$ rpki-client -vvf rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft File: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft (raw, json) Hash identifier: GuZhyhkI+QLyjxPn0RkhzOg03nsDcNa0lCLeHjOLDPc= Subject key identifier: CA:59:45:4F:2E:48:B4:6F:D4:40:BA:E1:D9:0A:07:B1:87:97:C1:21 Authority key identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A Certificate issuer: /CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Certificate serial: 4D9F966DB4307D23F400796FE32B5DE88FC161B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 15:54:16 +0000 Manifest this update: Tue 02 Jun 2026 15:49:16 +0000 Manifest next update: Wed 03 Jun 2026 19:13:16 +0000 Files and hashes: 1: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl (hash: lr5Zr5Ldy3BVOKo9z5leMI/Cn2seqYUybOm7Btk6+9s=) 2: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: B4j0qT4PT3YdDkrmlfhYyZnafUYLOfUdcba19kZ7mRY=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d37ZeGgHjVZzYq6CUddv0o+w23L0QGAKsBmc8dpggDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9f:96:6d:b4:30:7d:23:f4:00:79:6f:e3:2b:5d:e8:8f:c1:61:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Validity Not Before: Jun 2 15:49:16 2026 GMT Not After : Jun 3 19:13:16 2026 GMT Subject: CN=CA59454F2E48B46FD440BAE1D90A07B18797C121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:27:46:32:89:76:29:63:28:c7:06:c8:b1:bc: fb:c0:ec:cb:83:c0:e8:5f:ee:d0:c1:a8:a8:e4:a0: 9e:bc:4c:a3:a7:79:c5:9b:56:56:f6:0b:55:0a:a1: e4:98:bc:f5:fd:d0:48:2d:15:23:0a:86:73:7b:d1: 8f:57:dd:8d:ce:85:d7:9a:ea:d2:b7:70:98:64:5e: ea:97:97:ca:82:be:7f:79:1b:ee:cb:c0:c6:d2:e3: ec:cd:17:1c:11:bf:dc:fd:aa:65:95:46:9c:c9:23: 82:7b:42:cb:f1:7b:54:51:83:b5:dd:bb:07:ab:89: f5:9c:4d:50:ee:cd:a3:e2:85:65:0c:8a:7a:a9:9c: 62:25:bb:71:9c:20:3c:b6:ce:17:ec:4e:d7:64:bf: 88:4c:95:10:38:1f:48:a7:31:e8:e5:b9:14:b4:dc: b7:ae:28:1f:55:4d:22:a4:8b:fe:bd:36:c2:5d:2d: 57:48:c7:58:fc:14:8c:3e:76:66:e8:bb:c5:03:ad: e8:f3:58:c8:7f:af:78:41:c8:2e:27:db:10:79:12: 6d:05:1a:4c:50:93:5e:d0:18:bf:62:4b:d6:b0:e2: 35:35:24:ee:29:6b:11:7d:00:fa:bc:6e:6f:eb:66: 11:2b:26:b2:e4:f2:12:bc:36:1e:d4:13:14:d3:08: 82:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:59:45:4F:2E:48:B4:6F:D4:40:BA:E1:D9:0A:07:B1:87:97:C1:21 X509v3 Authority Key Identifier: keyid:AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:22:cc:86:d2:58:b8:df:f3:49:87:b5:8f:38:5d:54:2f:44: 62:32:4c:27:02:7b:8f:3b:2b:b9:9e:7f:db:b6:65:82:eb:44: 71:e7:eb:1b:12:71:a5:65:fb:1e:2b:14:6a:7a:06:2c:3b:92: 7f:10:2b:93:9f:a6:9f:30:5a:52:6b:e2:75:41:2a:c0:c8:82: 8a:18:05:40:6e:71:c6:15:5c:5e:3e:00:57:05:2d:73:ab:4e: 4a:58:e9:ff:52:71:03:f5:4c:e9:f7:9f:86:64:7f:f2:55:4b: 9c:ed:3f:b6:ef:7f:b6:18:29:6c:cf:b2:0d:2d:ab:97:b4:7b: dc:b5:68:65:c9:35:d8:6e:c7:f8:83:ba:6f:75:f6:76:5d:ee: a7:3d:85:e7:63:f1:01:4f:46:a9:52:e3:f0:7f:13:a2:8f:9f: 29:ca:b5:76:b6:c3:73:08:54:23:c5:69:39:6c:43:db:bf:78: 86:ca:b4:83:a6:7b:2c:18:2b:f3:a4:f8:0d:d8:7c:90:df:63: a7:08:04:4e:bd:3a:a0:8d:ab:85:b1:2e:46:7b:e1:25:e1:0e: 53:d5:a7:df:3a:b7:e8:f1:3d:ef:a2:5c:73:af:2b:9f:7f:fc: 7c:c0:c8:14:5f:04:4f:d6:92:52:d1:88:56:9f:3d:b0:08:eb: b2:db:bc:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZ+WbbQwfSP0AHlv4ytd6I/BYbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1N0Ux MjA5RDc3QTAeFw0yNjA2MDIxNTQ5MTZaFw0yNjA2MDMxOTEzMTZaMDMxMTAvBgNV BAMTKENBNTk0NTRGMkU0OEI0NkZENDQwQkFFMUQ5MEEwN0IxODc5N0MxMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVJ0YyiXYpYyjHBsixvPvA7MuD wOhf7tDBqKjkoJ68TKOnecWbVlb2C1UKoeSYvPX90EgtFSMKhnN70Y9X3Y3Ohdea 6tK3cJhkXuqXl8qCvn95G+7LwMbS4+zNFxwRv9z9qmWVRpzJI4J7Qsvxe1RRg7Xd uwerifWcTVDuzaPihWUMinqpnGIlu3GcIDy2zhfsTtdkv4hMlRA4H0inMejluRS0 3LeuKB9VTSKki/69NsJdLVdIx1j8FIw+dmbou8UDrejzWMh/r3hByC4n2xB5Em0F GkxQk17QGL9iS9aw4jU1JO4paxF9APq8bm/rZhErJrLk8hK8Nh7UExTTCILzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyllFTy5ItG/UQLrh2QoHsYeXwSEwHwYDVR0j BBgwFoAUrxDC6QQK2x9BxavJ//3lfhIJ13owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUwNjMzZmMtZmUyMy00ZDgyLWJhNjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkw NDBBREIxRjQxQzVBQkM5RkZGREU1N0UxMjA5RDc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjEwQzJFOTA0MEFEQjFGNDFDNUFCQzlGRkZERTU3RTEyMDlE NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1 N0UxMjA5RDc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQizIbSWLjf80mHtY84XVQvRGIyTCcCe487 K7mef9u2ZYLrRHHn6xsScaVl+x4rFGp6Biw7kn8QK5Ofpp8wWlJr4nVBKsDIgooY BUBuccYVXF4+AFcFLXOrTkpY6f9ScQP1TOn3n4Zkf/JVS5ztP7bvf7YYKWzPsg0t q5e0e9y1aGXJNdhux/iDum919nZd7qc9hedj8QFPRqlS4/B/E6KPnynKtXa2w3MI VCPFaTlsQ9u/eIbKtIOmeywYK/Ok+A3YfJDfY6cIBE69OqCNq4WxLkZ74SXhDlPV p986t+jxPe+iXHOvK59//HzAyBRfBE/WklLRiFafPbAI67LbvN4= -----END CERTIFICATE-----Generated at Wed Jun 3 03:46:23 2026 by rpki-client