$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft File: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft (raw, json) Hash identifier: Mo1SgA4UfiHOvhNMbx44AvOjHLeEMLrJIEMdICXrOs4= Subject key identifier: DA:EF:C1:F0:8C:6C:CE:AE:5E:0B:32:66:AF:91:C4:0F:21:AF:8C:CC Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 22AB4C301AF81349C090554BF67AD6C8ACC020AD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 14:18:36 +0000 Manifest this update: Thu 24 Sep 2026 14:13:36 +0000 Manifest next update: Fri 25 Sep 2026 15:25:36 +0000 Files and hashes: 1: 323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa (hash: 34GLqmPa0NzJ8OUNPh/1B0CyHBlCIeGKpKQ2WBBDdVw=) 2: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: kC/BQJWqF3hfjk7jxki1g+71uLyOIxW8KkPPgVLxjeg=) 3: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: qErBEzbgejKCSlR97tYuadzXafCvSPlaXArCcdt+yEg=) 4: 323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa (hash: lq8n0YPrI0ej0qKCbfOlpW4tTPmD0iFL3XzQMezYPDc=) 5: 323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (hash: ROBi78wuuDs1YynQRORSD7fsHhMgIofWSrauPO5cQ7U=) 6: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: GVZGNEwcVR+6b1iz+Mf+WaWQxD3aIC0LXDFgR27cdp0=) 7: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: 7VINGDMY1TUq927w0s5kPc4NrKgys1/WpgtYsMIyWe4=) 8: 323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa (hash: cEoIyEjinxE4GnYC0CNRuXvF+WOLWNhACz4dP/4/xaU=) 9: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: RC9a6LW/+eoJDdWzw8/UK2UNfYC2bIi6jAgj1aXZwfs=) 10: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: /B7YofX/HHM+G+hIOgqx/c64KwEJiJwq2rpXtyQZ30I=) 11: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: E4L4DC+KlZnlYuimMn7ht+nOkbQIJbr5xJR5o/xYX8Q=) 12: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: 7/h2zwvZrAQS0wAHrJy9NqwWiyEipm8MyD1COAfe2nQ=) 13: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: gQ+0Ncm6ouGfqCj99PO+6ljzB+BVgCECd3yhaahocOE=) 14: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: hVmreBSejl8Ng95zD8+VjoKGoyOFeerqH52Ryd6nA/g=) 15: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: RWX46rojpF6BQSm8l4yUodE90WBaf+wB8Y4OTAFQ4ME=) 16: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl (hash: bFsPu/xTw7CEZQ+oewriQbhDgBTT3m9sgABO8R/urSA=) 17: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: oX8mmJjYFncLywEKonSF0YgdnGFD+ctQ155eJaCMAUg=) 18: 323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa (hash: wYag/KpQxcRCIm84mayvN/ce4e/42pmE6/MAHa5Gds8=) 19: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: 1173I/3m7XkzbM38lD89z6ZiTiudGSDgnrOXK0sI2OM=) 20: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: kX944U5wcZ4ljeI4U/N/cddY4+l6BlmIxGXHq+0AWLc=) 21: 323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa (hash: VeUuIEzR0KXaVdDKuIt8qmP7aqg4VDEFHLGvR21XwG0=) 22: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: p9IaRw5dZMu/RqndUf94zxAMZ/T8mQiwgEQa5hTpOao=) 23: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: g/IwKgkLM3lX7TTfydNsuy1vblZAv0bCcFnenKOiWnI=) 24: 323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa (hash: oABovF7KdDdlY6+CHjePOcttfLrt7gjFGQnN04lySCo=) 25: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: NhSbtQsCSZOcv410mYA+T/YK4xT0UEtgj3gs2YcEa4w=) 26: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: hC0faeWGVogeaEgDmuTq2f3+pymLHliitj4mm9RD6Qs=) 27: 323430303a643934303a3a2f33322d3332203d3e20313336303838.roa (hash: 6v3qgdUIZjmuHWouV9dOsfbIOPcGM+FuLf4il05N+Ek=) 28: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: iBvTknbLTgdzBBg6hpQI6nAp2/Y+ZQ/SghaasUfpG04=) 29: 323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa (hash: D+h8jX3eqkGKLtVhz2jT7gpvFEWVMRt52UNBLxkGJhs=) 30: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: nUJ2UcMYUMgp2Ivw4oUIOzI0b/8YqU8NMhh0tUJGG8w=) 31: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: RJ17Dz/IGt6G1WroLkK6wHoimyT4sJSrPhTKtpoVzzk=) 32: 323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (hash: pXHANQSmeMdKKdoCjZbWQt7xD53ERPYITVt1C9zayGI=) 33: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: cPlZWqFm5MVvHANk5QwuMsGCvqASptrnxXG+efFGx5c=) 34: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: GH9tET4mTW+/Gjc8WplZ0ASidCPn/60O8oLirXNQIgM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ab:4c:30:1a:f8:13:49:c0:90:55:4b:f6:7a:d6:c8:ac:c0:20:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: Sep 24 14:13:36 2026 GMT Not After : Sep 25 15:25:36 2026 GMT Subject: CN=DAEFC1F08C6CCEAE5E0B3266AF91C40F21AF8CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:b3:5e:c4:20:95:0f:74:e0:60:75:84:f2: 02:82:94:51:4e:78:19:02:43:f3:f3:7a:a6:51:5d: 79:18:93:91:dc:f5:c7:71:85:dc:e4:a4:17:b8:40: 9e:59:82:d7:e7:c6:8b:a9:2d:92:44:8f:48:90:c1: 8b:57:dc:18:7b:55:41:42:3f:c8:fb:2e:9f:f6:5d: b1:45:89:e1:cf:35:59:73:58:fc:19:93:0b:2d:b5: 35:ad:25:6b:53:06:4c:21:91:05:7d:e6:ea:86:51: 84:1b:60:e8:45:d5:36:f8:73:87:2d:c0:85:bf:f9: 01:03:73:49:3e:38:44:4f:0f:ca:46:1e:0e:44:20: d4:e1:90:eb:aa:05:6c:2d:17:3b:53:23:b8:d3:5b: 6f:c8:16:3d:da:56:c2:65:0e:f3:e8:aa:cd:0a:82: 81:f3:41:81:75:f8:f0:b8:b1:b0:9a:8f:1b:d6:37: 94:44:a9:0b:ed:28:f1:69:8d:85:b1:29:21:8f:aa: b5:06:f7:a5:51:fd:34:c8:38:96:11:8e:07:46:ab: 75:87:54:96:99:56:c0:51:a3:0a:b3:3a:70:d5:a2: 52:90:4c:a9:b4:41:2c:80:99:0f:af:58:79:a8:7a: 8b:62:e2:e0:9b:2e:9f:df:72:5c:8d:0a:6f:3c:6b: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EF:C1:F0:8C:6C:CE:AE:5E:0B:32:66:AF:91:C4:0F:21:AF:8C:CC X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f7:67:90:30:d8:7d:a7:7b:7f:99:0c:87:28:44:34:73:cc: a2:ff:a2:aa:f1:e0:67:88:c9:c1:9e:ef:26:19:7d:8a:65:85: 04:b2:3b:9a:a6:42:b2:8a:a5:ae:c0:80:21:30:d4:21:87:f3: 2e:0a:50:ed:d1:3c:66:8f:c7:b2:7c:59:e3:70:c8:47:43:00: e5:5d:86:df:0d:34:6a:d0:25:8e:a4:ce:fe:54:02:6f:26:74: de:e0:15:71:15:e4:2d:88:d0:d7:c4:56:c4:1e:31:5a:04:f4: 9c:37:e3:3e:8f:82:38:19:6b:d7:ed:3c:79:41:20:36:32:07: b6:d2:84:15:c4:be:0a:69:f6:60:a2:2c:a3:e7:7e:73:34:8a: ce:a6:43:a5:1a:e9:91:cb:41:65:83:09:30:49:6e:22:2f:c8: f4:98:8e:c8:91:5e:05:54:87:0c:ce:5f:28:87:9d:27:52:f6: b5:ad:ff:c1:6b:a4:37:1c:69:a5:f1:5e:2c:55:ab:b9:ed:3f: b3:73:c2:da:49:43:70:22:88:09:02:4b:ab:4c:00:00:0a:36: d8:04:ee:ac:35:75:cb:99:e8:6e:bf:4a:fe:f8:55:41:b5:9e: b0:e1:e9:a8:35:7b:4c:e8:b7:53:60:1d:e5:a7:d3:0b:76:3c: 3f:f4:29:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqtMMBr4E0nAkFVL9nrWyKzAIK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA5MjQxNDEzMzZaFw0yNjA5MjUxNTI1MzZaMDMxMTAvBgNV BAMTKERBRUZDMUYwOEM2Q0NFQUU1RTBCMzI2NkFGOTFDNDBGMjFBRjhDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfbNexCCVD3TgYHWE8gKClFFO eBkCQ/PzeqZRXXkYk5Hc9cdxhdzkpBe4QJ5ZgtfnxoupLZJEj0iQwYtX3Bh7VUFC P8j7Lp/2XbFFieHPNVlzWPwZkwsttTWtJWtTBkwhkQV95uqGUYQbYOhF1Tb4c4ct wIW/+QEDc0k+OERPD8pGHg5EINThkOuqBWwtFztTI7jTW2/IFj3aVsJlDvPoqs0K goHzQYF1+PC4sbCajxvWN5REqQvtKPFpjYWxKSGPqrUG96VR/TTIOJYRjgdGq3WH VJaZVsBRowqzOnDVolKQTKm0QSyAmQ+vWHmoeoti4uCbLp/fclyNCm88a1lhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2u/B8Ixszq5eCzJmr5HEDyGvjMwwHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmNGVjMWMtOTUzNS00Y2JmLTlj N2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlF OUI2OTNCN0NDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX3Z5Aw2H2ne3+ZDIcoRDRzzKL/oqrx4GeI ycGe7yYZfYplhQSyO5qmQrKKpa7AgCEw1CGH8y4KUO3RPGaPx7J8WeNwyEdDAOVd ht8NNGrQJY6kzv5UAm8mdN7gFXEV5C2I0NfEVsQeMVoE9Jw34z6PgjgZa9ftPHlB IDYyB7bShBXEvgpp9mCiLKPnfnM0is6mQ6Ua6ZHLQWWDCTBJbiIvyPSYjsiRXgVU hwzOXyiHnSdS9rWt/8FrpDccaaXxXixVq7ntP7NzwtpJQ3AiiAkCS6tMAAAKNtgE 7qw1dcuZ6G6/Sv74VUG1nrDh6ag1e0zot1NgHeWn0wt2PD/0KYM= -----END CERTIFICATE-----Generated at Fri Sep 25 04:48:31 2026 by rpki-client