSGNT66 SvwbBacmD2nQwRJTWcIM6XIiuntsf6lkRTJNJprT9AVIeA0Bh3u51XJ180Yinymh 3t4g3Wypv8pqBti6+8h2qSeIRiqROEFiO0txOk5463cBGFRqbC5gcEz+sCewcSoE L/rBfC5raGjHUD54rGQ4aIC2JIBV1QNGXGT4omyWynrXd05QdpZrgMftSC2IJpE8 HYJquZTOf4+WAPPThQLOrHz1PtIYnyYyURFeUI1wX/qfBRSYomk= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:25 2026 by rpki-client