$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft File: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft (raw, json) Hash identifier: V/DaKy4ZX9CAkZ1xhpHgGEqy24YjcBE078c4t2a9kAI= Subject key identifier: 63:94:2D:7E:3C:14:79:AC:27:AB:10:95:B8:09:8D:72:A6:BD:07:A3 Authority key identifier: AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E Certificate issuer: /CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Certificate serial: 658EA526A8113586CAB140C077AAC5ADB1ADB456 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 10:13:46 +0000 Manifest this update: Wed 23 Sep 2026 10:08:46 +0000 Manifest next update: Thu 24 Sep 2026 12:21:46 +0000 Files and hashes: 1: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: DT0k1jYnw4OjyEhmmqbUNUqGWP5UkTu1MpqB2VuvB0M=) 2: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl (hash: UX72ypwlUS2rvDnVFTpLfVN7p/Kh3K8bYlA7UGTiPvI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8e:a5:26:a8:11:35:86:ca:b1:40:c0:77:aa:c5:ad:b1:ad:b4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Validity Not Before: Sep 23 10:08:46 2026 GMT Not After : Sep 24 12:21:46 2026 GMT Subject: CN=63942D7E3C1479AC27AB1095B8098D72A6BD07A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4b:04:cf:85:c4:50:5b:ae:e1:d1:28:0e:4f: 47:92:70:6a:bc:31:e0:a6:44:2c:f9:7a:6a:2e:5f: c1:9b:db:b9:e1:d4:a4:b4:c8:fc:b5:7c:eb:18:21: c6:84:f2:65:c3:b7:aa:71:2a:93:26:2a:09:9d:00: e4:15:4e:d8:4d:8a:49:3b:3d:17:e4:fa:07:66:4c: d1:94:ff:f9:1a:9b:7c:55:4c:f9:b8:45:db:70:b3: 28:e6:fc:49:06:fb:7b:1f:ee:8a:b5:e6:04:df:52: 70:46:2e:3e:a3:99:cc:ae:78:62:06:f3:28:77:4a: be:ee:a7:0a:af:13:16:c0:1b:f8:34:a4:a8:da:fc: 3e:bd:e4:e2:7a:3b:68:9b:60:76:13:e7:14:34:3d: 0d:71:36:2a:ae:9e:7b:c8:47:4c:17:3c:14:5d:29: 7d:44:ee:d1:a9:34:ec:6f:dd:d8:e9:55:1e:f9:59: a5:56:2c:5a:c1:49:7a:26:fe:06:b6:dc:53:14:b3: 02:5c:0f:88:cb:e2:e4:b1:73:8b:66:d5:39:49:62: 2c:c0:cd:20:12:08:42:cc:9b:6b:ef:4a:d0:83:54: 12:66:84:ba:b8:d0:d5:15:9b:ee:f6:5a:56:a8:f1: 24:83:a4:f6:0f:1d:4e:ba:69:66:e2:c4:e2:18:80: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:94:2D:7E:3C:14:79:AC:27:AB:10:95:B8:09:8D:72:A6:BD:07:A3 X509v3 Authority Key Identifier: keyid:AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:11:02:d4:3c:cb:44:1e:43:46:1c:39:24:7e:45:9a:36:9e: d3:16:ac:46:6f:b4:b0:73:62:c9:86:d2:9a:b1:aa:fd:f5:51: 43:ba:66:1b:8c:db:b6:e8:d4:f9:5b:59:17:e2:dc:7d:55:0c: 96:23:64:b9:ff:51:bf:f4:ef:02:1b:4d:38:ff:11:a2:7e:d9: af:ba:87:84:d3:52:5f:8f:7d:2d:17:c7:56:95:15:61:4d:57: 22:f1:37:7e:c9:16:64:17:83:6d:a6:f1:45:80:85:4c:b9:76: 86:25:e7:e4:24:41:91:61:70:e2:12:95:67:95:c4:66:3f:b9: de:de:35:6a:d3:97:f7:f9:1d:1e:b6:f3:75:d7:d7:de:09:25: 69:c6:db:41:df:a9:a0:d1:7b:84:6f:25:a4:46:f9:36:60:3e: 19:7e:a1:32:61:1c:a1:96:5c:d9:2b:1f:96:08:5e:bf:19:ca: 70:f5:0f:21:b3:ed:d6:40:f1:44:fc:c4:98:9c:9c:0f:bf:ca: c0:37:6e:73:de:e0:2b:c5:2d:d5:9e:f8:c3:50:12:c0:72:7f: cf:27:71:92:2a:df:00:47:05:d2:65:ba:63:47:21:cc:b5:4b: 4b:4b:cb:38:bd:96:da:91:7c:17:c1:1f:64:32:ee:c6:22:dd: 72:8d:4c:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZY6lJqgRNYbKsUDAd6rFrbGttFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUz QUEzNUU2RTAeFw0yNjA5MjMxMDA4NDZaFw0yNjA5MjQxMjIxNDZaMDMxMTAvBgNV BAMTKDYzOTQyRDdFM0MxNDc5QUMyN0FCMTA5NUI4MDk4RDcyQTZCRDA3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0SwTPhcRQW67h0SgOT0eScGq8 MeCmRCz5emouX8Gb27nh1KS0yPy1fOsYIcaE8mXDt6pxKpMmKgmdAOQVTthNikk7 PRfk+gdmTNGU//kam3xVTPm4Rdtwsyjm/EkG+3sf7oq15gTfUnBGLj6jmcyueGIG 8yh3Sr7upwqvExbAG/g0pKja/D695OJ6O2ibYHYT5xQ0PQ1xNiqunnvIR0wXPBRd KX1E7tGpNOxv3djpVR75WaVWLFrBSXom/ga23FMUswJcD4jL4uSxc4tm1TlJYizA zSASCELMm2vvStCDVBJmhLq40NUVm+72Wlao8SSDpPYPHU66aWbixOIYgMKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY5QtfjwUeawnqxCVuAmNcqa9B6MwHwYDVR0j BBgwFoAUrxrfWDrFADAnKBpOyr993jqjXm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiZjg2NDEtYmY3MC00ZTNmLTk4NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgz QUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUzQUEzNUU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjFBREY1ODNBQzUwMDMwMjcyODFBNEVDQUJGN0RERTNBQTM1 RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdE REUzQUEzNUU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgRAtQ8y0QeQ0YcOSR+RZo2ntMWrEZvtLBz YsmG0pqxqv31UUO6ZhuM27bo1PlbWRfi3H1VDJYjZLn/Ub/07wIbTTj/EaJ+2a+6 h4TTUl+PfS0Xx1aVFWFNVyLxN37JFmQXg22m8UWAhUy5doYl5+QkQZFhcOISlWeV xGY/ud7eNWrTl/f5HR6283XX194JJWnG20HfqaDRe4RvJaRG+TZgPhl+oTJhHKGW XNkrH5YIXr8ZynD1DyGz7dZA8UT8xJicnA+/ysA3bnPe4CvFLdWe+MNQEsByf88n cZIq3wBHBdJlumNHIcy1S0tLyzi9ltqRfBfBH2Qy7sYi3XKNTLQ= -----END CERTIFICATE-----Generated at Wed Sep 23 22:32:58 2026 by rpki-client