$ rpki-client -vvf rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft File: AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft (raw, json) Hash identifier: X2A3Df8cai3nTqien24xibe1f8FmhXk894scF63dOsE= Subject key identifier: B4:5F:B4:41:D7:12:71:21:A2:DE:24:A2:0B:1D:CD:24:0A:E9:2D:75 Authority key identifier: AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 Certificate issuer: /CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Certificate serial: 69206834D3F4CF47A4469E8D599A1B5F1D2315C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:46:15 +0000 Manifest this update: Tue 12 May 2026 05:41:15 +0000 Manifest next update: Wed 13 May 2026 09:39:15 +0000 Files and hashes: 1: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: /oNv82I3Vm7TPqNqjll+3TrmIZVD8/SYFvS2zGG/dvA=) 2: AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl (hash: JZTB+q5IpGV3rn+6iPvSsFGNhu3ZeKQqffZJOtmWrOs=) 3: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: 6suli2oOGR88rqZA8HRkXIo1ZZ9as8r45IT5Ea+nUsw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:20:68:34:d3:f4:cf:47:a4:46:9e:8d:59:9a:1b:5f:1d:23:15:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Validity Not Before: May 12 05:41:15 2026 GMT Not After : May 13 09:39:15 2026 GMT Subject: CN=B45FB441D7127121A2DE24A20B1DCD240AE92D75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:ad:5a:b6:fc:82:a9:37:1d:f0:91:1c:31: 7c:e0:ab:32:46:1d:d7:ae:a1:11:05:74:62:11:aa: e0:5d:5e:df:8f:83:08:bc:c8:4c:ef:03:dc:d6:af: b7:81:e7:17:72:30:e8:b6:5f:c9:bf:d5:28:a8:b8: c6:f6:a9:2e:cf:84:57:39:03:15:b4:3b:a1:a8:b9: 11:7b:14:86:2f:2b:48:c2:99:e0:3a:2c:1c:19:cd: 64:9e:ff:9a:5b:a0:c3:df:b8:e8:96:8e:ca:cd:fb: ef:00:a8:9f:cd:4f:2e:59:7e:0f:5c:8c:12:b4:98: cb:72:22:19:66:3b:c1:62:f3:62:79:64:ff:76:2b: d4:1a:58:d8:a4:17:5e:77:47:6b:cd:05:be:46:8c: 07:b0:47:33:42:01:44:14:61:3c:b1:81:ca:94:b1: 97:82:48:17:9c:19:45:7e:37:91:4e:80:9f:fc:b6: ab:4a:79:2b:de:5f:de:a7:75:4a:f5:f3:ea:ac:70: 9d:b9:7d:ed:4a:55:11:b2:fb:dd:e3:d8:4d:78:bb: ca:9f:c8:ab:cd:46:80:3b:84:af:12:ec:b1:68:d9: e7:4b:c6:f1:52:cf:7a:d0:da:1c:de:76:c5:a0:ea: d9:3b:ed:ef:41:71:f3:15:56:9a:38:13:bd:ac:24: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5F:B4:41:D7:12:71:21:A2:DE:24:A2:0B:1D:CD:24:0A:E9:2D:75 X509v3 Authority Key Identifier: keyid:AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:39:1b:44:dd:c0:e4:ad:52:12:c6:9b:4f:31:78:66:44:b9: e6:e8:f8:b7:43:86:be:00:77:8a:94:7a:9a:f4:96:8c:19:91: e8:7e:0d:ee:b0:df:e7:8a:62:08:a3:41:81:78:1c:8d:da:0e: 89:ee:10:0a:b6:d1:2d:68:89:ad:f0:8d:7e:55:37:10:37:7c: e7:78:92:16:e5:c0:8c:8a:90:05:2a:6c:b0:a2:1c:dd:c7:53: f5:27:72:cb:57:3e:0a:5c:fc:57:5d:45:88:21:5c:09:eb:1f: a4:51:ad:e8:a1:e8:35:90:1d:50:17:f7:41:69:f5:d3:d3:13: 79:df:9e:45:66:2f:b0:47:53:77:d3:68:e2:29:1d:09:3e:39: 06:07:64:a9:c2:da:5c:00:56:37:71:4b:34:6e:5d:d8:b0:6b: 40:fd:37:7a:9b:30:e8:8b:11:58:ea:ce:88:40:d8:2c:87:1d: 94:58:26:02:2d:9e:f0:f1:41:21:92:47:28:45:af:7e:3e:1d: cd:88:0b:87:59:9d:3c:2d:ef:26:4a:1a:80:b6:1c:ad:80:a9: ac:e6:1f:2c:e9:cf:74:4e:9a:55:0d:c5:53:e5:9f:19:55:aa: b3:c1:70:51:fa:7c:07:d6:20:33:fe:99:b8:f3:a7:a4:24:d4: aa:34:60:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaSBoNNP0z0ekRp6NWZobXx0jFccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0N0Ux NjdDRTI5NjAeFw0yNjA1MTIwNTQxMTVaFw0yNjA1MTMwOTM5MTVaMDMxMTAvBgNV BAMTKEI0NUZCNDQxRDcxMjcxMjFBMkRFMjRBMjBCMURDRDI0MEFFOTJENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpK1atvyCqTcd8JEcMXzgqzJG HdeuoREFdGIRquBdXt+Pgwi8yEzvA9zWr7eB5xdyMOi2X8m/1SiouMb2qS7PhFc5 AxW0O6GouRF7FIYvK0jCmeA6LBwZzWSe/5pboMPfuOiWjsrN++8AqJ/NTy5Zfg9c jBK0mMtyIhlmO8Fi82J5ZP92K9QaWNikF153R2vNBb5GjAewRzNCAUQUYTyxgcqU sZeCSBecGUV+N5FOgJ/8tqtKeSveX96ndUr18+qscJ25fe1KVRGy+93j2E14u8qf yKvNRoA7hK8S7LFo2edLxvFSz3rQ2hzedsWg6tk77e9BcfMVVpo4E72sJCzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtF+0QdcScSGi3iSiCx3NJArpLXUwHwYDVR0j BBgwFoAUr80mY9oQNY/ppxqUDcj0fhZ84pYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAwYWUwZjEtYjhjMC00NTJmLThlODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNE QTEwMzU4RkU5QTcxQTk0MERDOEY0N0UxNjdDRTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkNEMjY2M0RBMTAzNThGRTlBNzFBOTQwREM4RjQ3RTE2N0NF Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0 N0UxNjdDRTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFo5G0TdwOStUhLGm08xeGZEuebo+LdDhr4A d4qUepr0lowZkeh+De6w3+eKYgijQYF4HI3aDonuEAq20S1oia3wjX5VNxA3fOd4 khblwIyKkAUqbLCiHN3HU/UncstXPgpc/FddRYghXAnrH6RRreih6DWQHVAX90Fp 9dPTE3nfnkVmL7BHU3fTaOIpHQk+OQYHZKnC2lwAVjdxSzRuXdiwa0D9N3qbMOiL EVjqzohA2CyHHZRYJgItnvDxQSGSRyhFr34+Hc2IC4dZnTwt7yZKGoC2HK2Aqazm Hyzpz3ROmlUNxVPlnxlVqrPBcFH6fAfWIDP+mbjzp6Qk1Ko0YAA= -----END CERTIFICATE-----Generated at Wed May 13 00:20:48 2026 by rpki-client