$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft File: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft (raw, json) Hash identifier: 4qClt/zLbLCJTRlEiOR4hymVDNUe6+/xtUfw5ko3NIg= Subject key identifier: 28:2C:F3:43:5C:1C:AA:68:3C:89:13:7D:7A:C4:1D:92:AF:6A:51:13 Authority key identifier: AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A Certificate issuer: /CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Certificate serial: 76049D3D7424D44F3979F20A57290AF8D5E1F3A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:46:52 +0000 Manifest this update: Thu 23 Jul 2026 13:41:52 +0000 Manifest next update: Fri 24 Jul 2026 14:51:52 +0000 Files and hashes: 1: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl (hash: HICciIC3RH7w8Pp3INQGcBfC/hO05UXus9gsiR5lFOw=) 2: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: yrLvhSGItcv2/8/qx9t+UKr0DTpSKLWTcCZshoqb+Zo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:04:9d:3d:74:24:d4:4f:39:79:f2:0a:57:29:0a:f8:d5:e1:f3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Validity Not Before: Jul 23 13:41:52 2026 GMT Not After : Jul 24 14:51:52 2026 GMT Subject: CN=282CF3435C1CAA683C89137D7AC41D92AF6A5113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:c5:fe:41:ce:bf:64:26:f5:dd:05:04:b6: 74:7f:8b:fe:8b:f9:db:6f:ef:7f:0d:d0:5a:d2:ef: fe:36:24:71:ce:fb:95:66:22:ac:d6:41:17:b1:05: 70:d8:56:e1:9a:7f:09:31:48:3d:e4:39:4f:cb:fb: de:cf:6f:50:cb:63:a6:6e:fe:6e:24:6d:30:a6:b9: 43:e4:89:6a:77:9f:60:c7:52:dd:2f:61:74:e8:4f: 0e:e0:93:cb:c9:00:27:07:46:c8:4c:41:b9:69:d3: e1:2a:49:89:e0:3d:ca:d9:c1:ce:94:20:1a:5b:4e: d7:0b:10:31:d6:d6:91:01:89:93:d2:3f:64:8f:11: 7e:34:56:a4:61:77:46:1f:d4:c0:80:f1:3d:77:b7: 94:21:49:80:e8:90:e1:1b:bb:7a:b1:1b:5b:ac:f3: 7d:85:a4:67:fe:5c:94:6b:33:a1:2a:6c:6b:04:a8: f2:f5:59:e1:1f:17:3f:82:3d:bc:f9:8d:9f:ac:85: e9:29:7a:f3:f1:5b:11:a2:92:c9:d4:45:93:ba:69: b7:63:6a:da:96:d3:1c:9a:f3:1c:54:9f:70:53:b1: e2:f2:8a:c8:72:a3:2b:5e:75:48:93:7e:6e:d3:56: 07:0a:97:f4:a0:da:f1:c3:c0:d4:b3:86:4a:55:ee: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2C:F3:43:5C:1C:AA:68:3C:89:13:7D:7A:C4:1D:92:AF:6A:51:13 X509v3 Authority Key Identifier: keyid:AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8c:59:82:d5:09:c8:c3:e8:64:69:ac:07:3d:00:ba:3c:b9: 32:5e:2f:d5:9c:31:ff:07:ea:5c:3b:19:c7:62:23:73:9c:cf: 2d:b4:6c:af:2c:19:ae:da:ea:45:b4:57:fe:29:a1:57:04:4d: 72:5a:68:1e:a9:24:e8:bf:63:01:4a:67:8e:e1:ee:2d:d7:b0: 3e:81:4f:39:25:2e:b1:1f:18:62:bb:54:98:18:8a:39:39:90: d5:02:31:63:e2:df:b4:56:92:7f:3e:28:5c:fe:1d:2b:1e:68: b5:56:6d:6b:b6:e1:3f:46:cf:10:5f:75:1f:54:b4:77:0d:c0: 7c:c4:af:c2:bf:98:98:f9:89:4b:ec:5f:00:a8:be:cd:13:8f: 21:26:2b:59:fe:f5:a8:b6:7c:c3:f4:42:77:0b:87:de:94:e3: 9e:bd:12:17:42:fb:c5:be:a4:90:37:8b:26:0c:ac:08:0a:fc: 07:21:a1:50:ff:3d:e9:14:29:ea:fa:df:4a:51:03:6f:f8:b5: cd:d4:e9:a6:b1:61:50:ed:38:0f:01:1d:d0:37:ee:b5:fc:8b: 6a:6a:79:f9:47:2e:bf:60:ca:a0:7e:9a:7a:2c:cc:6a:aa:81: 28:d3:57:06:8f:fa:a8:6b:44:d4:f1:d6:dd:6e:ed:4f:89:e8: b7:59:45:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdgSdPXQk1E85efIKVykK+NXh86UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAx QTQ1RjIwQTAeFw0yNjA3MjMxMzQxNTJaFw0yNjA3MjQxNDUxNTJaMDMxMTAvBgNV BAMTKDI4MkNGMzQzNUMxQ0FBNjgzQzg5MTM3RDdBQzQxRDkyQUY2QTUxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fsX+Qc6/ZCb13QUEtnR/i/6L +dtv738N0FrS7/42JHHO+5VmIqzWQRexBXDYVuGafwkxSD3kOU/L+97Pb1DLY6Zu /m4kbTCmuUPkiWp3n2DHUt0vYXToTw7gk8vJACcHRshMQblp0+EqSYngPcrZwc6U IBpbTtcLEDHW1pEBiZPSP2SPEX40VqRhd0Yf1MCA8T13t5QhSYDokOEbu3qxG1us 832FpGf+XJRrM6EqbGsEqPL1WeEfFz+CPbz5jZ+shekpevPxWxGiksnURZO6abdj atqW0xya8xxUn3BTseLyishyoytedUiTfm7TVgcKl/Sg2vHDwNSzhkpV7tfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKCzzQ1wcqmg8iRN9esQdkq9qURMwHwYDVR0j BBgwFoAUrzyCCFjD/lpubFfoQ+HP0BpF8gowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM2YjVhYmMtMmM1NC00YzVmLWIzZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1 OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAxQTQ1RjIwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjNDODIwODU4QzNGRTVBNkU2QzU3RTg0M0UxQ0ZEMDFBNDVG MjBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNG RDAxQTQ1RjIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6MWYLVCcjD6GRprAc9ALo8uTJeL9WcMf8H 6lw7GcdiI3Oczy20bK8sGa7a6kW0V/4poVcETXJaaB6pJOi/YwFKZ47h7i3XsD6B TzklLrEfGGK7VJgYijk5kNUCMWPi37RWkn8+KFz+HSseaLVWbWu24T9GzxBfdR9U tHcNwHzEr8K/mJj5iUvsXwCovs0TjyEmK1n+9ai2fMP0QncLh96U4569EhdC+8W+ pJA3iyYMrAgK/AchoVD/PekUKer630pRA2/4tc3U6aaxYVDtOA8BHdA37rX8i2pq eflHLr9gyqB+mnoszGqqgSjTVwaP+qhrRNTx1t1u7U+J6LdZRbw= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:17 2026 by rpki-client