$ rpki-client -vvf rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft File: AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft (raw, json) Hash identifier: t36zQmtog4KWBb161xme26n+GNQqkXPnoz8Nccre1DY= Subject key identifier: 99:57:01:88:94:B6:75:3F:BB:D7:D4:5C:1A:1A:50:21:6C:CA:C3:10 Authority key identifier: AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 Certificate issuer: /CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Certificate serial: 7B7E0C1E2DCE00F9D2A51BFEB51FF2C9EC1C30A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:27:15 +0000 Manifest this update: Thu 23 Jul 2026 22:22:15 +0000 Manifest next update: Fri 24 Jul 2026 23:56:15 +0000 Files and hashes: 1: AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl (hash: 7LxeGDjmTW9mioIsnkx31gR3YfBETHpxEzm/6M7q6ak=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: /oNv82I3Vm7TPqNqjll+3TrmIZVD8/SYFvS2zGG/dvA=) 3: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: 6suli2oOGR88rqZA8HRkXIo1ZZ9as8r45IT5Ea+nUsw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7e:0c:1e:2d:ce:00:f9:d2:a5:1b:fe:b5:1f:f2:c9:ec:1c:30:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Validity Not Before: Jul 23 22:22:15 2026 GMT Not After : Jul 24 23:56:15 2026 GMT Subject: CN=9957018894B6753FBBD7D45C1A1A50216CCAC310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:85:d6:c0:c1:c7:85:b1:5c:09:79:78:d8: 67:39:3d:b0:9c:2d:e4:12:15:93:54:09:ba:1e:a6: 0a:a0:2a:6a:25:46:58:98:b8:33:44:58:3f:db:b2: 28:af:4c:24:5b:ae:14:e2:be:8f:20:24:20:11:56: c9:4a:4b:9e:54:e9:42:b7:54:20:78:07:f2:27:1b: 62:e1:d0:57:1f:e4:d2:51:d8:4b:56:a4:65:a8:c3: 09:6d:19:5a:e7:d8:60:2b:fa:c1:92:5e:13:37:07: 46:14:fe:65:83:d5:59:12:0f:e5:8e:b6:39:22:2e: 3c:c5:80:f0:5c:e1:ec:9b:1e:d0:47:0d:b0:bc:44: 08:8f:26:7c:8d:57:4f:62:3f:69:bf:43:19:1d:7e: 8f:72:77:90:a6:96:0f:03:2b:7c:7e:b8:06:49:b9: 94:18:b5:b7:62:37:b4:8d:46:67:b3:f2:04:d4:25: 03:a2:51:5f:9c:e8:a9:5d:9e:63:70:64:42:0b:4a: 68:1a:1b:3c:4f:04:e8:00:54:c2:7e:fc:52:32:91: 35:36:39:d0:d4:02:38:10:e8:44:94:a2:54:87:2d: 6b:86:4a:f2:41:93:a0:f0:6c:09:79:e3:ab:eb:4c: 19:fd:08:c2:df:7c:c5:71:ba:51:c6:bd:e8:39:3c: 40:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:57:01:88:94:B6:75:3F:BB:D7:D4:5C:1A:1A:50:21:6C:CA:C3:10 X509v3 Authority Key Identifier: keyid:AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8a:d6:e5:78:93:37:27:f1:26:cf:07:7e:63:2f:8c:9f:ee: 71:a6:af:d1:48:98:cd:2d:37:c9:e2:96:ef:db:a1:f1:57:9c: 55:a4:2c:a6:71:ca:fc:4a:9d:e7:d7:a9:f5:03:cc:ce:a3:7c: d9:49:6f:ef:66:91:d7:89:f8:06:25:7f:57:28:60:7a:0b:97: e8:3f:f0:a7:9b:46:af:95:92:88:77:2b:6a:41:74:eb:5d:40: 8e:2d:71:fe:29:f3:d3:18:d8:fb:58:4f:d1:c1:43:48:f2:b0: 16:61:9b:3c:ee:26:ba:f0:d9:e4:f0:59:08:c5:04:bb:f0:88: c6:13:23:57:74:05:fb:4a:d2:18:6b:5e:71:7b:09:9c:b9:d1: 87:c6:4b:ff:90:79:c8:91:8f:b1:af:9a:86:c9:16:ca:62:c8: 3f:cc:14:97:56:5e:d7:d6:12:64:f2:7d:65:0c:de:06:1b:cc: 56:a9:7f:d8:b8:92:da:e1:17:b8:f4:02:61:14:eb:36:3a:97: 16:24:24:b2:05:f1:cb:46:db:48:83:4a:e0:bd:1b:da:c5:1b: d0:66:fb:32:e7:27:e0:22:f8:89:44:c3:03:fc:f7:83:4c:63: 6b:00:cc:1f:22:8b:df:30:c7:e0:af:0e:cf:d7:40:b6:17:f0: 86:00:3d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe34MHi3OAPnSpRv+tR/yyewcMKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0N0Ux NjdDRTI5NjAeFw0yNjA3MjMyMjIyMTVaFw0yNjA3MjQyMzU2MTVaMDMxMTAvBgNV BAMTKDk5NTcwMTg4OTRCNjc1M0ZCQkQ3RDQ1QzFBMUE1MDIxNkNDQUMzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUYXWwMHHhbFcCXl42Gc5PbCc LeQSFZNUCboepgqgKmolRliYuDNEWD/bsiivTCRbrhTivo8gJCARVslKS55U6UK3 VCB4B/InG2Lh0Fcf5NJR2EtWpGWowwltGVrn2GAr+sGSXhM3B0YU/mWD1VkSD+WO tjkiLjzFgPBc4eybHtBHDbC8RAiPJnyNV09iP2m/Qxkdfo9yd5Cmlg8DK3x+uAZJ uZQYtbdiN7SNRmez8gTUJQOiUV+c6KldnmNwZEILSmgaGzxPBOgAVMJ+/FIykTU2 OdDUAjgQ6ESUolSHLWuGSvJBk6DwbAl546vrTBn9CMLffMVxulHGveg5PEA7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmVcBiJS2dT+719RcGhpQIWzKwxAwHwYDVR0j BBgwFoAUr80mY9oQNY/ppxqUDcj0fhZ84pYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAwYWUwZjEtYjhjMC00NTJmLThlODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNE QTEwMzU4RkU5QTcxQTk0MERDOEY0N0UxNjdDRTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkNEMjY2M0RBMTAzNThGRTlBNzFBOTQwREM4RjQ3RTE2N0NF Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0 N0UxNjdDRTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyK1uV4kzcn8SbPB35jL4yf7nGmr9FImM0t N8nilu/bofFXnFWkLKZxyvxKnefXqfUDzM6jfNlJb+9mkdeJ+AYlf1coYHoLl+g/ 8KebRq+Vkoh3K2pBdOtdQI4tcf4p89MY2PtYT9HBQ0jysBZhmzzuJrrw2eTwWQjF BLvwiMYTI1d0BftK0hhrXnF7CZy50YfGS/+QeciRj7GvmobJFspiyD/MFJdWXtfW EmTyfWUM3gYbzFapf9i4ktrhF7j0AmEU6zY6lxYkJLIF8ctG20iDSuC9G9rFG9Bm +zLnJ+Ai+IlEwwP894NMY2sAzB8ii98wx+CvDs/XQLYX8IYAPQk= -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:51 2026 by rpki-client