$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft File: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft (raw, json) Hash identifier: iC7kfTYQqYpoVvzdAXzv79GAlfyuKcDB+fKOAkqVh/U= Subject key identifier: F6:0D:8D:34:A6:B2:F4:01:77:89:57:E3:0B:F5:AC:89:70:E1:3F:36 Authority key identifier: AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 Certificate issuer: /CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Certificate serial: 748253479C18587F925020B7E5EE6026F7AA79B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:43:49 +0000 Manifest this update: Thu 23 Jul 2026 23:38:49 +0000 Manifest next update: Sat 25 Jul 2026 02:34:49 +0000 Files and hashes: 1: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: 2XC3UsHd4KwKUJ2Uidn6/QSZk29AP2xoMLuxzT2QDYQ=) 2: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: MCW/xqC9gtQy6b8F5lQvfvI/LlU0HFmKiOjV/FzQgxY=) 3: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl (hash: DbJxOzIW1V0xDL6wI1HLvyfj2JVKBUs5gOrA2j/z3Jw=) 4: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: luezxLjf+gQLcjiQqhuyu+ya30sT86b3qelMWGrfE0Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:82:53:47:9c:18:58:7f:92:50:20:b7:e5:ee:60:26:f7:aa:79:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Validity Not Before: Jul 23 23:38:49 2026 GMT Not After : Jul 25 02:34:49 2026 GMT Subject: CN=F60D8D34A6B2F401778957E30BF5AC8970E13F36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8f:82:dc:03:01:67:02:bb:0d:7b:8c:e6:ea: 5f:00:fa:c8:42:e0:c8:14:ab:be:cc:a8:dd:ea:a0: 90:21:ea:ab:42:ca:d4:f6:29:81:d3:24:3b:d8:49: 6d:dc:e2:a5:05:55:be:2e:0f:53:ed:85:cb:3c:69: cb:cf:be:7c:52:01:f5:ca:31:32:b0:27:5a:10:19: cb:f4:d7:1a:4b:74:d8:83:3f:3d:50:73:43:ec:42: cd:1b:3e:bc:b8:df:21:f9:8e:44:81:12:f8:47:02: c3:e7:52:5e:45:56:57:dc:63:52:28:aa:39:02:fa: 6e:ad:7d:73:a1:fe:9b:39:17:80:e0:70:3d:8a:65: 51:62:3f:2c:b4:84:60:07:15:d6:6f:16:16:4f:93: fb:4f:a3:e3:14:96:d0:3e:b6:b1:c8:fd:4c:26:52: c5:58:63:be:87:2c:be:a1:f0:04:16:70:1e:b2:14: da:ef:c0:f9:9e:b0:81:70:b4:87:c7:35:ea:bb:d0: ad:03:5a:9f:6c:74:e3:1b:0b:25:a8:04:87:7e:00: 7d:76:90:c2:c7:fd:93:ab:67:c4:a0:da:04:a7:13: 96:8f:a1:c6:d5:16:f6:18:f7:17:55:ee:06:b4:ad: db:03:4b:b0:47:d4:53:93:d3:0e:fe:ea:22:25:ea: 37:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0D:8D:34:A6:B2:F4:01:77:89:57:E3:0B:F5:AC:89:70:E1:3F:36 X509v3 Authority Key Identifier: keyid:AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2d:22:c5:47:47:b2:9c:17:11:c6:17:0d:c4:5b:e3:ae:9c: 0d:d3:87:de:e3:9a:a6:db:06:5b:c1:0c:f8:20:51:c0:3c:11: 42:a4:35:0a:08:11:db:ab:d9:7e:14:c6:7c:ec:4b:3d:e8:75: d2:af:11:4f:e4:a3:2d:ea:e1:97:b9:91:7b:a2:41:a5:12:d6: 6d:37:de:1d:33:52:e3:62:c1:a0:f0:58:cf:86:2a:44:21:fd: 5c:68:26:a2:1a:6a:bc:fe:90:a4:56:c2:58:d0:f4:0d:4b:e8: 15:dd:fc:b5:7e:b0:87:dd:91:50:23:30:97:1d:40:23:9e:91: a1:7d:52:85:89:75:b9:22:b8:2a:c6:46:e4:5e:2a:22:88:3a: 09:9f:2c:f1:85:04:7c:4a:a3:8c:ae:1d:8c:ad:31:56:96:ee: d3:b6:09:c0:dd:c1:84:24:46:2d:02:3e:27:db:7e:40:13:58: 7a:48:89:ef:1b:93:84:77:fe:cb:38:a1:4b:93:f9:d7:7c:3f: 5c:c3:df:ca:8d:22:f9:c6:90:8c:5c:33:95:a4:22:38:65:cf: b0:87:5e:da:24:e0:3f:f8:e6:43:43:14:cd:3a:3b:39:49:96: 98:03:1f:43:8c:5b:e7:86:dc:75:f7:27:4b:98:30:29:d3:f4: 25:09:7a:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIJTR5wYWH+SUCC35e5gJveqebcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJB QTc0RjVEMDAeFw0yNjA3MjMyMzM4NDlaFw0yNjA3MjUwMjM0NDlaMDMxMTAvBgNV BAMTKEY2MEQ4RDM0QTZCMkY0MDE3Nzg5NTdFMzBCRjVBQzg5NzBFMTNGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVj4LcAwFnArsNe4zm6l8A+shC 4MgUq77MqN3qoJAh6qtCytT2KYHTJDvYSW3c4qUFVb4uD1Pthcs8acvPvnxSAfXK MTKwJ1oQGcv01xpLdNiDPz1Qc0PsQs0bPry43yH5jkSBEvhHAsPnUl5FVlfcY1Io qjkC+m6tfXOh/ps5F4DgcD2KZVFiPyy0hGAHFdZvFhZPk/tPo+MUltA+trHI/Uwm UsVYY76HLL6h8AQWcB6yFNrvwPmesIFwtIfHNeq70K0DWp9sdOMbCyWoBId+AH12 kMLH/ZOrZ8Sg2gSnE5aPocbVFvYY9xdV7ga0rdsDS7BH1FOT0w7+6iIl6jfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9g2NNKay9AF3iVfjC/WsiXDhPzYwHwYDVR0j BBgwFoAUr6MpTlWAtoIDvA3wT9AHIqp09dAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhZDUyMjYtNjU2ZC00NjFkLTljZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1 NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJBQTc0RjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkEzMjk0RTU1ODBCNjgyMDNCQzBERjA0RkQwMDcyMkFBNzRG NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3 MjJBQTc0RjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0tIsVHR7KcFxHGFw3EW+OunA3Th97jmqbb BlvBDPggUcA8EUKkNQoIEdur2X4UxnzsSz3oddKvEU/koy3q4Ze5kXuiQaUS1m03 3h0zUuNiwaDwWM+GKkQh/VxoJqIaarz+kKRWwljQ9A1L6BXd/LV+sIfdkVAjMJcd QCOekaF9UoWJdbkiuCrGRuReKiKIOgmfLPGFBHxKo4yuHYytMVaW7tO2CcDdwYQk Ri0CPifbfkATWHpIie8bk4R3/ss4oUuT+dd8P1zD38qNIvnGkIxcM5WkIjhlz7CH Xtok4D/45kNDFM06OzlJlpgDH0OMW+eG3HX3J0uYMCnT9CUJemM= -----END CERTIFICATE-----Generated at Fri Jul 24 11:45:28 2026 by rpki-client