$ rpki-client -vvf rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft File: AFB831541A03B6BE413D492F67453655438B76F4.mft (raw, json) Hash identifier: x+0Um+nRTa7ceLqhuPZiJ7uxALnE65plDbsBDgTs/IA= Subject key identifier: 6B:CD:F2:61:C0:84:98:DD:B5:91:EF:1F:FA:C5:A6:93:41:BF:25:35 Authority key identifier: AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 Certificate issuer: /CN=AFB831541A03B6BE413D492F67453655438B76F4 Certificate serial: 323A6D07BE49CA9B1EA48E54E7BB1A2A376515B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:30:02 +0000 Manifest this update: Thu 23 Jul 2026 16:25:02 +0000 Manifest next update: Fri 24 Jul 2026 17:32:02 +0000 Files and hashes: 1: AFB831541A03B6BE413D492F67453655438B76F4.crl (hash: /6WXimaWPt1TuJCIX5UqhaQC1hQyr7yZC2HgYAZeZgE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3a:6d:07:be:49:ca:9b:1e:a4:8e:54:e7:bb:1a:2a:37:65:15:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFB831541A03B6BE413D492F67453655438B76F4 Validity Not Before: Jul 23 16:25:02 2026 GMT Not After : Jul 24 17:32:02 2026 GMT Subject: CN=6BCDF261C08498DDB591EF1FFAC5A69341BF2535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:56:ea:56:be:26:18:4d:da:a6:0e:52:f7:84: e5:fd:06:79:b4:e7:c0:ea:ee:9a:6d:a5:87:cb:ce: e3:43:50:f1:5e:f3:7c:c4:13:0b:a0:29:b5:c8:03: 8f:a5:e8:e3:47:d2:cc:23:80:8e:30:31:87:a8:20: c1:5e:08:4c:1e:95:6e:0c:cf:09:c4:b7:48:d7:04: 0f:de:4e:25:5f:89:d6:17:f3:ae:93:5b:32:04:50: aa:fd:4d:f3:a7:58:08:d3:5f:8b:27:6f:7b:6e:1b: 52:79:9d:00:10:04:32:66:98:97:a8:5f:68:86:e6: cb:35:c9:66:5c:bc:e5:6f:07:19:93:d8:6a:48:c8: bf:48:0e:8c:4c:24:44:f9:83:7e:36:6e:40:74:cc: bf:ab:a7:29:69:e6:f2:83:06:e1:12:64:a6:55:4b: e2:f5:cd:26:b5:da:46:34:e6:9d:73:8e:b6:84:0d: 57:96:b6:1a:b5:3b:ab:4b:f1:ff:2c:49:a3:b8:7f: 87:99:95:ca:56:09:88:be:4c:bb:29:92:9e:b5:27: 11:ac:d1:07:ee:c9:16:ff:9c:b5:cf:c5:db:7d:7d: ef:0e:e0:a5:c8:99:67:c0:2f:94:9b:ce:b6:64:76: 0e:55:a6:70:38:29:fd:2d:ee:0a:a1:c4:a3:dc:e8: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CD:F2:61:C0:84:98:DD:B5:91:EF:1F:FA:C5:A6:93:41:BF:25:35 X509v3 Authority Key Identifier: keyid:AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:91:29:70:b4:09:ae:a7:36:72:eb:63:2b:c9:4e:ea:e0:dc: 9a:c1:b6:25:37:95:57:0e:f9:72:fa:02:7c:ec:f1:85:cf:31: 31:d6:e5:c8:35:36:d1:81:f6:97:13:d7:8b:59:41:0f:9b:7f: e7:c3:38:f3:9c:2b:01:93:56:81:b9:9c:6c:63:7f:d0:38:62: ea:6d:f9:fe:97:4a:05:45:0b:3f:dd:ce:b5:61:05:40:46:4a: 50:d1:b9:cd:ce:72:3a:5a:bc:a6:76:29:3f:c6:e9:23:e5:89: d0:79:f9:de:8e:38:a0:0f:3d:63:7d:62:93:e1:da:39:76:be: 97:e8:45:b5:34:f8:6e:f7:28:94:b3:d4:07:67:13:c8:4b:71: 1a:70:35:a1:fb:cc:0f:c6:2a:bf:3e:d8:ca:cd:af:01:e8:2a: bb:66:a0:b9:d5:76:43:48:b5:7a:8a:3a:d5:97:9a:14:1d:9d: 7b:3c:41:84:6f:54:31:b5:60:bb:bb:97:67:56:83:80:7f:7c: 97:70:86:2c:04:72:0f:f8:66:22:d5:e7:54:b5:6d:7f:06:b2: e5:71:d1:46:b7:58:29:12:82:21:dd:c4:bb:6e:fe:e1:92:d4: 71:a4:af:fe:18:94:13:78:7e:5e:41:9c:4e:46:e0:9b:0a:d6: a1:ea:1a:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjptB75JypsepI5U57saKjdlFbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0 MzhCNzZGNDAeFw0yNjA3MjMxNjI1MDJaFw0yNjA3MjQxNzMyMDJaMDMxMTAvBgNV BAMTKDZCQ0RGMjYxQzA4NDk4RERCNTkxRUYxRkZBQzVBNjkzNDFCRjI1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4VupWviYYTdqmDlL3hOX9Bnm0 58Dq7pptpYfLzuNDUPFe83zEEwugKbXIA4+l6ONH0swjgI4wMYeoIMFeCEwelW4M zwnEt0jXBA/eTiVfidYX866TWzIEUKr9TfOnWAjTX4snb3tuG1J5nQAQBDJmmJeo X2iG5ss1yWZcvOVvBxmT2GpIyL9IDoxMJET5g342bkB0zL+rpylp5vKDBuESZKZV S+L1zSa12kY05p1zjraEDVeWthq1O6tL8f8sSaO4f4eZlcpWCYi+TLspkp61JxGs 0QfuyRb/nLXPxdt9fe8O4KXImWfAL5SbzrZkdg5VpnA4Kf0t7gqhxKPc6I9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa83yYcCEmN21ke8f+sWmk0G/JTUwHwYDVR0j BBgwFoAUr7gxVBoDtr5BPUkvZ0U2VUOLdvQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI0YTY1ZjQtNGY0Yi00NGI2LWEyZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQx QTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0MzhCNzZGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkI4MzE1NDFBMDNCNkJFNDEzRDQ5MkY2NzQ1MzY1NTQzOEI3 NkY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2 NTU0MzhCNzZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANGRKXC0Ca6nNnLrYyvJTurg3JrBtiU3lVcO +XL6Anzs8YXPMTHW5cg1NtGB9pcT14tZQQ+bf+fDOPOcKwGTVoG5nGxjf9A4Yupt +f6XSgVFCz/dzrVhBUBGSlDRuc3OcjpavKZ2KT/G6SPlidB5+d6OOKAPPWN9YpPh 2jl2vpfoRbU0+G73KJSz1AdnE8hLcRpwNaH7zA/GKr8+2MrNrwHoKrtmoLnVdkNI tXqKOtWXmhQdnXs8QYRvVDG1YLu7l2dWg4B/fJdwhiwEcg/4ZiLV51S1bX8GsuVx 0Ua3WCkSgiHdxLtu/uGS1HGkr/4YlBN4fl5BnE5G4JsK1qHqGvY= -----END CERTIFICATE-----Generated at Fri Jul 24 01:21:07 2026 by rpki-client