$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft File: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft (raw, json) Hash identifier: PKhLj2wohRCmgKOZQQMzxguaB+JmfG5lDQ7Nxflkuoc= Subject key identifier: 7A:7E:9D:B6:78:29:D4:83:74:4B:A8:20:4D:26:9E:F0:98:8A:5C:B1 Authority key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE Certificate issuer: /CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Certificate serial: 6A4CF4494FD1D9D3F017104EA15E6C546EB5CCB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 07:23:25 +0000 Manifest this update: Fri 24 Jul 2026 07:18:25 +0000 Manifest next update: Sat 25 Jul 2026 11:17:25 +0000 Files and hashes: 1: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: DURCQ0yaLxsLK0NyQoA/+8rorIbQkFZb7X0OVwrX9XQ=) 2: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: 8knmmlk6VbCEzOwxll8mjdcL7YeA/GevLWgeSXesFqE=) 3: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl (hash: ukYJliXd816gLCxZ1G45m1jEVG/4n3lYaiPJTXCQV0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:4c:f4:49:4f:d1:d9:d3:f0:17:10:4e:a1:5e:6c:54:6e:b5:cc:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Validity Not Before: Jul 24 07:18:25 2026 GMT Not After : Jul 25 11:17:25 2026 GMT Subject: CN=7A7E9DB67829D483744BA8204D269EF0988A5CB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:2c:e7:09:5a:85:bb:14:73:31:30:1b:60: 0f:ea:d4:4d:8a:31:94:45:17:e1:fe:4c:f7:65:61: a6:14:9c:c9:a7:0d:90:3b:5b:53:ce:b1:68:73:ee: cc:7b:95:8e:55:82:fc:bf:33:b9:f1:d2:d0:1d:47: 0c:7f:7a:92:50:70:5c:49:27:c5:8f:06:22:d6:c1: c7:6b:58:6d:ba:5f:79:e9:04:41:21:1f:84:f3:81: 59:84:67:c6:c3:6b:eb:69:0b:91:98:31:7c:67:92: a7:83:9a:0c:29:98:7e:cd:d1:b3:1e:4d:80:01:37: d5:59:1c:14:a2:83:8c:f2:42:fa:4e:6c:22:5c:ae: c5:9b:7d:f9:f2:51:b4:90:e1:5a:60:ca:b5:16:6d: 08:9f:4d:16:fb:5b:1e:8d:f1:f0:9c:e7:11:3e:cb: 09:af:fb:a3:79:85:fb:fe:2b:d8:0a:f1:c4:46:b5: ef:20:54:d8:fc:09:70:eb:f3:96:22:b4:03:27:12: 30:7d:f5:8b:dd:76:52:5a:3c:a4:b3:a6:9a:4a:01: da:47:7d:7f:9f:fc:95:53:eb:a1:4a:73:a5:7d:1b: 94:b6:12:b6:14:7e:4f:ac:d3:78:1a:57:c2:c7:9c: 72:10:1c:9e:3a:b1:3e:09:b2:b1:7c:ad:1e:32:97: ee:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7E:9D:B6:78:29:D4:83:74:4B:A8:20:4D:26:9E:F0:98:8A:5C:B1 X509v3 Authority Key Identifier: keyid:AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:8f:cb:5f:cb:94:33:79:3b:c9:0b:c6:44:27:b4:3c:d4:85: 79:04:9f:1d:45:ab:62:01:b0:f6:78:02:33:e6:05:2b:02:5e: 91:fd:fb:54:dc:b1:81:dc:b5:89:e9:9e:31:88:ff:e9:24:55: 8e:dd:80:06:0a:6b:7a:f3:d6:ba:dc:5c:6a:14:4b:25:49:76: 1c:d5:2d:4f:9b:9d:ea:f7:c7:45:98:2e:fe:4b:b5:13:84:5e: 37:60:ad:d0:44:14:79:0f:66:15:f8:97:70:c8:a0:53:6e:11: e7:f3:c9:9b:dc:2a:0f:40:62:ed:d6:49:ce:c0:8e:c0:86:04: 34:f2:4f:97:96:07:7c:17:2a:be:50:ec:1d:8d:f8:37:fc:09: 46:07:29:b4:67:3e:9a:98:98:81:bb:40:3b:ce:6c:f3:b8:14: 6d:77:a5:3e:e3:9b:a3:96:2d:8b:d1:67:ce:1d:ad:eb:99:ee: f8:73:7d:b0:46:54:fc:63:59:11:f5:93:68:7f:c6:73:c3:45: ab:2e:5f:2b:f7:53:95:2d:ef:13:a8:f0:b8:fd:7c:fe:b7:ad: 5f:7f:d0:12:ba:b1:6f:4d:99:68:f4:f7:dd:28:9a:da:7b:e9: 4b:d9:37:f6:62:3a:78:90:38:0e:76:6c:b1:75:e2:fd:24:0e: 0a:a7:94:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUakz0SU/R2dPwFxBOoV5sVG61zLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2 QzI3RTNDRTAeFw0yNjA3MjQwNzE4MjVaFw0yNjA3MjUxMTE3MjVaMDMxMTAvBgNV BAMTKDdBN0U5REI2NzgyOUQ0ODM3NDRCQTgyMDREMjY5RUYwOTg4QTVDQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDESyznCVqFuxRzMTAbYA/q1E2K MZRFF+H+TPdlYaYUnMmnDZA7W1POsWhz7sx7lY5Vgvy/M7nx0tAdRwx/epJQcFxJ J8WPBiLWwcdrWG26X3npBEEhH4TzgVmEZ8bDa+tpC5GYMXxnkqeDmgwpmH7N0bMe TYABN9VZHBSig4zyQvpObCJcrsWbffnyUbSQ4VpgyrUWbQifTRb7Wx6N8fCc5xE+ ywmv+6N5hfv+K9gK8cRGte8gVNj8CXDr85YitAMnEjB99YvddlJaPKSzpppKAdpH fX+f/JVT66FKc6V9G5S2ErYUfk+s03gaV8LHnHIQHJ46sT4JsrF8rR4yl+6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUen6dtngp1IN0S6ggTSae8JiKXLEwHwYDVR0j BBgwFoAUr0y0b6g1PLWjsj71fyMY1Gwn484wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWM4OTdjNGEtZTBmZi00NjUyLWE1OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZB ODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2QzI3RTNDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjRDQjQ2RkE4MzUzQ0I1QTNCMjNFRjU3RjIzMThENDZDMjdF M0NFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4 RDQ2QzI3RTNDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKPy1/LlDN5O8kLxkQntDzUhXkEnx1Fq2IB sPZ4AjPmBSsCXpH9+1TcsYHctYnpnjGI/+kkVY7dgAYKa3rz1rrcXGoUSyVJdhzV LU+bner3x0WYLv5LtROEXjdgrdBEFHkPZhX4l3DIoFNuEefzyZvcKg9AYu3WSc7A jsCGBDTyT5eWB3wXKr5Q7B2N+Df8CUYHKbRnPpqYmIG7QDvObPO4FG13pT7jm6OW LYvRZ84dreuZ7vhzfbBGVPxjWRH1k2h/xnPDRasuXyv3U5Ut7xOo8Lj9fP63rV9/ 0BK6sW9NmWj0990omtp76UvZN/ZiOniQOA52bLF14v0kDgqnlEA= -----END CERTIFICATE-----Generated at Fri Jul 24 15:38:26 2026 by rpki-client