$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft File: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft (raw, json) Hash identifier: StoEbwdcB9p/DZSNSg5DRJ+OEjAo5pqsovyzUSJyXdo= Subject key identifier: 6E:66:A1:8B:E8:81:52:7A:15:91:DA:55:14:EB:AA:14:BB:B1:B4:A5 Authority key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Certificate issuer: /CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Certificate serial: 5659DDD065457655847EC2433B047C20BECC7D14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 12:10:44 +0000 Manifest this update: Thu 24 Sep 2026 12:05:44 +0000 Manifest next update: Fri 25 Sep 2026 15:07:44 +0000 Files and hashes: 1: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: IlV0vgNjpTuApXjZnZRsOZX0dY/TDSqULrpC6FIi3II=) 2: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: RcYrOS6rHRHWdeyezVsL3GaabN57kfPwCIDe/5oYbMs=) 3: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl (hash: h6w75HJ0zZapo1O2c63J5r1q19z0QvFzVNZ3E4Ijwhs=) 4: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 7ql88/IJdY/aWaZ2NP20wpbVy2vo7/DTiipCEcxNsYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:59:dd:d0:65:45:76:55:84:7e:c2:43:3b:04:7c:20:be:cc:7d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Validity Not Before: Sep 24 12:05:44 2026 GMT Not After : Sep 25 15:07:44 2026 GMT Subject: CN=6E66A18BE881527A1591DA5514EBAA14BBB1B4A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:7d:56:90:2f:a3:b4:0f:28:9c:e9:97:69: 1f:a7:5a:31:d4:bf:17:fb:bb:75:4c:dc:ad:9a:08: 95:a9:e7:b1:6c:12:fd:be:62:24:ec:47:d9:17:7e: f7:1a:fc:d5:97:c3:72:e6:b0:a5:76:14:68:4f:44: 54:d1:92:6b:4a:f1:ce:2b:05:76:ce:36:e9:71:6f: 0a:9c:e7:85:5e:4b:ea:e5:81:e3:e3:14:55:f8:2d: 08:43:5f:fd:81:47:8b:a6:9e:b1:db:21:48:1d:41: 3e:ff:e7:13:22:76:21:dd:df:6b:e6:9a:58:9a:d6: 8b:e7:e7:88:83:0e:3b:f1:31:cf:9c:0d:91:ef:4e: c4:d8:f2:97:8f:77:8a:e6:40:0d:77:ba:e8:f0:35: 25:b8:2c:ec:f3:dc:31:4f:75:e0:24:61:fc:45:04: eb:a6:85:2c:23:1b:ce:6c:c2:e6:48:28:cd:50:7e: 76:2c:05:04:04:f0:9c:71:9f:dc:4a:a7:3d:94:55: cb:9f:ff:64:4a:50:f3:45:92:32:6d:60:18:92:22: 34:dd:e4:df:5c:d1:41:2a:ab:02:cd:2b:19:c3:16: 54:76:7f:9e:1b:b4:0c:10:ec:25:89:20:0c:14:5c: 29:f6:3e:15:77:2c:d1:6a:4c:b9:4e:f3:2b:5e:41: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:66:A1:8B:E8:81:52:7A:15:91:DA:55:14:EB:AA:14:BB:B1:B4:A5 X509v3 Authority Key Identifier: keyid:4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ad:ed:73:0d:16:36:eb:90:f7:51:04:5f:3d:ef:a4:83:49: b2:c2:9e:95:cf:d7:d0:1f:22:45:19:c4:d3:65:c5:1c:a4:2b: a2:d1:40:b2:d4:7e:af:db:5b:ad:8e:4f:5e:2c:50:51:8d:21: b3:09:49:44:5b:5c:4a:de:15:e6:ca:ff:dc:99:16:22:7b:ca: 7d:2f:00:4a:7e:55:1a:24:1f:6a:59:17:7f:57:15:fe:aa:14: de:db:62:ea:68:cc:45:ca:dd:ad:53:79:f9:cf:d3:30:6e:75: 75:f1:ef:4c:5a:b7:cb:cb:a8:a8:ca:f5:9a:8c:e6:3a:1a:95: 92:95:c8:fb:40:2d:52:5a:c1:9a:a1:e7:ea:ce:e1:22:46:0c: d8:7a:d6:c8:41:91:6a:80:29:4d:69:00:16:64:8c:4f:14:89: cb:e0:2a:0d:bf:2d:f3:85:7f:14:c5:b5:2e:f6:22:4b:90:c3: 28:57:47:13:1e:f8:b5:60:94:68:51:a5:77:c4:7d:58:92:7f: 11:5c:24:03:68:cd:cf:60:75:67:d4:4b:85:6c:49:57:ba:a8: 83:00:3a:c1:5e:3f:5a:0c:23:0e:16:48:ce:17:11:10:1b:ac: 81:ec:4c:b9:84:cf:0d:41:35:b4:33:73:dc:30:54:d1:08:a2: d6:e7:33:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlnd0GVFdlWEfsJDOwR8IL7MfRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQy NjA2OUMyQjAeFw0yNjA5MjQxMjA1NDRaFw0yNjA5MjUxNTA3NDRaMDMxMTAvBgNV BAMTKDZFNjZBMThCRTg4MTUyN0ExNTkxREE1NTE0RUJBQTE0QkJCMUI0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKu31WkC+jtA8onOmXaR+nWjHU vxf7u3VM3K2aCJWp57FsEv2+YiTsR9kXfvca/NWXw3LmsKV2FGhPRFTRkmtK8c4r BXbONulxbwqc54VeS+rlgePjFFX4LQhDX/2BR4umnrHbIUgdQT7/5xMidiHd32vm mlia1ovn54iDDjvxMc+cDZHvTsTY8pePd4rmQA13uujwNSW4LOzz3DFPdeAkYfxF BOumhSwjG85swuZIKM1QfnYsBQQE8Jxxn9xKpz2UVcuf/2RKUPNFkjJtYBiSIjTd 5N9c0UEqqwLNKxnDFlR2f54btAwQ7CWJIAwUXCn2PhV3LNFqTLlO8yteQXBzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbmahi+iBUnoVkdpVFOuqFLuxtKUwHwYDVR0j BBgwFoAUSvelxvVMX9vYlXp/5bckJCYGnCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE1OWEzNjItOTUwYy00NWMyLWFlY2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZG NTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQyNjA2OUMyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUY3QTVDNkY1NEM1RkRCRDg5NTdBN0ZFNUI3MjQyNDI2MDY5 QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0 MjQyNjA2OUMyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJut7XMNFjbrkPdRBF8976SDSbLCnpXP19Af IkUZxNNlxRykK6LRQLLUfq/bW62OT14sUFGNIbMJSURbXEreFebK/9yZFiJ7yn0v AEp+VRokH2pZF39XFf6qFN7bYupozEXK3a1TefnP0zBudXXx70xat8vLqKjK9ZqM 5joalZKVyPtALVJawZqh5+rO4SJGDNh61shBkWqAKU1pABZkjE8UicvgKg2/LfOF fxTFtS72IkuQwyhXRxMe+LVglGhRpXfEfViSfxFcJANozc9gdWfUS4VsSVe6qIMA OsFeP1oMIw4WSM4XERAbrIHsTLmEzw1BNbQzc9wwVNEIotbnMy8= -----END CERTIFICATE-----Generated at Thu Sep 24 17:04:37 2026 by rpki-client