$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft File: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft (raw, json) Hash identifier: IqPQM1+qWQbAxPQt8g68G4yK9Sb6KKyuilOtG3Vnfpk= Subject key identifier: 2B:3B:74:46:17:A9:D4:AE:E3:F4:B6:4D:F6:F7:50:50:52:3D:9B:36 Authority key identifier: AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 Certificate issuer: /CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Certificate serial: 4F3E77CCE1F4DD082A7544F8731AE4CBFF1EF111 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 02:36:38 +0000 Manifest this update: Thu 17 Sep 2026 02:31:38 +0000 Manifest next update: Fri 18 Sep 2026 06:08:38 +0000 Files and hashes: 1: AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl (hash: t8Xi+wLHq2WMmObXbu0wrR1h9cGGevgTT7juF7wCAzc=) 2: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: 2XC3UsHd4KwKUJ2Uidn6/QSZk29AP2xoMLuxzT2QDYQ=) 3: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: MCW/xqC9gtQy6b8F5lQvfvI/LlU0HFmKiOjV/FzQgxY=) 4: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: luezxLjf+gQLcjiQqhuyu+ya30sT86b3qelMWGrfE0Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3e:77:cc:e1:f4:dd:08:2a:75:44:f8:73:1a:e4:cb:ff:1e:f1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA3294E5580B68203BC0DF04FD00722AA74F5D0 Validity Not Before: Sep 17 02:31:38 2026 GMT Not After : Sep 18 06:08:38 2026 GMT Subject: CN=2B3B744617A9D4AEE3F4B64DF6F75050523D9B36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9e:32:b1:88:e8:bf:e1:cd:a9:f8:c6:0d:77: 85:87:d3:7c:bd:7b:1c:22:02:b0:1e:ed:6e:25:0e: 7d:f1:88:42:3d:e8:61:58:8d:58:93:9e:9a:b1:ba: 18:0f:f1:14:d2:84:3f:54:55:b7:f9:2f:69:db:bb: b7:fa:cf:f3:56:e9:ba:63:8e:87:d4:b4:68:45:9c: a9:23:ff:7a:67:32:92:59:fe:f4:ef:76:24:76:8d: 8f:56:91:92:aa:c8:b0:9d:68:e8:7c:84:0e:c3:1f: b3:70:28:bc:d6:17:ac:16:0e:f5:78:0b:0c:5c:39: ea:8d:44:6b:9e:0b:54:78:b9:0c:3c:e8:e9:18:de: 46:b4:aa:76:74:52:6c:32:b6:e6:d7:70:f3:88:42: 71:df:d8:ba:1d:9d:6f:ff:98:f1:0e:12:4a:b4:8c: c1:67:4c:c1:41:0a:c1:82:7d:07:62:7d:7d:fc:fd: 45:c5:36:f2:2b:dc:ea:e7:83:d7:1f:06:34:64:b7: 69:67:2d:89:8a:3d:e7:d5:3c:33:7e:88:b9:86:2a: bc:11:96:19:eb:51:e8:53:55:e3:79:55:00:52:58: 3f:62:ee:d6:0c:d0:0e:f6:11:36:e9:34:27:3f:b2: ab:63:7e:06:99:d1:d0:dd:da:83:1e:5a:72:01:2d: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3B:74:46:17:A9:D4:AE:E3:F4:B6:4D:F6:F7:50:50:52:3D:9B:36 X509v3 Authority Key Identifier: keyid:AF:A3:29:4E:55:80:B6:82:03:BC:0D:F0:4F:D0:07:22:AA:74:F5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/AFA3294E5580B68203BC0DF04FD00722AA74F5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9a:7d:de:6b:0d:e3:5d:68:9e:d4:a0:57:c5:31:ce:72:a6: d2:62:47:7f:cb:00:87:5f:a5:39:71:81:c6:ad:3b:80:04:67: c6:9d:ab:d0:fc:af:82:51:3f:85:ed:a7:ac:af:e2:bc:cc:8c: cd:c5:22:cb:d2:2f:a5:1b:ca:f2:c9:cd:a9:ba:84:09:e6:23: f6:d8:cb:67:a4:1c:87:bd:83:f6:a4:13:25:4d:3a:8b:0d:8d: c3:42:8a:82:e7:f5:74:02:8b:9e:ee:6f:64:28:ff:dc:08:ed: e2:26:a2:8c:fc:c5:74:bd:a0:26:f1:fb:a0:2a:4c:89:d1:96: d0:89:18:02:70:bf:de:7f:83:15:b3:6f:33:96:d0:33:59:8f: b3:85:89:08:be:2a:af:7c:a1:02:fe:72:e4:31:c8:60:81:9d: 17:3c:12:ee:9b:b3:d9:dd:3e:6e:b3:f7:2d:2a:fe:ba:ab:66: e3:2b:27:7a:b8:78:84:b9:1b:73:d4:5d:96:d6:45:01:b2:d1: c2:d0:50:6c:4a:ff:0e:d5:55:a9:38:9f:26:b6:15:a6:99:97: 8c:56:32:d0:9c:fc:75:c0:54:78:ca:cd:a5:76:4a:80:ec:b9: d5:f4:37:4c:c4:ec:6c:78:57:71:f0:32:57:ec:e0:1a:e1:4a: cb:b4:f2:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTz53zOH03QgqdUT4cxrky/8e8REwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJB QTc0RjVEMDAeFw0yNjA5MTcwMjMxMzhaFw0yNjA5MTgwNjA4MzhaMDMxMTAvBgNV BAMTKDJCM0I3NDQ2MTdBOUQ0QUVFM0Y0QjY0REY2Rjc1MDUwNTIzRDlCMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfnjKxiOi/4c2p+MYNd4WH03y9 exwiArAe7W4lDn3xiEI96GFYjViTnpqxuhgP8RTShD9UVbf5L2nbu7f6z/NW6bpj jofUtGhFnKkj/3pnMpJZ/vTvdiR2jY9WkZKqyLCdaOh8hA7DH7NwKLzWF6wWDvV4 CwxcOeqNRGueC1R4uQw86OkY3ka0qnZ0UmwytubXcPOIQnHf2LodnW//mPEOEkq0 jMFnTMFBCsGCfQdifX38/UXFNvIr3Orng9cfBjRkt2lnLYmKPefVPDN+iLmGKrwR lhnrUehTVeN5VQBSWD9i7tYM0A72ETbpNCc/sqtjfgaZ0dDd2oMeWnIBLaFDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKzt0Rhep1K7j9LZN9vdQUFI9mzYwHwYDVR0j BBgwFoAUr6MpTlWAtoIDvA3wT9AHIqp09dAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNhZDUyMjYtNjU2ZC00NjFkLTljZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1 NTgwQjY4MjAzQkMwREYwNEZEMDA3MjJBQTc0RjVEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkEzMjk0RTU1ODBCNjgyMDNCQzBERjA0RkQwMDcyMkFBNzRG NUQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQUZBMzI5NEU1NTgwQjY4MjAzQkMwREYwNEZEMDA3 MjJBQTc0RjVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWafd5rDeNdaJ7UoFfFMc5yptJiR3/LAIdf pTlxgcatO4AEZ8adq9D8r4JRP4Xtp6yv4rzMjM3FIsvSL6UbyvLJzam6hAnmI/bY y2ekHIe9g/akEyVNOosNjcNCioLn9XQCi57ub2Qo/9wI7eImooz8xXS9oCbx+6Aq TInRltCJGAJwv95/gxWzbzOW0DNZj7OFiQi+Kq98oQL+cuQxyGCBnRc8Eu6bs9nd Pm6z9y0q/rqrZuMrJ3q4eIS5G3PUXZbWRQGy0cLQUGxK/w7VVak4nya2FaaZl4xW MtCc/HXAVHjKzaV2SoDsudX0N0zE7Gx4V3HwMlfs4BrhSsu08iU= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:13 2026 by rpki-client