$ rpki-client -vvf rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft File: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft (raw, json) Hash identifier: BqBBKX564u71NLEmX+1O0/ZzU38TNrkrqlU9r/K2bVo= Subject key identifier: BD:91:3F:80:FA:F6:A8:8F:93:4D:96:D2:5A:FD:FF:5A:A2:F7:9F:73 Authority key identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A Certificate issuer: /CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Certificate serial: 6E1ECEF5CF9812DE2008D741782935066BE2782E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 01:00:19 +0000 Manifest this update: Fri 24 Jul 2026 00:55:19 +0000 Manifest next update: Sat 25 Jul 2026 03:36:19 +0000 Files and hashes: 1: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: B4j0qT4PT3YdDkrmlfhYyZnafUYLOfUdcba19kZ7mRY=) 2: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl (hash: E9CAx3sraJX+X90fJjRKFs/MFl3cbbIXxXeKL1OjdJI=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d37ZeGgHjVZzYq6CUddv0o+w23L0QGAKsBmc8dpggDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1e:ce:f5:cf:98:12:de:20:08:d7:41:78:29:35:06:6b:e2:78:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Validity Not Before: Jul 24 00:55:19 2026 GMT Not After : Jul 25 03:36:19 2026 GMT Subject: CN=BD913F80FAF6A88F934D96D25AFDFF5AA2F79F73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:3b:77:4a:1c:7f:5c:83:f7:e5:bc:3a:4f: 4e:8f:cc:b8:50:d1:2a:35:3b:7a:58:81:b8:2a:fa: 05:1b:7c:fb:3d:f1:2d:69:1a:14:9b:f0:af:85:83: 97:dc:6e:59:03:28:2a:2d:37:95:1b:1a:24:36:72: 3a:6d:85:5b:61:22:a5:be:0c:98:cb:be:0f:96:08: 72:e8:ed:96:97:a2:a2:95:8e:76:c1:8e:7b:34:6e: 19:ca:92:af:c7:e9:51:82:cf:3f:69:34:f2:e7:0b: b5:7b:07:06:bb:91:19:8c:4f:cd:fc:71:21:56:82: b5:00:ed:86:ac:7a:23:bf:40:a1:48:59:32:cc:0e: 7b:c2:17:68:1c:65:44:89:b1:0a:19:2d:aa:0c:21: 57:99:29:ca:c9:84:06:9f:ee:88:18:d4:f7:98:25: de:82:b6:40:37:c2:4e:d5:c3:f3:3b:11:c8:06:45: dd:53:cf:42:ea:14:54:63:84:b5:1c:dc:00:1e:f8: 7f:d9:fc:bd:e4:6a:ec:b3:b1:00:bc:fb:3d:83:db: 9b:3b:60:22:a1:24:8d:25:14:6b:a1:6f:f8:b8:c7: 95:51:9a:2b:c1:e4:9e:01:bd:89:bc:4d:26:e8:1b: fc:1f:46:62:1e:49:cf:cf:ae:33:35:b0:fa:92:7b: ef:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:91:3F:80:FA:F6:A8:8F:93:4D:96:D2:5A:FD:FF:5A:A2:F7:9F:73 X509v3 Authority Key Identifier: keyid:AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4b:b0:4a:36:90:a3:70:4f:33:ab:61:53:59:2b:03:60:c3: bb:59:7b:d7:e9:d3:7e:f6:e9:08:a8:a8:de:a4:54:59:c3:94: 6d:58:9a:cf:2e:53:99:da:95:08:11:51:a2:10:fe:dd:96:6d: 72:ed:f4:21:ed:79:7d:27:a5:4e:08:c7:1e:23:d6:98:95:3e: 6d:17:a1:ff:73:5d:e5:0c:25:17:89:d2:3f:54:d9:58:be:d6: a2:bd:26:9d:2f:37:76:c7:3d:06:99:a8:75:aa:16:e7:c9:63: 17:df:a3:b4:f5:68:b9:74:71:53:63:bf:b9:24:93:90:99:0a: 32:1d:6c:ca:d3:8b:94:42:f6:49:a4:e4:51:fe:01:7b:e6:23: 90:a2:5c:3d:e0:f5:3b:4e:a4:99:03:df:8e:1a:55:ad:fd:52: 2e:0f:76:47:ef:58:6a:8d:8c:a9:8f:02:1d:26:05:21:9f:67: 83:be:27:5c:e8:88:13:ec:40:6e:7f:b4:4a:05:39:7c:4c:28: c9:df:ef:1f:5c:90:9a:59:3b:b9:5f:2e:b5:e6:c5:d3:c3:75: 16:53:ab:e2:fd:11:8f:77:95:b4:19:75:7f:b8:b6:75:e6:07: c8:b2:31:2b:09:42:02:ff:33:0e:87:6d:59:3e:77:27:70:51: 10:2f:13:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbh7O9c+YEt4gCNdBeCk1BmvieC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1N0Ux MjA5RDc3QTAeFw0yNjA3MjQwMDU1MTlaFw0yNjA3MjUwMzM2MTlaMDMxMTAvBgNV BAMTKEJEOTEzRjgwRkFGNkE4OEY5MzREOTZEMjVBRkRGRjVBQTJGNzlGNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmTt3Shx/XIP35bw6T06PzLhQ 0So1O3pYgbgq+gUbfPs98S1pGhSb8K+Fg5fcblkDKCotN5UbGiQ2cjpthVthIqW+ DJjLvg+WCHLo7ZaXoqKVjnbBjns0bhnKkq/H6VGCzz9pNPLnC7V7Bwa7kRmMT838 cSFWgrUA7YaseiO/QKFIWTLMDnvCF2gcZUSJsQoZLaoMIVeZKcrJhAaf7ogY1PeY Jd6CtkA3wk7Vw/M7EcgGRd1Tz0LqFFRjhLUc3AAe+H/Z/L3kauyzsQC8+z2D25s7 YCKhJI0lFGuhb/i4x5VRmivB5J4BvYm8TSboG/wfRmIeSc/PrjM1sPqSe++HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvZE/gPr2qI+TTZbSWv3/WqL3n3MwHwYDVR0j BBgwFoAUrxDC6QQK2x9BxavJ//3lfhIJ13owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUwNjMzZmMtZmUyMy00ZDgyLWJhNjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkw NDBBREIxRjQxQzVBQkM5RkZGREU1N0UxMjA5RDc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjEwQzJFOTA0MEFEQjFGNDFDNUFCQzlGRkZERTU3RTEyMDlE NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1 N0UxMjA5RDc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxLsEo2kKNwTzOrYVNZKwNgw7tZe9fp0372 6QioqN6kVFnDlG1Yms8uU5nalQgRUaIQ/t2WbXLt9CHteX0npU4Ixx4j1piVPm0X of9zXeUMJReJ0j9U2Vi+1qK9Jp0vN3bHPQaZqHWqFufJYxffo7T1aLl0cVNjv7kk k5CZCjIdbMrTi5RC9kmk5FH+AXvmI5CiXD3g9TtOpJkD344aVa39Ui4PdkfvWGqN jKmPAh0mBSGfZ4O+J1zoiBPsQG5/tEoFOXxMKMnf7x9ckJpZO7lfLrXmxdPDdRZT q+L9EY93lbQZdX+4tnXmB8iyMSsJQgL/Mw6HbVk+dydwURAvExc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:03:31 2026 by rpki-client