$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft File: 3AF015F925061D7540F9BBFA45C6C7A944312663.mft (raw, json) Hash identifier: isuKWaFd171vu56go6Mp9XMhSuVLXCShzIVeb2W+fwg= Subject key identifier: CF:A9:B0:E0:00:3E:E0:5C:22:9F:33:D3:3C:D4:F2:ED:2D:27:38:03 Authority key identifier: 3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 Certificate issuer: /CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Certificate serial: 254FBAAB6CC3453C2C6BD304AEB0F70ABE1DAFE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft Manifest number: C5 Signing time: Thu 24 Sep 2026 00:46:42 +0000 Manifest this update: Thu 24 Sep 2026 00:41:42 +0000 Manifest next update: Fri 25 Sep 2026 02:34:42 +0000 Files and hashes: 1: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: egwsjKMYT0IZpyV4Dfttqi4c4pxw5Vm+1yP8BdfUm90=) 2: 3AF015F925061D7540F9BBFA45C6C7A944312663.crl (hash: BHxB2bOlU3H4UKthwJ0v59nxK2OryK8tuvk+IR/C338=) 3: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: 10SNmFgccvYgJ2UV57b04CHFVLMxOGS2khiF98evAls=) 4: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: gOYQWRAXG44l1bca07U85Hgjsni/0xj64/LDiA5pyis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4f:ba:ab:6c:c3:45:3c:2c:6b:d3:04:ae:b0:f7:0a:be:1d:af:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Validity Not Before: Sep 24 00:41:42 2026 GMT Not After : Sep 25 02:34:42 2026 GMT Subject: CN=CFA9B0E0003EE05C229F33D33CD4F2ED2D273803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:38:fa:6f:63:1c:7d:6a:4a:e7:f7:94:fd:24: e1:a8:99:ba:d9:b0:8d:7b:2f:46:8f:39:6d:6c:61: d2:be:61:84:f8:c6:64:12:50:70:1c:b4:bf:ef:8b: a4:76:13:f1:5e:ba:f0:0b:b2:c6:64:7a:4e:c2:23: ff:ec:01:6c:7b:60:05:be:e0:e9:c6:6a:dd:03:42: 07:69:ee:57:89:e3:eb:4a:9f:0c:e7:ec:01:c3:3a: 33:d8:fc:36:9a:96:6d:13:4f:f5:a0:75:52:c3:a2: 47:97:4c:61:ef:15:f9:45:21:ab:d5:bf:e8:c4:00: 8d:a5:24:ee:f6:11:56:32:2d:36:59:d9:23:87:73: 9d:11:d5:b7:f2:9f:c7:7f:27:87:bf:23:21:a5:a1: 77:6f:10:2e:d3:4e:c2:79:10:75:48:39:aa:7e:77: 30:cb:88:46:28:73:87:35:dd:02:ca:45:fd:28:5d: ba:ab:1f:27:d8:0e:0f:e9:fd:a0:fa:f0:62:ef:0d: 0f:66:d8:b3:1d:52:4c:18:56:e0:28:23:d6:14:a4: 3a:df:16:00:79:60:b1:6c:96:75:31:7e:11:2c:37: 24:d1:55:a4:46:8e:96:f2:14:18:73:95:c8:88:cc: 3e:ef:ce:59:f1:b4:2e:17:e7:b5:da:d6:21:3f:1b: 82:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A9:B0:E0:00:3E:E0:5C:22:9F:33:D3:3C:D4:F2:ED:2D:27:38:03 X509v3 Authority Key Identifier: keyid:3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:34:a6:d1:c3:8d:1e:be:03:0e:8c:58:4c:da:c3:e9:ca:38: b0:33:8c:04:e2:dd:c3:fa:33:5a:f2:c5:e5:ed:8f:00:39:fc: b7:40:a9:87:ac:8c:1b:c0:fa:da:2b:59:6d:40:98:2d:80:e6: 1d:53:72:38:0c:8a:92:1d:5b:eb:96:78:42:78:9c:d9:fe:d2: a9:36:56:c6:0e:69:67:94:11:af:b1:15:89:74:01:f0:87:47: 5a:af:7c:90:95:33:b0:c6:0a:e2:05:50:5d:29:a1:78:ce:80: 1e:cf:87:73:47:30:5e:4d:3b:0a:28:16:15:4b:c6:99:a3:44: a5:91:b3:f0:dc:18:fa:46:85:39:e2:bf:b7:ed:8b:54:8b:0d: 57:0d:86:f3:c8:ca:69:e2:a2:c3:d5:a2:cf:1f:b9:f1:37:35: 0f:6f:d4:c8:7b:5a:f6:80:49:ca:1d:29:ab:b1:16:0a:55:90: 53:ad:26:d0:b1:b2:49:cc:4c:35:fb:ad:8a:50:8f:04:68:51: 18:0c:08:ef:6c:55:4f:d0:4f:e6:6c:1e:e0:b2:50:cb:37:75: 56:2f:9d:8f:03:d8:e2:22:ce:6c:67:8d:d3:bf:f9:2e:01:0f: 4d:0b:f2:0d:5f:a9:7e:dc:7c:08:14:cd:3c:fb:50:f1:6a:ea: 89:2a:3a:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJU+6q2zDRTwsa9MErrD3Cr4dr+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0 NDMxMjY2MzAeFw0yNjA5MjQwMDQxNDJaFw0yNjA5MjUwMjM0NDJaMDMxMTAvBgNV BAMTKENGQTlCMEUwMDAzRUUwNUMyMjlGMzNEMzNDRDRGMkVEMkQyNzM4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwOPpvYxx9akrn95T9JOGombrZ sI17L0aPOW1sYdK+YYT4xmQSUHActL/vi6R2E/FeuvALssZkek7CI//sAWx7YAW+ 4OnGat0DQgdp7leJ4+tKnwzn7AHDOjPY/Daalm0TT/WgdVLDokeXTGHvFflFIavV v+jEAI2lJO72EVYyLTZZ2SOHc50R1bfyn8d/J4e/IyGloXdvEC7TTsJ5EHVIOap+ dzDLiEYoc4c13QLKRf0oXbqrHyfYDg/p/aD68GLvDQ9m2LMdUkwYVuAoI9YUpDrf FgB5YLFslnUxfhEsNyTRVaRGjpbyFBhzlciIzD7vzlnxtC4X57Xa1iE/G4IlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz6mw4AA+4FwinzPTPNTy7S0nOAMwHwYDVR0j BBgwFoAUOvAV+SUGHXVA+bv6RcbHqUQxJmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODAxNWE4NTUtYjI5Yy00NTAyLWFmODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1Rjky NTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0NDMxMjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUYwMTVGOTI1MDYxRDc1NDBGOUJCRkE0NUM2QzdBOTQ0MzEy NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3 QTk0NDMxMjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABc0ptHDjR6+Aw6MWEzaw+nKOLAzjATi3cP6 M1ryxeXtjwA5/LdAqYesjBvA+torWW1AmC2A5h1TcjgMipIdW+uWeEJ4nNn+0qk2 VsYOaWeUEa+xFYl0AfCHR1qvfJCVM7DGCuIFUF0poXjOgB7Ph3NHMF5NOwooFhVL xpmjRKWRs/DcGPpGhTniv7fti1SLDVcNhvPIymniosPVos8fufE3NQ9v1Mh7WvaA ScodKauxFgpVkFOtJtCxsknMTDX7rYpQjwRoURgMCO9sVU/QT+ZsHuCyUMs3dVYv nY8D2OIizmxnjdO/+S4BD00L8g1fqX7cfAgUzTz7UPFq6okqOpg= -----END CERTIFICATE-----Generated at Thu Sep 24 13:24:49 2026 by rpki-client