$ rpki-client -vvf rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft File: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft (raw, json) Hash identifier: wJIlov4065aCDXmn87uSs6E2F/DGh3nPeC9XbrFlnZE= Subject key identifier: 90:10:89:D8:90:48:7B:02:03:16:DF:4A:C6:44:01:24:98:D9:B6:7C Authority key identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A Certificate issuer: /CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Certificate serial: 7E8D499347A06FD1F956C09458B629C17157478C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 22:03:23 +0000 Manifest this update: Mon 20 Jul 2026 21:58:23 +0000 Manifest next update: Wed 22 Jul 2026 01:54:23 +0000 Files and hashes: 1: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d37ZeGgHjVZzYq6CUddv0o+w23L0QGAKsBmc8dpggDQ=) 2: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: B4j0qT4PT3YdDkrmlfhYyZnafUYLOfUdcba19kZ7mRY=) 3: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl (hash: z6Rp5pYQhu5VZo0vU0+4uM1k2zsnIZcb8yMcnzTSd1w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8d:49:93:47:a0:6f:d1:f9:56:c0:94:58:b6:29:c1:71:57:47:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Validity Not Before: Jul 20 21:58:23 2026 GMT Not After : Jul 22 01:54:23 2026 GMT Subject: CN=901089D890487B020316DF4AC644012498D9B67C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:50:4a:ac:d6:92:88:e9:4c:bc:89:d0:fe: f6:c7:95:05:ed:16:22:af:bf:8a:63:bf:de:f5:f9: a3:78:10:e5:e8:08:1e:c2:84:93:08:ce:57:75:e6: 23:d5:83:25:fb:65:c2:aa:ac:84:04:19:d9:7e:42: 60:93:4b:74:6e:0d:43:39:cb:e8:11:54:a4:51:b2: c1:75:6b:b1:d7:d2:13:c1:2b:94:59:15:9a:5d:d8: 36:04:95:24:bf:58:c8:d5:16:13:32:6a:d0:3e:bf: dc:57:6f:ac:84:f7:1e:22:0d:f3:eb:2f:05:be:4d: bd:7f:9a:a8:3d:4c:f4:b5:c3:23:5d:13:66:18:f6: b2:d6:6c:bf:f5:e2:2e:43:55:f2:32:4e:a3:64:01: 2c:f5:7d:ec:d2:df:77:d5:31:d6:b7:12:9e:bf:8f: c3:d9:01:30:02:3c:4e:f6:5c:6b:b8:66:d1:04:42: e0:da:b7:3c:c6:81:9f:96:35:1d:bd:11:43:86:06: b6:2d:bc:68:37:1d:4e:ac:18:38:89:12:d9:99:c4: 74:ab:6d:88:e3:5b:db:d6:75:21:b6:f5:f5:41:bd: fb:8d:5a:8c:31:0a:cc:da:f3:59:c5:7f:14:0a:4d: e5:01:de:7d:45:cf:12:e7:1e:f7:d4:aa:89:8a:f4: dd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:10:89:D8:90:48:7B:02:03:16:DF:4A:C6:44:01:24:98:D9:B6:7C X509v3 Authority Key Identifier: keyid:AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:86:ab:5a:a2:88:59:41:a3:2e:17:3f:c7:4a:e6:88:86:53: 71:cd:0d:7c:d5:0d:bc:f0:e1:17:00:67:50:a1:6c:b3:9f:54: 35:44:fb:c6:b4:f1:be:a8:7a:dc:7c:c0:03:d2:2a:9f:56:63: 49:27:b8:f7:f3:58:6d:7c:cf:78:44:e9:63:b9:e5:a0:9d:8c: da:20:71:dc:d2:ff:5a:6c:ca:8f:2c:f4:73:a4:5b:9e:a6:16: e2:8c:94:fa:c4:d8:a9:eb:0d:18:19:6e:8f:52:e5:46:80:47: e5:5d:ff:00:18:ee:3f:93:06:2a:f6:75:60:f4:4a:58:47:ed: cc:2f:c5:fa:74:7b:55:af:cb:fe:3b:3f:3b:47:15:55:bd:1e: 1c:bc:92:01:1a:d5:9d:b9:d1:d7:45:17:fe:c8:79:00:6e:5b: a1:72:d6:64:05:ff:38:4d:39:18:78:79:f3:93:dd:7d:6d:d9: a5:ec:8d:75:7f:92:2d:f7:c3:7c:bd:74:ea:fc:29:b2:39:6f: a2:ed:55:73:d7:c1:20:2a:24:40:ae:e4:b6:53:3d:fe:ae:d5: 5c:61:c4:48:f2:a9:ef:86:65:02:7e:a4:bb:70:f2:85:1d:03: 33:dd:b2:f2:d5:4c:d0:61:45:89:e1:f8:89:aa:08:a4:a9:4e: ba:63:55:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfo1Jk0egb9H5VsCUWLYpwXFXR4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1N0Ux MjA5RDc3QTAeFw0yNjA3MjAyMTU4MjNaFw0yNjA3MjIwMTU0MjNaMDMxMTAvBgNV BAMTKDkwMTA4OUQ4OTA0ODdCMDIwMzE2REY0QUM2NDQwMTI0OThEOUI2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNVBKrNaSiOlMvInQ/vbHlQXt FiKvv4pjv971+aN4EOXoCB7ChJMIzld15iPVgyX7ZcKqrIQEGdl+QmCTS3RuDUM5 y+gRVKRRssF1a7HX0hPBK5RZFZpd2DYElSS/WMjVFhMyatA+v9xXb6yE9x4iDfPr LwW+Tb1/mqg9TPS1wyNdE2YY9rLWbL/14i5DVfIyTqNkASz1fezS33fVMda3Ep6/ j8PZATACPE72XGu4ZtEEQuDatzzGgZ+WNR29EUOGBrYtvGg3HU6sGDiJEtmZxHSr bYjjW9vWdSG29fVBvfuNWowxCsza81nFfxQKTeUB3n1FzxLnHvfUqomK9N2xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkBCJ2JBIewIDFt9KxkQBJJjZtnwwHwYDVR0j BBgwFoAUrxDC6QQK2x9BxavJ//3lfhIJ13owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUwNjMzZmMtZmUyMy00ZDgyLWJhNjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkw NDBBREIxRjQxQzVBQkM5RkZGREU1N0UxMjA5RDc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjEwQzJFOTA0MEFEQjFGNDFDNUFCQzlGRkZERTU3RTEyMDlE NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1 N0UxMjA5RDc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuGq1qiiFlBoy4XP8dK5oiGU3HNDXzVDbzw 4RcAZ1ChbLOfVDVE+8a08b6oetx8wAPSKp9WY0knuPfzWG18z3hE6WO55aCdjNog cdzS/1psyo8s9HOkW56mFuKMlPrE2KnrDRgZbo9S5UaAR+Vd/wAY7j+TBir2dWD0 SlhH7cwvxfp0e1Wvy/47PztHFVW9Hhy8kgEa1Z250ddFF/7IeQBuW6Fy1mQF/zhN ORh4efOT3X1t2aXsjXV/ki33w3y9dOr8KbI5b6LtVXPXwSAqJECu5LZTPf6u1Vxh xEjyqe+GZQJ+pLtw8oUdAzPdsvLVTNBhRYnh+ImqCKSpTrpjVRU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:56:54 2026 by rpki-client