$ rpki-client -vvvf rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft File: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft (raw, json) Hash identifier: A+wdIA+3d0I6qSPdTk0xGMnizHpj0gEo7sPvM4GbTYk= Subject key identifier: F8:38:EB:0D:BF:7D:4B:45:10:F7:18:78:DB:A3:BC:2E:AE:3E:48:50 Authority key identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A Certificate issuer: /CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Certificate serial: 3ACB6D11E6E893BE35A8AF2BDE3A8DA767BD6E4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 13:17:33 +0000 Manifest this update: Wed 23 Sep 2026 13:12:33 +0000 Manifest next update: Thu 24 Sep 2026 14:10:33 +0000 Files and hashes: 1: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl (hash: mzaeOMGpnVeLX5ADt5ozpqDcCEuS0DWGE8ggHRspbBQ=) 2: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: B4j0qT4PT3YdDkrmlfhYyZnafUYLOfUdcba19kZ7mRY=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d37ZeGgHjVZzYq6CUddv0o+w23L0QGAKsBmc8dpggDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cb:6d:11:e6:e8:93:be:35:a8:af:2b:de:3a:8d:a7:67:bd:6e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Validity Not Before: Sep 23 13:12:33 2026 GMT Not After : Sep 24 14:10:33 2026 GMT Subject: CN=F838EB0DBF7D4B4510F71878DBA3BC2EAE3E4850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:65:aa:85:62:6d:4b:40:86:e4:1d:ec:fe: e2:03:d0:ed:a5:a1:bb:e8:8b:41:be:3b:72:b9:35: 45:c2:34:26:12:bc:3d:89:4a:d4:6b:53:86:d4:4c: 36:c6:19:4c:79:2a:3f:82:4a:47:03:3c:a3:9d:65: d5:1d:d0:ea:44:38:19:be:0c:d6:bc:d9:b9:b3:77: 25:53:40:57:f0:2a:93:b8:b7:e1:26:5e:2b:2f:eb: 40:88:15:1d:d5:d3:da:c3:98:50:4b:26:08:a6:9d: 1b:7f:b1:8b:8c:e7:77:a4:28:30:4f:85:0e:93:ef: d5:3d:f2:97:40:c1:f6:22:d9:1a:6e:c6:bd:82:e1: a7:34:65:3e:db:2c:7f:9a:24:5f:f3:6c:7e:08:31: 35:d9:66:c8:bc:58:1e:8b:b1:d4:30:0c:83:f2:ba: 18:19:2d:42:66:ce:70:b8:00:f4:a7:e5:fe:0c:e5: e5:75:ab:00:39:9b:9d:df:17:03:a3:cd:f1:0f:81: 54:ee:8d:63:ad:8b:e4:9d:24:8e:25:a5:4f:4d:17: b6:82:7b:ac:ac:72:59:cd:40:b4:3f:76:bd:58:90: 28:d1:c3:ae:84:cf:c3:15:c1:79:b6:32:d3:97:c3: 2a:59:55:3b:a8:16:e7:0d:06:96:95:04:18:3a:50: ea:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:38:EB:0D:BF:7D:4B:45:10:F7:18:78:DB:A3:BC:2E:AE:3E:48:50 X509v3 Authority Key Identifier: keyid:AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:1a:75:c3:7a:5a:d4:46:6b:f7:75:dc:c5:26:01:06:f3:72: 0a:b4:3f:ea:97:29:9c:b6:22:5e:98:fc:67:49:a2:de:41:7e: a5:52:eb:4e:40:10:8a:cd:6c:32:6e:dd:8a:62:31:03:31:81: 31:fb:41:d9:8a:4a:e4:e2:b6:77:65:14:c0:f8:16:9a:26:ef: 7d:62:0c:d6:9d:63:93:8b:8c:56:23:8f:c2:ed:34:94:69:43: c1:da:c1:b9:c8:f1:11:c5:57:fc:06:b2:7e:96:79:2e:83:98: 9a:51:55:54:9c:5c:c5:21:5b:68:4d:68:5a:55:e0:73:b9:c7: 34:6f:ea:1c:c5:ee:11:c0:40:42:35:ba:3c:16:65:82:cb:3a: 83:10:26:10:01:5e:49:b3:ce:88:57:f9:32:58:20:c4:d1:fe: 26:b4:e1:15:67:db:bb:42:b2:f6:85:66:a9:4f:ba:fd:ec:89: 01:12:c5:d9:b7:db:94:54:b8:de:cc:a8:e4:42:9e:ce:70:8f: 01:28:3c:4e:ba:b5:ac:24:f9:b7:6f:f6:33:bc:48:bf:c5:76: 31:d8:a4:fc:11:02:7a:a5:7a:61:33:bc:e1:44:24:92:c8:54: a1:af:d9:d2:b0:27:20:60:09:1e:6b:50:ff:e0:8d:45:32:7d: 5c:d2:9f:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsttEebok741qK8r3jqNp2e9bk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1N0Ux MjA5RDc3QTAeFw0yNjA5MjMxMzEyMzNaFw0yNjA5MjQxNDEwMzNaMDMxMTAvBgNV BAMTKEY4MzhFQjBEQkY3RDRCNDUxMEY3MTg3OERCQTNCQzJFQUUzRTQ4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqr2WqhWJtS0CG5B3s/uID0O2l obvoi0G+O3K5NUXCNCYSvD2JStRrU4bUTDbGGUx5Kj+CSkcDPKOdZdUd0OpEOBm+ DNa82bmzdyVTQFfwKpO4t+EmXisv60CIFR3V09rDmFBLJgimnRt/sYuM53ekKDBP hQ6T79U98pdAwfYi2Rpuxr2C4ac0ZT7bLH+aJF/zbH4IMTXZZsi8WB6LsdQwDIPy uhgZLUJmznC4APSn5f4M5eV1qwA5m53fFwOjzfEPgVTujWOti+SdJI4lpU9NF7aC e6ysclnNQLQ/dr1YkCjRw66Ez8MVwXm2MtOXwypZVTuoFucNBpaVBBg6UOpXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+DjrDb99S0UQ9xh426O8Lq4+SFAwHwYDVR0j BBgwFoAUrxDC6QQK2x9BxavJ//3lfhIJ13owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUwNjMzZmMtZmUyMy00ZDgyLWJhNjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkw NDBBREIxRjQxQzVBQkM5RkZGREU1N0UxMjA5RDc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjEwQzJFOTA0MEFEQjFGNDFDNUFCQzlGRkZERTU3RTEyMDlE NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1 N0UxMjA5RDc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcadcN6WtRGa/d13MUmAQbzcgq0P+qXKZy2 Il6Y/GdJot5BfqVS605AEIrNbDJu3YpiMQMxgTH7QdmKSuTitndlFMD4Fpom731i DNadY5OLjFYjj8LtNJRpQ8HawbnI8RHFV/wGsn6WeS6DmJpRVVScXMUhW2hNaFpV 4HO5xzRv6hzF7hHAQEI1ujwWZYLLOoMQJhABXkmzzohX+TJYIMTR/ia04RVn27tC svaFZqlPuv3siQESxdm325RUuN7MqORCns5wjwEoPE66tawk+bdv9jO8SL/FdjHY pPwRAnqlemEzvOFEJJLIVKGv2dKwJyBgCR5rUP/gjUUyfVzSnzc= -----END CERTIFICATE-----Generated at Wed Sep 23 22:11:26 2026 by rpki-client