$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft File: AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft (raw, json) Hash identifier: fymQv4TqIQTuow7oPZCWNLC5lJ2XAn4Ho0FM6Y5gvKQ= Subject key identifier: 80:7B:5B:10:CF:77:7A:2D:CA:F8:B2:53:BC:7D:3D:91:F2:E4:7B:40 Authority key identifier: AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 Certificate issuer: /CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Certificate serial: 28A138C91F2A5C4D58070FAD435CF76120C95A4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:29:59 +0000 Manifest this update: Thu 24 Sep 2026 03:24:59 +0000 Manifest next update: Fri 25 Sep 2026 04:45:59 +0000 Files and hashes: 1: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: /oNv82I3Vm7TPqNqjll+3TrmIZVD8/SYFvS2zGG/dvA=) 2: AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl (hash: KfvCRTkdSH09L2YD/6mKBFKlpaBd9lMzAdo8f7Wtd4U=) 3: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: 6suli2oOGR88rqZA8HRkXIo1ZZ9as8r45IT5Ea+nUsw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a1:38:c9:1f:2a:5c:4d:58:07:0f:ad:43:5c:f7:61:20:c9:5a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Validity Not Before: Sep 24 03:24:59 2026 GMT Not After : Sep 25 04:45:59 2026 GMT Subject: CN=807B5B10CF777A2DCAF8B253BC7D3D91F2E47B40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:34:0a:dc:d8:dc:fe:d4:61:ab:1f:06:89: 47:7c:95:ff:40:61:cf:49:46:d9:41:75:24:1d:22: 16:5d:46:66:1c:f1:fc:cc:93:2b:af:de:72:1e:ae: 97:38:01:49:9f:41:d7:fa:5e:ad:fb:91:45:27:d5: 0b:4c:8a:26:91:20:9d:1d:48:06:7c:18:fe:0a:3b: 77:a0:97:43:e9:d5:82:42:15:7b:ff:07:b4:13:b4: de:7a:6a:fd:89:b9:ad:a8:4d:a5:3a:b4:0f:4a:e4: 1d:3d:db:79:a6:a1:af:5b:ab:31:5f:76:5d:f1:52: 56:a7:1b:c5:d3:fe:e3:fd:a7:dc:65:12:3c:55:f5: ea:c1:bb:bb:7a:e9:ab:2d:6a:e9:78:b0:ac:c3:11: 2f:7a:79:db:ac:03:eb:b9:44:38:6c:27:d7:fe:a4: 0e:a5:8d:34:44:e2:71:4e:e3:2b:ec:00:bd:af:1e: 29:00:8a:02:61:67:ed:c5:e4:ec:1e:5c:43:92:05: ca:a5:9d:9e:b2:d0:e4:96:1d:48:60:3a:d0:a8:ec: 7a:7c:d5:cd:25:91:ab:93:c5:87:e1:3b:60:14:48: 21:b2:f1:9e:1c:cd:c4:1c:07:ee:3c:ce:df:e4:8c: 53:ad:60:cb:23:68:ab:dc:84:97:43:a6:01:df:ee: e7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7B:5B:10:CF:77:7A:2D:CA:F8:B2:53:BC:7D:3D:91:F2:E4:7B:40 X509v3 Authority Key Identifier: keyid:AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a4:98:d2:62:98:46:1d:c8:86:f2:92:f0:ca:cc:9a:37:1a: b7:06:83:e4:75:95:45:03:63:81:f2:7f:75:22:86:90:f4:ff: b7:aa:fe:5a:ac:e2:06:8a:87:a9:d5:03:a6:f8:75:04:55:67: 30:09:9c:6e:b5:af:57:62:ed:73:32:ce:71:77:08:fa:e3:1b: 53:62:52:dd:d5:b3:bf:f7:a5:1b:07:d1:4e:ef:f7:a9:34:f0: 68:c6:e3:d7:b5:d1:eb:5e:15:3e:b4:44:91:1b:37:5d:cd:88: 30:38:0b:5f:d2:f0:dd:7e:07:70:4d:ba:16:7c:a7:b0:92:a5: cd:56:81:6d:a9:e5:99:0a:71:13:e8:56:5a:aa:e9:44:97:64: 64:24:54:23:da:11:70:3a:f1:b2:51:59:21:e8:2d:87:47:35: 0c:12:be:df:fc:89:54:46:74:4a:14:58:49:01:23:99:f7:11: f5:27:d7:bd:2a:70:36:98:51:1c:9c:ab:66:51:3b:9c:4a:a0: 52:bb:c8:90:06:cd:da:68:d2:f0:68:29:a7:aa:31:42:a4:c1: eb:f5:78:dd:e7:b0:8d:20:61:e5:fe:2b:c6:1c:12:c3:19:0c: 30:f9:11:9f:af:ad:18:56:a0:1a:79:2d:59:a8:d9:5f:43:6e: b6:4a:36:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKE4yR8qXE1YBw+tQ1z3YSDJWk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0N0Ux NjdDRTI5NjAeFw0yNjA5MjQwMzI0NTlaFw0yNjA5MjUwNDQ1NTlaMDMxMTAvBgNV BAMTKDgwN0I1QjEwQ0Y3NzdBMkRDQUY4QjI1M0JDN0QzRDkxRjJFNDdCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5zQK3Njc/tRhqx8GiUd8lf9A Yc9JRtlBdSQdIhZdRmYc8fzMkyuv3nIerpc4AUmfQdf6Xq37kUUn1QtMiiaRIJ0d SAZ8GP4KO3egl0Pp1YJCFXv/B7QTtN56av2Jua2oTaU6tA9K5B0923mmoa9bqzFf dl3xUlanG8XT/uP9p9xlEjxV9erBu7t66astaul4sKzDES96edusA+u5RDhsJ9f+ pA6ljTRE4nFO4yvsAL2vHikAigJhZ+3F5OweXEOSBcqlnZ6y0OSWHUhgOtCo7Hp8 1c0lkauTxYfhO2AUSCGy8Z4czcQcB+48zt/kjFOtYMsjaKvchJdDpgHf7uePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgHtbEM93ei3K+LJTvH09kfLke0AwHwYDVR0j BBgwFoAUr80mY9oQNY/ppxqUDcj0fhZ84pYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAwYWUwZjEtYjhjMC00NTJmLThlODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNE QTEwMzU4RkU5QTcxQTk0MERDOEY0N0UxNjdDRTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkNEMjY2M0RBMTAzNThGRTlBNzFBOTQwREM4RjQ3RTE2N0NF Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0 N0UxNjdDRTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOkmNJimEYdyIbykvDKzJo3GrcGg+R1lUUD Y4Hyf3UihpD0/7eq/lqs4gaKh6nVA6b4dQRVZzAJnG61r1di7XMyznF3CPrjG1Ni Ut3Vs7/3pRsH0U7v96k08GjG49e10eteFT60RJEbN13NiDA4C1/S8N1+B3BNuhZ8 p7CSpc1WgW2p5ZkKcRPoVlqq6USXZGQkVCPaEXA68bJRWSHoLYdHNQwSvt/8iVRG dEoUWEkBI5n3EfUn170qcDaYURycq2ZRO5xKoFK7yJAGzdpo0vBoKaeqMUKkwev1 eN3nsI0gYeX+K8YcEsMZDDD5EZ+vrRhWoBp5LVmo2V9DbrZKNos= -----END CERTIFICATE-----Generated at Thu Sep 24 13:59:13 2026 by rpki-client