$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft File: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft (raw, json) Hash identifier: xm1DCe88ASPBgCRYqkDmK2O4iQ12j7Cd2vBE2cthEg4= Subject key identifier: 47:08:01:BB:89:A1:3E:0B:9D:6B:B6:FD:9C:9A:8F:8A:B0:76:34:D8 Authority key identifier: AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E Certificate issuer: /CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Certificate serial: 5CCB4FF421DF8D2F6E4FD79C534B4D0DFFE20C94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 10:19:50 +0000 Manifest this update: Thu 03 Sep 2026 10:14:50 +0000 Manifest next update: Fri 04 Sep 2026 12:54:50 +0000 Files and hashes: 1: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: DT0k1jYnw4OjyEhmmqbUNUqGWP5UkTu1MpqB2VuvB0M=) 2: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl (hash: mFUwrrzhyF+Yhq/zoniHVw77e+FD+xln9iwKjaxTjKQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:cb:4f:f4:21:df:8d:2f:6e:4f:d7:9c:53:4b:4d:0d:ff:e2:0c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Validity Not Before: Sep 3 10:14:50 2026 GMT Not After : Sep 4 12:54:50 2026 GMT Subject: CN=470801BB89A13E0B9D6BB6FD9C9A8F8AB07634D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:c1:4c:68:2b:81:00:97:a0:30:9e:5e:83: 99:46:d7:12:16:1a:0d:2f:6d:14:7b:1f:43:f7:7f: 1f:b5:3f:49:c9:79:b2:44:0b:81:ea:85:2d:a2:3f: a1:cc:a5:a9:57:eb:b7:c1:81:ed:af:32:e3:04:33: 22:c0:cd:0a:5f:9b:25:d9:7f:7e:7a:17:66:3b:62: 03:4d:45:78:86:b6:e9:ed:49:ea:0a:b1:f9:2f:bb: 8f:2d:89:fa:10:63:10:47:88:d9:9d:41:39:2f:e3: e1:0a:48:7d:db:a6:e7:4f:43:13:e8:8b:f7:8e:e9: 77:c0:13:ce:4e:ea:54:b7:57:ab:21:c6:53:5d:be: e6:dc:4d:d9:ff:2b:fb:ab:94:56:2e:50:4e:d0:fa: 3f:b1:71:a9:4a:77:1a:1a:37:50:3a:8d:ff:53:da: 43:32:1c:0a:2c:89:b7:7a:9c:64:95:e9:1e:0d:5e: a7:89:4e:06:3e:b3:28:8c:00:82:78:59:ff:1a:65: 29:7e:e6:8d:b4:05:bd:62:f0:ba:32:45:29:39:0c: e1:d6:96:32:00:f4:7a:71:a2:d2:9a:72:3f:6f:78: f0:25:36:7c:ba:2c:d9:87:56:0b:e0:13:5b:64:0f: 75:24:6f:15:f2:f7:99:3c:52:03:1d:6e:b7:7e:09: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:08:01:BB:89:A1:3E:0B:9D:6B:B6:FD:9C:9A:8F:8A:B0:76:34:D8 X509v3 Authority Key Identifier: keyid:AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6d:9d:f9:27:aa:1f:d0:5e:03:3d:9f:32:76:b8:e5:92:2e: 88:4a:94:9b:a2:c0:eb:67:ac:d3:b2:20:94:c4:f8:6a:33:70: 4e:16:25:05:05:65:bd:3b:e8:f6:d5:32:1a:0a:6e:b5:52:3f: 2e:c0:d8:c5:58:3e:62:e8:dc:37:e4:21:e9:aa:a3:73:06:81: df:da:1c:24:36:c5:c0:01:42:92:4c:23:61:cf:47:65:8f:2f: 86:aa:38:15:16:6b:59:05:d2:8a:04:66:96:4a:1b:fd:5c:0f: bd:01:6d:ea:d4:8d:95:63:bb:a5:a2:11:ab:f9:b6:55:6c:67: 94:bc:f4:b3:11:9d:d2:ff:96:33:59:e0:5e:51:f7:cb:1d:82: 8a:b9:a6:13:f2:ce:c6:0a:a1:73:e2:e8:57:5a:5c:89:e0:fd: 8a:27:32:58:b1:c6:ef:35:77:79:34:9d:59:38:71:bf:9c:cc: a8:c2:94:20:78:bf:c7:f6:6b:56:c8:44:a3:24:f3:71:03:fc: 9b:16:7f:d4:5f:65:a3:88:08:12:9c:2a:14:43:89:56:e3:8d: 8f:29:57:22:fd:bf:f4:11:e2:97:3e:44:b2:af:de:b4:84:60: 6f:91:14:6e:6e:8a:7b:79:03:2a:38:c5:5c:ca:2e:9f:4e:a8: f0:b5:44:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMtP9CHfjS9uT9ecU0tNDf/iDJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUz QUEzNUU2RTAeFw0yNjA5MDMxMDE0NTBaFw0yNjA5MDQxMjU0NTBaMDMxMTAvBgNV BAMTKDQ3MDgwMUJCODlBMTNFMEI5RDZCQjZGRDlDOUE4RjhBQjA3NjM0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79sFMaCuBAJegMJ5eg5lG1xIW Gg0vbRR7H0P3fx+1P0nJebJEC4HqhS2iP6HMpalX67fBge2vMuMEMyLAzQpfmyXZ f356F2Y7YgNNRXiGtuntSeoKsfkvu48tifoQYxBHiNmdQTkv4+EKSH3bpudPQxPo i/eO6XfAE85O6lS3V6shxlNdvubcTdn/K/urlFYuUE7Q+j+xcalKdxoaN1A6jf9T 2kMyHAosibd6nGSV6R4NXqeJTgY+syiMAIJ4Wf8aZSl+5o20Bb1i8LoyRSk5DOHW ljIA9HpxotKacj9vePAlNny6LNmHVgvgE1tkD3UkbxXy95k8UgMdbrd+CesLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURwgBu4mhPguda7b9nJqPirB2NNgwHwYDVR0j BBgwFoAUrxrfWDrFADAnKBpOyr993jqjXm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiZjg2NDEtYmY3MC00ZTNmLTk4NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgz QUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUzQUEzNUU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjFBREY1ODNBQzUwMDMwMjcyODFBNEVDQUJGN0RERTNBQTM1 RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdE REUzQUEzNUU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZtnfknqh/QXgM9nzJ2uOWSLohKlJuiwOtn rNOyIJTE+GozcE4WJQUFZb076PbVMhoKbrVSPy7A2MVYPmLo3DfkIemqo3MGgd/a HCQ2xcABQpJMI2HPR2WPL4aqOBUWa1kF0ooEZpZKG/1cD70BberUjZVju6WiEav5 tlVsZ5S89LMRndL/ljNZ4F5R98sdgoq5phPyzsYKoXPi6FdaXIng/YonMlixxu81 d3k0nVk4cb+czKjClCB4v8f2a1bIRKMk83ED/JsWf9RfZaOICBKcKhRDiVbjjY8p VyL9v/QR4pc+RLKv3rSEYG+RFG5uint5Ayo4xVzKLp9OqPC1RAs= -----END CERTIFICATE-----Generated at Thu Sep 3 12:35:03 2026 by rpki-client