$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft File: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft (raw, json) Hash identifier: AHXH3iuKplW0LtoPb/k7a0HB2Frr/Jz3tBvRCMoiNbQ= Subject key identifier: 48:09:61:9E:6F:0A:DC:15:15:83:60:C2:20:CF:3F:39:DD:3D:FB:33 Authority key identifier: AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 Certificate issuer: /CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Certificate serial: 6359B4EFE9B037DDCFE26A48184592C97341BC7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 06:10:19 +0000 Manifest this update: Wed 17 Jun 2026 06:05:19 +0000 Manifest next update: Thu 18 Jun 2026 07:11:19 +0000 Files and hashes: 1: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: 2XC3UsHd4KwKUJ2Uidn6/QSZk29AP2xoMLuxzT2QDYQ=) 2: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: luezxLjf+gQLcjiQqhuyu+ya30sT86b3qelMWGrfE0Y=) 3: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl (hash: iJp2nKmL57amZA4Sf579n64GX6kuXQ04hwMk9cQEK3s=) 4: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: MCW/xqC9gtQy6b8F5lQvfvI/LlU0HFmKiOjV/FzQgxY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:59:b4:ef:e9:b0:37:dd:cf:e2:6a:48:18:45:92:c9:73:41:bc:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Validity Not Before: Jun 17 06:05:19 2026 GMT Not After : Jun 18 07:11:19 2026 GMT Subject: CN=4809619E6F0ADC15158360C220CF3F39DD3DFB33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6f:66:68:9b:0b:93:df:07:da:5c:88:fb:c1: b6:13:81:01:92:39:66:df:70:77:8c:e8:9c:70:9e: d0:93:fd:af:f3:90:e7:cf:42:e7:f2:38:bc:e5:3f: fd:db:3b:34:24:4b:94:7b:e9:01:1d:e9:89:5c:6f: 4a:e9:45:25:1b:b3:43:c9:f3:76:82:08:74:c5:d5: c8:27:4e:63:ef:cd:f0:c8:c9:70:bf:68:bd:95:04: cf:22:16:d7:dd:36:f6:4a:9f:a6:fe:3b:16:b2:ff: 72:96:11:17:4f:1d:ae:0f:6d:eb:ac:e4:24:bc:48: 91:e5:a9:41:21:cc:5a:12:7b:09:dd:c4:63:a1:53: ea:c6:5d:2c:01:27:be:53:9e:4b:3d:dd:15:85:c0: ec:8d:19:2f:1f:20:0c:c4:53:39:63:83:17:eb:d1: ad:0f:32:25:47:ed:82:3d:1b:db:79:d9:73:27:9b: 34:20:bd:71:7d:9a:f6:0f:19:f7:39:81:14:31:60: 10:76:fa:26:8f:69:b6:cc:5d:81:33:37:42:0b:5c: 87:8a:34:ab:03:9e:b4:25:05:a3:f9:32:90:3c:a5: b9:20:b9:34:f7:90:07:dc:0d:e7:30:6f:3b:e3:03: 85:8b:57:0f:40:88:37:45:44:49:ff:d3:9d:ba:6f: be:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:09:61:9E:6F:0A:DC:15:15:83:60:C2:20:CF:3F:39:DD:3D:FB:33 X509v3 Authority Key Identifier: keyid:AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:00:36:60:80:80:e9:71:2d:39:9e:b9:f2:be:79:e1:16:be: e9:d0:a7:6c:a3:93:cc:66:66:b0:10:c9:e1:58:d1:91:10:c1: ad:e2:75:de:e6:9a:7b:3e:74:28:a4:7e:55:0f:28:08:19:1f: f2:f1:25:62:29:27:0b:54:42:10:78:40:9c:69:e4:5a:f7:cb: b8:d9:40:40:20:82:ae:83:52:08:e7:2d:59:6e:4e:0f:9d:6e: 3d:eb:52:24:c7:7e:54:9d:af:f8:82:2b:7d:7d:ef:93:be:14: 0b:04:dd:d0:49:90:26:8e:cd:10:bb:8a:ec:ac:a6:12:ff:c0: 21:c2:19:97:af:0a:0c:1c:aa:e9:c3:b1:b0:26:b0:0e:5d:a5: 6e:cd:ea:8d:76:f5:7f:4a:89:da:7e:65:82:f3:96:f2:b5:46: 00:69:42:f3:dd:e6:d1:cf:3b:ed:89:1e:77:ad:61:1e:0f:ca: 17:21:10:1d:0b:1b:ac:87:c4:96:f2:12:e5:0a:5d:9d:0a:fd: ca:91:db:36:27:9f:19:fe:a2:dd:52:cc:1a:e3:2b:93:ca:cf: d2:36:a3:61:9e:4d:40:3d:1c:a4:ca:08:46:d2:08:cd:d0:0c: f5:32:69:08:f4:16:f7:1c:06:6c:53:d2:ad:7c:d1:19:58:a4: 80:a3:55:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1m07+mwN93P4mpIGEWSyXNBvH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJB QTc0RjVEMDAeFw0yNjA2MTcwNjA1MTlaFw0yNjA2MTgwNzExMTlaMDMxMTAvBgNV BAMTKDQ4MDk2MTlFNkYwQURDMTUxNTgzNjBDMjIwQ0YzRjM5REQzREZCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdb2ZomwuT3wfaXIj7wbYTgQGS OWbfcHeM6JxwntCT/a/zkOfPQufyOLzlP/3bOzQkS5R76QEd6Ylcb0rpRSUbs0PJ 83aCCHTF1cgnTmPvzfDIyXC/aL2VBM8iFtfdNvZKn6b+Oxay/3KWERdPHa4Pbeus 5CS8SJHlqUEhzFoSewndxGOhU+rGXSwBJ75Tnks93RWFwOyNGS8fIAzEUzljgxfr 0a0PMiVH7YI9G9t52XMnmzQgvXF9mvYPGfc5gRQxYBB2+iaPabbMXYEzN0ILXIeK NKsDnrQlBaP5MpA8pbkguTT3kAfcDecwbzvjA4WLVw9AiDdFREn/0526b74rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSAlhnm8K3BUVg2DCIM8/Od09+zMwHwYDVR0j BBgwFoAUr6MpTlWAtoIDvA3wT9AHIqp09dAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhZDUyMjYtNjU2ZC00NjFkLTljZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1 NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJBQTc0RjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkEzMjk0RTU1ODBCNjgyMDNCQzBERjA0RkQwMDcyMkFBNzRG NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3 MjJBQTc0RjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoANmCAgOlxLTmeufK+eeEWvunQp2yjk8xm ZrAQyeFY0ZEQwa3idd7mmns+dCikflUPKAgZH/LxJWIpJwtUQhB4QJxp5Fr3y7jZ QEAggq6DUgjnLVluTg+dbj3rUiTHflSdr/iCK31975O+FAsE3dBJkCaOzRC7iuys phL/wCHCGZevCgwcqunDsbAmsA5dpW7N6o129X9Kidp+ZYLzlvK1RgBpQvPd5tHP O+2JHnetYR4PyhchEB0LG6yHxJbyEuUKXZ0K/cqR2zYnnxn+ot1SzBrjK5PKz9I2 o2GeTUA9HKTKCEbSCM3QDPUyaQj0FvccBmxT0q180RlYpICjVb0= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:17 2026 by rpki-client