$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft File: CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft (raw, json) Hash identifier: Aieqzxpq0SDvo6Z7hOK0JBYCyapQpOeQEFnBedWDN9E= Subject key identifier: 03:C2:D0:AE:2B:86:A5:47:A1:6E:D5:BB:7F:02:50:5C:A6:A9:0A:C8 Authority key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D Certificate issuer: /CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Certificate serial: 1AA4B320E1AECB40BE68ED3F6262E48930BBD6C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft Manifest number: EC Signing time: Sun 25 Oct 2026 21:43:52 +0000 Manifest this update: Sun 25 Oct 2026 21:38:52 +0000 Manifest next update: Tue 27 Oct 2026 00:20:52 +0000 Files and hashes: 1: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: z0KglzUoHVHvxkZjD906Xmm3Uuu4IPK6qmYY5Pl0Weo=) 2: CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl (hash: dFS82VvdWODuclvYg0Dy4UNPtMZuKtTtPAAFK2o/A5I=) 3: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: qgoD91gK7+McaB5oJcIqhycO0nQvgEjYPEclcWIzrPE=) 4: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: H8aIKDmEKvaPKBbfecYKEblnH3STGcj0MkoXv4D6fxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a4:b3:20:e1:ae:cb:40:be:68:ed:3f:62:62:e4:89:30:bb:d6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Validity Not Before: Oct 25 21:38:52 2026 GMT Not After : Oct 27 00:20:52 2026 GMT Subject: CN=03C2D0AE2B86A547A16ED5BB7F02505CA6A90AC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:58:92:74:48:4e:40:0b:7a:5f:70:38:bc: f9:4c:46:6b:38:9f:2a:60:9a:68:42:3b:bc:f1:50: 1d:30:39:65:de:a1:f5:22:54:ed:65:e7:92:76:a1: 7d:04:37:2d:e8:04:8d:31:bd:fb:97:ea:35:73:6d: 4d:64:50:2d:eb:80:09:76:42:25:17:22:e0:16:73: f8:72:a8:82:0b:c1:8d:74:bb:94:b6:e6:e4:9e:3c: 65:6d:49:65:c7:43:d4:cf:b2:3b:71:73:89:b4:56: 47:9e:17:b7:92:d5:31:ca:ad:76:71:6f:45:e2:17: 23:a6:f1:0b:f6:5d:60:93:42:2e:3c:35:43:7d:ce: 85:3b:93:06:b8:e7:dc:f1:4d:d3:e4:c2:72:ab:4c: e9:c8:e2:2e:d4:5d:c4:e0:27:d1:2b:de:c8:36:b8: 39:98:f2:3b:78:2b:ea:4b:b0:74:78:0b:45:df:4d: 22:96:86:3b:32:0a:bb:22:a8:e7:41:34:49:78:ec: b5:4e:a3:30:82:8f:dd:ba:35:b8:6b:de:b7:33:c1: 6a:4b:e4:69:43:2b:31:7a:b0:a3:8d:1e:fb:4d:00: 65:85:9b:7f:3b:a3:fd:9a:75:70:cb:80:ec:7e:7e: c8:ac:bb:a3:ad:11:41:a2:86:12:71:a4:52:f0:8a: 78:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C2:D0:AE:2B:86:A5:47:A1:6E:D5:BB:7F:02:50:5C:A6:A9:0A:C8 X509v3 Authority Key Identifier: keyid:CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:09:52:0f:ab:d2:e2:f4:c3:83:88:ce:be:fb:87:37:ae:a3: 3f:5a:d7:d4:ac:32:ee:3a:59:71:30:34:0f:51:e1:dc:d9:f7: 14:c1:8b:e6:eb:09:c0:20:32:bf:20:71:40:3c:f5:81:ef:5a: 59:aa:02:e3:ec:4c:8d:50:a9:73:4b:cb:2b:e4:c8:87:06:75: fa:f6:3a:f6:e5:2d:90:df:83:3b:4f:0f:d1:fb:da:46:5f:84: a3:63:3a:19:73:02:c9:02:fa:b1:3c:6c:6d:12:98:7a:1a:2c: 80:e8:79:f2:3a:38:2a:50:7f:01:c4:7d:e9:a9:f4:1e:70:38: c2:dc:85:25:56:5c:70:51:81:71:6f:80:88:0e:e7:14:44:9d: c0:ee:1e:d7:6a:2d:d5:54:43:cd:27:92:ee:8d:50:07:6a:90: b1:7c:f9:e6:48:56:cc:fc:b6:5d:64:7c:95:3f:19:8f:57:49: 6f:60:6d:33:90:19:e2:6b:79:25:67:e2:db:83:66:92:43:6a: 04:0f:a7:2f:27:9b:8c:2b:1c:79:ed:79:91:b7:2b:2d:dd:99: 93:74:6f:f7:91:46:9e:85:f4:2c:62:ea:9a:23:be:82:09:cd: a1:b2:57:81:4c:f7:7a:b7:50:10:51:89:3a:28:3c:c9:9d:fe: 60:e2:d0:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqSzIOGuy0C+aO0/YmLkiTC71sEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUw Q0ZCNjgzRDAeFw0yNjEwMjUyMTM4NTJaFw0yNjEwMjcwMDIwNTJaMDMxMTAvBgNV BAMTKDAzQzJEMEFFMkI4NkE1NDdBMTZFRDVCQjdGMDI1MDVDQTZBOTBBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovViSdEhOQAt6X3A4vPlMRms4 nypgmmhCO7zxUB0wOWXeofUiVO1l55J2oX0ENy3oBI0xvfuX6jVzbU1kUC3rgAl2 QiUXIuAWc/hyqIILwY10u5S25uSePGVtSWXHQ9TPsjtxc4m0VkeeF7eS1THKrXZx b0XiFyOm8Qv2XWCTQi48NUN9zoU7kwa459zxTdPkwnKrTOnI4i7UXcTgJ9Er3sg2 uDmY8jt4K+pLsHR4C0XfTSKWhjsyCrsiqOdBNEl47LVOozCCj926Nbhr3rczwWpL 5GlDKzF6sKONHvtNAGWFm387o/2adXDLgOx+fsisu6OtEUGihhJxpFLwiniNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA8LQriuGpUehbtW7fwJQXKapCsgwHwYDVR0j BBgwFoAUyuOV60e7TleZDfKD3XuVlQz7aD0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZmM2FlOTctZjUyZS00OTc3LTkwZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0 N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUwQ0ZCNjgzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUUzOTVFQjQ3QkI0RTU3OTkwREYyODNERDdCOTU5NTBDRkI2 ODNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1 OTUwQ0ZCNjgzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8JUg+r0uL0w4OIzr77hzeuoz9a19SsMu46 WXEwNA9R4dzZ9xTBi+brCcAgMr8gcUA89YHvWlmqAuPsTI1QqXNLyyvkyIcGdfr2 OvblLZDfgztPD9H72kZfhKNjOhlzAskC+rE8bG0SmHoaLIDoefI6OCpQfwHEfemp 9B5wOMLchSVWXHBRgXFvgIgO5xREncDuHtdqLdVUQ80nku6NUAdqkLF8+eZIVsz8 tl1kfJU/GY9XSW9gbTOQGeJreSVn4tuDZpJDagQPpy8nm4wrHHnteZG3Ky3dmZN0 b/eRRp6F9Cxi6pojvoIJzaGyV4FM93q3UBBRiTooPMmd/mDi0Jc= -----END CERTIFICATE-----Generated at Mon Oct 26 06:20:20 2026 by rpki-client