$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft File: CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft (raw, json) Hash identifier: q0QVmjIVLzEFoxOIZ6YTYZObl+w0WpSxd2/GUV5K78Y= Subject key identifier: F3:52:C4:CB:DF:84:79:A6:B6:37:17:17:E8:CC:42:4E:AE:DA:9E:55 Authority key identifier: CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 Certificate issuer: /CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Certificate serial: 043B1D90B2B3BBA61ADAE05F662ED1C84A76EF78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 21:20:18 +0000 Manifest this update: Wed 16 Sep 2026 21:15:18 +0000 Manifest next update: Thu 17 Sep 2026 23:00:18 +0000 Files and hashes: 1: CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl (hash: nFVcF8kyxu8W04pe7NFK6UulVm/jL1mppITRjSKp8fs=) 2: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: i1H+ReQBHn9JCYQi5CWfxN7OhwjtzW41V0M/jyxFA08=) 3: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: mWR29teFlpS2QFv6Te8ENnUPdsf5nVL4GnQAxRUQqGI=) 4: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: CHKJIH+fJABznZsBmBVESLsgPUznf5glQmQTYMsLlJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3b:1d:90:b2:b3:bb:a6:1a:da:e0:5f:66:2e:d1:c8:4a:76:ef:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0 Validity Not Before: Sep 16 21:15:18 2026 GMT Not After : Sep 17 23:00:18 2026 GMT Subject: CN=F352C4CBDF8479A6B6371717E8CC424EAEDA9E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:79:86:51:23:a9:76:7c:7b:db:c1:c0:ba: ef:e6:6b:4a:a7:4c:4f:6d:59:66:c7:f2:a7:70:0a: 9a:33:b9:f8:c3:a6:6b:db:2d:c5:9d:2d:7e:05:e5: 9a:e1:81:b2:46:63:9a:a9:ae:78:52:ee:9e:45:37: 54:a0:84:95:45:73:3b:83:2d:fe:4f:3f:c0:da:20: 0f:97:54:5a:4a:fc:47:0a:13:4b:9e:4b:d3:a6:68: ca:c6:85:b7:dd:fa:2a:5d:09:dc:28:45:c9:6b:18: ed:5f:9d:ba:15:d1:e3:5a:d9:1f:0f:70:81:05:25: e7:35:d7:f6:a5:9c:f7:03:9f:f0:79:24:c8:47:79: 63:3f:8e:18:46:ca:2d:be:aa:5b:8d:8b:9d:59:0d: 18:ac:db:f9:b0:5a:1a:94:bb:db:62:f4:b7:d4:4a: 22:97:ce:60:6a:2e:b6:08:c0:a7:6c:ac:d9:5e:e7: 7b:a7:62:3b:f5:05:db:fb:ef:2d:04:87:34:f4:6a: ff:79:ed:8e:7b:ab:32:27:12:2e:93:2f:31:58:e9: 2e:85:d4:04:c3:f9:f4:a2:c1:46:c3:26:a4:bc:51: a1:63:8d:d8:59:d5:27:b4:8b:e5:df:9a:49:91:c3: 6b:1f:a3:38:3b:eb:16:a9:17:c4:cb:02:03:9e:d9: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:52:C4:CB:DF:84:79:A6:B6:37:17:17:E8:CC:42:4E:AE:DA:9E:55 X509v3 Authority Key Identifier: keyid:CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1a:c7:69:e8:1c:0c:2f:12:22:79:5d:c1:91:e9:69:e1:10: 47:44:90:42:19:57:b1:90:a4:a6:5f:34:ef:98:cf:52:80:57: c7:38:b0:59:64:87:6d:e1:b1:4d:f5:4f:29:c0:55:b1:0e:2d: 39:44:0b:eb:40:26:16:52:73:f8:13:64:39:c5:9f:86:9c:53: 74:17:fd:92:a1:ce:02:82:40:a0:ce:62:25:2d:15:d9:90:c6: 48:9e:d9:80:08:f5:dc:20:37:ea:aa:01:6e:ff:48:a3:81:ac: c1:ad:65:b9:c9:2f:2b:c4:a5:0e:e0:a9:8b:ff:24:73:93:14: fc:6c:07:8c:1e:1e:91:de:98:d5:0b:01:5d:6e:25:32:f9:9d: dc:c6:ce:9f:82:4b:45:48:fd:1a:d5:9e:f3:4b:b6:82:aa:b2: 7b:1d:9f:4e:5a:d0:2c:cb:78:d2:e8:66:2c:4c:2a:68:03:4f: 12:ab:a8:77:19:33:e3:34:ab:a9:87:c6:5b:fd:67:e0:a3:b1: 00:f0:16:02:f8:f7:e2:93:93:61:6c:7a:25:5a:51:ee:01:c2: ca:7e:ee:56:cb:2b:1b:4d:bc:a1:5d:2c:3d:a1:04:40:5c:39: 52:a2:29:79:3b:78:ce:2b:ac:85:3f:2a:7b:21:de:14:da:38: a0:88:68:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDsdkLKzu6Ya2uBfZi7RyEp273gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2NjRG QzIwRUFFMDAeFw0yNjA5MTYyMTE1MThaFw0yNjA5MTcyMzAwMThaMDMxMTAvBgNV BAMTKEYzNTJDNENCREY4NDc5QTZCNjM3MTcxN0U4Q0M0MjRFQUVEQTlFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjHmGUSOpdnx728HAuu/ma0qn TE9tWWbH8qdwCpozufjDpmvbLcWdLX4F5ZrhgbJGY5qprnhS7p5FN1SghJVFczuD Lf5PP8DaIA+XVFpK/EcKE0ueS9OmaMrGhbfd+ipdCdwoRclrGO1fnboV0eNa2R8P cIEFJec11/alnPcDn/B5JMhHeWM/jhhGyi2+qluNi51ZDRis2/mwWhqUu9ti9LfU SiKXzmBqLrYIwKdsrNle53unYjv1Bdv77y0EhzT0av957Y57qzInEi6TLzFY6S6F 1ATD+fSiwUbDJqS8UaFjjdhZ1Se0i+XfmkmRw2sfozg76xapF8TLAgOe2SRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU81LEy9+Eeaa2NxcX6MxCTq7anlUwHwYDVR0j BBgwFoAUyuk5xa2pAVhOkAcft+UGZPwg6uAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzlmM2M3NjktY2ZiMS00MjA2LTlmNTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVB REE5MDE1ODRFOTAwNzFGQjdFNTA2NjRGQzIwRUFFMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUU5MzlDNUFEQTkwMTU4NEU5MDA3MUZCN0U1MDY2NEZDMjBF QUUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvQ0FFOTM5QzVBREE5MDE1ODRFOTAwNzFGQjdFNTA2 NjRGQzIwRUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcax2noHAwvEiJ5XcGR6WnhEEdEkEIZV7GQ pKZfNO+Yz1KAV8c4sFlkh23hsU31TynAVbEOLTlEC+tAJhZSc/gTZDnFn4acU3QX /ZKhzgKCQKDOYiUtFdmQxkie2YAI9dwgN+qqAW7/SKOBrMGtZbnJLyvEpQ7gqYv/ JHOTFPxsB4weHpHemNULAV1uJTL5ndzGzp+CS0VI/RrVnvNLtoKqsnsdn05a0CzL eNLoZixMKmgDTxKrqHcZM+M0q6mHxlv9Z+CjsQDwFgL49+KTk2FseiVaUe4Bwsp+ 7lbLKxtNvKFdLD2hBEBcOVKiKXk7eM4rrIU/Knsh3hTaOKCIaDw= -----END CERTIFICATE-----Generated at Thu Sep 17 07:34:17 2026 by rpki-client