$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft File: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft (raw, json) Hash identifier: xGmIFJ0xW3cVhc1eB9yRLyEzTgkVdovz5OAfGWdML/s= Subject key identifier: CA:48:D0:26:69:B0:87:4B:A6:64:FE:0C:1F:11:5F:44:9F:6D:EA:1B Authority key identifier: AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E Certificate issuer: /CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Certificate serial: 0ABBF4FC05BB21371D7F4073313C5759EFE89C3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft Manifest number: 0E Signing time: Tue 12 May 2026 03:32:48 +0000 Manifest this update: Tue 12 May 2026 03:27:48 +0000 Manifest next update: Wed 13 May 2026 05:24:48 +0000 Files and hashes: 1: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl (hash: CxpROdBTQ5u3MZLp5odxPyEbwK2gJohhzHlvmiMVd9A=) 2: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: DT0k1jYnw4OjyEhmmqbUNUqGWP5UkTu1MpqB2VuvB0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bb:f4:fc:05:bb:21:37:1d:7f:40:73:31:3c:57:59:ef:e8:9c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Validity Not Before: May 12 03:27:48 2026 GMT Not After : May 13 05:24:48 2026 GMT Subject: CN=CA48D02669B0874BA664FE0C1F115F449F6DEA1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:1f:93:67:79:d3:9d:c8:f5:5c:92:4f:7e: 56:d7:e4:73:36:c1:f3:e5:72:5d:30:67:4a:70:ee: 81:5e:10:c0:d1:c3:de:46:58:41:ce:ca:67:58:5f: b5:a7:ed:23:d3:96:43:b6:54:6c:8a:53:ca:3a:da: 2f:67:22:48:ea:c7:e2:ba:04:85:c2:8d:44:6a:e3: 11:4b:a4:e0:10:a7:b2:58:dd:b3:9b:f3:fa:cf:44: de:0d:cc:d4:9f:35:aa:1b:9e:e5:84:f6:18:4e:dd: ab:c7:1c:83:1a:eb:e8:29:5d:c1:f8:40:a7:59:cb: 9a:88:91:d6:fd:79:4c:f6:5c:cf:19:81:ab:31:fb: bf:b3:bd:f7:1d:4c:ca:76:12:5d:8c:68:1f:86:24: a8:ec:6b:de:16:53:91:ab:f3:d6:d9:0d:90:31:18: 13:b0:d0:03:7f:14:92:1c:0e:cb:42:a1:46:d4:dd: 32:5c:85:87:96:13:4c:c4:dc:87:3c:60:e3:90:63: 7b:80:ae:1e:19:eb:8e:c0:76:72:31:9d:cd:b0:16: f2:84:74:34:93:4c:e6:d2:72:2e:3d:ae:b9:88:a3: e9:59:78:de:0f:d0:26:9b:65:96:1e:b4:e8:85:06: 72:f1:34:78:82:2b:14:e7:a4:3d:b3:fe:2e:f6:cd: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:48:D0:26:69:B0:87:4B:A6:64:FE:0C:1F:11:5F:44:9F:6D:EA:1B X509v3 Authority Key Identifier: keyid:AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0b:c7:a3:67:bc:e6:d0:2e:97:be:77:48:ae:af:1c:cf:80: 8f:39:02:11:64:22:54:cd:4f:8a:dd:ab:48:ba:99:69:77:0e: 96:fb:ef:d4:53:69:f6:09:48:df:73:23:45:8f:94:81:bb:de: bb:fb:f3:93:c1:a2:9a:d4:90:f1:63:40:da:25:d9:a8:e6:f6: 9a:e3:35:d1:e6:dc:46:9c:84:37:3d:ef:d5:0f:ee:48:f9:af: 99:32:04:1c:75:de:37:04:8f:93:d6:64:c6:38:05:9d:a3:d1: 69:49:d2:c0:66:d0:81:d2:3a:8b:81:d2:28:b2:c7:86:7e:c4: 7c:aa:de:b4:55:ee:9f:09:0b:53:03:c5:77:5a:44:6a:ca:e5: f3:c9:50:50:8b:dd:a9:49:f4:a9:ba:aa:5d:9f:d0:e7:dc:d3: a6:52:e1:d1:5c:5b:d8:3a:05:71:0f:fc:c6:bd:11:1a:55:f5: 51:6e:2a:3e:e0:eb:83:20:d8:64:42:ff:30:42:2e:43:51:41: 71:09:4d:51:24:8b:fa:d7:c2:35:48:19:2d:ec:ce:d8:63:76: f5:e3:f5:92:04:26:05:b0:f7:86:14:63:d6:cc:81:2a:db:e9: b0:76:eb:05:36:04:b1:ce:38:e4:de:7f:77:ca:84:c0:d9:bb: 8e:f7:93:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrv0/AW7ITcdf0BzMTxXWe/onDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUz QUEzNUU2RTAeFw0yNjA1MTIwMzI3NDhaFw0yNjA1MTMwNTI0NDhaMDMxMTAvBgNV BAMTKENBNDhEMDI2NjlCMDg3NEJBNjY0RkUwQzFGMTE1RjQ0OUY2REVBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZqB+TZ3nTncj1XJJPflbX5HM2 wfPlcl0wZ0pw7oFeEMDRw95GWEHOymdYX7Wn7SPTlkO2VGyKU8o62i9nIkjqx+K6 BIXCjURq4xFLpOAQp7JY3bOb8/rPRN4NzNSfNaobnuWE9hhO3avHHIMa6+gpXcH4 QKdZy5qIkdb9eUz2XM8Zgasx+7+zvfcdTMp2El2MaB+GJKjsa94WU5Gr89bZDZAx GBOw0AN/FJIcDstCoUbU3TJchYeWE0zE3Ic8YOOQY3uArh4Z647AdnIxnc2wFvKE dDSTTObSci49rrmIo+lZeN4P0CabZZYetOiFBnLxNHiCKxTnpD2z/i72zd6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUykjQJmmwh0umZP4MHxFfRJ9t6hswHwYDVR0j BBgwFoAUrxrfWDrFADAnKBpOyr993jqjXm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiZjg2NDEtYmY3MC00ZTNmLTk4NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgz QUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUzQUEzNUU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjFBREY1ODNBQzUwMDMwMjcyODFBNEVDQUJGN0RERTNBQTM1 RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdE REUzQUEzNUU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0Lx6NnvObQLpe+d0iurxzPgI85AhFkIlTN T4rdq0i6mWl3Dpb779RTafYJSN9zI0WPlIG73rv785PBoprUkPFjQNol2ajm9prj NdHm3EachDc979UP7kj5r5kyBBx13jcEj5PWZMY4BZ2j0WlJ0sBm0IHSOouB0iiy x4Z+xHyq3rRV7p8JC1MDxXdaRGrK5fPJUFCL3alJ9Km6ql2f0Ofc06ZS4dFcW9g6 BXEP/Ma9ERpV9VFuKj7g64Mg2GRC/zBCLkNRQXEJTVEki/rXwjVIGS3szthjdvXj 9ZIEJgWw94YUY9bMgSrb6bB26wU2BLHOOOTef3fKhMDZu473k2o= -----END CERTIFICATE-----Generated at Tue May 12 23:55:40 2026 by rpki-client