$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft File: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft (raw, json) Hash identifier: k6RehKqRdiXaVJDd+6gNQklc2IzSQpIkChHQz0EKzvs= Subject key identifier: F2:16:B9:CB:59:4C:1B:DB:F2:72:D6:19:51:5B:89:85:78:9D:C5:4D Authority key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE Certificate issuer: /CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Certificate serial: 7B376D23943D8F2D7883ED8E5B2EF61C5E1C8CBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 11:24:01 +0000 Manifest this update: Thu 23 Jul 2026 11:19:01 +0000 Manifest next update: Fri 24 Jul 2026 15:20:01 +0000 Files and hashes: 1: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl (hash: JgGRxznfMZ9RiClrFbqEMnIvizi23NkH4Nc09X1VwD8=) 2: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: DURCQ0yaLxsLK0NyQoA/+8rorIbQkFZb7X0OVwrX9XQ=) 3: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: 8knmmlk6VbCEzOwxll8mjdcL7YeA/GevLWgeSXesFqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:37:6d:23:94:3d:8f:2d:78:83:ed:8e:5b:2e:f6:1c:5e:1c:8c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Validity Not Before: Jul 23 11:19:01 2026 GMT Not After : Jul 24 15:20:01 2026 GMT Subject: CN=F216B9CB594C1BDBF272D619515B8985789DC54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:46:a3:ad:ef:c8:21:09:39:9e:be:4f:ee: 54:ee:a7:e3:69:f9:c2:6c:3e:9b:87:d2:d6:87:52: 27:89:be:34:8f:bd:5a:e0:bc:e8:66:c5:36:3a:fd: a9:9f:61:d0:84:f9:1d:74:76:5d:84:33:eb:a5:a1: 0d:ed:a0:5e:de:e5:49:ee:7d:59:90:f4:58:9d:96: d6:6c:88:75:5e:95:54:8d:29:b1:54:34:70:a8:29: 5f:6d:01:f2:79:98:e4:13:2c:fa:4c:f6:30:b2:f6: 60:c6:6f:00:1d:ba:70:15:15:83:8e:f2:9a:61:3c: 64:21:f7:b8:e1:4f:94:bc:52:b9:27:f5:f2:18:a4: c4:5f:52:2d:45:23:4c:2a:a3:52:1e:67:35:33:33: 57:4f:ca:52:b7:c1:7b:e1:40:c0:3b:5f:8a:b3:33: dd:ca:74:ae:ec:8e:45:27:94:e2:bf:48:e9:24:5c: 55:f9:bd:bd:76:a0:66:bd:76:2b:7f:87:1d:8c:1d: 6b:bc:93:62:e1:ef:09:1f:22:e5:89:fc:c5:9e:16: 9b:97:21:bd:0e:76:77:ff:57:76:ea:d2:93:0c:dd: 06:38:1a:73:1c:a5:af:5d:64:f9:aa:08:50:4a:bf: 79:ac:3d:79:de:4b:bc:15:21:be:25:9d:ba:6d:0a: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:16:B9:CB:59:4C:1B:DB:F2:72:D6:19:51:5B:89:85:78:9D:C5:4D X509v3 Authority Key Identifier: keyid:AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:df:23:cb:01:59:73:d0:83:be:45:9a:27:59:d6:54:c9:6f: 82:de:7f:30:76:87:6c:e5:ee:b8:44:5b:7a:b6:53:74:41:f1: ab:72:14:f9:ac:ef:de:dd:1b:34:26:d5:65:cf:8b:bd:5b:d0: cd:91:d4:c7:a1:c9:49:b7:fb:8e:3d:20:5e:2f:c7:ed:56:00: 9d:1a:ec:64:58:96:ba:fd:5c:6e:ba:5d:1f:6a:bd:62:3f:dc: f7:73:02:8d:cb:6c:88:9d:f0:24:c3:5c:f8:9c:59:56:6f:26: 06:5c:7f:31:f5:1f:9b:0c:40:27:ec:d8:05:a6:58:61:a5:9e: 82:22:e0:c1:f0:8a:8d:bf:e9:4f:dd:d9:56:3e:9a:42:76:63: 76:b3:25:0f:45:e3:78:59:49:76:96:77:44:22:9c:68:0e:51: 2b:f1:b4:03:df:ba:9f:38:38:d2:39:f2:9f:42:fb:1d:fe:b1: 86:4e:01:54:f2:9b:a1:69:cf:a0:a2:ca:12:c4:d1:c8:ea:db: 85:c5:54:46:e2:a1:95:13:27:1c:14:3b:4e:10:58:14:14:fd: 31:ca:ae:f2:96:2c:b0:44:73:1f:9f:ef:07:4f:81:f9:10:2e: 10:32:1d:0b:50:3d:f0:0a:12:42:ae:90:e6:be:66:83:71:e5: d9:e8:de:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezdtI5Q9jy14g+2OWy72HF4cjL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2 QzI3RTNDRTAeFw0yNjA3MjMxMTE5MDFaFw0yNjA3MjQxNTIwMDFaMDMxMTAvBgNV BAMTKEYyMTZCOUNCNTk0QzFCREJGMjcyRDYxOTUxNUI4OTg1Nzg5REM1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpUajre/IIQk5nr5P7lTup+Np +cJsPpuH0taHUieJvjSPvVrgvOhmxTY6/amfYdCE+R10dl2EM+uloQ3toF7e5Unu fVmQ9FidltZsiHVelVSNKbFUNHCoKV9tAfJ5mOQTLPpM9jCy9mDGbwAdunAVFYOO 8pphPGQh97jhT5S8Urkn9fIYpMRfUi1FI0wqo1IeZzUzM1dPylK3wXvhQMA7X4qz M93KdK7sjkUnlOK/SOkkXFX5vb12oGa9dit/hx2MHWu8k2Lh7wkfIuWJ/MWeFpuX Ib0Odnf/V3bq0pMM3QY4GnMcpa9dZPmqCFBKv3msPXneS7wVIb4lnbptCnPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8ha5y1lMG9vyctYZUVuJhXidxU0wHwYDVR0j BBgwFoAUr0y0b6g1PLWjsj71fyMY1Gwn484wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWM4OTdjNGEtZTBmZi00NjUyLWE1OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZB ODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2QzI3RTNDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjRDQjQ2RkE4MzUzQ0I1QTNCMjNFRjU3RjIzMThENDZDMjdF M0NFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4 RDQ2QzI3RTNDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXfI8sBWXPQg75FmidZ1lTJb4LefzB2h2zl 7rhEW3q2U3RB8atyFPms797dGzQm1WXPi71b0M2R1MehyUm3+449IF4vx+1WAJ0a 7GRYlrr9XG66XR9qvWI/3PdzAo3LbIid8CTDXPicWVZvJgZcfzH1H5sMQCfs2AWm WGGlnoIi4MHwio2/6U/d2VY+mkJ2Y3azJQ9F43hZSXaWd0QinGgOUSvxtAPfup84 ONI58p9C+x3+sYZOAVTym6Fpz6CiyhLE0cjq24XFVEbioZUTJxwUO04QWBQU/THK rvKWLLBEcx+f7wdPgfkQLhAyHQtQPfAKEkKukOa+ZoNx5dno3sE= -----END CERTIFICATE-----Generated at Fri Jul 24 08:47:19 2026 by rpki-client