$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft File: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft (raw, json) Hash identifier: hxKFOg/TmGZ8V/d+usFCxjgfBsXzS6lLYYpn7699C7I= Subject key identifier: 3A:0F:83:70:44:FF:A8:2E:8C:33:F5:07:33:A8:61:37:6C:47:6D:F5 Authority key identifier: AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD Certificate issuer: /CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Certificate serial: 22FC0F1CE93E6444399706B97F9CFBC3DADD1597 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 06:26:28 +0000 Manifest this update: Thu 17 Sep 2026 06:21:28 +0000 Manifest next update: Fri 18 Sep 2026 08:23:28 +0000 Files and hashes: 1: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: 4yYHOQ19SUo4wUen+ovEY0nBNoIbYKAxFiddTf9qCzI=) 2: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: odcITqAToT5yF34xeI2KwLrnQspjZLjDq5idgZAGEkU=) 3: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl (hash: UWtSWzRlVqcnSFIMmgkBLzdnzNVquj92rFP9ITgtO4k=) 4: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: +597iuB7PbfMY+3aubsI/GkbNTaFIoKUe/CnIoipNDU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fc:0f:1c:e9:3e:64:44:39:97:06:b9:7f:9c:fb:c3:da:dd:15:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Validity Not Before: Sep 17 06:21:28 2026 GMT Not After : Sep 18 08:23:28 2026 GMT Subject: CN=3A0F837044FFA82E8C33F50733A861376C476DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:70:1f:df:5d:58:fd:41:8a:82:83:f7:25:25: f9:38:35:98:49:e9:ef:9d:93:57:17:df:7f:46:72: c0:1b:ae:2c:0f:64:38:4a:73:28:d5:bd:af:03:93: 18:f5:14:53:1c:ba:46:90:33:c7:2a:36:ee:06:e2: f2:22:1c:70:3b:0e:bf:6e:b8:b5:14:99:b6:0e:e5: b1:4e:87:e6:bd:68:39:df:2d:eb:24:59:38:8c:07: f7:af:c6:e7:e7:e0:6f:37:4f:8b:60:a9:f6:9a:ed: 03:55:c4:70:ce:58:1f:87:45:f3:4e:e2:db:cd:fa: e4:98:f3:f9:bc:62:30:ed:9c:5e:51:e2:93:f3:da: 40:13:2e:24:15:8c:22:44:d4:48:45:96:22:5f:6c: 50:c4:a3:7c:85:de:25:21:42:f7:d9:7f:a0:c2:59: 55:19:3b:d7:1c:37:4f:ea:58:fc:bc:c1:d1:ca:e8: 3b:8c:cb:7f:81:30:4a:81:4b:36:fb:0a:91:c0:35: 56:9e:3f:0b:91:d8:d2:49:27:0c:de:af:6a:f7:27: 48:66:eb:68:99:8e:d2:36:0f:c1:df:11:15:81:57: 75:9a:f0:11:c0:4c:0a:2e:53:4f:e2:04:d8:b0:33: f8:45:8d:93:3c:9d:42:49:08:9c:23:41:1a:17:d3: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0F:83:70:44:FF:A8:2E:8C:33:F5:07:33:A8:61:37:6C:47:6D:F5 X509v3 Authority Key Identifier: keyid:AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:89:da:d6:02:33:02:99:04:ab:5a:ed:a8:6c:de:12:95:a9: 8f:60:d7:5d:11:ff:2d:af:6b:3b:b0:c0:81:3d:59:2e:7e:04: 0a:eb:49:53:54:15:dd:bf:ef:cf:42:e7:72:60:5e:9c:22:2b: c4:03:16:d9:d3:e1:2e:a2:18:50:4d:9f:c0:85:46:06:bc:dd: fb:ee:9b:cb:35:ad:f9:03:04:0c:24:b7:f7:88:77:e9:6e:b6: 87:9d:17:6b:f6:dd:a8:31:f5:f5:ae:7b:a1:a6:5a:94:97:55: bc:87:12:07:9d:71:26:c0:41:98:a3:cf:61:a9:e9:40:ef:28: d4:2b:5a:f4:2f:de:d7:bd:d4:bb:fb:04:1c:4a:19:30:86:aa: ca:22:23:19:09:82:8c:06:e6:0f:e7:9a:cd:0e:95:81:5d:84: 06:79:1e:9d:52:ca:61:aa:2e:63:8e:1b:3e:0d:aa:e6:4a:8e: da:c4:87:4c:c4:22:b8:33:7f:39:b0:92:cf:01:04:b7:14:64: 23:e9:a0:f6:a2:f2:00:76:ba:65:36:0a:77:58:4c:3e:6e:4f: 78:f8:e9:1c:8a:82:f4:be:24:01:fd:d1:a3:9f:d7:27:39:e8: d1:a1:d4:93:d7:05:5a:0f:0f:38:62:25:25:db:48:3e:04:ef: 08:ea:75:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvwPHOk+ZEQ5lwa5f5z7w9rdFZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4 MEZERkRGRDAeFw0yNjA5MTcwNjIxMjhaFw0yNjA5MTgwODIzMjhaMDMxMTAvBgNV BAMTKDNBMEY4MzcwNDRGRkE4MkU4QzMzRjUwNzMzQTg2MTM3NkM0NzZERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXcB/fXVj9QYqCg/clJfk4NZhJ 6e+dk1cX339GcsAbriwPZDhKcyjVva8Dkxj1FFMcukaQM8cqNu4G4vIiHHA7Dr9u uLUUmbYO5bFOh+a9aDnfLeskWTiMB/evxufn4G83T4tgqfaa7QNVxHDOWB+HRfNO 4tvN+uSY8/m8YjDtnF5R4pPz2kATLiQVjCJE1EhFliJfbFDEo3yF3iUhQvfZf6DC WVUZO9ccN0/qWPy8wdHK6DuMy3+BMEqBSzb7CpHANVaePwuR2NJJJwzer2r3J0hm 62iZjtI2D8HfERWBV3Wa8BHATAouU0/iBNiwM/hFjZM8nUJJCJwjQRoX0/qVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOg+DcET/qC6MM/UHM6hhN2xHbfUwHwYDVR0j BBgwFoAUrz0etvO3SxJgZ5fDHCNTt4D9/f0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY3ODYwZTMtNmFkOC00N2E1LTk0YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZG M0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4MEZERkRGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjNEMUVCNkYzQjc0QjEyNjA2Nzk3QzMxQzIzNTNCNzgwRkRG REZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUz Qjc4MEZERkRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2J2tYCMwKZBKta7ahs3hKVqY9g110R/y2v azuwwIE9WS5+BArrSVNUFd2/789C53JgXpwiK8QDFtnT4S6iGFBNn8CFRga83fvu m8s1rfkDBAwkt/eId+lutoedF2v23agx9fWue6GmWpSXVbyHEgedcSbAQZijz2Gp 6UDvKNQrWvQv3te91Lv7BBxKGTCGqsoiIxkJgowG5g/nms0OlYFdhAZ5Hp1SymGq LmOOGz4NquZKjtrEh0zEIrgzfzmwks8BBLcUZCPpoPai8gB2umU2CndYTD5uT3j4 6RyKgvS+JAH90aOf1yc56NGh1JPXBVoPDzhiJSXbSD4E7wjqdRE= -----END CERTIFICATE-----Generated at Thu Sep 17 14:23:15 2026 by rpki-client