$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft File: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft (raw, json) Hash identifier: eAqFKoj6Jn3XFLoyY2u/vmlYlWfWNi2NYaW/Nq9Gi+U= Subject key identifier: 11:96:68:73:9D:B7:85:07:4E:6B:F0:86:AA:82:A1:99:D4:9A:EE:5C Authority key identifier: AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A Certificate issuer: /CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Certificate serial: 09A9BBA08667418D1D84DDA9B8BA2185ABFB3C02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 13:45:21 +0000 Manifest this update: Wed 04 Nov 2026 13:40:21 +0000 Manifest next update: Thu 05 Nov 2026 17:42:21 +0000 Files and hashes: 1: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: yrLvhSGItcv2/8/qx9t+UKr0DTpSKLWTcCZshoqb+Zo=) 2: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl (hash: eDQ1/ijOxQQp0Qnp2tBvK6GMOah6FGUmtotveo4TnGw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a9:bb:a0:86:67:41:8d:1d:84:dd:a9:b8:ba:21:85:ab:fb:3c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Validity Not Before: Nov 4 13:40:21 2026 GMT Not After : Nov 5 17:42:21 2026 GMT Subject: CN=119668739DB785074E6BF086AA82A199D49AEE5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:42:bf:04:b9:e0:78:d4:0a:24:29:f8:a9: 6e:9d:7a:5c:86:28:d3:03:6c:e6:b3:68:9d:05:3f: b9:21:ed:7a:10:15:d5:83:16:80:43:a8:b2:f5:38: cb:c3:87:a5:5b:30:d9:ae:f6:8d:ba:84:c0:b4:e7: 9f:cd:73:c1:e3:f3:4e:6c:45:fa:5b:03:59:f5:3a: 2c:bc:af:f0:8a:b2:52:7a:23:51:fc:e7:53:bd:ed: d9:59:41:4a:d7:ca:df:4c:75:73:c8:22:31:5c:78: ed:5c:4e:48:00:0c:5b:5e:3a:87:0c:36:e6:32:84: 05:c9:ad:7b:0b:30:2f:13:1c:a5:25:a5:a5:7c:10: ca:03:ee:51:08:8a:39:bb:ac:88:c2:a3:88:ed:3d: 20:7f:50:bd:bb:cf:73:e1:e7:f1:b3:5e:05:45:31: 7d:a7:5f:78:67:25:23:39:2d:35:18:a4:17:c0:8b: e5:aa:6f:f4:0f:dc:b8:fe:00:36:c0:d2:8c:ae:1b: ce:44:55:ad:5f:62:c8:88:d8:c9:e2:24:89:dc:3a: 5f:ba:40:59:84:07:74:f0:69:ce:26:7e:28:9a:9a: 35:fa:c1:d9:75:b0:bb:e3:f8:27:47:9e:3a:78:9a: 09:70:a1:16:d3:f1:7f:43:5e:6a:27:66:13:4b:71: de:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:96:68:73:9D:B7:85:07:4E:6B:F0:86:AA:82:A1:99:D4:9A:EE:5C X509v3 Authority Key Identifier: keyid:AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c7:07:18:c5:72:b3:83:4e:57:e3:45:9b:f8:b8:81:cc:7b: 7b:31:2b:c6:4a:66:18:60:6e:95:5e:2c:24:fe:a1:ba:16:9c: c9:d5:b9:c4:e8:d5:e5:ae:50:ff:60:fe:1a:b1:2e:5c:21:56: b3:11:e6:31:c8:67:5d:2c:e2:dc:05:2d:a3:66:b2:36:cb:bf: 74:c3:b1:8c:9b:35:62:ea:28:60:a5:76:9b:f5:42:fe:30:01: 08:cc:0a:ba:58:8c:52:f3:f0:d1:ab:c6:ed:3f:56:ad:a3:84: 94:7d:a0:a1:c3:65:c1:3b:1d:3a:6e:fe:c7:04:e0:58:9e:3c: 55:79:af:b1:bf:09:a6:d7:64:92:51:a2:d1:f4:a9:23:01:0a: a9:46:c1:c7:2e:a7:e2:6f:50:1b:20:b3:54:35:b7:73:12:7b: a2:5c:16:e0:49:be:48:0a:56:b5:2e:50:f8:8f:00:99:c9:b8: 8f:e2:00:d4:5a:c3:1d:b8:44:69:62:53:fe:05:ca:51:5d:3a: 2f:ba:92:4d:f6:eb:17:b1:d0:a3:02:d7:ff:93:61:39:63:4c: e9:29:c2:dd:77:59:27:6f:79:f7:02:bd:66:b1:8d:84:b5:42: 40:01:ae:71:50:f7:03:f2:87:46:7d:37:6a:80:c2:8d:0d:ce: b9:b7:b3:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCam7oIZnQY0dhN2puLohhav7PAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAx QTQ1RjIwQTAeFw0yNjExMDQxMzQwMjFaFw0yNjExMDUxNzQyMjFaMDMxMTAvBgNV BAMTKDExOTY2ODczOURCNzg1MDc0RTZCRjA4NkFBODJBMTk5RDQ5QUVFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0EK/BLngeNQKJCn4qW6delyG KNMDbOazaJ0FP7kh7XoQFdWDFoBDqLL1OMvDh6VbMNmu9o26hMC055/Nc8Hj805s RfpbA1n1Oiy8r/CKslJ6I1H851O97dlZQUrXyt9MdXPIIjFceO1cTkgADFteOocM NuYyhAXJrXsLMC8THKUlpaV8EMoD7lEIijm7rIjCo4jtPSB/UL27z3Ph5/GzXgVF MX2nX3hnJSM5LTUYpBfAi+Wqb/QP3Lj+ADbA0oyuG85EVa1fYsiI2MniJIncOl+6 QFmEB3Twac4mfiiamjX6wdl1sLvj+CdHnjp4mglwoRbT8X9DXmonZhNLcd79AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEZZoc523hQdOa/CGqoKhmdSa7lwwHwYDVR0j BBgwFoAUrzyCCFjD/lpubFfoQ+HP0BpF8gowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM2YjVhYmMtMmM1NC00YzVmLWIzZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1 OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAxQTQ1RjIwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjNDODIwODU4QzNGRTVBNkU2QzU3RTg0M0UxQ0ZEMDFBNDVG MjBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNG RDAxQTQ1RjIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLHBxjFcrODTlfjRZv4uIHMe3sxK8ZKZhhg bpVeLCT+oboWnMnVucTo1eWuUP9g/hqxLlwhVrMR5jHIZ10s4twFLaNmsjbLv3TD sYybNWLqKGCldpv1Qv4wAQjMCrpYjFLz8NGrxu0/Vq2jhJR9oKHDZcE7HTpu/scE 4FiePFV5r7G/CabXZJJRotH0qSMBCqlGwccup+JvUBsgs1Q1t3MSe6JcFuBJvkgK VrUuUPiPAJnJuI/iANRawx24RGliU/4FylFdOi+6kk326xex0KMC1/+TYTljTOkp wt13WSdvefcCvWaxjYS1QkABrnFQ9wPyh0Z9N2qAwo0Nzrm3s98= -----END CERTIFICATE-----Generated at Thu Nov 5 01:16:52 2026 by rpki-client