$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft File: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft (raw, json) Hash identifier: eyiM35OrUfM0+Hjbrtyi2v/qsZElc0nXsbAGZg9WOv4= Subject key identifier: 99:01:4D:25:79:B0:78:F1:01:01:77:7E:6A:2A:DF:E2:EE:9B:78:AF Authority key identifier: AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 Certificate issuer: /CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Certificate serial: 1028C49DDE4E91DFB2ED02CBA2ACBD9FD26EAB72 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:25:41 +0000 Manifest this update: Mon 21 Sep 2026 15:20:41 +0000 Manifest next update: Tue 22 Sep 2026 16:49:41 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: MCW/xqC9gtQy6b8F5lQvfvI/LlU0HFmKiOjV/FzQgxY=) 2: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: 2XC3UsHd4KwKUJ2Uidn6/QSZk29AP2xoMLuxzT2QDYQ=) 3: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl (hash: gkhrtJUXr/AiHQlwpEUt0XlvotA7zrKXQ/+zY1iqq+I=) 4: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: luezxLjf+gQLcjiQqhuyu+ya30sT86b3qelMWGrfE0Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:28:c4:9d:de:4e:91:df:b2:ed:02:cb:a2:ac:bd:9f:d2:6e:ab:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Validity Not Before: Sep 21 15:20:41 2026 GMT Not After : Sep 22 16:49:41 2026 GMT Subject: CN=99014D2579B078F10101777E6A2ADFE2EE9B78AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:fb:19:88:74:12:ff:b5:58:8b:53:dc:bf: 38:46:d0:7a:43:b6:87:7a:69:1d:b0:01:5d:26:69: 67:a5:46:bd:01:c6:b8:fa:38:3a:f9:26:22:72:d7: 2f:8d:9e:66:ad:aa:af:28:c5:11:a5:47:f9:a4:91: a6:06:53:e4:d6:b6:79:42:56:55:ed:d2:a1:71:ad: 20:0b:a4:3e:be:b6:1d:01:52:83:a5:4f:c4:46:0c: 42:7c:74:65:a5:e8:84:aa:80:34:5f:ac:c1:20:9a: a5:cd:36:00:72:d4:02:b7:68:92:c2:b6:12:67:8f: d2:71:e6:65:80:01:23:a7:6e:71:46:67:2d:08:fd: d8:b5:14:12:12:bc:5f:b8:a6:4d:88:ad:ff:86:09: 54:a8:cd:c9:ce:bf:d6:34:eb:af:a2:14:3e:3e:cb: 97:00:54:b0:c6:83:cf:98:90:89:c7:3a:33:44:f3: de:aa:f1:fb:86:f9:52:76:0c:cd:39:a2:34:a3:62: 92:82:2b:21:ec:f3:5f:0e:ae:5c:9f:ba:cb:14:c6: 2e:7b:38:c2:89:4f:ae:95:d4:63:7a:68:3c:87:f9: de:94:7a:ab:15:a5:c4:57:a2:11:ad:e9:8c:5a:2d: c1:85:90:6d:d4:57:63:0e:52:b1:34:6a:19:28:9f: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:01:4D:25:79:B0:78:F1:01:01:77:7E:6A:2A:DF:E2:EE:9B:78:AF X509v3 Authority Key Identifier: keyid:AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:95:a1:bf:60:ae:78:db:86:0f:b5:79:c6:b6:82:1a:73:a3: a3:fc:f6:bb:0e:bb:75:86:ac:6f:38:fd:b1:d3:ff:f9:9b:0a: b9:50:a8:c5:b4:2f:5f:48:33:32:ce:5f:55:32:16:a1:2d:b4: 5c:40:36:2f:c9:4f:3f:b5:44:6b:84:95:75:65:64:b0:22:31: 7b:02:11:81:ab:d5:79:1b:89:5b:bc:a1:50:17:23:bd:67:a7: 45:a5:ae:99:31:aa:a3:5a:8e:43:c2:6e:6d:87:e2:66:e4:fb: d3:1a:f9:42:8c:fa:59:0c:0a:ae:20:3d:95:9d:87:a1:ba:a6: 7c:5b:38:10:d0:0a:3c:4a:49:ad:5e:ce:12:17:16:98:c4:ce: 16:8d:f4:01:ef:01:ad:d7:fe:86:35:2d:c2:21:90:d6:46:9e: 10:72:79:a4:c7:53:c4:ba:d0:04:52:d1:80:16:a4:ab:d3:64: 48:68:62:f3:17:b1:86:b0:f3:98:e8:13:9f:2e:b5:6c:66:9b: 1a:d9:72:9d:c0:ed:a9:80:b5:95:ae:6d:42:21:23:e4:52:21: 7a:18:e7:27:01:28:4c:11:2b:a7:55:3c:01:c4:59:6b:63:a8: 65:19:0e:2b:a8:1c:d8:d7:ce:66:6d:88:02:0c:4a:d2:d3:b8: 66:65:e1:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUECjEnd5Okd+y7QLLoqy9n9Juq3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJB QTc0RjVEMDAeFw0yNjA5MjExNTIwNDFaFw0yNjA5MjIxNjQ5NDFaMDMxMTAvBgNV BAMTKDk5MDE0RDI1NzlCMDc4RjEwMTAxNzc3RTZBMkFERkUyRUU5Qjc4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CvsZiHQS/7VYi1PcvzhG0HpD tod6aR2wAV0maWelRr0Bxrj6ODr5JiJy1y+Nnmatqq8oxRGlR/mkkaYGU+TWtnlC VlXt0qFxrSALpD6+th0BUoOlT8RGDEJ8dGWl6ISqgDRfrMEgmqXNNgBy1AK3aJLC thJnj9Jx5mWAASOnbnFGZy0I/di1FBISvF+4pk2Irf+GCVSozcnOv9Y066+iFD4+ y5cAVLDGg8+YkInHOjNE896q8fuG+VJ2DM05ojSjYpKCKyHs818OrlyfussUxi57 OMKJT66V1GN6aDyH+d6UeqsVpcRXohGt6YxaLcGFkG3UV2MOUrE0ahkon/FhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmQFNJXmwePEBAXd+airf4u6beK8wHwYDVR0j BBgwFoAUr6MpTlWAtoIDvA3wT9AHIqp09dAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhZDUyMjYtNjU2ZC00NjFkLTljZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1 NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJBQTc0RjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkEzMjk0RTU1ODBCNjgyMDNCQzBERjA0RkQwMDcyMkFBNzRG NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3 MjJBQTc0RjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqVob9grnjbhg+1eca2ghpzo6P89rsOu3WG rG84/bHT//mbCrlQqMW0L19IMzLOX1UyFqEttFxANi/JTz+1RGuElXVlZLAiMXsC EYGr1XkbiVu8oVAXI71np0WlrpkxqqNajkPCbm2H4mbk+9Ma+UKM+lkMCq4gPZWd h6G6pnxbOBDQCjxKSa1ezhIXFpjEzhaN9AHvAa3X/oY1LcIhkNZGnhByeaTHU8S6 0ARS0YAWpKvTZEhoYvMXsYaw85joE58utWxmmxrZcp3A7amAtZWubUIhI+RSIXoY 5ycBKEwRK6dVPAHEWWtjqGUZDiuoHNjXzmZtiAIMStLTuGZl4T8= -----END CERTIFICATE-----Generated at Mon Sep 21 17:40:59 2026 by rpki-client