$ rpki-client -vvf rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft File: CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft (raw, json) Hash identifier: 0kMFlGxDhgkL5kmu1MykzXIMRPSo7KhQPJSvj7Cm7fM= Subject key identifier: 44:AF:D5:38:07:5D:75:A1:6C:67:7E:22:F3:0A:31:1E:AA:8C:68:59 Authority key identifier: CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D Certificate issuer: /CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Certificate serial: 0FC56F26E6AA324BC888272A5BDB5B759D066EE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 00:10:04 +0000 Manifest this update: Sat 20 Jun 2026 00:05:04 +0000 Manifest next update: Sun 21 Jun 2026 04:06:04 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: qgoD91gK7+McaB5oJcIqhycO0nQvgEjYPEclcWIzrPE=) 2: CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl (hash: CC6mitC18lMpelXQfcWIM9wym1uZ3FznQykZ3WCoFC0=) 3: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: z0KglzUoHVHvxkZjD906Xmm3Uuu4IPK6qmYY5Pl0Weo=) 4: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: H8aIKDmEKvaPKBbfecYKEblnH3STGcj0MkoXv4D6fxM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c5:6f:26:e6:aa:32:4b:c8:88:27:2a:5b:db:5b:75:9d:06:6e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE395EB47BB4E57990DF283DD7B95950CFB683D Validity Not Before: Jun 20 00:05:04 2026 GMT Not After : Jun 21 04:06:04 2026 GMT Subject: CN=44AFD538075D75A16C677E22F30A311EAA8C6859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:6d:83:8f:10:4a:6a:f1:03:fb:f9:e1:03: 76:88:48:e9:9d:44:1a:5a:89:b0:2c:59:1f:c1:f0: 16:f4:4f:52:1a:61:4b:ea:40:06:8c:51:2b:42:60: 86:c4:53:1d:8f:4e:0d:f0:2d:00:cc:0f:3d:39:08: 49:24:40:a5:1f:8a:a6:4e:85:c3:b7:f7:a7:ce:a7: 56:3c:2f:7b:ff:f9:c8:b5:c8:47:89:41:6b:a8:9f: 95:ef:f2:0c:03:17:6a:fa:6c:7b:82:b7:bd:7c:22: b0:7a:20:ff:82:ac:7b:61:a5:94:98:0f:31:bd:5e: 2f:76:12:ab:a4:f7:e5:5a:42:f3:05:71:77:4a:e1: e2:f8:5b:51:2a:f1:78:78:ec:07:6b:7d:63:b4:c5: 1a:b7:7a:72:51:bf:af:14:82:e7:b3:36:b8:c1:2d: 2c:f4:3b:7d:db:93:61:31:9d:3b:1d:93:43:72:80: 41:45:02:1f:c8:ba:1a:bd:a3:a3:28:31:b3:e8:55: b9:ef:1a:03:41:b2:ff:d8:87:8c:a8:32:db:a3:41: 84:ca:bd:d2:96:55:d1:5b:5b:6e:a9:9b:86:d4:91: e3:bc:31:a6:08:78:0d:c0:7b:b5:6a:ae:73:bf:7d: 58:05:84:85:39:3d:3f:c7:57:55:6b:33:fe:77:4f: 59:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AF:D5:38:07:5D:75:A1:6C:67:7E:22:F3:0A:31:1E:AA:8C:68:59 X509v3 Authority Key Identifier: keyid:CA:E3:95:EB:47:BB:4E:57:99:0D:F2:83:DD:7B:95:95:0C:FB:68:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE395EB47BB4E57990DF283DD7B95950CFB683D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/CAE395EB47BB4E57990DF283DD7B95950CFB683D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2d:ea:83:15:94:e4:6e:5a:2a:87:ad:6f:f9:af:9c:03:7e: f4:4f:a2:7c:14:5a:67:74:4f:ae:70:84:76:6e:83:ce:62:21: 4c:87:9c:90:cb:5d:1c:20:34:48:3c:87:b8:0a:c8:aa:09:45: 37:2c:85:4a:61:7a:d5:2a:38:6f:b6:a8:c1:9b:55:16:4b:2e: d2:c9:3b:72:52:44:90:8a:4e:74:78:9a:b1:a6:24:f0:92:fb: 56:b7:b0:59:70:59:7e:4b:4a:66:1e:eb:77:0a:71:12:3a:12: 0b:b4:69:1c:ac:d1:3b:75:f8:5a:d8:3f:f9:6a:93:e3:96:e5: 9b:c3:1a:af:08:6a:e8:45:2b:b9:6b:28:6a:f6:8e:77:e6:bd: ac:2d:88:4d:03:e8:6b:7e:e5:99:fd:e1:54:de:2a:19:61:93: d1:ab:26:a7:75:73:44:71:50:59:c4:3a:e6:3c:1e:d2:85:2a: c1:f9:bb:38:ce:04:b0:53:58:b5:68:98:da:4e:e2:4d:24:9e: 89:0a:0d:65:a8:87:43:ba:a0:28:02:6f:41:b7:24:4f:b0:f9: c6:28:12:57:2e:7e:d1:9f:c9:6e:3d:2c:02:83:8a:49:46:9d: fb:09:68:f3:d6:05:be:81:90:0e:a5:f9:6b:aa:f6:16:f4:5c: 2e:bf:9e:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD8VvJuaqMkvIiCcqW9tbdZ0GbuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUw Q0ZCNjgzRDAeFw0yNjA2MjAwMDA1MDRaFw0yNjA2MjEwNDA2MDRaMDMxMTAvBgNV BAMTKDQ0QUZENTM4MDc1RDc1QTE2QzY3N0UyMkYzMEEzMTFFQUE4QzY4NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaG2DjxBKavED+/nhA3aISOmd RBpaibAsWR/B8Bb0T1IaYUvqQAaMUStCYIbEUx2PTg3wLQDMDz05CEkkQKUfiqZO hcO396fOp1Y8L3v/+ci1yEeJQWuon5Xv8gwDF2r6bHuCt718IrB6IP+CrHthpZSY DzG9Xi92Equk9+VaQvMFcXdK4eL4W1Eq8Xh47AdrfWO0xRq3enJRv68UguezNrjB LSz0O33bk2ExnTsdk0NygEFFAh/Iuhq9o6MoMbPoVbnvGgNBsv/Yh4yoMtujQYTK vdKWVdFbW26pm4bUkeO8MaYIeA3Ae7VqrnO/fVgFhIU5PT/HV1VrM/53T1mBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURK/VOAdddaFsZ34i8woxHqqMaFkwHwYDVR0j BBgwFoAUyuOV60e7TleZDfKD3XuVlQz7aD0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZmM2FlOTctZjUyZS00OTc3LTkwZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0 N0JCNEU1Nzk5MERGMjgzREQ3Qjk1OTUwQ0ZCNjgzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUUzOTVFQjQ3QkI0RTU3OTkwREYyODNERDdCOTU5NTBDRkI2 ODNELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvQ0FFMzk1RUI0N0JCNEU1Nzk5MERGMjgzREQ3Qjk1 OTUwQ0ZCNjgzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwt6oMVlORuWiqHrW/5r5wDfvRPonwUWmd0 T65whHZug85iIUyHnJDLXRwgNEg8h7gKyKoJRTcshUphetUqOG+2qMGbVRZLLtLJ O3JSRJCKTnR4mrGmJPCS+1a3sFlwWX5LSmYe63cKcRI6Egu0aRys0Tt1+FrYP/lq k+OW5ZvDGq8IauhFK7lrKGr2jnfmvawtiE0D6Gt+5Zn94VTeKhlhk9GrJqd1c0Rx UFnEOuY8HtKFKsH5uzjOBLBTWLVomNpO4k0knokKDWWoh0O6oCgCb0G3JE+w+cYo ElcuftGfyW49LAKDiklGnfsJaPPWBb6BkA6l+Wuq9hb0XC6/noA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:01:31 2026 by rpki-client