$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft File: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft (raw, json) Hash identifier: HIVZdFUjbRBji6RWYq9cuEkH5Et/rQGHVrMlcHPFh9U= Subject key identifier: D3:0F:8E:17:BC:7D:A4:36:BC:3E:89:70:79:77:74:C3:A1:E8:06:EB Authority key identifier: AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A Certificate issuer: /CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Certificate serial: 22E1E9EE17FB5D5C395B9954275DEC1101424DAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 14:14:08 +0000 Manifest this update: Mon 21 Sep 2026 14:09:08 +0000 Manifest next update: Tue 22 Sep 2026 14:14:08 +0000 Files and hashes: 1: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: yrLvhSGItcv2/8/qx9t+UKr0DTpSKLWTcCZshoqb+Zo=) 2: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl (hash: iT3lzCL4WiBkxz/6YKUOa1brAHsLhwGV3FPyCpvinUI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e1:e9:ee:17:fb:5d:5c:39:5b:99:54:27:5d:ec:11:01:42:4d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Validity Not Before: Sep 21 14:09:08 2026 GMT Not After : Sep 22 14:14:08 2026 GMT Subject: CN=D30F8E17BC7DA436BC3E8970797774C3A1E806EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d3:95:71:87:4b:db:af:d4:24:0f:f1:d5:a1: 43:1c:3e:9a:d6:78:78:f1:66:32:ff:b0:0a:8c:a1: c9:06:48:5a:3d:5e:49:6e:0b:00:49:2b:6f:91:07: a7:62:25:98:3d:09:80:1e:28:ed:17:d5:2d:b1:fc: 46:3f:b0:59:c3:50:0f:ce:de:66:d6:00:dc:21:d9: 4b:88:55:23:72:54:57:73:b4:eb:d8:9b:67:1c:7c: 6e:0a:11:6f:95:46:0e:98:7b:a5:0c:c4:1c:26:a2: 52:8d:78:44:eb:23:5b:76:6c:19:fa:f0:2d:e2:a6: 6b:c9:87:3c:52:94:01:f3:d0:63:64:b1:7c:1f:a2: 93:94:8e:93:bc:f7:cc:d5:f0:7d:dd:73:73:b2:f5: cd:a8:b3:39:d8:83:bd:df:7d:31:cb:53:4b:65:fa: aa:4f:9f:97:d7:75:f7:2d:34:25:ed:7d:7f:d1:90: fa:cf:97:b5:11:c6:05:36:95:77:f3:a9:1d:ca:9c: 01:b9:3e:89:91:5b:0c:3d:74:ea:ec:0f:92:d8:7a: 80:9d:6a:08:de:5e:ac:4a:5a:66:90:96:a7:34:a0: 71:fb:bf:d0:e3:b7:ba:25:84:73:2f:7b:3f:9b:1d: e9:3c:13:bf:c3:22:7d:5f:85:06:91:b2:9e:d3:7e: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0F:8E:17:BC:7D:A4:36:BC:3E:89:70:79:77:74:C3:A1:E8:06:EB X509v3 Authority Key Identifier: keyid:AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4e:ba:be:3a:64:9d:4c:aa:39:ae:eb:68:d3:af:df:4b:8a: 90:1c:3a:08:8a:8e:5a:c5:8c:9a:7a:01:f8:b9:d5:b1:0d:0b: b8:62:43:0f:5b:35:20:6b:1d:d4:be:f6:13:7f:34:7b:75:8b: 75:5c:d2:a4:a7:b6:05:cd:06:28:67:82:ab:ab:02:60:57:95: 55:87:b8:0e:08:ba:24:e8:28:0b:90:dc:08:60:91:0b:ba:8c: ba:60:b1:47:10:8d:30:90:7c:12:32:34:2d:79:3b:9e:af:ee: f7:3e:f1:84:21:77:ba:2c:39:a7:c6:04:54:9f:1e:ae:00:56: 55:66:2a:be:bd:0c:5c:71:13:53:00:87:8e:09:4a:27:17:94: e3:0e:e3:1f:52:78:49:e6:8d:57:ca:ca:be:17:72:46:26:8c: 14:6f:d3:1e:ab:ff:74:11:93:ad:28:18:e7:7f:43:b7:6d:ef: 9a:2b:c8:45:07:43:a7:3f:dd:f4:7f:d4:9a:3e:d9:a6:cb:d0: c5:56:53:44:31:ba:64:9c:af:51:e3:ac:cf:f8:b8:0e:f9:52: a5:c7:4a:3d:d8:66:a9:c5:c3:78:8a:d3:c7:77:e8:79:45:00: 55:5f:2f:ed:c4:f6:22:5f:5a:fe:29:2f:26:88:4c:23:ca:4a: e0:0b:62:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuHp7hf7XVw5W5lUJ13sEQFCTa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAx QTQ1RjIwQTAeFw0yNjA5MjExNDA5MDhaFw0yNjA5MjIxNDE0MDhaMDMxMTAvBgNV BAMTKEQzMEY4RTE3QkM3REE0MzZCQzNFODk3MDc5Nzc3NEMzQTFFODA2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq05Vxh0vbr9QkD/HVoUMcPprW eHjxZjL/sAqMockGSFo9XkluCwBJK2+RB6diJZg9CYAeKO0X1S2x/EY/sFnDUA/O 3mbWANwh2UuIVSNyVFdztOvYm2ccfG4KEW+VRg6Ye6UMxBwmolKNeETrI1t2bBn6 8C3ipmvJhzxSlAHz0GNksXwfopOUjpO898zV8H3dc3Oy9c2osznYg73ffTHLU0tl +qpPn5fXdfctNCXtfX/RkPrPl7URxgU2lXfzqR3KnAG5PomRWww9dOrsD5LYeoCd agjeXqxKWmaQlqc0oHH7v9Djt7olhHMvez+bHek8E7/DIn1fhQaRsp7TfqBLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0w+OF7x9pDa8PolweXd0w6HoBuswHwYDVR0j BBgwFoAUrzyCCFjD/lpubFfoQ+HP0BpF8gowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM2YjVhYmMtMmM1NC00YzVmLWIzZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1 OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAxQTQ1RjIwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjNDODIwODU4QzNGRTVBNkU2QzU3RTg0M0UxQ0ZEMDFBNDVG MjBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNG RDAxQTQ1RjIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACROur46ZJ1Mqjmu62jTr99LipAcOgiKjlrF jJp6Afi51bENC7hiQw9bNSBrHdS+9hN/NHt1i3Vc0qSntgXNBihngqurAmBXlVWH uA4IuiToKAuQ3AhgkQu6jLpgsUcQjTCQfBIyNC15O56v7vc+8YQhd7osOafGBFSf Hq4AVlVmKr69DFxxE1MAh44JSicXlOMO4x9SeEnmjVfKyr4XckYmjBRv0x6r/3QR k60oGOd/Q7dt75oryEUHQ6c/3fR/1Jo+2abL0MVWU0QxumScr1HjrM/4uA75UqXH Sj3YZqnFw3iK08d36HlFAFVfL+3E9iJfWv4pLyaITCPKSuALYho= -----END CERTIFICATE-----Generated at Tue Sep 22 06:51:06 2026 by rpki-client