$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft File: 3AF015F925061D7540F9BBFA45C6C7A944312663.mft (raw, json) Hash identifier: O9Od3gMqyNUpjR1H+J5hJrcy6p3O/XR3LHn04htTaGE= Subject key identifier: 23:6E:E5:2D:2A:80:AC:5B:F7:58:70:48:14:48:7A:D6:35:80:5D:A3 Authority key identifier: 3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 Certificate issuer: /CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Certificate serial: 7D95429902E53EAF5963B55640591179DBAA3B7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft Manifest number: C2 Signing time: Mon 21 Sep 2026 17:18:08 +0000 Manifest this update: Mon 21 Sep 2026 17:13:08 +0000 Manifest next update: Tue 22 Sep 2026 20:13:08 +0000 Files and hashes: 1: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: 10SNmFgccvYgJ2UV57b04CHFVLMxOGS2khiF98evAls=) 2: 3AF015F925061D7540F9BBFA45C6C7A944312663.crl (hash: 03t/qhD+MSnsP1zEeR9iXpedYgjMAdLMhZYCBLqrC0A=) 3: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: gOYQWRAXG44l1bca07U85Hgjsni/0xj64/LDiA5pyis=) 4: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: egwsjKMYT0IZpyV4Dfttqi4c4pxw5Vm+1yP8BdfUm90=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:95:42:99:02:e5:3e:af:59:63:b5:56:40:59:11:79:db:aa:3b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Validity Not Before: Sep 21 17:13:08 2026 GMT Not After : Sep 22 20:13:08 2026 GMT Subject: CN=236EE52D2A80AC5BF758704814487AD635805DA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fc:fd:1b:ae:69:5b:4a:43:1c:c2:44:cf:66: 3f:69:85:d7:3b:96:c0:1b:db:18:80:06:f9:f4:38: 35:6d:36:d8:d4:70:9f:79:26:55:ba:17:f9:15:a5: e3:86:e2:e3:2a:ce:0b:77:54:72:6c:6d:e2:82:50: cc:ed:98:8a:ac:a9:fc:4e:2f:09:2d:a9:58:ba:26: af:46:2f:a9:00:e6:ea:29:ac:dd:ab:36:04:45:40: ad:e2:76:b7:8e:ef:9c:13:d0:63:6c:f0:b5:0d:35: 6d:47:d3:af:e8:60:92:f6:7d:4c:17:60:79:7a:42: ac:db:ab:fe:65:fc:bd:b4:f4:5d:b5:8c:13:b1:82: 8c:54:c1:9a:87:f8:2f:3b:9b:63:f5:7a:73:98:22: 3a:bb:13:c4:0f:8a:69:c5:71:22:5e:35:f3:d2:f9: 23:f0:9b:f6:c0:2c:f7:eb:54:7d:dc:62:43:52:09: 35:9d:ee:7f:24:7d:e7:88:0a:64:b7:a6:20:cd:dd: 06:6a:d7:6d:08:be:37:af:f0:0d:9a:2a:e8:f9:ab: 62:7f:70:87:45:15:27:1d:24:1c:49:50:21:37:2b: 28:1e:dc:32:de:81:a9:62:da:d8:a8:81:25:6f:c4: 6e:07:a2:1b:7a:a8:a7:7d:8a:99:7d:dd:c0:d3:fe: 17:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6E:E5:2D:2A:80:AC:5B:F7:58:70:48:14:48:7A:D6:35:80:5D:A3 X509v3 Authority Key Identifier: keyid:3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a5:68:4b:f4:40:b2:63:f0:3c:78:fb:8e:27:9d:10:b7:30: 69:86:a4:61:e7:00:62:12:49:ef:f7:4e:39:cc:2c:e8:cc:03: 32:f4:ad:7f:a5:ce:74:dc:a6:1d:3e:db:3c:f2:f0:89:86:37: 3e:cb:00:16:99:90:37:1a:b1:45:b2:44:21:87:ef:b3:e1:15: 96:0c:78:53:1a:90:d6:d4:53:fe:71:ad:b0:c6:bb:48:bc:28: b1:1f:e3:5c:59:b2:f4:38:7f:83:98:fb:82:9c:89:5e:39:28: 99:76:71:de:75:b4:e9:bd:45:df:0e:2a:37:2f:b6:f9:15:6a: ad:fd:e8:69:f2:06:7c:24:a3:3f:27:1e:7e:04:c9:ef:ac:ec: 33:51:e1:72:9e:98:e0:5c:f1:de:9b:f7:7c:3c:a7:aa:b0:42: e4:04:7d:3a:02:13:dd:67:4e:a3:4b:d0:52:20:e3:84:89:a8: 8b:06:af:28:a6:79:b0:10:a1:5b:9b:36:65:d6:af:78:60:e3: 3f:6f:64:ad:81:97:2c:e3:6d:37:78:36:e2:77:f7:6d:3d:8a: 6b:5c:67:db:4c:26:c4:cb:44:91:0f:74:11:6f:f9:a2:12:a5: 93:35:f5:3b:5c:3b:72:25:cb:81:ee:bb:11:fa:9c:c9:77:98: 3f:f0:d1:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZVCmQLlPq9ZY7VWQFkReduqO3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0 NDMxMjY2MzAeFw0yNjA5MjExNzEzMDhaFw0yNjA5MjIyMDEzMDhaMDMxMTAvBgNV BAMTKDIzNkVFNTJEMkE4MEFDNUJGNzU4NzA0ODE0NDg3QUQ2MzU4MDVEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/P0brmlbSkMcwkTPZj9phdc7 lsAb2xiABvn0ODVtNtjUcJ95JlW6F/kVpeOG4uMqzgt3VHJsbeKCUMztmIqsqfxO LwktqVi6Jq9GL6kA5uoprN2rNgRFQK3idreO75wT0GNs8LUNNW1H06/oYJL2fUwX YHl6Qqzbq/5l/L209F21jBOxgoxUwZqH+C87m2P1enOYIjq7E8QPimnFcSJeNfPS +SPwm/bALPfrVH3cYkNSCTWd7n8kfeeICmS3piDN3QZq120Ivjev8A2aKuj5q2J/ cIdFFScdJBxJUCE3Kyge3DLegali2tiogSVvxG4Hoht6qKd9ipl93cDT/hezAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI27lLSqArFv3WHBIFEh61jWAXaMwHwYDVR0j BBgwFoAUOvAV+SUGHXVA+bv6RcbHqUQxJmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODAxNWE4NTUtYjI5Yy00NTAyLWFmODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1Rjky NTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0NDMxMjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUYwMTVGOTI1MDYxRDc1NDBGOUJCRkE0NUM2QzdBOTQ0MzEy NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3 QTk0NDMxMjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6laEv0QLJj8Dx4+44nnRC3MGmGpGHnAGIS Se/3TjnMLOjMAzL0rX+lznTcph0+2zzy8ImGNz7LABaZkDcasUWyRCGH77PhFZYM eFMakNbUU/5xrbDGu0i8KLEf41xZsvQ4f4OY+4KciV45KJl2cd51tOm9Rd8OKjcv tvkVaq396GnyBnwkoz8nHn4Eye+s7DNR4XKemOBc8d6b93w8p6qwQuQEfToCE91n TqNL0FIg44SJqIsGryimebAQoVubNmXWr3hg4z9vZK2BlyzjbTd4NuJ39209imtc Z9tMJsTLRJEPdBFv+aISpZM19TtcO3Ily4HuuxH6nMl3mD/w0XY= -----END CERTIFICATE-----Generated at Tue Sep 22 10:15:03 2026 by rpki-client