$ rpki-client -vvvf rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft File: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft (raw, json) Hash identifier: 76LEwQQ2hvxljgWY+ij0ZrHp0oTmkiGIDbGFsI82Q04= Subject key identifier: 21:2D:BC:F3:4E:D4:3B:4B:91:40:91:62:E7:3F:30:FF:53:E1:F5:CD Authority key identifier: CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 Certificate issuer: /CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Certificate serial: 436A31FEB026462213EDB1147BE7BE6D56FC2217 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:17:25 +0000 Manifest this update: Thu 17 Sep 2026 07:12:25 +0000 Manifest next update: Fri 18 Sep 2026 08:09:25 +0000 Files and hashes: 1: 323430303a643934303a3730303a3a2f34382d3438203d3e20313336303838.roa (hash: cPlZWqFm5MVvHANk5QwuMsGCvqASptrnxXG+efFGx5c=) 2: 3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (hash: GVZGNEwcVR+6b1iz+Mf+WaWQxD3aIC0LXDFgR27cdp0=) 3: 323430303a643934303a666163653a3a2f34382d3438203d3e20313336303838.roa (hash: 34GLqmPa0NzJ8OUNPh/1B0CyHBlCIeGKpKQ2WBBDdVw=) 4: 323430303a643934303a3130303a3a2f34382d3438203d3e20313336303838.roa (hash: hVmreBSejl8Ng95zD8+VjoKGoyOFeerqH52Ryd6nA/g=) 5: 323430303a643934303a646564653a3a2f34382d3438203d3e20313336303838.roa (hash: lq8n0YPrI0ej0qKCbfOlpW4tTPmD0iFL3XzQMezYPDc=) 6: 323430303a643934303a3230303a3a2f34382d3438203d3e20313336303838.roa (hash: E4L4DC+KlZnlYuimMn7ht+nOkbQIJbr5xJR5o/xYX8Q=) 7: 323430303a643934303a626162653a3a2f34382d3438203d3e20313336303838.roa (hash: ROBi78wuuDs1YynQRORSD7fsHhMgIofWSrauPO5cQ7U=) 8: 323430303a643934303a626162613a3a2f34382d3438203d3e20313336303838.roa (hash: D+h8jX3eqkGKLtVhz2jT7gpvFEWVMRt52UNBLxkGJhs=) 9: 323430303a643934303a633030303a3a2f34382d3438203d3e20313336303838.roa (hash: RWX46rojpF6BQSm8l4yUodE90WBaf+wB8Y4OTAFQ4ME=) 10: 323430303a643934303a3a2f33322d3332203d3e20313336303838.roa (hash: 6v3qgdUIZjmuHWouV9dOsfbIOPcGM+FuLf4il05N+Ek=) 11: 323430303a643934303a36303a3a2f34382d3438203d3e20313336303838.roa (hash: gQ+0Ncm6ouGfqCj99PO+6ljzB+BVgCECd3yhaahocOE=) 12: 3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (hash: 1173I/3m7XkzbM38lD89z6ZiTiudGSDgnrOXK0sI2OM=) 13: 323430303a643934303a3830303a3a2f34382d3438203d3e20313336303838.roa (hash: 7VINGDMY1TUq927w0s5kPc4NrKgys1/WpgtYsMIyWe4=) 14: 323430303a643934303a38303a3a2f34382d3438203d3e20313336303838.roa (hash: RJ17Dz/IGt6G1WroLkK6wHoimyT4sJSrPhTKtpoVzzk=) 15: 323430303a643934303a646561643a3a2f34382d3438203d3e20313336303838.roa (hash: VeUuIEzR0KXaVdDKuIt8qmP7aqg4VDEFHLGvR21XwG0=) 16: 323430303a643934303a3330303a3a2f34382d3438203d3e20313336303838.roa (hash: qErBEzbgejKCSlR97tYuadzXafCvSPlaXArCcdt+yEg=) 17: 323430303a643934303a35303a3a2f34382d3438203d3e20313336303838.roa (hash: hC0faeWGVogeaEgDmuTq2f3+pymLHliitj4mm9RD6Qs=) 18: 323430303a643934303a646164613a3a2f34382d3438203d3e20313336303838.roa (hash: wYag/KpQxcRCIm84mayvN/ce4e/42pmE6/MAHa5Gds8=) 19: 323430303a643934303a31303a3a2f34382d3438203d3e20313336303838.roa (hash: kC/BQJWqF3hfjk7jxki1g+71uLyOIxW8KkPPgVLxjeg=) 20: 323430303a643934303a37303a3a2f34382d3438203d3e20313336303838.roa (hash: NhSbtQsCSZOcv410mYA+T/YK4xT0UEtgj3gs2YcEa4w=) 21: 3130332e38372e3232392e302f32342d3234203d3e20313336303838.roa (hash: /B7YofX/HHM+G+hIOgqx/c64KwEJiJwq2rpXtyQZ30I=) 22: 323430303a643934303a3430303a3a2f34382d3438203d3e20313336303838.roa (hash: p9IaRw5dZMu/RqndUf94zxAMZ/T8mQiwgEQa5hTpOao=) 23: 323430303a643934303a33303a3a2f34382d3438203d3e20313336303838.roa (hash: oX8mmJjYFncLywEKonSF0YgdnGFD+ctQ155eJaCMAUg=) 24: 323430303a643934303a3930303a3a2f34382d3438203d3e20313336303838.roa (hash: nUJ2UcMYUMgp2Ivw4oUIOzI0b/8YqU8NMhh0tUJGG8w=) 25: 323430303a643934303a3630303a3a2f34382d3438203d3e20313336303838.roa (hash: g/IwKgkLM3lX7TTfydNsuy1vblZAv0bCcFnenKOiWnI=) 26: 323430303a643934303a636162653a3a2f34382d3438203d3e20313336303838.roa (hash: cEoIyEjinxE4GnYC0CNRuXvF+WOLWNhACz4dP/4/xaU=) 27: 323430303a643934303a32303a3a2f34382d3438203d3e20313336303838.roa (hash: GH9tET4mTW+/Gjc8WplZ0ASidCPn/60O8oLirXNQIgM=) 28: 323430303a643934303a3530303a3a2f34382d3438203d3e20313336303838.roa (hash: 7/h2zwvZrAQS0wAHrJy9NqwWiyEipm8MyD1COAfe2nQ=) 29: 323430303a643934303a626163613a3a2f34382d3438203d3e20313336303838.roa (hash: oABovF7KdDdlY6+CHjePOcttfLrt7gjFGQnN04lySCo=) 30: CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl (hash: vNLeM2D5dvjFcEI6Hw8hgZkhA72Ce0mhDx4HYvJU7kc=) 31: 323430303a643934303a39303a3a2f34382d3438203d3e20313336303838.roa (hash: RC9a6LW/+eoJDdWzw8/UK2UNfYC2bIi6jAgj1aXZwfs=) 32: 323430303a643934303a626563613a3a2f34382d3438203d3e20313336303838.roa (hash: pXHANQSmeMdKKdoCjZbWQt7xD53ERPYITVt1C9zayGI=) 33: 323430303a643934303a34303a3a2f34382d3438203d3e20313336303838.roa (hash: iBvTknbLTgdzBBg6hpQI6nAp2/Y+ZQ/SghaasUfpG04=) 34: 3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (hash: kX944U5wcZ4ljeI4U/N/cddY4+l6BlmIxGXHq+0AWLc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6a:31:fe:b0:26:46:22:13:ed:b1:14:7b:e7:be:6d:56:fc:22:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8 Validity Not Before: Sep 17 07:12:25 2026 GMT Not After : Sep 18 08:09:25 2026 GMT Subject: CN=212DBCF34ED43B4B91409162E73F30FF53E1F5CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:eb:63:03:1f:a4:87:18:89:5e:29:2a:30: f6:d5:8d:b3:12:fc:9e:86:f4:28:d7:36:e0:e0:7f: eb:4e:32:e9:73:b0:a5:94:93:0d:75:a3:55:61:72: 82:1c:74:01:e6:08:44:87:ad:a8:96:75:a1:cd:62: 77:ef:b2:82:d8:67:b8:46:74:f9:b8:bf:36:d5:5d: d7:6b:9e:6b:c8:81:8b:ec:d1:b3:df:97:09:91:d8: 8b:f2:f9:04:69:8f:04:24:20:af:82:ea:63:18:b1: 03:71:a8:14:fe:a2:da:2e:d0:65:fa:6f:f8:5f:12: 3f:85:32:01:2f:f8:63:bc:ac:64:df:d0:7c:21:bc: 43:d5:d2:d3:d7:82:44:3f:cc:b6:ca:c6:93:53:53: 5f:6f:dc:eb:23:86:5f:f9:fa:22:61:66:bc:3c:0b: 39:2e:4c:a1:8b:5d:cd:71:ed:d1:91:bc:3e:4e:21: 9a:c1:20:9e:f4:28:ed:be:1b:70:ff:38:63:d9:45: 63:e2:4f:dd:5b:cf:cb:99:4b:f5:c4:0a:f7:1b:d7: 75:cc:ff:c5:d0:db:b1:92:7a:42:27:15:b4:76:0f: f5:25:60:fe:68:40:bd:aa:5b:1e:13:37:0b:ce:ea: 6b:3a:15:35:91:68:aa:ff:1e:66:4a:80:e9:10:c9: 81:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2D:BC:F3:4E:D4:3B:4B:91:40:91:62:E7:3F:30:FF:53:E1:F5:CD X509v3 Authority Key Identifier: keyid:CA:FD:3A:17:B2:AD:C6:F9:00:1E:57:A0:1B:B2:9E:9B:69:3B:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/CAFD3A17B2ADC6F9001E57A01BB29E9B693B7CC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fc:fd:0d:04:7f:e5:63:be:65:a8:f9:ff:2d:11:24:ee:15: b7:fd:fb:0a:b7:89:4d:f1:0e:39:e6:03:ed:85:b9:2c:60:0d: ec:21:c3:c9:6e:14:21:2f:c4:30:4a:58:df:ef:66:27:ce:fa: 35:07:93:e5:8e:44:6f:ea:db:00:98:e1:83:07:ac:a6:01:82: 89:d8:8a:6b:0c:f2:06:1a:16:d4:e4:57:6b:49:37:b6:79:45: 00:25:62:eb:dc:af:ba:90:5a:0f:bb:1f:fe:bb:05:c6:2f:63: b7:2e:e0:0b:ce:1a:c6:8e:4e:91:9f:99:b9:92:24:af:7d:76: 61:7f:d2:d5:7c:0c:f0:f3:04:c1:a7:1d:49:4a:fe:75:57:08: a7:d5:3a:17:38:f9:2c:ed:d7:65:dd:cd:9a:6a:4f:b6:4a:34: 1f:20:50:37:aa:99:36:e5:53:87:95:34:35:4c:8f:64:01:b5: 79:81:3e:61:17:66:e4:e1:33:92:68:16:2a:3d:c2:6e:90:9f: 2c:f2:ff:7c:6a:9f:2c:5b:1b:d6:da:1f:b0:c3:c8:af:86:8d: 8e:e7:f3:45:56:44:8a:12:1e:b8:0c:88:a0:0c:76:6a:df:82: 36:f3:cd:dc:f8:46:98:54:53:1b:81:4f:e1:72:a4:5b:cb:73: 53:59:24:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ2ox/rAmRiIT7bEUe+e+bVb8IhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2 OTNCN0NDODAeFw0yNjA5MTcwNzEyMjVaFw0yNjA5MTgwODA5MjVaMDMxMTAvBgNV BAMTKDIxMkRCQ0YzNEVENDNCNEI5MTQwOTE2MkU3M0YzMEZGNTNFMUY1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zutjAx+khxiJXikqMPbVjbMS /J6G9CjXNuDgf+tOMulzsKWUkw11o1VhcoIcdAHmCESHraiWdaHNYnfvsoLYZ7hG dPm4vzbVXddrnmvIgYvs0bPflwmR2Ivy+QRpjwQkIK+C6mMYsQNxqBT+otou0GX6 b/hfEj+FMgEv+GO8rGTf0HwhvEPV0tPXgkQ/zLbKxpNTU19v3Osjhl/5+iJhZrw8 CzkuTKGLXc1x7dGRvD5OIZrBIJ70KO2+G3D/OGPZRWPiT91bz8uZS/XECvcb13XM /8XQ27GSekInFbR2D/UlYP5oQL2qWx4TNwvO6ms6FTWRaKr/HmZKgOkQyYEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIS28807UO0uRQJFi5z8w/1Ph9c0wHwYDVR0j BBgwFoAUyv06F7KtxvkAHlegG7Kem2k7fMgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzNmNGVjMWMtOTUzNS00Y2JmLTljN2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdC MkFEQzZGOTAwMUU1N0EwMUJCMjlFOUI2OTNCN0NDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DQUZEM0ExN0IyQURDNkY5MDAxRTU3QTAxQkIyOUU5QjY5M0I3 Q0M4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzNmNGVjMWMtOTUzNS00Y2JmLTlj N2EtZmQzMmM4MzBlZGJhLzAvQ0FGRDNBMTdCMkFEQzZGOTAwMUU1N0EwMUJCMjlF OUI2OTNCN0NDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJz8/Q0Ef+VjvmWo+f8tESTuFbf9+wq3iU3x DjnmA+2FuSxgDewhw8luFCEvxDBKWN/vZifO+jUHk+WORG/q2wCY4YMHrKYBgonY imsM8gYaFtTkV2tJN7Z5RQAlYuvcr7qQWg+7H/67BcYvY7cu4AvOGsaOTpGfmbmS JK99dmF/0tV8DPDzBMGnHUlK/nVXCKfVOhc4+Szt12XdzZpqT7ZKNB8gUDeqmTbl U4eVNDVMj2QBtXmBPmEXZuThM5JoFio9wm6Qnyzy/3xqnyxbG9baH7DDyK+GjY7n 80VWRIoSHrgMiKAMdmrfgjbzzdz4RphUUxuBT+FypFvLc1NZJEQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:31 2026 by rpki-client