$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft File: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft (raw, json) Hash identifier: yjG1ummn+PteXWMwDX6gqsyHxoJAWuQomjMhKZUtiCE= Subject key identifier: 50:18:F6:09:35:29:09:E6:E0:22:7D:80:48:64:F9:80:69:F7:C2:16 Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 30DBF03D1B5222E2A0165C0C89378B8D1514555B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft Manifest number: BD Signing time: Sun 20 Sep 2026 22:39:53 +0000 Manifest this update: Sun 20 Sep 2026 22:34:53 +0000 Manifest next update: Mon 21 Sep 2026 23:19:53 +0000 Files and hashes: 1: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: hVmreBSejl8Ng95zD8+VjoKGoyOFeerqH52Ryd6nA/g=) 2: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: hC0faeWGVogeaEgDmuTq2f3+pymLHliitj4mm9RD6Qs=) 3: 323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa (hash: 34GLqmPa0NzJ8OUNPh/1B0CyHBlCIeGKpKQ2WBBDdVw=) 4: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: E4L4DC+KlZnlYuimMn7ht+nOkbQIJbr5xJR5o/xYX8Q=) 5: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: 7/h2zwvZrAQS0wAHrJy9NqwWiyEipm8MyD1COAfe2nQ=) 6: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: GH9tET4mTW+/Gjc8WplZ0ASidCPn/60O8oLirXNQIgM=) 7: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: gQ+0Ncm6ouGfqCj99PO+6ljzB+BVgCECd3yhaahocOE=) 8: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: RWX46rojpF6BQSm8l4yUodE90WBaf+wB8Y4OTAFQ4ME=) 9: 323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa (hash: lq8n0YPrI0ej0qKCbfOlpW4tTPmD0iFL3XzQMezYPDc=) 10: 323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa (hash: wYag/KpQxcRCIm84mayvN/ce4e/42pmE6/MAHa5Gds8=) 11: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: p9IaRw5dZMu/RqndUf94zxAMZ/T8mQiwgEQa5hTpOao=) 12: 323430303a643934303a3a2f33322d3332203d3e20313336303838.roa (hash: 6v3qgdUIZjmuHWouV9dOsfbIOPcGM+FuLf4il05N+Ek=) 13: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: qErBEzbgejKCSlR97tYuadzXafCvSPlaXArCcdt+yEg=) 14: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: kX944U5wcZ4ljeI4U/N/cddY4+l6BlmIxGXHq+0AWLc=) 15: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: NhSbtQsCSZOcv410mYA+T/YK4xT0UEtgj3gs2YcEa4w=) 16: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: /B7YofX/HHM+G+hIOgqx/c64KwEJiJwq2rpXtyQZ30I=) 17: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: kC/BQJWqF3hfjk7jxki1g+71uLyOIxW8KkPPgVLxjeg=) 18: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: 7VINGDMY1TUq927w0s5kPc4NrKgys1/WpgtYsMIyWe4=) 19: 323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa (hash: oABovF7KdDdlY6+CHjePOcttfLrt7gjFGQnN04lySCo=) 20: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: cPlZWqFm5MVvHANk5QwuMsGCvqASptrnxXG+efFGx5c=) 21: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: RJ17Dz/IGt6G1WroLkK6wHoimyT4sJSrPhTKtpoVzzk=) 22: 323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa (hash: VeUuIEzR0KXaVdDKuIt8qmP7aqg4VDEFHLGvR21XwG0=) 23: 323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (hash: ROBi78wuuDs1YynQRORSD7fsHhMgIofWSrauPO5cQ7U=) 24: 323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa (hash: cEoIyEjinxE4GnYC0CNRuXvF+WOLWNhACz4dP/4/xaU=) 25: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl (hash: 2x8Irb5OtKE//GcuQNgLlUkiIxhWzIESA0amEb3mUsA=) 26: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: RC9a6LW/+eoJDdWzw8/UK2UNfYC2bIi6jAgj1aXZwfs=) 27: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: nUJ2UcMYUMgp2Ivw4oUIOzI0b/8YqU8NMhh0tUJGG8w=) 28: 323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (hash: pXHANQSmeMdKKdoCjZbWQt7xD53ERPYITVt1C9zayGI=) 29: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: oX8mmJjYFncLywEKonSF0YgdnGFD+ctQ155eJaCMAUg=) 30: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: iBvTknbLTgdzBBg6hpQI6nAp2/Y+ZQ/SghaasUfpG04=) 31: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: g/IwKgkLM3lX7TTfydNsuy1vblZAv0bCcFnenKOiWnI=) 32: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: GVZGNEwcVR+6b1iz+Mf+WaWQxD3aIC0LXDFgR27cdp0=) 33: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: 1173I/3m7XkzbM38lD89z6ZiTiudGSDgnrOXK0sI2OM=) 34: 323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa (hash: D+h8jX3eqkGKLtVhz2jT7gpvFEWVMRt52UNBLxkGJhs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:db:f0:3d:1b:52:22:e2:a0:16:5c:0c:89:37:8b:8d:15:14:55:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: Sep 20 22:34:53 2026 GMT Not After : Sep 21 23:19:53 2026 GMT Subject: CN=5018F609352909E6E0227D804864F98069F7C216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:46:5c:93:9f:5e:86:01:1a:f5:2c:57:eb:6b: c1:a6:c8:75:5d:da:74:2b:51:00:d6:e1:0f:91:95: a3:ef:ea:3b:99:37:d1:77:43:79:e6:18:50:6c:02: 43:6c:64:b2:3d:ca:7f:d9:5f:55:7f:54:e2:63:4f: 61:4c:78:d4:24:5d:ca:ec:94:6f:84:69:91:7b:ea: bb:19:89:08:76:c0:bf:6e:2b:85:43:78:68:f0:b0: cb:67:2b:23:12:4b:4a:25:6b:ac:75:86:fb:47:9b: ed:bc:bf:70:9f:9c:6b:c5:e7:f6:8d:46:de:05:9d: 1e:be:d8:0d:db:26:1b:c3:92:5d:90:6c:c7:0f:53: 4e:8f:e5:85:6d:a4:ef:6c:16:de:bc:b0:2d:1f:34: 00:57:f2:f1:6f:3c:4f:f2:40:a5:9e:33:e0:25:d6: 59:82:ab:c9:e3:d2:7c:09:ae:c3:ad:c5:4e:62:22: 56:d1:d0:55:80:57:5e:f5:f7:11:6d:40:c3:e4:57: 4a:6a:40:93:d5:32:51:c1:cf:3a:46:c4:cb:2e:88: d6:35:1b:06:fb:21:97:09:81:0e:e5:89:f9:dc:4e: 27:07:42:ff:d5:47:b0:a0:4f:1a:7b:57:bb:ae:a5: db:04:2e:7d:87:7e:c5:7a:67:d9:b8:f7:3b:84:90: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:18:F6:09:35:29:09:E6:E0:22:7D:80:48:64:F9:80:69:F7:C2:16 X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:45:a9:bf:01:e9:ba:e0:67:93:a8:f4:c0:c6:1b:19:81:a9: be:7a:c6:eb:d2:cb:de:9b:75:27:a8:f0:1b:12:d8:ff:2c:ee: ea:8a:dd:db:34:9e:f7:c4:9d:be:e6:12:fb:64:20:41:26:42: 82:bb:a4:3a:d1:20:2c:2a:91:3c:80:d0:1c:52:bf:45:e4:2b: 88:b1:da:f4:ce:d2:a2:28:bc:bf:1a:b3:28:50:08:c8:9a:27: 98:5c:aa:b9:67:6a:87:78:e6:40:19:34:c6:ba:5c:05:5d:bb: 71:ef:90:f5:a8:51:fc:b8:5c:b6:2e:3e:07:44:2e:04:eb:d3: 82:9e:ad:52:9d:c1:b4:ae:70:54:b7:26:6a:3c:60:0c:15:28: ed:2d:bc:6a:de:ed:76:d4:d2:cb:07:ca:5f:bf:ba:92:5a:df: 8b:bb:ce:13:dc:b6:f6:23:43:81:44:ae:1e:b2:83:92:de:0a: 2e:c0:2a:56:01:74:28:60:3c:bf:dc:17:95:55:c4:b7:80:d4: 1b:00:4e:89:83:e3:8d:79:ec:51:c8:07:43:57:8d:07:ef:c7: 47:73:78:07:a6:46:20:62:3e:24:65:48:4c:64:fd:52:44:7e: 29:c6:c1:30:42:01:d7:54:84:9d:93:1f:0c:80:c2:68:c3:32: 17:22:df:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNvwPRtSIuKgFlwMiTeLjRUUVVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA5MjAyMjM0NTNaFw0yNjA5MjEyMzE5NTNaMDMxMTAvBgNV BAMTKDUwMThGNjA5MzUyOTA5RTZFMDIyN0Q4MDQ4NjRGOTgwNjlGN0MyMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcRlyTn16GARr1LFfra8GmyHVd 2nQrUQDW4Q+RlaPv6juZN9F3Q3nmGFBsAkNsZLI9yn/ZX1V/VOJjT2FMeNQkXcrs lG+EaZF76rsZiQh2wL9uK4VDeGjwsMtnKyMSS0ola6x1hvtHm+28v3CfnGvF5/aN Rt4FnR6+2A3bJhvDkl2QbMcPU06P5YVtpO9sFt68sC0fNABX8vFvPE/yQKWeM+Al 1lmCq8nj0nwJrsOtxU5iIlbR0FWAV1719xFtQMPkV0pqQJPVMlHBzzpGxMsuiNY1 Gwb7IZcJgQ7lifncTicHQv/VR7CgTxp7V7uupdsELn2HfsV6Z9m49zuEkHbXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUBj2CTUpCebgIn2ASGT5gGn3whYwHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmNGVjMWMtOTUzNS00Y2JmLTlj N2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlF OUI2OTNCN0NDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhFqb8B6brgZ5Oo9MDGGxmBqb56xuvSy96b dSeo8BsS2P8s7uqK3ds0nvfEnb7mEvtkIEEmQoK7pDrRICwqkTyA0BxSv0XkK4ix 2vTO0qIovL8asyhQCMiaJ5hcqrlnaod45kAZNMa6XAVdu3HvkPWoUfy4XLYuPgdE LgTr04KerVKdwbSucFS3Jmo8YAwVKO0tvGre7XbU0ssHyl+/upJa34u7zhPctvYj Q4FErh6yg5LeCi7AKlYBdChgPL/cF5VVxLeA1BsATomD44157FHIB0NXjQfvx0dz eAemRiBiPiRlSExk/VJEfinGwTBCAddUhJ2THwyAwmjDMhci3wo= -----END CERTIFICATE-----Generated at Mon Sep 21 13:25:29 2026 by rpki-client