$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft File: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft (raw, json) Hash identifier: dqF4fblU44XoZJdLE1VVh/d9G/soUaQ7q3mAUgdXdlQ= Subject key identifier: 02:02:93:6D:9E:52:7C:1E:D6:13:A3:5A:E9:BA:BE:0F:75:10:F5:A7 Authority key identifier: AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD Certificate issuer: /CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Certificate serial: 6F3162672B6FAB352EF26751EE2C32E4EF5EFB89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 09:53:22 +0000 Manifest this update: Wed 23 Sep 2026 09:48:22 +0000 Manifest next update: Thu 24 Sep 2026 12:48:22 +0000 Files and hashes: 1: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl (hash: fSk2GLGK6dDMvhnqQvHi2h5rfN5Jqc7irIWa4BR9Two=) 2: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: odcITqAToT5yF34xeI2KwLrnQspjZLjDq5idgZAGEkU=) 3: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: +597iuB7PbfMY+3aubsI/GkbNTaFIoKUe/CnIoipNDU=) 4: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: 4yYHOQ19SUo4wUen+ovEY0nBNoIbYKAxFiddTf9qCzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:31:62:67:2b:6f:ab:35:2e:f2:67:51:ee:2c:32:e4:ef:5e:fb:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Validity Not Before: Sep 23 09:48:22 2026 GMT Not After : Sep 24 12:48:22 2026 GMT Subject: CN=0202936D9E527C1ED613A35AE9BABE0F7510F5A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:01:9f:01:8b:0b:ac:e7:9f:c1:80:d4:79: fe:a1:c3:7b:b5:dc:51:15:4a:24:74:0e:c5:e0:d1: f5:07:22:e1:66:7d:f2:31:bf:66:4a:4e:45:7c:d5: a1:94:65:f9:ba:e8:e1:d4:ca:a2:66:7a:77:ff:8e: 86:53:07:e8:e3:ba:80:b1:d9:99:bb:14:f8:c4:cb: df:c1:9c:bb:53:c6:67:df:fa:7f:b1:39:e8:d9:e2: 5b:99:ab:8e:1c:25:56:fc:44:10:83:a1:91:31:15: a0:d0:19:39:80:26:74:28:c1:01:6e:19:9b:8e:e3: 7d:f4:e2:ad:5b:52:54:b3:a6:57:3f:fc:b2:72:5f: b5:a2:2d:2f:d2:90:4f:ef:ce:ef:a6:09:f8:d1:d1: 79:78:21:9f:51:83:61:b2:7a:60:31:d9:2c:69:b4: 59:64:47:ae:d4:ab:2d:bb:f6:72:3c:d6:a0:39:23: ad:1d:ac:56:ef:77:fc:83:13:bc:17:66:25:db:31: 54:44:d2:0d:b9:a4:bd:81:b7:0d:e1:a7:3d:a5:11: ac:d7:7e:8f:9b:1a:c2:a7:3d:f8:15:ee:3d:bf:fa: 87:18:7c:46:1b:d2:cf:52:03:31:fd:dc:7d:0a:08: bc:08:39:bb:64:4a:a7:96:9c:b7:44:70:52:4a:d9: bb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:02:93:6D:9E:52:7C:1E:D6:13:A3:5A:E9:BA:BE:0F:75:10:F5:A7 X509v3 Authority Key Identifier: keyid:AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a5:ad:60:22:49:0f:a7:ae:3f:a4:b9:c3:87:a4:6d:81:2f: d9:1a:f9:f7:d8:1c:f2:29:ac:60:0e:47:22:ca:52:d1:e3:8a: 9c:c1:3a:8e:21:cc:a3:29:c3:dc:d1:27:68:85:e2:02:dd:da: d9:96:15:c9:21:be:3e:c3:91:b7:18:06:44:6a:3f:8f:80:b7: 54:c2:e8:e8:43:2d:da:9f:2f:06:7a:dd:e9:04:3c:74:65:42: 85:fa:14:f6:1c:73:4e:37:a5:af:ae:b2:40:95:86:81:33:f5: ff:28:47:f2:66:fd:11:e2:65:e9:e0:0c:67:4a:ae:78:c5:b2: 24:af:97:6f:0b:74:8b:22:8f:21:dc:84:24:6d:be:96:94:c5: 0a:02:c2:8f:39:a6:60:71:be:ea:93:2d:e4:4f:4a:52:f2:6a: 6d:a6:97:27:3d:86:dd:36:35:97:4c:02:40:d1:5f:bf:e4:96: b2:8b:4b:34:3e:4d:fd:da:27:36:90:3f:6b:6d:68:91:9c:9e: de:7b:c0:c8:4f:36:3b:8e:1d:df:42:53:38:e7:a0:09:43:2f: 5f:62:1b:01:4e:16:95:9c:36:ad:74:f6:63:fe:95:77:a4:1d: 6c:3f:4c:78:18:b6:de:2b:43:8d:8c:23:f4:b3:a7:22:db:53: 50:44:e4:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzFiZytvqzUu8mdR7iwy5O9e+4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4 MEZERkRGRDAeFw0yNjA5MjMwOTQ4MjJaFw0yNjA5MjQxMjQ4MjJaMDMxMTAvBgNV BAMTKDAyMDI5MzZEOUU1MjdDMUVENjEzQTM1QUU5QkFCRTBGNzUxMEY1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJQGfAYsLrOefwYDUef6hw3u1 3FEVSiR0DsXg0fUHIuFmffIxv2ZKTkV81aGUZfm66OHUyqJmenf/joZTB+jjuoCx 2Zm7FPjEy9/BnLtTxmff+n+xOejZ4luZq44cJVb8RBCDoZExFaDQGTmAJnQowQFu GZuO43304q1bUlSzplc//LJyX7WiLS/SkE/vzu+mCfjR0Xl4IZ9Rg2GyemAx2Sxp tFlkR67Uqy279nI81qA5I60drFbvd/yDE7wXZiXbMVRE0g25pL2Btw3hpz2lEazX fo+bGsKnPfgV7j2/+ocYfEYb0s9SAzH93H0KCLwIObtkSqeWnLdEcFJK2bsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAgKTbZ5SfB7WE6Na6bq+D3UQ9acwHwYDVR0j BBgwFoAUrz0etvO3SxJgZ5fDHCNTt4D9/f0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY3ODYwZTMtNmFkOC00N2E1LTk0YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZG M0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4MEZERkRGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjNEMUVCNkYzQjc0QjEyNjA2Nzk3QzMxQzIzNTNCNzgwRkRG REZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUz Qjc4MEZERkRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2lrWAiSQ+nrj+kucOHpG2BL9ka+ffYHPIp rGAORyLKUtHjipzBOo4hzKMpw9zRJ2iF4gLd2tmWFckhvj7DkbcYBkRqP4+At1TC 6OhDLdqfLwZ63ekEPHRlQoX6FPYcc043pa+uskCVhoEz9f8oR/Jm/RHiZengDGdK rnjFsiSvl28LdIsijyHchCRtvpaUxQoCwo85pmBxvuqTLeRPSlLyam2mlyc9ht02 NZdMAkDRX7/klrKLSzQ+Tf3aJzaQP2ttaJGcnt57wMhPNjuOHd9CUzjnoAlDL19i GwFOFpWcNq109mP+lXekHWw/THgYtt4rQ42MI/SzpyLbU1BE5J0= -----END CERTIFICATE-----Generated at Wed Sep 23 20:36:18 2026 by rpki-client