$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft File: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft (raw, json) Hash identifier: 6N7NtLIj/k9W+9jjVu1Jc/d0j3HSjjQdkQYhRp4dBOM= Subject key identifier: AE:AD:EB:CD:B5:7C:ED:C1:D3:B3:61:4E:4E:DF:C0:9A:87:A5:33:58 Authority key identifier: AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 Certificate issuer: /CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Certificate serial: 2EF013DDFB4C78DC65A80F92B47428213187F49F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:18:39 +0000 Manifest this update: Wed 23 Sep 2026 22:13:39 +0000 Manifest next update: Thu 24 Sep 2026 23:09:39 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: MCW/xqC9gtQy6b8F5lQvfvI/LlU0HFmKiOjV/FzQgxY=) 2: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: luezxLjf+gQLcjiQqhuyu+ya30sT86b3qelMWGrfE0Y=) 3: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl (hash: umhKqR9zrrF/6JI6bAXFHbUOghXZUVN/3dxRp+16qfs=) 4: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: 2XC3UsHd4KwKUJ2Uidn6/QSZk29AP2xoMLuxzT2QDYQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f0:13:dd:fb:4c:78:dc:65:a8:0f:92:b4:74:28:21:31:87:f4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Validity Not Before: Sep 23 22:13:39 2026 GMT Not After : Sep 24 23:09:39 2026 GMT Subject: CN=AEADEBCDB57CEDC1D3B3614E4EDFC09A87A53358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:96:a0:04:e7:b5:5f:b9:e9:e6:15:eb:62: d3:13:31:b4:10:c4:a8:90:dc:a7:98:c3:35:55:fa: 7d:2d:7d:d8:84:24:3c:8f:0b:3d:1d:71:31:03:7e: b0:8a:bf:79:f3:d3:75:f5:8d:95:35:c7:ab:24:7c: 2e:a5:06:37:01:c4:c1:c1:e2:3c:cf:b2:5f:16:02: 00:7c:b4:f5:bd:59:70:fe:e4:4f:43:79:8e:47:f4: a7:1d:29:26:0f:1e:47:7b:5c:8e:e4:c1:72:59:67: 5d:57:b7:6c:8a:04:27:03:12:c8:55:73:3e:58:44: 57:1d:16:c1:62:b4:cb:5d:31:4e:df:eb:5e:38:dc: a0:c0:d8:92:3e:80:e6:99:f3:f4:ba:04:31:04:94: 8c:32:55:9d:18:5c:a9:c4:f5:11:5e:93:03:cb:54: 8e:1f:b7:ab:6e:ad:9d:fb:70:1c:df:e2:e8:64:a3: 4a:ea:61:57:d5:ea:98:c6:63:83:e8:ef:e6:51:d6: 60:38:e4:ac:04:c9:b5:6e:da:7d:42:03:68:8f:f8: bd:75:d8:bc:9c:5f:16:4b:ac:1c:c0:66:ab:7f:97: 94:4d:b4:44:52:70:82:09:33:bc:1b:48:04:96:c9: 14:bb:ac:c7:e0:a9:46:a7:1e:16:75:cc:71:5b:e4: d0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AD:EB:CD:B5:7C:ED:C1:D3:B3:61:4E:4E:DF:C0:9A:87:A5:33:58 X509v3 Authority Key Identifier: keyid:AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c9:bc:24:f3:3b:7e:4c:6b:a6:e4:97:24:a4:0d:02:32:24: 09:2c:77:d1:9a:30:4b:be:75:90:63:ae:81:3d:e6:2c:f5:4e: 88:77:c8:72:7f:8c:84:d7:77:00:29:19:d2:25:9e:a3:d6:47: 16:1f:80:e9:28:0c:99:38:68:d9:ab:10:b0:c0:b2:8d:af:34: 85:94:8f:49:9f:30:9b:1f:76:4b:4c:6e:bb:a7:37:00:22:8c: 3c:0e:e2:ef:10:90:28:b0:ed:d3:ca:85:33:a2:14:40:9d:32: 55:2e:cb:cc:2a:ea:a7:f6:f7:b3:c6:3f:db:fe:d2:bf:28:a4: c5:69:e3:e4:62:20:d5:92:d5:70:5d:68:8b:b5:3a:82:f3:36: 93:9d:c5:07:bb:69:e1:05:d9:26:cb:d0:96:06:a9:ea:1a:7f: 7b:e5:d7:25:5d:3e:a7:f9:78:ae:df:bc:07:8c:c9:05:92:52: b1:d2:d0:fe:cb:95:9d:f3:b3:69:99:96:76:46:66:31:80:3a: 64:6a:01:9b:6b:30:28:55:2b:1d:f2:e2:6b:4f:f6:e1:df:66: f2:fe:82:88:e3:61:1c:e1:26:00:86:30:07:d5:a1:dc:ab:a6: ec:26:0e:f9:b2:57:fd:07:52:26:6d:e3:c1:5d:82:75:7c:47: dd:08:57:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvAT3ftMeNxlqA+StHQoITGH9J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJB QTc0RjVEMDAeFw0yNjA5MjMyMjEzMzlaFw0yNjA5MjQyMzA5MzlaMDMxMTAvBgNV BAMTKEFFQURFQkNEQjU3Q0VEQzFEM0IzNjE0RTRFREZDMDlBODdBNTMzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QZagBOe1X7np5hXrYtMTMbQQ xKiQ3KeYwzVV+n0tfdiEJDyPCz0dcTEDfrCKv3nz03X1jZU1x6skfC6lBjcBxMHB 4jzPsl8WAgB8tPW9WXD+5E9DeY5H9KcdKSYPHkd7XI7kwXJZZ11Xt2yKBCcDEshV cz5YRFcdFsFitMtdMU7f61443KDA2JI+gOaZ8/S6BDEElIwyVZ0YXKnE9RFekwPL VI4ft6turZ37cBzf4uhko0rqYVfV6pjGY4Po7+ZR1mA45KwEybVu2n1CA2iP+L11 2LycXxZLrBzAZqt/l5RNtERScIIJM7wbSASWyRS7rMfgqUanHhZ1zHFb5NCxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrq3rzbV87cHTs2FOTt/AmoelM1gwHwYDVR0j BBgwFoAUr6MpTlWAtoIDvA3wT9AHIqp09dAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhZDUyMjYtNjU2ZC00NjFkLTljZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1 NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJBQTc0RjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkEzMjk0RTU1ODBCNjgyMDNCQzBERjA0RkQwMDcyMkFBNzRG NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3 MjJBQTc0RjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDJvCTzO35Ma6bklySkDQIyJAksd9GaMEu+ dZBjroE95iz1Toh3yHJ/jITXdwApGdIlnqPWRxYfgOkoDJk4aNmrELDAso2vNIWU j0mfMJsfdktMbrunNwAijDwO4u8QkCiw7dPKhTOiFECdMlUuy8wq6qf297PGP9v+ 0r8opMVp4+RiINWS1XBdaIu1OoLzNpOdxQe7aeEF2SbL0JYGqeoaf3vl1yVdPqf5 eK7fvAeMyQWSUrHS0P7LlZ3zs2mZlnZGZjGAOmRqAZtrMChVKx3y4mtP9uHfZvL+ gojjYRzhJgCGMAfVodyrpuwmDvmyV/0HUiZt48FdgnV8R90IV58= -----END CERTIFICATE-----Generated at Thu Sep 24 02:13:46 2026 by rpki-client