$ rpki-client -vvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft File: AF0C42FF385AC16D8868625322DDC9687E064976.mft (raw, json) Hash identifier: gPcxywHkGU5mzSHjmwC57P1YDrk3zrQ/ZZc/HWrP0FQ= Subject key identifier: BE:16:B9:FC:53:BF:F5:95:F7:28:06:1B:94:74:04:91:8A:43:14:4E Authority key identifier: AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 Certificate issuer: /CN=AF0C42FF385AC16D8868625322DDC9687E064976 Certificate serial: 26034E993AB20549346E389EDEFBC27DD95B942C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:56:39 +0000 Manifest this update: Tue 12 May 2026 05:51:39 +0000 Manifest next update: Wed 13 May 2026 09:15:39 +0000 Files and hashes: 1: AF0C42FF385AC16D8868625322DDC9687E064976.crl (hash: 7aqQFvQ0Wla49EyUScLtRJsWpQONFPOB+7ZY6KhY/h0=) 2: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: oLBZrJQYooXv1AaJqvvqFmmqga9DhEWLnd2Rras7ouk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:03:4e:99:3a:b2:05:49:34:6e:38:9e:de:fb:c2:7d:d9:5b:94:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF0C42FF385AC16D8868625322DDC9687E064976 Validity Not Before: May 12 05:51:39 2026 GMT Not After : May 13 09:15:39 2026 GMT Subject: CN=BE16B9FC53BFF595F728061B947404918A43144E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:2c:c1:74:10:3b:ee:b7:38:4d:ce:e3:03: 7f:c6:b1:4c:36:7d:4b:b7:99:cf:a2:f4:e7:80:8e: 91:3b:04:41:29:df:b2:06:69:7e:b8:b3:d2:70:30: 69:63:15:9a:6c:ca:5c:48:da:81:ea:4e:2d:a4:77: d5:00:0c:c6:01:44:93:d2:e5:2a:c6:51:4c:a7:3f: 88:1b:42:1e:dc:6e:d4:1f:12:71:fb:35:06:a0:c3: ee:34:c0:53:55:f9:0c:ec:67:b0:d1:c3:b5:5b:ce: b0:7f:c3:43:dd:7f:42:25:ad:b3:12:76:03:88:37: a2:57:0d:ea:e7:ab:46:53:5e:a7:e3:cf:65:6a:33: a3:e0:e0:1a:04:c2:0e:4c:fd:fd:5e:9d:fa:c2:b6: 45:76:91:cc:b0:f0:2d:f6:4e:7c:2c:79:3d:b2:6f: 0d:4c:5f:f7:15:d6:4c:ac:da:53:6a:7f:db:d4:f5: c0:74:32:7f:5a:2d:2e:bf:23:6e:9f:8d:ae:38:2b: c7:5a:25:2f:44:ea:d5:e3:db:ed:a4:e3:5b:d5:c3: 25:f2:2e:a6:a9:fb:0f:0b:da:b8:d6:17:a2:06:32: d3:df:43:3d:8d:f6:a5:45:8e:3f:d6:b0:09:df:09: a7:1f:3a:03:97:1b:32:13:e5:0a:98:e2:d3:90:2a: 73:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:16:B9:FC:53:BF:F5:95:F7:28:06:1B:94:74:04:91:8A:43:14:4E X509v3 Authority Key Identifier: keyid:AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a0:38:12:f0:5e:5b:aa:52:d7:83:8b:88:82:6c:5e:38:d0: 14:86:6f:a8:16:4d:6c:10:26:32:53:ac:00:7b:21:cc:d5:8a: 2f:33:ab:2a:1a:39:a7:fa:5b:c4:db:dc:29:10:a3:72:25:c0: 20:df:d5:06:44:9a:95:20:87:79:fe:4f:91:34:4a:89:f6:f3: 47:c2:53:fb:d5:cf:37:1a:c5:f4:c6:c8:00:b1:f9:55:d2:76: 94:f7:ea:03:75:19:aa:7a:dd:30:8c:45:c3:7d:be:b3:aa:71: 06:46:21:89:9e:7f:42:db:1e:30:59:dc:b7:0e:48:9f:60:40: 9d:c6:ae:cb:a0:67:94:87:6d:64:ab:e7:5c:40:67:c1:a0:b5: 5e:48:43:79:3e:a2:40:5f:8a:85:e2:0d:4e:3e:2b:93:ff:9a: 1b:2c:d4:52:b0:aa:8e:38:9d:37:31:06:7a:ea:91:49:01:8e: ab:4a:62:02:cb:80:af:5c:5a:48:a7:87:15:fb:1d:42:4e:1c: 57:d8:44:49:8e:cc:28:dd:bf:f0:b0:81:95:2c:f7:af:bc:55: cb:e9:20:91:11:e3:dd:36:9b:bf:d0:95:74:7e:9d:07:2c:53: 84:0e:9d:7d:d3:bd:73:09:0c:5f:cd:b0:7d:17:09:36:86:f1: cb:31:c6:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgNOmTqyBUk0bjie3vvCfdlblCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3 RTA2NDk3NjAeFw0yNjA1MTIwNTUxMzlaFw0yNjA1MTMwOTE1MzlaMDMxMTAvBgNV BAMTKEJFMTZCOUZDNTNCRkY1OTVGNzI4MDYxQjk0NzQwNDkxOEE0MzE0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDReSzBdBA77rc4Tc7jA3/GsUw2 fUu3mc+i9OeAjpE7BEEp37IGaX64s9JwMGljFZpsylxI2oHqTi2kd9UADMYBRJPS 5SrGUUynP4gbQh7cbtQfEnH7NQagw+40wFNV+QzsZ7DRw7VbzrB/w0Pdf0IlrbMS dgOIN6JXDernq0ZTXqfjz2VqM6Pg4BoEwg5M/f1enfrCtkV2kcyw8C32TnwseT2y bw1MX/cV1kys2lNqf9vU9cB0Mn9aLS6/I26fja44K8daJS9E6tXj2+2k41vVwyXy Lqap+w8L2rjWF6IGMtPfQz2N9qVFjj/WsAnfCacfOgOXGzIT5QqY4tOQKnNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvha5/FO/9ZX3KAYblHQEkYpDFE4wHwYDVR0j BBgwFoAUrwxC/zhawW2IaGJTIt3JaH4GSXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYz ODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3RTA2NDk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjBDNDJGRjM4NUFDMTZEODg2ODYyNTMyMkREQzk2ODdFMDY0 OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5 Njg3RTA2NDk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECgOBLwXluqUteDi4iCbF440BSGb6gWTWwQ JjJTrAB7IczVii8zqyoaOaf6W8Tb3CkQo3IlwCDf1QZEmpUgh3n+T5E0Son280fC U/vVzzcaxfTGyACx+VXSdpT36gN1Gap63TCMRcN9vrOqcQZGIYmef0LbHjBZ3LcO SJ9gQJ3GrsugZ5SHbWSr51xAZ8GgtV5IQ3k+okBfioXiDU4+K5P/mhss1FKwqo44 nTcxBnrqkUkBjqtKYgLLgK9cWkinhxX7HUJOHFfYREmOzCjdv/CwgZUs96+8Vcvp IJER4902m7/QlXR+nQcsU4QOnX3TvXMJDF/NsH0XCTaG8csxxnM= -----END CERTIFICATE-----Generated at Wed May 13 01:34:11 2026 by rpki-client