$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft File: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft (raw, json) Hash identifier: CkGnZF/GC7I8QN6QYDRHcxxxv7VrtRqkQv/GhSZUcHM= Subject key identifier: 46:6C:49:5C:3D:15:35:EF:A8:6C:65:A6:D7:17:10:7E:6D:39:62:9C Authority key identifier: AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E Certificate issuer: /CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Certificate serial: 09BFBFE885DFD3FC667237421C152FF0CD6FB47B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:22:31 +0000 Manifest this update: Thu 23 Jul 2026 14:17:31 +0000 Manifest next update: Fri 24 Jul 2026 17:43:31 +0000 Files and hashes: 1: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl (hash: H951pPaPtZpIElbOfP5tuIzZUVvl22SycjdorUkXTv4=) 2: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: DT0k1jYnw4OjyEhmmqbUNUqGWP5UkTu1MpqB2VuvB0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:bf:bf:e8:85:df:d3:fc:66:72:37:42:1c:15:2f:f0:cd:6f:b4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Validity Not Before: Jul 23 14:17:31 2026 GMT Not After : Jul 24 17:43:31 2026 GMT Subject: CN=466C495C3D1535EFA86C65A6D717107E6D39629C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fa:bf:b3:7b:25:12:a0:68:bd:3a:2e:93:e3: d0:96:0b:1d:73:58:4f:51:d3:b3:56:48:c6:1e:46: 66:75:24:56:d6:70:be:f7:15:97:8a:08:7f:87:a9: c1:7c:92:df:b8:3c:70:98:16:71:da:3f:95:2a:ce: 25:88:0b:37:24:14:ce:c9:51:17:c9:93:4d:aa:23: 8d:86:a7:77:25:33:a8:06:f6:43:b0:ad:49:84:3e: f4:3e:ca:1a:8b:78:d1:5f:e2:cf:7b:10:bb:17:3d: bc:5c:83:04:dd:e0:03:09:5e:d5:77:e3:37:dd:c2: ed:0c:dc:f8:10:d8:b3:f0:fb:a2:c8:7d:ec:c6:9e: 4f:04:a1:ac:f1:fa:88:ad:93:d3:f1:34:5c:e0:0a: 79:02:73:57:90:c8:67:41:61:a6:15:42:3d:b9:da: d1:df:f1:83:2a:a2:cc:5c:29:97:48:c4:9b:40:e3: ef:13:6f:5e:4e:c9:76:10:d7:59:01:4c:44:eb:2e: 7c:af:24:aa:23:bd:8b:3e:08:f6:81:cc:82:44:a4: bc:db:4c:bf:d4:30:d3:c8:31:b8:14:b9:9c:06:a4: 0c:6b:be:d2:ab:01:80:7f:4c:0e:6c:6a:c8:62:42: 08:73:87:07:61:63:7a:85:0f:ec:c3:69:68:b4:a6: b6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6C:49:5C:3D:15:35:EF:A8:6C:65:A6:D7:17:10:7E:6D:39:62:9C X509v3 Authority Key Identifier: keyid:AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:14:3e:b2:68:7a:60:6e:19:eb:64:f0:21:99:24:ab:15:95: aa:a8:0c:f5:6f:8c:5d:85:81:b9:7d:6c:d9:17:39:b9:fb:32: 99:11:29:ea:19:12:79:4a:52:d4:11:8f:12:b4:a8:70:75:70: fd:5b:e6:ea:a1:91:46:ac:59:64:15:d2:1d:ee:c7:e0:25:dc: 6c:5d:cf:dd:a7:b7:ee:51:10:c8:cc:82:21:08:48:d8:88:bb: a3:05:57:23:dc:c0:e1:dc:b4:78:5f:3f:3f:97:08:ba:8d:19: 45:60:4e:94:55:03:c6:10:2f:84:70:f7:0e:b5:2e:c2:29:3d: 25:60:e5:37:97:ff:9a:2b:cc:c3:a8:28:cb:b0:0a:14:25:b1: a9:15:42:73:eb:3f:21:2b:98:ec:64:ec:81:93:d8:b7:76:51: 47:a6:f1:6e:bd:76:50:23:b4:23:e1:ab:2c:3f:3d:d1:4f:46: 43:67:4e:9c:16:cf:90:cd:ba:eb:14:ad:95:63:ee:11:a6:c1: ef:2c:18:97:ec:e0:87:4c:9d:5d:01:23:af:f4:5c:4b:fa:32: 5a:a3:61:5d:75:44:51:b9:9e:3e:7a:2c:9a:4f:45:1d:4c:49: b4:d3:16:ef:f7:b0:fe:28:37:45:37:2c:f2:f5:54:46:9e:77: 84:fc:ad:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCb+/6IXf0/xmcjdCHBUv8M1vtHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUz QUEzNUU2RTAeFw0yNjA3MjMxNDE3MzFaFw0yNjA3MjQxNzQzMzFaMDMxMTAvBgNV BAMTKDQ2NkM0OTVDM0QxNTM1RUZBODZDNjVBNkQ3MTcxMDdFNkQzOTYyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc+r+zeyUSoGi9Oi6T49CWCx1z WE9R07NWSMYeRmZ1JFbWcL73FZeKCH+HqcF8kt+4PHCYFnHaP5UqziWICzckFM7J URfJk02qI42Gp3clM6gG9kOwrUmEPvQ+yhqLeNFf4s97ELsXPbxcgwTd4AMJXtV3 4zfdwu0M3PgQ2LPw+6LIfezGnk8Eoazx+oitk9PxNFzgCnkCc1eQyGdBYaYVQj25 2tHf8YMqosxcKZdIxJtA4+8Tb15OyXYQ11kBTETrLnyvJKojvYs+CPaBzIJEpLzb TL/UMNPIMbgUuZwGpAxrvtKrAYB/TA5sashiQghzhwdhY3qFD+zDaWi0prb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURmxJXD0VNe+obGWm1xcQfm05YpwwHwYDVR0j BBgwFoAUrxrfWDrFADAnKBpOyr993jqjXm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiZjg2NDEtYmY3MC00ZTNmLTk4NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgz QUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUzQUEzNUU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjFBREY1ODNBQzUwMDMwMjcyODFBNEVDQUJGN0RERTNBQTM1 RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdE REUzQUEzNUU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAUPrJoemBuGetk8CGZJKsVlaqoDPVvjF2F gbl9bNkXObn7MpkRKeoZEnlKUtQRjxK0qHB1cP1b5uqhkUasWWQV0h3ux+Al3Gxd z92nt+5REMjMgiEISNiIu6MFVyPcwOHctHhfPz+XCLqNGUVgTpRVA8YQL4Rw9w61 LsIpPSVg5TeX/5orzMOoKMuwChQlsakVQnPrPyErmOxk7IGT2Ld2UUem8W69dlAj tCPhqyw/PdFPRkNnTpwWz5DNuusUrZVj7hGmwe8sGJfs4IdMnV0BI6/0XEv6Mlqj YV11RFG5nj56LJpPRR1MSbTTFu/3sP4oN0U3LPL1VEaed4T8rao= -----END CERTIFICATE-----Generated at Fri Jul 24 08:39:02 2026 by rpki-client