$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft File: CDAD8AE64850B7306026A1B46FF84D08284104C9.mft (raw, json) Hash identifier: OPTbiupuIrQl4CG5DM8k9PiguolVg/uu/CjXk5HweSI= Subject key identifier: 5F:B6:A2:25:C9:FF:F6:C4:27:D9:03:2A:C5:B6:42:EF:E2:F7:E1:7C Authority key identifier: CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 Certificate issuer: /CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Certificate serial: 3BB61049E189F5C59C58207E3FDB7E849E161184 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft Manifest number: 47 Signing time: Wed 24 Jun 2026 04:46:11 +0000 Manifest this update: Wed 24 Jun 2026 04:41:11 +0000 Manifest next update: Thu 25 Jun 2026 06:11:11 +0000 Files and hashes: 1: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: Rie1EWmYCW5AS7gherk1HJqeE5vY8I4Pjrh2HLZJQzM=) 2: CDAD8AE64850B7306026A1B46FF84D08284104C9.crl (hash: Jyn5meU5ZhnftwE/ahICWcT78cAZ+2vXlPWzbiHO198=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 06:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b6:10:49:e1:89:f5:c5:9c:58:20:7e:3f:db:7e:84:9e:16:11:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDAD8AE64850B7306026A1B46FF84D08284104C9 Validity Not Before: Jun 24 04:41:11 2026 GMT Not After : Jun 25 06:11:11 2026 GMT Subject: CN=5FB6A225C9FFF6C427D9032AC5B642EFE2F7E17C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:4c:09:ad:7c:79:8e:38:fe:5f:35:00:44: 96:77:20:e5:7e:99:d1:ec:c6:c3:97:63:af:df:71: 5d:ef:b1:3a:87:1f:4b:3a:3d:a3:81:b5:42:59:0f: ae:08:10:1b:1e:04:24:c1:56:ea:38:17:d9:b8:f8: b4:27:89:51:a2:2f:1f:6b:a0:dd:55:ca:de:da:28: d3:26:e0:c7:6d:c1:b8:e6:66:ed:ec:a7:3c:4b:dc: 25:d8:95:41:e9:f5:b4:bd:1b:2a:a2:ac:4a:85:d5: 3b:37:fc:0b:23:c0:d2:6d:34:6b:97:f2:72:81:62: 9d:59:c8:e1:f6:3a:b4:2c:b6:85:c4:21:5e:bb:ed: 30:e3:b1:07:58:a4:d9:e1:eb:5d:95:e4:a4:fe:d7: 1c:0a:7c:00:d5:a6:ae:67:17:65:ea:64:9e:ee:4c: f6:47:ec:8c:d0:cd:0f:6b:ec:7b:d7:b6:64:eb:5c: a5:52:97:4a:65:d8:90:d3:c8:32:08:38:7c:a4:49: 3b:14:20:2d:ee:76:1b:52:18:be:26:fe:92:0b:11: a5:1e:e5:41:f7:f7:6e:7a:df:a4:36:c6:d3:03:0b: 9b:b2:f3:9b:02:15:7c:c8:da:d3:93:98:13:dd:08: 3b:ef:b4:22:7b:4d:79:50:be:e1:12:8d:ea:5f:64: f3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B6:A2:25:C9:FF:F6:C4:27:D9:03:2A:C5:B6:42:EF:E2:F7:E1:7C X509v3 Authority Key Identifier: keyid:CD:AD:8A:E6:48:50:B7:30:60:26:A1:B4:6F:F8:4D:08:28:41:04:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CDAD8AE64850B7306026A1B46FF84D08284104C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/CDAD8AE64850B7306026A1B46FF84D08284104C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1d:9f:ee:fd:06:7f:af:6c:e6:ab:56:fe:19:bc:95:40:f5: 56:e7:20:76:f2:c7:1c:9a:af:2c:86:78:62:3d:04:4e:0f:77: fa:07:14:14:76:a8:b8:0e:dd:fc:a8:47:f8:e8:82:cf:00:20: be:92:9d:03:6d:40:91:61:96:1e:3a:10:13:68:47:e3:21:ab: b0:07:41:ad:98:9f:2d:c0:5f:a3:cd:ed:6b:0e:34:7e:ac:01: 74:12:99:7c:1c:8a:f5:64:66:9c:e3:18:93:a1:51:89:a2:25: 94:4b:e8:c0:1a:f6:8f:c8:5c:77:a0:a3:66:23:af:65:e0:10: d1:13:4f:71:14:a2:9b:db:33:27:f6:b8:8c:37:56:10:31:23: 00:58:40:2f:f7:e9:93:a6:9a:03:96:e4:5b:ba:44:00:b7:0b: 95:45:d2:70:7a:60:22:5a:3b:54:e0:2b:cc:f3:5f:db:8b:b7: 57:26:83:8c:05:a7:cc:05:01:20:4d:9b:ba:21:91:7e:aa:1b: 21:80:5e:86:f1:82:e7:88:c6:bc:38:ea:53:a3:8f:48:15:78: 14:7f:10:a7:c6:e0:d0:35:71:8f:8f:0d:de:57:0c:4d:ff:bb: de:09:f3:83:3f:dc:73:06:28:42:05:6b:4d:00:c3:70:9c:35: da:df:59:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7YQSeGJ9cWcWCB+P9t+hJ4WEYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODREMDgy ODQxMDRDOTAeFw0yNjA2MjQwNDQxMTFaFw0yNjA2MjUwNjExMTFaMDMxMTAvBgNV BAMTKDVGQjZBMjI1QzlGRkY2QzQyN0Q5MDMyQUM1QjY0MkVGRTJGN0UxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5SkwJrXx5jjj+XzUARJZ3IOV+ mdHsxsOXY6/fcV3vsTqHH0s6PaOBtUJZD64IEBseBCTBVuo4F9m4+LQniVGiLx9r oN1Vyt7aKNMm4MdtwbjmZu3spzxL3CXYlUHp9bS9GyqirEqF1Ts3/AsjwNJtNGuX 8nKBYp1ZyOH2OrQstoXEIV677TDjsQdYpNnh612V5KT+1xwKfADVpq5nF2XqZJ7u TPZH7IzQzQ9r7HvXtmTrXKVSl0pl2JDTyDIIOHykSTsUIC3udhtSGL4m/pILEaUe 5UH3925636Q2xtMDC5uy85sCFXzI2tOTmBPdCDvvtCJ7TXlQvuESjepfZPPtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX7aiJcn/9sQn2QMqxbZC7+L34XwwHwYDVR0j BBgwFoAUza2K5khQtzBgJqG0b/hNCChBBMkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWI4YzU0M2MtZGUxZi00ZWY0LTkyYjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0 ODUwQjczMDYwMjZBMUI0NkZGODREMDgyODQxMDRDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DREFEOEFFNjQ4NTBCNzMwNjAyNkExQjQ2RkY4NEQwODI4NDEw NEM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvQ0RBRDhBRTY0ODUwQjczMDYwMjZBMUI0NkZGODRE MDgyODQxMDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMdn+79Bn+vbOarVv4ZvJVA9VbnIHbyxxya ryyGeGI9BE4Pd/oHFBR2qLgO3fyoR/jogs8AIL6SnQNtQJFhlh46EBNoR+Mhq7AH Qa2Yny3AX6PN7WsONH6sAXQSmXwcivVkZpzjGJOhUYmiJZRL6MAa9o/IXHego2Yj r2XgENETT3EUopvbMyf2uIw3VhAxIwBYQC/36ZOmmgOW5Fu6RAC3C5VF0nB6YCJa O1TgK8zzX9uLt1cmg4wFp8wFASBNm7ohkX6qGyGAXobxgueIxrw46lOjj0gVeBR/ EKfG4NA1cY+PDd5XDE3/u94J84M/3HMGKEIFa00Aw3CcNdrfWVg= -----END CERTIFICATE-----Generated at Wed Jun 24 16:40:39 2026 by rpki-client