
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft
File: AF0C42FF385AC16D8868625322DDC9687E064976.mft (raw, json)
Hash identifier: iJluc81wGLnvRFlmTpWyZRKrdPI4eE695p/VlJaejxA=
Subject key identifier: C8:D8:F8:93:EB:5D:BA:F2:2F:6E:7E:71:EE:C3:EE:F9:14:E5:2C:FC
Authority key identifier: AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76
Certificate issuer: /CN=AF0C42FF385AC16D8868625322DDC9687E064976
Certificate serial: 33D9D4593149ACBE3C7C936BC98184E26401D364
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 17:46:53 +0000
Manifest this update: Thu 23 Jul 2026 17:41:53 +0000
Manifest next update: Fri 24 Jul 2026 18:23:53 +0000
Files and hashes: 1: AF0C42FF385AC16D8868625322DDC9687E064976.crl (hash: /eJ9kbV5g8RTMU/OdVZVvJe9Sqpolf7m5LL5Pk4Qcns=)
2: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: oLBZrJQYooXv1AaJqvvqFmmqga9DhEWLnd2Rras7ouk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl
rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d9:d4:59:31:49:ac:be:3c:7c:93:6b:c9:81:84:e2:64:01:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF0C42FF385AC16D8868625322DDC9687E064976
Validity
Not Before: Jul 23 17:41:53 2026 GMT
Not After : Jul 24 18:23:53 2026 GMT
Subject: CN=C8D8F893EB5DBAF22F6E7E71EEC3EEF914E52CFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:83:21:7c:94:84:3f:04:f9:21:cb:58:98:
63:a1:59:c7:a1:e2:90:2c:cc:97:5c:0d:02:82:5a:
d4:03:93:67:3f:01:31:64:48:80:78:53:8d:b2:a2:
75:b3:15:3f:74:55:20:e5:01:40:0b:c3:b2:1a:cd:
4e:e7:c5:33:65:6e:44:21:ee:89:11:5d:ba:07:e4:
64:6b:9f:4d:c4:b4:53:3f:6e:51:b5:4e:fc:68:ba:
54:0e:ac:ea:6a:2a:e3:27:6e:71:03:a1:4a:35:82:
bf:20:3b:21:3b:76:59:1a:b5:90:43:46:92:31:04:
31:bf:59:52:44:66:c5:64:fd:a2:78:05:df:ec:01:
ab:c5:c8:50:ba:30:a6:32:f3:76:cf:69:fe:d8:c0:
7a:df:67:48:dc:3b:67:8a:6f:37:ec:26:fc:95:8e:
5f:39:f1:57:01:0e:85:ff:b0:ea:1d:2e:74:dc:e3:
01:f8:5e:aa:65:e4:ab:e9:d6:3f:1b:51:fc:95:1a:
32:8c:bf:31:be:7d:79:22:5f:97:63:04:93:67:a5:
f9:68:73:be:35:66:b8:cf:11:91:b3:f6:ae:9e:91:
14:41:32:06:e6:a3:86:33:de:d9:83:11:7f:c7:44:
4b:c1:29:ff:cb:b2:f6:1c:86:d7:2f:af:4b:25:85:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D8:F8:93:EB:5D:BA:F2:2F:6E:7E:71:EE:C3:EE:F9:14:E5:2C:FC
X509v3 Authority Key Identifier:
keyid:AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:91:8f:8e:fe:d6:27:66:98:ca:22:4e:12:2c:40:57:4b:33:
70:94:05:b7:7b:93:8a:57:fd:64:cf:59:73:2c:08:7c:5e:99:
58:a8:71:a3:33:bb:4e:ae:86:2c:c1:ca:b9:c0:32:6a:6d:bd:
2d:04:ed:ef:43:32:07:25:0f:61:b9:58:a6:b4:98:ff:56:04:
33:b0:80:ee:c7:25:3a:48:c5:21:90:98:e8:3f:91:46:0e:b4:
46:a4:6a:b2:38:f5:3c:b1:79:e9:43:b3:45:a9:29:22:50:9a:
46:e5:5c:32:ae:c3:33:45:dc:6e:19:a5:de:45:55:54:5d:80:
fa:c3:35:a3:ef:16:35:db:47:57:1c:52:08:d7:14:0f:df:0a:
40:c1:96:66:e2:9c:1d:d6:85:9f:a0:12:4e:72:82:96:04:8d:
ff:11:34:9d:7b:45:35:82:de:50:99:38:8c:76:c2:c3:c5:4e:
f6:1a:f4:b4:40:8f:90:21:55:f5:ee:a0:08:c9:c8:c4:ac:fd:
48:3a:56:0e:02:e1:9f:13:af:9b:66:3b:c1:93:65:7f:84:fe:
be:a7:49:63:2a:74:94:4f:d9:39:3c:bb:f4:2f:f5:eb:13:f3:
24:ea:5b:6f:44:a9:df:2d:fa:b2:5b:a3:cc:b7:0b:39:e9:0a:
c0:d9:cc:be
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUM9nUWTFJrL48fJNryYGE4mQB02QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3
RTA2NDk3NjAeFw0yNjA3MjMxNzQxNTNaFw0yNjA3MjQxODIzNTNaMDMxMTAvBgNV
BAMTKEM4RDhGODkzRUI1REJBRjIyRjZFN0U3MUVFQzNFRUY5MTRFNTJDRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9oMhfJSEPwT5IctYmGOhWceh
4pAszJdcDQKCWtQDk2c/ATFkSIB4U42yonWzFT90VSDlAUALw7IazU7nxTNlbkQh
7okRXboH5GRrn03EtFM/blG1TvxoulQOrOpqKuMnbnEDoUo1gr8gOyE7dlkatZBD
RpIxBDG/WVJEZsVk/aJ4Bd/sAavFyFC6MKYy83bPaf7YwHrfZ0jcO2eKbzfsJvyV
jl858VcBDoX/sOodLnTc4wH4Xqpl5Kvp1j8bUfyVGjKMvzG+fXkiX5djBJNnpflo
c741ZrjPEZGz9q6ekRRBMgbmo4Yz3tmDEX/HREvBKf/LsvYchtcvr0slhUC/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyNj4k+tduvIvbn5x7sPu+RTlLPwwHwYDVR0j
BBgwFoAUrwxC/zhawW2IaGJTIt3JaH4GSXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYz
ODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3RTA2NDk3Ni5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BRjBDNDJGRjM4NUFDMTZEODg2ODYyNTMyMkREQzk2ODdFMDY0
OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz
YzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5
Njg3RTA2NDk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHCRj47+1idmmMoiThIsQFdLM3CUBbd7k4pX
/WTPWXMsCHxemViocaMzu06uhizByrnAMmptvS0E7e9DMgclD2G5WKa0mP9WBDOw
gO7HJTpIxSGQmOg/kUYOtEakarI49TyxeelDs0WpKSJQmkblXDKuwzNF3G4Zpd5F
VVRdgPrDNaPvFjXbR1ccUgjXFA/fCkDBlmbinB3WhZ+gEk5ygpYEjf8RNJ17RTWC
3lCZOIx2wsPFTvYa9LRAj5AhVfXuoAjJyMSs/Ug6Vg4C4Z8Tr5tmO8GTZX+E/r6n
SWMqdJRP2Tk8u/Qv9esT8yTqW29Eqd8t+rJbo8y3CznpCsDZzL4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:16 2026 by rpki-client