$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft File: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft (raw, json) Hash identifier: 9+2YZVMNvdLv/gJOqBDYMD9VAu5cOS0i463Ae6rGiNo= Subject key identifier: 91:43:98:A3:79:4F:09:68:AA:5C:33:6F:F9:98:AB:32:65:5A:60:27 Authority key identifier: AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD Certificate issuer: /CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Certificate serial: 032FE1DF15B0B2671BDFE453625C3DC0115DDF0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 06:00:07 +0000 Manifest this update: Mon 02 Nov 2026 05:55:07 +0000 Manifest next update: Tue 03 Nov 2026 07:01:07 +0000 Files and hashes: 1: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl (hash: ijZgJ5xIjnQoWFAhR34D6/gggyDAw3i5/E+IfwWjXNY=) 2: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: odcITqAToT5yF34xeI2KwLrnQspjZLjDq5idgZAGEkU=) 3: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: +597iuB7PbfMY+3aubsI/GkbNTaFIoKUe/CnIoipNDU=) 4: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: 4yYHOQ19SUo4wUen+ovEY0nBNoIbYKAxFiddTf9qCzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2f:e1:df:15:b0:b2:67:1b:df:e4:53:62:5c:3d:c0:11:5d:df:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Validity Not Before: Nov 2 05:55:07 2026 GMT Not After : Nov 3 07:01:07 2026 GMT Subject: CN=914398A3794F0968AA5C336FF998AB32655A6027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:b7:12:6f:68:06:a8:e3:9a:18:35:cf:1f: 38:b3:e9:6f:49:c2:11:4c:74:e1:f9:8f:fe:2f:c6: d4:95:ab:29:96:c4:67:1f:6d:19:a8:fe:31:31:82: 6e:37:00:e4:45:cf:73:40:be:1f:c5:e2:25:56:d9: 58:4e:04:2e:43:6c:c0:1c:16:61:11:12:5a:6a:07: dc:28:f1:3f:c8:94:d0:6b:86:99:4e:08:25:56:bd: b4:ce:5b:e0:0e:1e:ff:88:0c:7b:1e:c6:0b:b6:17: 66:40:c0:9b:1b:fa:65:02:4c:32:f0:1e:69:1d:9d: 3f:97:25:66:0d:42:f8:06:f7:b9:ac:21:74:5f:29: 51:da:13:1e:f2:f7:a2:d9:f5:42:cf:4b:e5:f2:b2: f8:eb:e2:3e:08:bd:0b:d2:c4:11:18:4f:ad:c6:be: d9:58:e2:e9:69:24:ea:32:96:6a:49:a7:23:d6:76: 8a:8a:65:97:6d:a3:5a:ee:08:09:62:b4:5a:1a:59: 9c:b5:dc:04:d2:01:de:43:9f:8e:04:1e:04:e0:c3: dd:20:45:f9:cb:ae:89:d5:32:bd:e2:10:7d:5a:8c: ee:13:9a:39:30:f0:66:42:b2:68:0c:02:40:e8:bc: cc:e5:02:eb:67:5f:7d:e2:f9:18:a1:de:30:c2:43: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:43:98:A3:79:4F:09:68:AA:5C:33:6F:F9:98:AB:32:65:5A:60:27 X509v3 Authority Key Identifier: keyid:AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:2f:92:9c:63:6d:ef:ba:a0:6c:d7:67:54:19:7a:ac:0a:2a: 69:a5:13:c3:63:67:b6:1d:a9:44:34:58:17:24:d5:96:dc:c0: 4e:bc:32:9b:93:11:90:44:01:4b:53:bd:86:c0:0c:7f:fc:b2: 5a:ab:4f:fc:ee:54:01:a5:09:59:1b:40:47:e4:1b:66:11:4c: fd:b6:1e:21:84:d2:5d:89:d9:0b:d4:c7:1b:3e:a5:cb:b6:99: 5a:e7:c6:6b:2d:dc:b0:7e:15:f5:00:04:62:e6:43:bc:38:7a: d0:c9:a8:27:8e:d0:40:3e:ed:37:ee:80:19:3d:3b:97:ee:b5: 4a:07:4a:ba:25:60:0c:45:a1:ca:d6:41:94:d1:6c:89:8f:1b: 84:e6:5e:ff:ac:ab:97:7c:77:8e:82:a8:39:c5:ba:e9:47:83: 8a:89:cc:c5:61:a5:ea:81:94:b9:07:16:a4:35:c7:e2:e6:a1: 36:b1:71:21:b3:da:01:ee:dd:5d:ea:7c:10:21:02:af:9b:22: a3:05:65:cb:fd:e4:0a:ba:1e:7f:66:6d:be:e8:84:d6:94:cc: 81:7d:dd:1e:c4:6e:0f:dc:1d:41:f8:3b:ad:fc:ac:58:75:f7: 2e:0b:89:32:3a:6c:5c:c0:01:8d:7d:5b:ee:a9:dc:19:c2:3d: da:7f:6b:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAy/h3xWwsmcb3+RTYlw9wBFd3w0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4 MEZERkRGRDAeFw0yNjExMDIwNTU1MDdaFw0yNjExMDMwNzAxMDdaMDMxMTAvBgNV BAMTKDkxNDM5OEEzNzk0RjA5NjhBQTVDMzM2RkY5OThBQjMyNjU1QTYwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+rcSb2gGqOOaGDXPHziz6W9J whFMdOH5j/4vxtSVqymWxGcfbRmo/jExgm43AORFz3NAvh/F4iVW2VhOBC5DbMAc FmERElpqB9wo8T/IlNBrhplOCCVWvbTOW+AOHv+IDHsexgu2F2ZAwJsb+mUCTDLw HmkdnT+XJWYNQvgG97msIXRfKVHaEx7y96LZ9ULPS+Xysvjr4j4IvQvSxBEYT63G vtlY4ulpJOoylmpJpyPWdoqKZZdto1ruCAlitFoaWZy13ATSAd5Dn44EHgTgw90g RfnLronVMr3iEH1ajO4Tmjkw8GZCsmgMAkDovMzlAutnX33i+Rih3jDCQ44nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkUOYo3lPCWiqXDNv+ZirMmVaYCcwHwYDVR0j BBgwFoAUrz0etvO3SxJgZ5fDHCNTt4D9/f0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY3ODYwZTMtNmFkOC00N2E1LTk0YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZG M0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4MEZERkRGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjNEMUVCNkYzQjc0QjEyNjA2Nzk3QzMxQzIzNTNCNzgwRkRG REZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUz Qjc4MEZERkRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8vkpxjbe+6oGzXZ1QZeqwKKmmlE8NjZ7Yd qUQ0WBck1ZbcwE68MpuTEZBEAUtTvYbADH/8slqrT/zuVAGlCVkbQEfkG2YRTP22 HiGE0l2J2QvUxxs+pcu2mVrnxmst3LB+FfUABGLmQ7w4etDJqCeO0EA+7TfugBk9 O5futUoHSrolYAxFocrWQZTRbImPG4TmXv+sq5d8d46CqDnFuulHg4qJzMVhpeqB lLkHFqQ1x+LmoTaxcSGz2gHu3V3qfBAhAq+bIqMFZcv95Aq6Hn9mbb7ohNaUzIF9 3R7Ebg/cHUH4O638rFh19y4LiTI6bFzAAY19W+6p3BnCPdp/a7Q= -----END CERTIFICATE-----Generated at Mon Nov 2 22:12:02 2026 by rpki-client