$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft File: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft (raw, json) Hash identifier: xr2qo2Ahh1B6CekC/mpvTRa/qmAww+Exk1AG1YfWQfE= Subject key identifier: F4:6D:7F:77:21:DB:0B:D9:CE:CA:8B:0A:5B:0B:96:36:68:9A:A0:65 Authority key identifier: AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD Certificate issuer: /CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Certificate serial: 15D173267D2F58A08F886FF76C44540DDE83A004 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:29:30 +0000 Manifest this update: Mon 21 Sep 2026 22:24:30 +0000 Manifest next update: Wed 23 Sep 2026 00:53:30 +0000 Files and hashes: 1: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl (hash: Mejs72Hq4e2f620GAwaiMPgc8FMSE9kOxL39SUS7+sk=) 2: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: odcITqAToT5yF34xeI2KwLrnQspjZLjDq5idgZAGEkU=) 3: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: +597iuB7PbfMY+3aubsI/GkbNTaFIoKUe/CnIoipNDU=) 4: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: 4yYHOQ19SUo4wUen+ovEY0nBNoIbYKAxFiddTf9qCzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d1:73:26:7d:2f:58:a0:8f:88:6f:f7:6c:44:54:0d:de:83:a0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Validity Not Before: Sep 21 22:24:30 2026 GMT Not After : Sep 23 00:53:30 2026 GMT Subject: CN=F46D7F7721DB0BD9CECA8B0A5B0B9636689AA065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:99:09:6c:ee:f8:3e:40:41:06:c9:8c:83: e8:a4:5d:15:e7:88:1e:23:3b:0d:53:5c:d2:19:e9: a4:55:a7:8f:f5:42:d7:7d:d2:66:7f:c4:6b:62:69: f7:bc:18:cf:ae:f8:83:4c:00:2f:1d:98:cc:7a:0e: 17:5b:de:40:82:ee:0b:8a:ab:9e:b5:16:0d:4d:fc: a4:19:79:69:f4:2d:3b:46:69:1e:18:07:ba:3a:0e: 1c:96:a6:4b:43:12:2c:1a:7d:a8:95:e4:1f:02:b3: e6:dc:bc:ab:8f:bb:6b:58:c2:61:5d:df:86:5c:e6: da:75:14:5e:7d:14:49:a4:37:41:75:1a:ee:24:59: 2c:b3:52:fb:11:0d:8a:40:f2:f6:fc:dd:1c:95:14: e9:d3:19:98:3f:c0:fe:eb:43:ec:b8:6a:e4:14:4f: 0a:06:91:16:1c:99:a4:79:24:23:c8:a2:c0:00:96: c1:4e:75:e7:4e:1d:71:ad:7e:a8:9e:e2:fd:ee:01: ac:24:7b:82:7c:ed:99:02:6c:f4:0c:69:72:0d:37: 72:3a:56:da:9c:ec:c4:ac:89:47:84:75:9a:a2:58: 62:bc:88:d1:27:8c:12:f5:ba:88:a1:28:95:d9:c4: 86:e1:4e:49:18:e5:fc:d9:01:91:0b:01:29:9f:4a: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6D:7F:77:21:DB:0B:D9:CE:CA:8B:0A:5B:0B:96:36:68:9A:A0:65 X509v3 Authority Key Identifier: keyid:AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:85:2c:e1:7f:e6:e0:bc:a2:49:3f:c4:66:c7:59:a4:73:70: 35:b7:b5:01:a8:f3:b0:d4:6f:6d:6a:35:60:de:b3:b0:af:13: b5:66:58:d7:a5:21:45:98:ba:59:ed:2e:73:0c:b0:a1:16:c6: 0b:b0:e0:9c:65:2a:b5:5d:67:9f:21:70:07:30:8c:34:e4:a6: 3a:df:f5:b8:5c:29:a9:4a:63:fa:0d:49:15:6f:11:76:f9:7e: 09:29:26:ce:c7:0a:8e:4d:9d:dd:61:4a:ce:66:99:1d:5f:db: 88:a5:18:32:0c:e4:c1:e9:27:b4:7d:c9:90:0e:9f:27:cf:f9: ef:f5:17:ae:0e:b7:18:12:9a:3b:e3:6b:67:0b:f6:e1:37:44: 90:98:35:08:ad:42:72:5d:73:eb:9e:54:76:ca:8d:26:f5:af: 47:28:d7:7e:99:40:6d:18:c0:cc:ee:06:bc:24:2c:76:5b:67: 81:dd:64:3b:54:a7:fd:e4:7b:c2:a2:6f:7b:28:1d:1b:78:39: 66:13:e1:69:16:2c:03:1e:ca:ad:bd:30:ad:ea:ab:bf:e4:0a: c9:b9:7c:8e:a2:18:8d:85:41:f9:d9:dc:10:48:16:14:b1:e0: 16:50:be:f2:72:9b:c3:8a:44:e5:d1:79:2b:21:48:4b:3a:e5: a3:a0:fd:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdFzJn0vWKCPiG/3bERUDd6DoAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4 MEZERkRGRDAeFw0yNjA5MjEyMjI0MzBaFw0yNjA5MjMwMDUzMzBaMDMxMTAvBgNV BAMTKEY0NkQ3Rjc3MjFEQjBCRDlDRUNBOEIwQTVCMEI5NjM2Njg5QUEwNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHJkJbO74PkBBBsmMg+ikXRXn iB4jOw1TXNIZ6aRVp4/1Qtd90mZ/xGtiafe8GM+u+INMAC8dmMx6Dhdb3kCC7guK q561Fg1N/KQZeWn0LTtGaR4YB7o6DhyWpktDEiwafaiV5B8Cs+bcvKuPu2tYwmFd 34Zc5tp1FF59FEmkN0F1Gu4kWSyzUvsRDYpA8vb83RyVFOnTGZg/wP7rQ+y4auQU TwoGkRYcmaR5JCPIosAAlsFOdedOHXGtfqie4v3uAawke4J87ZkCbPQMaXINN3I6 Vtqc7MSsiUeEdZqiWGK8iNEnjBL1uoihKJXZxIbhTkkY5fzZAZELASmfSqxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9G1/dyHbC9nOyosKWwuWNmiaoGUwHwYDVR0j BBgwFoAUrz0etvO3SxJgZ5fDHCNTt4D9/f0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY3ODYwZTMtNmFkOC00N2E1LTk0YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZG M0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4MEZERkRGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjNEMUVCNkYzQjc0QjEyNjA2Nzk3QzMxQzIzNTNCNzgwRkRG REZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUz Qjc4MEZERkRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6FLOF/5uC8okk/xGbHWaRzcDW3tQGo87DU b21qNWDes7CvE7VmWNelIUWYulntLnMMsKEWxguw4JxlKrVdZ58hcAcwjDTkpjrf 9bhcKalKY/oNSRVvEXb5fgkpJs7HCo5Nnd1hSs5mmR1f24ilGDIM5MHpJ7R9yZAO nyfP+e/1F64OtxgSmjvja2cL9uE3RJCYNQitQnJdc+ueVHbKjSb1r0co136ZQG0Y wMzuBrwkLHZbZ4HdZDtUp/3ke8Kib3soHRt4OWYT4WkWLAMeyq29MK3qq7/kCsm5 fI6iGI2FQfnZ3BBIFhSx4BZQvvJym8OKROXReSshSEs65aOg/QI= -----END CERTIFICATE-----Generated at Tue Sep 22 01:51:35 2026 by rpki-client