$ rpki-client -vvvf rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft File: AFB831541A03B6BE413D492F67453655438B76F4.mft (raw, json) Hash identifier: Q6TuVBJqUvAwesTbmJJflKplnIQ6kO2pzkM44NJA+Dg= Subject key identifier: 2B:96:A1:5B:93:C9:CF:99:91:15:00:7A:D8:CE:D5:E1:EE:74:66:B6 Authority key identifier: AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 Certificate issuer: /CN=AFB831541A03B6BE413D492F67453655438B76F4 Certificate serial: 25B9C86B6AA3C6100996694ED58B6F9C70187606 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 01:02:04 +0000 Manifest this update: Thu 24 Sep 2026 00:57:04 +0000 Manifest next update: Fri 25 Sep 2026 02:37:04 +0000 Files and hashes: 1: AFB831541A03B6BE413D492F67453655438B76F4.crl (hash: p9xRKuwHzwGCgNNhyEIzoyg3d1LaMZ7DzPyqMFqe87g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:b9:c8:6b:6a:a3:c6:10:09:96:69:4e:d5:8b:6f:9c:70:18:76:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFB831541A03B6BE413D492F67453655438B76F4 Validity Not Before: Sep 24 00:57:04 2026 GMT Not After : Sep 25 02:37:04 2026 GMT Subject: CN=2B96A15B93C9CF999115007AD8CED5E1EE7466B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:09:3d:1d:50:f8:4e:b9:67:9a:81:eb:e9: 34:49:57:5a:af:f1:cd:0d:b9:53:0b:95:70:0d:68: 45:2b:7d:ce:ea:d9:ba:35:43:a4:ba:d4:85:b7:4e: 58:ca:ac:c2:5f:74:c5:a7:c5:ab:2a:56:23:b7:43: 1a:37:90:d8:5f:b6:19:f8:0f:23:18:31:8a:af:f1: 62:e0:dc:4b:e5:5f:43:28:80:c2:56:fa:6b:e8:7f: d9:0c:f4:cf:94:f6:59:67:78:db:4c:de:f1:56:8b: 3d:3e:08:a5:f5:23:4c:4d:4c:b0:f8:31:22:ec:53: 0c:88:e9:80:7b:ef:5d:29:41:3f:cd:0b:89:5b:4c: cd:64:a7:b4:4e:1a:49:1d:ae:7b:cd:e9:af:2a:07: f7:1e:01:73:b4:01:5c:4f:64:bd:5f:5f:6e:44:ae: 60:4e:15:6b:01:b0:dd:f1:4f:4c:d9:2a:68:6c:fd: 84:01:85:1d:2b:d7:e2:cc:1e:76:dd:2a:2d:28:60: 2c:4b:81:2f:9e:e7:04:f9:79:bf:93:d5:ce:d7:0f: 86:45:e3:ed:ff:39:0c:10:fc:e8:72:2f:6e:7d:05: ce:57:17:a7:9b:ef:09:40:f3:25:49:2b:ab:16:78: 4d:18:df:bb:c1:d9:d8:db:2e:4f:7d:c7:d0:fb:dd: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:96:A1:5B:93:C9:CF:99:91:15:00:7A:D8:CE:D5:E1:EE:74:66:B6 X509v3 Authority Key Identifier: keyid:AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:95:62:3c:94:0e:15:07:fd:ec:da:b0:06:27:5c:4a:d5:3d: 47:0a:5b:54:cf:9b:f6:aa:02:51:3a:bc:16:48:24:f7:db:3c: 9a:e6:b2:cc:1b:32:83:68:8d:68:0b:0f:64:d4:10:3b:ef:06: 75:64:ee:53:02:84:0d:11:d1:a9:31:fb:7e:5a:39:ef:51:c8: 28:d3:4f:12:5e:ac:1f:c2:e2:6c:bc:42:69:bd:d2:5c:48:6a: d1:a9:25:b6:68:3b:46:ff:db:7c:67:c5:3b:09:00:5a:23:6f: 3d:b1:7f:57:05:2e:28:1b:71:c8:11:fe:60:2e:af:d0:96:ed: cc:3f:0c:7c:c2:5c:dd:fe:20:80:90:1b:6f:d6:23:89:bd:cd: d3:65:fd:9e:9e:fd:55:08:3f:5f:cc:8f:73:51:03:95:65:40: 42:60:58:7a:7c:8a:53:56:d5:be:d7:dc:ba:b1:a2:7e:fc:d1: 68:7a:44:cb:e1:d8:bc:00:15:5f:04:4e:af:52:e5:49:4b:e1: b1:5a:45:86:f1:f8:ac:ca:c6:5a:d3:4b:b4:97:c8:7d:e5:30: fd:14:0a:08:24:9e:07:a6:49:98:b0:5a:d5:34:f8:99:4a:d4: f3:9b:2e:06:12:30:06:71:4d:65:ab:15:08:d8:2c:95:5f:24: 1a:2e:99:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJbnIa2qjxhAJlmlO1YtvnHAYdgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0 MzhCNzZGNDAeFw0yNjA5MjQwMDU3MDRaFw0yNjA5MjUwMjM3MDRaMDMxMTAvBgNV BAMTKDJCOTZBMTVCOTNDOUNGOTk5MTE1MDA3QUQ4Q0VENUUxRUU3NDY2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYgk9HVD4TrlnmoHr6TRJV1qv 8c0NuVMLlXANaEUrfc7q2bo1Q6S61IW3TljKrMJfdMWnxasqViO3Qxo3kNhfthn4 DyMYMYqv8WLg3EvlX0MogMJW+mvof9kM9M+U9llneNtM3vFWiz0+CKX1I0xNTLD4 MSLsUwyI6YB7710pQT/NC4lbTM1kp7ROGkkdrnvN6a8qB/ceAXO0AVxPZL1fX25E rmBOFWsBsN3xT0zZKmhs/YQBhR0r1+LMHnbdKi0oYCxLgS+e5wT5eb+T1c7XD4ZF 4+3/OQwQ/OhyL259Bc5XF6eb7wlA8yVJK6sWeE0Y37vB2djbLk99x9D73V8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK5ahW5PJz5mRFQB62M7V4e50ZrYwHwYDVR0j BBgwFoAUr7gxVBoDtr5BPUkvZ0U2VUOLdvQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI0YTY1ZjQtNGY0Yi00NGI2LWEyZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQx QTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0MzhCNzZGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkI4MzE1NDFBMDNCNkJFNDEzRDQ5MkY2NzQ1MzY1NTQzOEI3 NkY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2 NTU0MzhCNzZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeVYjyUDhUH/ezasAYnXErVPUcKW1TPm/aq AlE6vBZIJPfbPJrmsswbMoNojWgLD2TUEDvvBnVk7lMChA0R0akx+35aOe9RyCjT TxJerB/C4my8Qmm90lxIatGpJbZoO0b/23xnxTsJAFojbz2xf1cFLigbccgR/mAu r9CW7cw/DHzCXN3+IICQG2/WI4m9zdNl/Z6e/VUIP1/Mj3NRA5VlQEJgWHp8ilNW 1b7X3Lqxon780Wh6RMvh2LwAFV8ETq9S5UlL4bFaRYbx+KzKxlrTS7SXyH3lMP0U CggkngemSZiwWtU0+JlK1PObLgYSMAZxTWWrFQjYLJVfJBoumTI= -----END CERTIFICATE-----Generated at Thu Sep 24 05:55:29 2026 by rpki-client