$ rpki-client -vvf rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft File: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft (raw, json) Hash identifier: PUQ0huULd8ZGSfoo6CaFPssXOGlDzfLrUmmzoM72EXA= Subject key identifier: 9C:3B:38:6C:34:C9:99:86:9D:19:00:69:80:BD:C2:5E:02:4F:DE:D3 Authority key identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A Certificate issuer: /CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Certificate serial: 46195DAE577780E18BD1B5A0AC7D12B0995EADEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:07:04 +0000 Manifest this update: Tue 12 May 2026 03:02:04 +0000 Manifest next update: Wed 13 May 2026 04:59:04 +0000 Files and hashes: 1: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl (hash: 1rJGQ0O9VaQsCWYeF4z3VXar6U6zw6xOxUa6O+WfzjI=) 2: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: B4j0qT4PT3YdDkrmlfhYyZnafUYLOfUdcba19kZ7mRY=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d37ZeGgHjVZzYq6CUddv0o+w23L0QGAKsBmc8dpggDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:19:5d:ae:57:77:80:e1:8b:d1:b5:a0:ac:7d:12:b0:99:5e:ad:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Validity Not Before: May 12 03:02:04 2026 GMT Not After : May 13 04:59:04 2026 GMT Subject: CN=9C3B386C34C999869D19006980BDC25E024FDED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:29:87:ad:bd:01:44:b8:0f:c8:bb:93:35: 00:d0:96:52:51:e4:d3:8b:54:33:4e:bb:f1:4c:9d: 38:3a:c6:0e:74:24:3d:75:ff:05:fc:bf:db:e6:e3: 87:9e:27:3f:45:9e:f3:8c:28:45:d5:1e:7a:4b:b9: 83:42:52:a0:48:b1:39:3d:1d:c1:16:aa:d7:81:e8: ac:2f:df:67:59:7c:e6:9f:30:39:98:09:f3:5b:fd: ab:d3:2a:4e:66:24:82:12:70:b9:98:8f:15:ff:f6: db:30:c3:d3:59:97:4f:32:85:ae:1b:dc:7b:24:85: 29:79:4c:82:d4:d6:8b:aa:01:54:77:b5:e8:57:fd: 5f:d2:12:6b:4a:43:f9:4c:92:aa:cb:4b:3c:1b:09: e2:5c:b1:c6:46:96:30:95:1f:4f:bd:82:cc:19:62: 65:70:cd:42:77:17:0a:cb:b0:45:a5:34:a7:5d:ba: b1:68:8e:e2:08:33:e4:b4:40:06:ae:6a:6b:2b:e0: 71:c2:68:ee:9b:c7:9e:71:6d:fa:bc:c2:4c:81:60: 1f:d8:57:15:47:11:fa:1d:b5:57:e2:7b:65:58:66: 6d:8a:ff:69:c5:34:fa:41:5d:f3:96:d7:21:4a:73: 6c:2c:6d:ce:75:0a:da:f9:e6:df:c1:ea:3d:26:e9: 6a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3B:38:6C:34:C9:99:86:9D:19:00:69:80:BD:C2:5E:02:4F:DE:D3 X509v3 Authority Key Identifier: keyid:AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:36:d6:9b:d6:b7:62:9a:ee:eb:c9:63:86:bc:fa:d8:b4:9f: 1a:83:ed:db:92:cc:be:76:de:ae:cd:60:76:c1:f7:e0:17:de: c5:69:9a:99:6c:0f:0e:85:b9:50:f1:3c:58:96:34:31:e2:32: da:11:56:4a:3a:44:11:62:13:da:f1:73:f1:61:ef:f8:ca:0b: 41:02:c5:d9:14:e8:66:26:19:40:84:1f:1a:93:a8:81:51:9d: b3:7b:86:87:16:0e:d7:26:7c:9c:e2:3e:1f:93:e1:a9:07:d5: f0:ab:06:86:de:da:6d:58:2a:9c:22:98:8f:14:fa:ae:32:ac: 79:77:dd:0f:54:bf:72:4c:43:7d:0a:ea:95:90:2c:a9:3c:16: 25:69:a4:f0:0a:da:6d:dc:c4:35:fd:0e:e4:e0:2c:32:a2:45: 8c:42:4c:1c:a2:3d:e9:57:33:f8:c7:c3:18:ca:33:32:f0:46: a8:1d:c9:e4:be:84:0c:fd:13:89:b1:3a:bc:56:8f:a6:54:22: 32:8c:73:a3:ea:85:52:59:02:dd:02:a9:e8:1d:2a:13:49:36: c5:4e:06:db:4f:5e:2c:19:b7:03:c6:27:5b:29:0c:64:48:0a: a8:4c:df:c0:ff:90:bf:c4:a4:f0:26:0e:b1:d6:70:a2:6e:da: bf:1d:ad:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhldrld3gOGL0bWgrH0SsJlereswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1N0Ux MjA5RDc3QTAeFw0yNjA1MTIwMzAyMDRaFw0yNjA1MTMwNDU5MDRaMDMxMTAvBgNV BAMTKDlDM0IzODZDMzRDOTk5ODY5RDE5MDA2OTgwQkRDMjVFMDI0RkRFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSymHrb0BRLgPyLuTNQDQllJR 5NOLVDNOu/FMnTg6xg50JD11/wX8v9vm44eeJz9FnvOMKEXVHnpLuYNCUqBIsTk9 HcEWqteB6Kwv32dZfOafMDmYCfNb/avTKk5mJIIScLmYjxX/9tsww9NZl08yha4b 3HskhSl5TILU1ouqAVR3tehX/V/SEmtKQ/lMkqrLSzwbCeJcscZGljCVH0+9gswZ YmVwzUJ3FwrLsEWlNKddurFojuIIM+S0QAauamsr4HHCaO6bx55xbfq8wkyBYB/Y VxVHEfodtVfie2VYZm2K/2nFNPpBXfOW1yFKc2wsbc51Ctr55t/B6j0m6WodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnDs4bDTJmYadGQBpgL3CXgJP3tMwHwYDVR0j BBgwFoAUrxDC6QQK2x9BxavJ//3lfhIJ13owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUwNjMzZmMtZmUyMy00ZDgyLWJhNjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkw NDBBREIxRjQxQzVBQkM5RkZGREU1N0UxMjA5RDc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjEwQzJFOTA0MEFEQjFGNDFDNUFCQzlGRkZERTU3RTEyMDlE NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1 N0UxMjA5RDc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU21pvWt2Ka7uvJY4a8+ti0nxqD7duSzL52 3q7NYHbB9+AX3sVpmplsDw6FuVDxPFiWNDHiMtoRVko6RBFiE9rxc/Fh7/jKC0EC xdkU6GYmGUCEHxqTqIFRnbN7hocWDtcmfJziPh+T4akH1fCrBobe2m1YKpwimI8U +q4yrHl33Q9Uv3JMQ30K6pWQLKk8FiVppPAK2m3cxDX9DuTgLDKiRYxCTByiPelX M/jHwxjKMzLwRqgdyeS+hAz9E4mxOrxWj6ZUIjKMc6PqhVJZAt0CqegdKhNJNsVO BttPXiwZtwPGJ1spDGRICqhM38D/kL/EpPAmDrHWcKJu2r8drYk= -----END CERTIFICATE-----Generated at Tue May 12 22:39:08 2026 by rpki-client