$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft File: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft (raw, json) Hash identifier: 8HqR+Di2gtXI7e/pHe1YjVaQ4/o+aSTLqEQfahnSKPE= Subject key identifier: E7:E4:0C:A6:C4:B9:C6:B7:3C:5C:62:F6:2A:3C:FD:1A:FE:D0:81:CF Authority key identifier: AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A Certificate issuer: /CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Certificate serial: 68578AFFD918DC32E361C4C85654FF56B3878E2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 19:09:40 +0000 Manifest this update: Wed 23 Sep 2026 19:04:40 +0000 Manifest next update: Thu 24 Sep 2026 20:10:40 +0000 Files and hashes: 1: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: yrLvhSGItcv2/8/qx9t+UKr0DTpSKLWTcCZshoqb+Zo=) 2: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl (hash: UKY516yZOkY3DmFF+f8hhq6oNNrIeG+UOaLbK25WV+8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:57:8a:ff:d9:18:dc:32:e3:61:c4:c8:56:54:ff:56:b3:87:8e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Validity Not Before: Sep 23 19:04:40 2026 GMT Not After : Sep 24 20:10:40 2026 GMT Subject: CN=E7E40CA6C4B9C6B73C5C62F62A3CFD1AFED081CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:01:bd:b0:08:6d:d2:01:5f:52:8f:7e:7d: 2e:d8:3e:d1:8c:bc:ab:c8:03:69:55:18:51:ca:42: 92:b7:be:2b:cb:e8:3c:cb:bc:0c:fc:e4:c1:5a:d6: f6:4e:d3:b3:59:4e:00:f0:7d:70:50:a4:5f:ab:60: 3b:d4:09:82:24:a0:c2:f9:16:4b:c7:f3:e0:92:34: d7:bc:df:a5:0f:51:49:95:02:25:93:3d:c6:8f:3b: fe:42:9d:c3:18:b6:42:f1:e2:3b:51:67:af:4a:66: 27:86:b4:69:4a:c6:c5:b9:4d:fc:14:ad:6c:19:b8: 51:71:2f:5a:8b:12:d1:a6:71:35:20:d1:51:2e:c2: 84:f3:2b:1d:c1:3c:1c:9a:02:af:fd:24:d2:e6:67: 57:3d:fc:14:05:7a:15:b8:89:aa:6c:bc:31:7d:2a: e2:11:25:44:a8:38:62:ad:97:a4:b1:88:9d:96:7e: c2:a4:32:f4:a9:2e:48:64:b3:69:f0:8a:cd:dc:0a: d3:00:87:22:04:1f:0d:47:ac:2c:69:02:66:99:fd: 1a:1c:06:d7:b3:3d:ca:db:1b:1c:2e:ed:63:3e:64: 8c:a5:94:81:f2:fb:01:71:b6:23:03:45:6a:e2:90: 21:f4:b8:0f:f3:c5:b2:84:79:8f:08:3e:0c:14:88: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E4:0C:A6:C4:B9:C6:B7:3C:5C:62:F6:2A:3C:FD:1A:FE:D0:81:CF X509v3 Authority Key Identifier: keyid:AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:91:62:df:98:14:29:3c:74:ff:f0:ac:80:ba:b4:6d:4d:2b: e2:2b:3d:eb:de:6e:92:6b:94:94:e2:4a:ea:1b:66:a8:3f:08: 6b:54:ac:86:28:be:55:7e:0e:45:9a:c1:4c:c2:9d:b3:b4:a0: 3e:08:67:cb:ff:4a:c3:57:74:1a:92:87:b6:3a:08:0c:4c:95: eb:c5:5b:44:d6:a6:c4:65:a9:ee:4a:91:a2:3f:54:8a:b9:a7: 82:68:59:af:e1:98:0b:72:9b:12:68:c8:3c:b7:44:46:16:7e: cf:1a:34:87:9c:e9:e7:0d:22:6d:df:13:d0:83:7e:95:73:46: 9f:0d:c8:82:37:3c:f8:5a:62:86:38:f7:54:d5:c2:77:c6:7d: 9d:ff:2c:20:33:a8:2c:3d:0a:60:cb:d4:f6:97:e9:44:38:13: b9:4a:52:17:14:d0:7d:cc:08:ec:53:d3:1a:b1:1b:31:3d:52: f9:bf:8a:be:b0:3b:f5:89:cb:e1:25:3b:00:d6:8c:ca:ef:48: 3a:6f:8d:52:ed:2c:a1:9f:f7:fb:1e:79:2e:05:aa:68:c7:b3: b1:83:00:cb:04:9b:f8:03:2e:db:36:18:31:3b:a9:4b:be:4f: 2b:20:99:71:98:bb:05:0a:7f:97:f5:6e:95:2e:5c:60:58:58: 4b:ba:4a:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFeK/9kY3DLjYcTIVlT/VrOHji0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAx QTQ1RjIwQTAeFw0yNjA5MjMxOTA0NDBaFw0yNjA5MjQyMDEwNDBaMDMxMTAvBgNV BAMTKEU3RTQwQ0E2QzRCOUM2QjczQzVDNjJGNjJBM0NGRDFBRkVEMDgxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hgG9sAht0gFfUo9+fS7YPtGM vKvIA2lVGFHKQpK3vivL6DzLvAz85MFa1vZO07NZTgDwfXBQpF+rYDvUCYIkoML5 FkvH8+CSNNe836UPUUmVAiWTPcaPO/5CncMYtkLx4jtRZ69KZieGtGlKxsW5TfwU rWwZuFFxL1qLEtGmcTUg0VEuwoTzKx3BPByaAq/9JNLmZ1c9/BQFehW4iapsvDF9 KuIRJUSoOGKtl6SxiJ2WfsKkMvSpLkhks2nwis3cCtMAhyIEHw1HrCxpAmaZ/Roc BtezPcrbGxwu7WM+ZIyllIHy+wFxtiMDRWrikCH0uA/zxbKEeY8IPgwUiPw9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5+QMpsS5xrc8XGL2Kjz9Gv7Qgc8wHwYDVR0j BBgwFoAUrzyCCFjD/lpubFfoQ+HP0BpF8gowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM2YjVhYmMtMmM1NC00YzVmLWIzZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1 OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAxQTQ1RjIwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjNDODIwODU4QzNGRTVBNkU2QzU3RTg0M0UxQ0ZEMDFBNDVG MjBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNG RDAxQTQ1RjIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSRYt+YFCk8dP/wrIC6tG1NK+IrPevebpJr lJTiSuobZqg/CGtUrIYovlV+DkWawUzCnbO0oD4IZ8v/SsNXdBqSh7Y6CAxMlevF W0TWpsRlqe5KkaI/VIq5p4JoWa/hmAtymxJoyDy3REYWfs8aNIec6ecNIm3fE9CD fpVzRp8NyII3PPhaYoY491TVwnfGfZ3/LCAzqCw9CmDL1PaX6UQ4E7lKUhcU0H3M COxT0xqxGzE9Uvm/ir6wO/WJy+ElOwDWjMrvSDpvjVLtLKGf9/seeS4FqmjHs7GD AMsEm/gDLts2GDE7qUu+TysgmXGYuwUKf5f1bpUuXGBYWEu6Smw= -----END CERTIFICATE-----Generated at Thu Sep 24 10:41:12 2026 by rpki-client