$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft File: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft (raw, json) Hash identifier: fJZBt8PLI3drR6R9vVzgp7ZILmy89tf0lpLxBcDDknA= Subject key identifier: EA:D5:71:48:F7:41:28:91:8C:85:B3:D4:E2:CD:57:38:CD:14:73:A5 Authority key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Certificate issuer: /CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Certificate serial: 34DF1857AF1B69A65023F4264B23E9BBCAE4074E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 22:26:37 +0000 Manifest this update: Wed 16 Sep 2026 22:21:37 +0000 Manifest next update: Fri 18 Sep 2026 00:09:37 +0000 Files and hashes: 1: 4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl (hash: yx56uISgFxZ0y8WiH03yPfzvVXKofuYQM2tO0TqnCow=) 2: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 7ql88/IJdY/aWaZ2NP20wpbVy2vo7/DTiipCEcxNsYM=) 3: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: RcYrOS6rHRHWdeyezVsL3GaabN57kfPwCIDe/5oYbMs=) 4: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: IlV0vgNjpTuApXjZnZRsOZX0dY/TDSqULrpC6FIi3II=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:df:18:57:af:1b:69:a6:50:23:f4:26:4b:23:e9:bb:ca:e4:07:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Validity Not Before: Sep 16 22:21:37 2026 GMT Not After : Sep 18 00:09:37 2026 GMT Subject: CN=EAD57148F74128918C85B3D4E2CD5738CD1473A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e2:5e:1c:b0:7d:ea:e6:fa:bf:12:db:e0:5a: 4b:bf:cc:c7:cb:04:5c:c1:9a:28:7a:a6:44:fe:32: c3:d8:d2:04:ee:92:b3:91:db:04:74:96:8c:28:61: ac:cc:80:99:6b:dc:f8:bb:1a:1e:9d:b7:ef:f9:e4: 04:61:94:ad:69:6a:8c:52:0d:55:df:80:ed:dd:a6: d2:f6:ef:ba:cc:9f:72:91:e2:45:c8:d7:1c:4b:e4: 41:c5:e5:0b:c1:3c:ea:9b:c2:1a:de:2c:e3:45:ec: bf:f8:16:ed:cc:20:d8:4b:08:61:c5:69:be:5e:ee: 0d:c3:09:00:9c:9e:9c:ef:f5:84:22:be:13:c9:14: de:7a:c9:4c:86:5b:ad:00:ce:26:32:24:b4:7b:58: 2b:bc:c3:26:ae:eb:08:fe:21:11:11:0b:45:ed:ce: d3:74:11:c6:d9:4e:05:4f:f1:db:b0:d1:b1:b6:67: 03:57:4a:f6:a0:53:c0:06:63:e6:46:19:19:16:05: 5d:bd:3b:c4:e7:4d:bd:31:3a:71:a2:7f:4b:1b:7b: 86:4d:e1:5b:ba:e8:47:0b:78:08:a5:b0:d3:32:04: f4:79:8f:37:ef:86:ea:6a:2b:e8:fb:4b:52:a2:e1: 53:05:57:97:66:cd:10:85:25:fe:89:f1:1d:0b:fa: 29:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D5:71:48:F7:41:28:91:8C:85:B3:D4:E2:CD:57:38:CD:14:73:A5 X509v3 Authority Key Identifier: keyid:4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:17:40:6c:c2:d8:11:a1:68:f5:fd:f2:e3:28:27:4f:41:f6: 81:d6:3d:4b:77:ba:c3:61:75:2d:7b:2f:d8:94:eb:ca:2b:4f: 74:c8:24:fa:48:f3:30:37:a8:06:cb:0a:f5:42:07:0a:32:69: ed:92:a5:ad:9a:65:b3:ea:56:a5:e8:46:8f:43:5f:f9:6f:92: 94:21:d8:d7:fd:ac:b6:18:b7:09:e0:34:00:a6:91:ea:6c:a2: b1:9f:99:09:d9:b0:85:cb:12:a3:8d:2c:2a:0f:d0:36:19:cd: eb:44:b3:00:41:8d:81:ce:c5:f4:87:11:51:fa:55:17:b8:ea: e4:02:b3:0d:63:d4:fc:a7:2c:53:39:c2:32:fd:ac:70:e7:90: 0a:e0:1f:1e:36:90:51:f5:bd:25:f8:10:84:45:26:0e:d4:2b: 81:76:71:b0:dd:64:27:9a:12:47:b5:85:94:18:e3:69:3b:e4: c2:a7:5d:d5:31:1c:62:d7:57:c1:9f:41:3b:60:f6:cb:e9:46: 78:20:62:42:c6:0e:ee:0f:ed:46:82:8e:58:03:4e:32:88:45: 83:13:67:00:b6:90:2e:a1:e6:90:28:e6:1e:4d:14:6d:56:28: d5:08:83:c3:4c:f5:ea:07:8d:ed:a7:31:81:1d:bb:49:56:ef: 94:c9:e5:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNN8YV68baaZQI/QmSyPpu8rkB04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQy NjA2OUMyQjAeFw0yNjA5MTYyMjIxMzdaFw0yNjA5MTgwMDA5MzdaMDMxMTAvBgNV BAMTKEVBRDU3MTQ4Rjc0MTI4OTE4Qzg1QjNENEUyQ0Q1NzM4Q0QxNDczQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD14l4csH3q5vq/EtvgWku/zMfL BFzBmih6pkT+MsPY0gTukrOR2wR0lowoYazMgJlr3Pi7Gh6dt+/55ARhlK1paoxS DVXfgO3dptL277rMn3KR4kXI1xxL5EHF5QvBPOqbwhreLONF7L/4Fu3MINhLCGHF ab5e7g3DCQCcnpzv9YQivhPJFN56yUyGW60AziYyJLR7WCu8wyau6wj+IRERC0Xt ztN0EcbZTgVP8duw0bG2ZwNXSvagU8AGY+ZGGRkWBV29O8TnTb0xOnGif0sbe4ZN 4Vu66EcLeAilsNMyBPR5jzfvhupqK+j7S1Ki4VMFV5dmzRCFJf6J8R0L+imdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6tVxSPdBKJGMhbPU4s1XOM0Uc6UwHwYDVR0j BBgwFoAUSvelxvVMX9vYlXp/5bckJCYGnCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE1OWEzNjItOTUwYy00NWMyLWFlY2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZG NTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQyNjA2OUMyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUY3QTVDNkY1NEM1RkRCRDg5NTdBN0ZFNUI3MjQyNDI2MDY5 QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0 MjQyNjA2OUMyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcXQGzC2BGhaPX98uMoJ09B9oHWPUt3usNh dS17L9iU68orT3TIJPpI8zA3qAbLCvVCBwoyae2Spa2aZbPqVqXoRo9DX/lvkpQh 2Nf9rLYYtwngNACmkepsorGfmQnZsIXLEqONLCoP0DYZzetEswBBjYHOxfSHEVH6 VRe46uQCsw1j1PynLFM5wjL9rHDnkArgHx42kFH1vSX4EIRFJg7UK4F2cbDdZCea Eke1hZQY42k75MKnXdUxHGLXV8GfQTtg9svpRnggYkLGDu4P7UaCjlgDTjKIRYMT ZwC2kC6h5pAo5h5NFG1WKNUIg8NM9eoHje2nMYEdu0lW75TJ5Q8= -----END CERTIFICATE-----Generated at Thu Sep 17 15:11:42 2026 by rpki-client