$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft File: 3AF015F925061D7540F9BBFA45C6C7A944312663.mft (raw, json) Hash identifier: hvh6GxDJn4JXOKpYAGhu72v5fLocdg/5ZP6CGbxmcFg= Subject key identifier: F7:50:19:E4:82:4A:A2:3B:5C:51:1F:DD:87:7C:47:BA:40:A8:A6:33 Authority key identifier: 3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 Certificate issuer: /CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Certificate serial: 6C4330CD8A9A548DD1680F5258E7DE4851D79BCB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft Manifest number: BC Signing time: Thu 17 Sep 2026 08:39:17 +0000 Manifest this update: Thu 17 Sep 2026 08:34:17 +0000 Manifest next update: Fri 18 Sep 2026 10:18:17 +0000 Files and hashes: 1: 3AF015F925061D7540F9BBFA45C6C7A944312663.crl (hash: 1ju6tJ2VHrVaLyfKcylG/0in1LRu1DIU4xBLpAg8W4w=) 2: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: egwsjKMYT0IZpyV4Dfttqi4c4pxw5Vm+1yP8BdfUm90=) 3: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: 10SNmFgccvYgJ2UV57b04CHFVLMxOGS2khiF98evAls=) 4: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (hash: gOYQWRAXG44l1bca07U85Hgjsni/0xj64/LDiA5pyis=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:43:30:cd:8a:9a:54:8d:d1:68:0f:52:58:e7:de:48:51:d7:9b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF015F925061D7540F9BBFA45C6C7A944312663 Validity Not Before: Sep 17 08:34:17 2026 GMT Not After : Sep 18 10:18:17 2026 GMT Subject: CN=F75019E4824AA23B5C511FDD877C47BA40A8A633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:e4:17:60:51:58:52:f7:a8:f8:ce:a4:b6: 39:8a:b8:9c:cd:e5:71:d5:e9:c3:f2:e1:3f:f5:e5: ad:7d:62:79:db:28:f1:ac:ae:5d:d1:2b:3b:4e:fb: 11:8c:2b:c1:63:41:90:8b:30:e3:e1:70:ae:21:4e: a7:c2:86:67:01:40:a9:02:7f:f0:92:a9:c7:0d:c5: 46:a0:68:26:8a:1b:41:dc:63:3f:b6:6b:91:c8:0a: 25:6f:bd:97:44:ef:9c:d0:9d:41:ef:57:e3:42:b4: 19:89:c8:cf:f1:81:3a:23:9c:4e:b2:f0:bd:f9:e8: b1:a9:dd:2e:bc:d2:0d:56:fc:4e:16:1e:3a:63:4c: 6b:63:a9:a6:54:3c:cb:8e:14:e1:22:70:d8:9f:4b: c2:07:e3:52:3b:e5:2b:2d:7c:0d:73:f1:60:d1:e5: 80:f0:05:e5:dc:65:84:bf:71:2c:f5:1f:63:46:02: 31:cf:82:aa:fa:3f:a4:fb:7a:d7:d1:03:5e:0d:16: ad:a0:79:96:78:68:50:07:46:a2:a7:6d:70:db:bb: 66:db:c4:e6:b8:4f:ad:47:92:24:42:eb:c4:8d:54: 18:a3:1c:06:2a:29:c6:52:44:cc:3f:75:eb:8d:7b: 85:ce:f9:7c:fd:14:80:e9:e6:cc:c7:c1:a9:f4:0b: 01:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:50:19:E4:82:4A:A2:3B:5C:51:1F:DD:87:7C:47:BA:40:A8:A6:33 X509v3 Authority Key Identifier: keyid:3A:F0:15:F9:25:06:1D:75:40:F9:BB:FA:45:C6:C7:A9:44:31:26:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3AF015F925061D7540F9BBFA45C6C7A944312663.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3AF015F925061D7540F9BBFA45C6C7A944312663.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b7:53:fd:3c:60:36:a8:ac:4a:02:ad:cd:fe:4c:06:1a:ab: 52:e3:f7:ea:a7:82:8f:d6:a4:c2:a6:24:0c:0d:a3:3a:03:38: 48:6e:5a:7f:50:3f:72:78:c0:c1:f6:c2:dd:4e:1f:f8:da:c6: 6f:c7:67:9a:c6:ec:44:37:bc:a2:e0:41:5b:8f:33:76:93:78: d0:17:43:2d:df:38:f9:9e:d8:d1:77:8f:87:cc:a0:db:ed:07: 75:e6:58:38:8d:bf:b3:86:15:20:29:5e:47:b7:f0:62:c6:fd: 40:e1:6d:f1:b2:eb:d1:fa:61:44:49:10:29:31:81:e8:f9:8a: 90:ad:19:45:9f:87:d3:e2:9a:47:f8:67:34:05:e2:17:e3:28: db:b7:5a:00:9d:8a:3b:0a:5e:51:b5:31:d9:20:d0:06:0f:b4: c8:3d:b3:0e:47:5c:ca:c7:ac:b3:09:12:7c:2a:6b:c1:4c:31: 7f:8d:b1:c7:ad:4d:00:84:d9:9d:3f:ec:0b:41:c6:44:f1:fc: d7:85:01:81:4b:59:6e:e1:2f:a5:81:47:db:19:f4:e6:c5:3f: c6:41:f1:8e:5c:29:20:2a:80:c4:e0:b0:94:ac:c8:ff:51:63: de:c6:71:eb:fa:1e:f5:45:70:fc:37:8e:cd:84:88:87:db:2f: 7f:88:d9:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbEMwzYqaVI3RaA9SWOfeSFHXm8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0 NDMxMjY2MzAeFw0yNjA5MTcwODM0MTdaFw0yNjA5MTgxMDE4MTdaMDMxMTAvBgNV BAMTKEY3NTAxOUU0ODI0QUEyM0I1QzUxMUZERDg3N0M0N0JBNDBBOEE2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/uQXYFFYUveo+M6ktjmKuJzN 5XHV6cPy4T/15a19YnnbKPGsrl3RKztO+xGMK8FjQZCLMOPhcK4hTqfChmcBQKkC f/CSqccNxUagaCaKG0HcYz+2a5HICiVvvZdE75zQnUHvV+NCtBmJyM/xgTojnE6y 8L356LGp3S680g1W/E4WHjpjTGtjqaZUPMuOFOEicNifS8IH41I75SstfA1z8WDR 5YDwBeXcZYS/cSz1H2NGAjHPgqr6P6T7etfRA14NFq2geZZ4aFAHRqKnbXDbu2bb xOa4T61HkiRC68SNVBijHAYqKcZSRMw/deuNe4XO+Xz9FIDp5szHwan0CwFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU91AZ5IJKojtcUR/dh3xHukCopjMwHwYDVR0j BBgwFoAUOvAV+SUGHXVA+bv6RcbHqUQxJmMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODAxNWE4NTUtYjI5Yy00NTAyLWFmODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1Rjky NTA2MUQ3NTQwRjlCQkZBNDVDNkM3QTk0NDMxMjY2My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8zQUYwMTVGOTI1MDYxRDc1NDBGOUJCRkE0NUM2QzdBOTQ0MzEy NjYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvM0FGMDE1RjkyNTA2MUQ3NTQwRjlCQkZBNDVDNkM3 QTk0NDMxMjY2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABu3U/08YDaorEoCrc3+TAYaq1Lj9+qngo/W pMKmJAwNozoDOEhuWn9QP3J4wMH2wt1OH/jaxm/HZ5rG7EQ3vKLgQVuPM3aTeNAX Qy3fOPme2NF3j4fMoNvtB3XmWDiNv7OGFSApXke38GLG/UDhbfGy69H6YURJECkx gej5ipCtGUWfh9Pimkf4ZzQF4hfjKNu3WgCdijsKXlG1Mdkg0AYPtMg9sw5HXMrH rLMJEnwqa8FMMX+NscetTQCE2Z0/7AtBxkTx/NeFAYFLWW7hL6WBR9sZ9ObFP8ZB 8Y5cKSAqgMTgsJSsyP9RY97Gcev6HvVFcPw3js2EiIfbL3+I2bw= -----END CERTIFICATE-----Generated at Thu Sep 17 14:29:49 2026 by rpki-client