$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft File: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft (raw, json) Hash identifier: lfm64okhKXLrs8sVyfxheVm+tYsbzx3VhbRK6KNs8RQ= Subject key identifier: D7:0F:7C:18:49:6D:31:24:06:1D:94:80:CA:F4:47:C2:D8:3E:16:AC Authority key identifier: AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 Certificate issuer: /CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Certificate serial: 5FF8175931EC3260049D9BF2D9E8F80A8A293CA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:17:21 +0000 Manifest this update: Tue 21 Jul 2026 01:12:21 +0000 Manifest next update: Wed 22 Jul 2026 03:02:21 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: luezxLjf+gQLcjiQqhuyu+ya30sT86b3qelMWGrfE0Y=) 2: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl (hash: KzGJZIKBJLa3J7oAdnodsXp85MzWBco07nC/rsze3Zw=) 3: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: 2XC3UsHd4KwKUJ2Uidn6/QSZk29AP2xoMLuxzT2QDYQ=) 4: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: MCW/xqC9gtQy6b8F5lQvfvI/LlU0HFmKiOjV/FzQgxY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f8:17:59:31:ec:32:60:04:9d:9b:f2:d9:e8:f8:0a:8a:29:3c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Validity Not Before: Jul 21 01:12:21 2026 GMT Not After : Jul 22 03:02:21 2026 GMT Subject: CN=D70F7C18496D3124061D9480CAF447C2D83E16AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c1:9d:9f:86:f9:b3:7a:05:74:49:2f:d1:bb: b6:51:2d:aa:29:d6:f8:54:de:ad:0c:2e:1e:c2:fd: 15:84:76:fd:ce:42:75:e1:96:b5:c0:4f:c7:a7:cb: 37:c0:f6:88:8f:97:d1:77:26:91:97:4b:1f:76:23: 25:53:eb:37:3b:56:7f:5a:02:55:c0:fc:4a:12:63: 41:c4:4e:f5:52:49:93:f9:c4:46:85:e1:9e:1f:6d: bf:d0:05:9f:a5:08:a7:4c:b6:6a:87:d4:f7:a4:d7: da:b5:0a:9d:29:0e:b0:41:ae:d6:ef:69:c5:10:06: 28:9b:91:7a:97:9c:39:40:1c:a7:3c:3b:74:b7:0a: 9d:57:97:de:bf:be:1e:61:39:be:8b:48:27:cc:16: 50:33:0a:14:13:8d:4f:49:f5:0f:c6:ac:55:a7:8a: e8:6f:21:3d:5c:4a:37:2a:68:8e:cf:2d:d9:d3:33: 62:07:47:f3:31:80:e9:e1:f4:dc:4c:7d:0e:b1:1f: dc:e5:ca:50:d4:19:60:cc:f2:c1:36:dd:9b:03:f9: f7:aa:68:6a:7f:0b:d9:9a:ef:03:5b:b2:89:6a:44: 25:c7:15:5a:62:27:ad:bc:18:8f:6c:e8:aa:83:b8: 4b:ae:69:e0:55:b1:f5:d8:7d:13:87:fc:a8:c9:49: 22:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0F:7C:18:49:6D:31:24:06:1D:94:80:CA:F4:47:C2:D8:3E:16:AC X509v3 Authority Key Identifier: keyid:AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0f:a1:18:35:cf:8e:21:ab:56:62:55:af:9a:a2:11:e2:4a: 35:c5:ce:0d:ae:c1:fc:c3:9c:bb:f6:1c:07:a1:50:3d:37:f8: 71:1f:6b:c4:36:bb:85:0a:13:89:64:d3:c1:1c:08:c6:46:04: 64:e7:bd:ce:0d:eb:29:83:bf:7b:f4:eb:f1:18:25:d1:8e:64: 5c:d5:87:91:06:2a:32:ea:c5:93:92:23:d1:e6:9f:28:c9:74: 67:80:3f:d2:35:c8:92:44:b5:67:9c:ac:95:cb:7e:23:5a:08: 3f:36:65:b7:87:25:c8:77:62:f7:c4:5b:b9:f2:2f:c7:54:1a: 69:1d:d4:40:f4:c2:b0:1c:d7:66:cf:f8:99:9f:6f:b6:97:7d: c3:09:8d:b7:f3:e4:96:ec:c8:f8:17:c4:5e:5c:41:24:46:3d: c7:b5:0e:74:21:3b:a6:3a:b9:4e:ce:ac:54:b3:a9:58:9e:fe: 63:a5:97:84:db:26:4b:de:eb:cf:51:ce:be:cb:84:12:6b:1f: 12:64:04:62:f5:de:fd:07:d5:fa:0e:08:15:a6:15:57:55:d0: 1d:d5:04:ed:c7:df:ee:d0:2c:ec:b7:74:6e:4e:f2:7d:a9:a8: 1c:0c:92:92:c1:99:36:d3:ab:e6:48:2b:ef:aa:dd:1c:09:09: 4b:45:56:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/gXWTHsMmAEnZvy2ej4CoopPKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJB QTc0RjVEMDAeFw0yNjA3MjEwMTEyMjFaFw0yNjA3MjIwMzAyMjFaMDMxMTAvBgNV BAMTKEQ3MEY3QzE4NDk2RDMxMjQwNjFEOTQ4MENBRjQ0N0MyRDgzRTE2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkwZ2fhvmzegV0SS/Ru7ZRLaop 1vhU3q0MLh7C/RWEdv3OQnXhlrXAT8enyzfA9oiPl9F3JpGXSx92IyVT6zc7Vn9a AlXA/EoSY0HETvVSSZP5xEaF4Z4fbb/QBZ+lCKdMtmqH1Pek19q1Cp0pDrBBrtbv acUQBiibkXqXnDlAHKc8O3S3Cp1Xl96/vh5hOb6LSCfMFlAzChQTjU9J9Q/GrFWn iuhvIT1cSjcqaI7PLdnTM2IHR/MxgOnh9NxMfQ6xH9zlylDUGWDM8sE23ZsD+feq aGp/C9ma7wNbsolqRCXHFVpiJ628GI9s6KqDuEuuaeBVsfXYfROH/KjJSSK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1w98GEltMSQGHZSAyvRHwtg+FqwwHwYDVR0j BBgwFoAUr6MpTlWAtoIDvA3wT9AHIqp09dAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhZDUyMjYtNjU2ZC00NjFkLTljZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1 NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJBQTc0RjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkEzMjk0RTU1ODBCNjgyMDNCQzBERjA0RkQwMDcyMkFBNzRG NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3 MjJBQTc0RjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsPoRg1z44hq1ZiVa+aohHiSjXFzg2uwfzD nLv2HAehUD03+HEfa8Q2u4UKE4lk08EcCMZGBGTnvc4N6ymDv3v06/EYJdGOZFzV h5EGKjLqxZOSI9HmnyjJdGeAP9I1yJJEtWecrJXLfiNaCD82ZbeHJch3YvfEW7ny L8dUGmkd1ED0wrAc12bP+Jmfb7aXfcMJjbfz5JbsyPgXxF5cQSRGPce1DnQhO6Y6 uU7OrFSzqVie/mOll4TbJkve689Rzr7LhBJrHxJkBGL13v0H1foOCBWmFVdV0B3V BO3H3+7QLOy3dG5O8n2pqBwMkpLBmTbTq+ZIK++q3RwJCUtFVok= -----END CERTIFICATE-----Generated at Tue Jul 21 10:05:01 2026 by rpki-client