$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft File: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft (raw, json) Hash identifier: CRTUe9j6MPUD+EMhPBNvjWGdWny3u4hmm1S2IpVhVH0= Subject key identifier: 26:0A:70:F1:C9:4B:15:F0:75:52:A1:64:D8:E0:FB:52:FA:76:90:78 Authority key identifier: AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A Certificate issuer: /CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Certificate serial: 76F7D9ACC75CACADA7F3594197C0E4B73D1237CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 15:00:06 +0000 Manifest this update: Mon 20 Jul 2026 14:55:06 +0000 Manifest next update: Tue 21 Jul 2026 17:13:06 +0000 Files and hashes: 1: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl (hash: xhs7g0C4NSTLuQ+PwktWZuAKq41jUgXUrcTrjuEtI8w=) 2: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: yrLvhSGItcv2/8/qx9t+UKr0DTpSKLWTcCZshoqb+Zo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f7:d9:ac:c7:5c:ac:ad:a7:f3:59:41:97:c0:e4:b7:3d:12:37:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Validity Not Before: Jul 20 14:55:06 2026 GMT Not After : Jul 21 17:13:06 2026 GMT Subject: CN=260A70F1C94B15F07552A164D8E0FB52FA769078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:96:d3:5a:94:8f:2e:36:0e:ad:d1:8b:a0: 61:fd:b3:81:6b:8b:46:be:09:63:ea:8d:af:ca:2f: 7a:a8:52:01:43:7f:a6:2b:9c:e0:a2:9a:3e:dd:8b: f3:b1:bb:f3:5e:9b:fe:a0:ae:d8:2c:02:ed:31:ec: bb:58:e5:d5:89:89:96:c4:a6:b7:e5:18:f9:d1:64: b9:6f:cb:51:9e:d4:86:9a:a8:a3:8f:1d:3d:7e:58: be:e8:d1:00:39:aa:3b:46:9f:52:c9:cf:91:d1:14: 52:08:fd:49:e3:bc:3f:7b:25:5d:5f:fa:ba:26:30: 1a:7d:2f:10:b2:f1:f9:4a:18:a1:61:d3:f5:e3:98: 8a:01:34:f0:e7:3f:b5:0d:bb:e0:8b:66:95:01:1a: 6d:b0:97:ac:28:35:d3:92:27:79:86:d2:6e:d0:12: b1:d4:ef:7f:9b:59:e7:bc:48:32:ae:9f:29:d9:4f: ec:bd:8e:c8:25:fb:d7:35:4e:2e:cb:ac:00:c9:39: 96:ef:91:02:d8:db:4b:be:bc:51:a9:4b:1f:fd:4c: f9:e2:00:4a:27:ff:da:d0:ec:e8:79:24:df:cc:24: 5c:60:04:c6:d3:1c:d1:fb:fd:8e:a9:be:af:fd:bd: 7a:bb:88:08:8b:7d:40:25:6e:45:0c:d6:d8:39:71: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0A:70:F1:C9:4B:15:F0:75:52:A1:64:D8:E0:FB:52:FA:76:90:78 X509v3 Authority Key Identifier: keyid:AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9b:1b:b6:d0:ec:97:b4:9a:96:10:91:38:68:ab:76:f0:1e: ab:05:33:22:ce:1c:77:f3:db:4c:1e:bb:31:4c:5a:07:8a:6a: e3:53:09:4c:52:11:5a:f6:5a:18:ae:eb:d1:83:1a:96:e5:74: c1:46:78:c6:0f:0d:30:fb:9b:f1:63:27:f2:62:8d:83:ad:8e: f3:70:5a:3a:c8:0b:d1:39:98:fc:7f:40:51:11:30:1e:a5:b3: 51:e8:28:c5:02:1d:71:f7:42:98:ec:12:e5:fe:6b:36:a6:88: d5:45:35:4d:ac:20:3f:7c:7b:52:5a:3f:95:6a:01:00:8d:41: 93:ea:99:28:79:04:13:18:09:64:f5:de:af:14:dc:0c:fa:6c: af:73:4f:0d:64:d6:b9:16:6d:f4:4d:ed:a3:ab:30:5d:c4:9c: 16:86:19:57:5e:6b:e2:d1:cc:6e:8e:d8:5b:e4:29:fe:1c:2a: c3:52:06:02:a9:55:4d:88:7c:a9:2a:91:28:36:dc:1c:0d:d9: 8f:a8:6f:d3:f6:f4:06:2f:fb:ae:71:91:f7:ea:85:dc:93:ae: 58:4f:be:02:e7:99:1b:25:fe:fe:a4:cc:1a:df:2d:14:ba:fd: 2e:48:5e:dc:ba:7f:59:e3:7a:14:f6:52:fa:84:8f:2b:ff:15: f2:43:12:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvfZrMdcrK2n81lBl8Dktz0SN8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAx QTQ1RjIwQTAeFw0yNjA3MjAxNDU1MDZaFw0yNjA3MjExNzEzMDZaMDMxMTAvBgNV BAMTKDI2MEE3MEYxQzk0QjE1RjA3NTUyQTE2NEQ4RTBGQjUyRkE3NjkwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpJbTWpSPLjYOrdGLoGH9s4Fr i0a+CWPqja/KL3qoUgFDf6YrnOCimj7di/Oxu/Nem/6grtgsAu0x7LtY5dWJiZbE prflGPnRZLlvy1Ge1IaaqKOPHT1+WL7o0QA5qjtGn1LJz5HRFFII/UnjvD97JV1f +romMBp9LxCy8flKGKFh0/XjmIoBNPDnP7UNu+CLZpUBGm2wl6woNdOSJ3mG0m7Q ErHU73+bWee8SDKunynZT+y9jsgl+9c1Ti7LrADJOZbvkQLY20u+vFGpSx/9TPni AEon/9rQ7Oh5JN/MJFxgBMbTHNH7/Y6pvq/9vXq7iAiLfUAlbkUM1tg5cZKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJgpw8clLFfB1UqFk2OD7Uvp2kHgwHwYDVR0j BBgwFoAUrzyCCFjD/lpubFfoQ+HP0BpF8gowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM2YjVhYmMtMmM1NC00YzVmLWIzZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1 OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAxQTQ1RjIwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjNDODIwODU4QzNGRTVBNkU2QzU3RTg0M0UxQ0ZEMDFBNDVG MjBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNG RDAxQTQ1RjIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGbG7bQ7Je0mpYQkThoq3bwHqsFMyLOHHfz 20weuzFMWgeKauNTCUxSEVr2Whiu69GDGpbldMFGeMYPDTD7m/FjJ/JijYOtjvNw WjrIC9E5mPx/QFERMB6ls1HoKMUCHXH3QpjsEuX+azamiNVFNU2sID98e1JaP5Vq AQCNQZPqmSh5BBMYCWT13q8U3Az6bK9zTw1k1rkWbfRN7aOrMF3EnBaGGVdea+LR zG6O2FvkKf4cKsNSBgKpVU2IfKkqkSg23BwN2Y+ob9P29AYv+65xkffqhdyTrlhP vgLnmRsl/v6kzBrfLRS6/S5IXty6f1njehT2UvqEjyv/FfJDErs= -----END CERTIFICATE-----Generated at Tue Jul 21 08:23:58 2026 by rpki-client