$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft File: AF0C42FF385AC16D8868625322DDC9687E064976.mft (raw, json) Hash identifier: eUSqGV0fEBihvcwdmHvd5I6Sqdrx2QOLLpQi3T/HZ4E= Subject key identifier: 42:B5:11:B5:16:B4:51:3E:76:97:FF:E1:8C:8F:3A:D1:B0:B9:41:51 Authority key identifier: AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 Certificate issuer: /CN=AF0C42FF385AC16D8868625322DDC9687E064976 Certificate serial: 033AAD6210D71E1FF465ED79337CF51FB0672330 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 06:58:26 +0000 Manifest this update: Sat 26 Sep 2026 06:53:26 +0000 Manifest next update: Sun 27 Sep 2026 08:08:26 +0000 Files and hashes: 1: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: oLBZrJQYooXv1AaJqvvqFmmqga9DhEWLnd2Rras7ouk=) 2: AF0C42FF385AC16D8868625322DDC9687E064976.crl (hash: k+f8YcNtJ7wNax3+QPBlrGtIKYUqfZKr+eBW8lg9vkk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3a:ad:62:10:d7:1e:1f:f4:65:ed:79:33:7c:f5:1f:b0:67:23:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF0C42FF385AC16D8868625322DDC9687E064976 Validity Not Before: Sep 26 06:53:26 2026 GMT Not After : Sep 27 08:08:26 2026 GMT Subject: CN=42B511B516B4513E7697FFE18C8F3AD1B0B94151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:11:e4:2c:a6:8f:b6:96:46:34:fa:76:e1: 46:c5:f1:08:64:ce:a9:1c:d6:e0:19:1c:3a:ed:5c: d7:9e:67:17:90:78:1c:8d:38:c7:d1:fc:df:bd:26: 4d:af:cf:dd:53:8d:fe:19:63:0a:79:3d:c5:a8:f0: 7c:fd:ca:d6:73:fa:f9:8d:65:61:cc:28:fa:be:87: a1:3f:ab:0e:e4:e4:0f:95:bf:00:c2:4f:f2:25:21: 9d:c8:37:f6:a9:1b:d5:61:07:3c:91:41:c7:cc:1a: 9a:81:53:53:25:1e:52:a1:41:00:a6:6b:bc:93:6b: ec:e1:ca:95:8f:1d:40:ae:98:64:4c:2c:04:1a:fe: 05:54:c2:bc:39:f1:cf:6d:17:a1:09:f0:70:f8:36: f5:77:7b:de:a8:82:b0:78:8c:9d:98:9c:92:af:21: 49:57:73:e3:47:fc:47:f8:4a:7c:23:ca:cf:8b:fd: 79:d2:0a:8b:cb:3d:30:cf:27:64:e7:6e:69:cf:d8: 97:46:c7:fc:5d:64:3e:3b:e4:8b:21:21:5b:b3:16: 24:38:7c:b8:04:16:f9:44:4e:13:b9:7f:73:c2:21: 01:52:ac:d0:63:ee:24:49:a3:0b:fe:fd:8f:c2:9a: cb:ad:82:b6:fe:34:4c:42:10:db:b0:12:01:e3:b3: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B5:11:B5:16:B4:51:3E:76:97:FF:E1:8C:8F:3A:D1:B0:B9:41:51 X509v3 Authority Key Identifier: keyid:AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:dd:bc:32:11:f1:80:f4:0c:13:43:e2:0d:3c:1e:19:a4:1d: ea:76:ca:12:6d:1f:bc:95:60:c2:b1:3d:c2:26:65:ee:48:0f: a1:91:8f:da:9a:5f:cd:ef:0f:dc:82:ec:7d:c0:fa:7c:74:b3: 46:60:09:a9:2a:4d:9b:44:50:5b:62:5e:0d:e4:5e:cd:80:f7: 75:4f:42:ed:c1:62:75:17:f2:3f:ad:59:60:88:06:47:0c:b6: d6:e7:7d:63:7c:7d:78:4c:34:38:e4:2e:1c:c6:f8:37:72:87: 60:03:38:8e:48:af:b5:37:3c:00:7e:1d:1c:43:b9:4b:76:d4: 70:2a:35:8b:ed:95:78:53:f1:e4:07:b3:26:89:53:82:fb:41: cf:93:78:e1:fe:98:3a:b0:16:e3:25:e9:77:01:b6:03:82:38: 57:58:6a:1d:75:8d:73:5a:ce:19:a1:9c:4d:b3:f4:3b:1c:45: c3:67:b4:91:92:1f:31:f8:3f:62:55:10:29:cc:72:b4:3b:c7: 48:09:41:85:12:15:b2:49:d2:3b:87:6e:d5:7e:f8:0d:a8:67: f0:4d:e6:ee:71:4c:d7:8c:4b:94:5e:47:12:6d:15:79:fb:2f: 9e:66:7c:cd:2f:43:92:55:25:c2:ad:ca:13:9c:56:64:0c:dd: 0d:64:69:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzqtYhDXHh/0Ze15M3z1H7BnIzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3 RTA2NDk3NjAeFw0yNjA5MjYwNjUzMjZaFw0yNjA5MjcwODA4MjZaMDMxMTAvBgNV BAMTKDQyQjUxMUI1MTZCNDUxM0U3Njk3RkZFMThDOEYzQUQxQjBCOTQxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7RHkLKaPtpZGNPp24UbF8Qhk zqkc1uAZHDrtXNeeZxeQeByNOMfR/N+9Jk2vz91Tjf4ZYwp5PcWo8Hz9ytZz+vmN ZWHMKPq+h6E/qw7k5A+VvwDCT/IlIZ3IN/apG9VhBzyRQcfMGpqBU1MlHlKhQQCm a7yTa+zhypWPHUCumGRMLAQa/gVUwrw58c9tF6EJ8HD4NvV3e96ogrB4jJ2YnJKv IUlXc+NH/Ef4Snwjys+L/XnSCovLPTDPJ2TnbmnP2JdGx/xdZD475IshIVuzFiQ4 fLgEFvlEThO5f3PCIQFSrNBj7iRJowv+/Y/Cmsutgrb+NExCENuwEgHjs13BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQrURtRa0UT52l//hjI860bC5QVEwHwYDVR0j BBgwFoAUrwxC/zhawW2IaGJTIt3JaH4GSXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYz ODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3RTA2NDk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjBDNDJGRjM4NUFDMTZEODg2ODYyNTMyMkREQzk2ODdFMDY0 OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5 Njg3RTA2NDk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbdvDIR8YD0DBND4g08HhmkHep2yhJtH7yV YMKxPcImZe5ID6GRj9qaX83vD9yC7H3A+nx0s0ZgCakqTZtEUFtiXg3kXs2A93VP Qu3BYnUX8j+tWWCIBkcMttbnfWN8fXhMNDjkLhzG+Ddyh2ADOI5Ir7U3PAB+HRxD uUt21HAqNYvtlXhT8eQHsyaJU4L7Qc+TeOH+mDqwFuMl6XcBtgOCOFdYah11jXNa zhmhnE2z9DscRcNntJGSHzH4P2JVECnMcrQ7x0gJQYUSFbJJ0juHbtV++A2oZ/BN 5u5xTNeMS5ReRxJtFXn7L55mfM0vQ5JVJcKtyhOcVmQM3Q1kafQ= -----END CERTIFICATE-----Generated at Sat Sep 26 11:36:09 2026 by rpki-client