$ rpki-client -vvf rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft File: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft (raw, json) Hash identifier: qSmwKENPMoGDZv5B4nPVFfEjP0p2EX6WjBsrmCzdNK8= Subject key identifier: 44:86:7A:15:49:D7:02:96:B1:7B:3F:C1:07:70:4A:DA:38:CB:ED:6A Authority key identifier: AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD Certificate issuer: /CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Certificate serial: 21AD742CAA3BA5C8C6EC00F74B3BDDFBF4F9CBEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 02:40:09 +0000 Manifest this update: Thu 18 Jun 2026 02:35:09 +0000 Manifest next update: Fri 19 Jun 2026 03:06:09 +0000 Files and hashes: 1: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: 4yYHOQ19SUo4wUen+ovEY0nBNoIbYKAxFiddTf9qCzI=) 2: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl (hash: 5c0a1ry8gUyRMwaTUAfrol7G0D5+XOcQF0GQP+Z7M9s=) 3: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: +597iuB7PbfMY+3aubsI/GkbNTaFIoKUe/CnIoipNDU=) 4: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: odcITqAToT5yF34xeI2KwLrnQspjZLjDq5idgZAGEkU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 03:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ad:74:2c:aa:3b:a5:c8:c6:ec:00:f7:4b:3b:dd:fb:f4:f9:cb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Validity Not Before: Jun 18 02:35:09 2026 GMT Not After : Jun 19 03:06:09 2026 GMT Subject: CN=44867A1549D70296B17B3FC107704ADA38CBED6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:3b:1a:46:66:1b:1f:d6:d3:39:8f:96:89: 4a:ad:de:91:9f:71:7b:3a:69:29:66:a0:7c:36:ff: f5:78:d9:15:63:1a:db:9f:b4:21:f7:7e:7b:88:aa: 4d:fa:b8:6d:e0:4d:6f:19:0b:54:dc:4f:10:cb:a8: 03:00:ff:4f:26:61:df:72:3e:50:12:7d:ac:31:97: 1f:7d:6f:bf:f6:a2:34:05:bb:39:9c:b3:7b:45:ef: 05:1c:2e:f1:50:36:62:99:ed:89:e2:42:8b:c8:52: 42:e6:75:22:8e:09:28:24:6a:52:74:24:9d:03:02: 8e:f3:d8:e4:a7:0b:db:7a:56:7b:ed:3f:4a:69:ae: 84:64:34:13:88:9c:9d:67:38:12:55:9b:70:ad:06: c1:07:ae:24:b6:33:e8:59:eb:8e:be:87:d9:35:08: 55:d7:81:82:6a:18:fc:5d:17:7a:b8:5e:ae:e9:ea: 06:ec:8a:57:fd:2e:3f:8c:2a:45:6f:a0:d0:d3:1c: 13:0e:82:39:a1:e5:ce:27:97:0d:a8:56:25:92:c9: c4:91:bd:6a:df:4c:f7:b9:ae:0c:1c:5f:a7:23:e1: d8:f9:f1:d6:0c:8a:6a:26:bb:ab:a8:bf:89:38:4f: ab:d1:fd:de:f9:76:49:b4:06:1a:c9:07:49:37:6f: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:86:7A:15:49:D7:02:96:B1:7B:3F:C1:07:70:4A:DA:38:CB:ED:6A X509v3 Authority Key Identifier: keyid:AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:17:27:fb:36:60:d8:58:f4:d1:38:07:56:d8:c5:b7:37:df: 85:d7:5a:2f:c4:20:b2:46:72:62:5c:8c:30:ab:84:e4:de:ba: c1:3c:91:6b:12:93:b2:11:4c:e1:d7:25:f7:97:09:de:43:07: 3b:13:cc:93:d8:eb:0c:92:25:90:0f:ff:c1:12:f9:b5:62:c5: 34:59:89:6a:54:d9:15:07:c3:18:ea:40:0e:fe:88:3e:61:fa: 2b:3b:9a:5c:4c:ee:ff:23:46:55:1f:02:b9:86:25:ca:c0:ab: 9e:de:c7:ee:0b:9e:c2:9c:fa:e0:30:ff:41:8e:50:ec:40:cc: c5:c7:cd:9e:c9:15:51:cf:f1:62:e0:b0:8b:1d:a3:04:08:8e: 01:22:f0:43:81:50:b7:23:36:de:c3:d3:cd:0d:8b:81:01:41: 39:da:c7:92:d3:82:fe:37:07:35:32:75:c3:be:a3:05:97:a1: bd:89:f8:e6:46:54:37:7a:f0:dd:99:55:6a:41:98:98:ff:e4: 8c:67:c5:e6:c8:bd:6f:1e:77:f1:c9:c5:46:a5:ef:b5:64:73: ed:fb:72:5c:7e:a3:b7:78:a2:c4:6b:80:a7:8e:38:16:73:6c: 3c:4f:74:66:3f:b9:3c:a9:b3:ab:12:83:62:da:84:c9:f0:25: 16:ba:a9:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIa10LKo7pcjG7AD3Szvd+/T5y+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4 MEZERkRGRDAeFw0yNjA2MTgwMjM1MDlaFw0yNjA2MTkwMzA2MDlaMDMxMTAvBgNV BAMTKDQ0ODY3QTE1NDlENzAyOTZCMTdCM0ZDMTA3NzA0QURBMzhDQkVENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6DsaRmYbH9bTOY+WiUqt3pGf cXs6aSlmoHw2//V42RVjGtuftCH3fnuIqk36uG3gTW8ZC1TcTxDLqAMA/08mYd9y PlASfawxlx99b7/2ojQFuzmcs3tF7wUcLvFQNmKZ7YniQovIUkLmdSKOCSgkalJ0 JJ0DAo7z2OSnC9t6VnvtP0pproRkNBOInJ1nOBJVm3CtBsEHriS2M+hZ646+h9k1 CFXXgYJqGPxdF3q4Xq7p6gbsilf9Lj+MKkVvoNDTHBMOgjmh5c4nlw2oViWSycSR vWrfTPe5rgwcX6cj4dj58dYMimomu6uov4k4T6vR/d75dkm0BhrJB0k3b8jVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURIZ6FUnXApaxez/BB3BK2jjL7WowHwYDVR0j BBgwFoAUrz0etvO3SxJgZ5fDHCNTt4D9/f0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY3ODYwZTMtNmFkOC00N2E1LTk0YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZG M0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4MEZERkRGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjNEMUVCNkYzQjc0QjEyNjA2Nzk3QzMxQzIzNTNCNzgwRkRG REZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUz Qjc4MEZERkRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMXJ/s2YNhY9NE4B1bYxbc334XXWi/EILJG cmJcjDCrhOTeusE8kWsSk7IRTOHXJfeXCd5DBzsTzJPY6wySJZAP/8ES+bVixTRZ iWpU2RUHwxjqQA7+iD5h+is7mlxM7v8jRlUfArmGJcrAq57ex+4LnsKc+uAw/0GO UOxAzMXHzZ7JFVHP8WLgsIsdowQIjgEi8EOBULcjNt7D080Ni4EBQTnax5LTgv43 BzUydcO+owWXob2J+OZGVDd68N2ZVWpBmJj/5IxnxebIvW8ed/HJxUal77Vkc+37 clx+o7d4osRrgKeOOBZzbDxPdGY/uTyps6sSg2LahMnwJRa6qXw= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:43 2026 by rpki-client