$ rpki-client -vvf rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft File: AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft (raw, json) Hash identifier: Kbo74b4e6CTM6wnwP9u8JzZLrLXeCW9XASwZ1J7tFhQ= Subject key identifier: 7B:23:18:78:B7:67:60:4F:15:2F:8A:8F:B1:40:FF:64:E7:FF:0A:A5 Authority key identifier: AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 Certificate issuer: /CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Certificate serial: 7F4C4C64ACEECD3639CFE85216140BB36E587313 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft Manifest number: 57 Signing time: Mon 06 Jul 2026 10:02:51 +0000 Manifest this update: Mon 06 Jul 2026 09:57:51 +0000 Manifest next update: Tue 07 Jul 2026 10:10:51 +0000 Files and hashes: 1: AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl (hash: FcdzeRKOrXoCxUpcIYQW6dVeXCDWdp5+8TxB4e+iOOs=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: /oNv82I3Vm7TPqNqjll+3TrmIZVD8/SYFvS2zGG/dvA=) 3: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: 6suli2oOGR88rqZA8HRkXIo1ZZ9as8r45IT5Ea+nUsw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 10:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4c:4c:64:ac:ee:cd:36:39:cf:e8:52:16:14:0b:b3:6e:58:73:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Validity Not Before: Jul 6 09:57:51 2026 GMT Not After : Jul 7 10:10:51 2026 GMT Subject: CN=7B231878B767604F152F8A8FB140FF64E7FF0AA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6e:c4:16:74:d7:c7:58:5b:64:3e:56:15:de: bf:dd:74:88:23:ca:af:02:6b:7c:8a:a5:f8:6d:12: 35:2b:60:1a:95:b0:33:0b:8a:d1:ab:74:31:4e:b2: 0e:d8:e8:6c:58:eb:38:6c:fa:d7:d5:be:72:4e:1a: 76:d8:e4:77:41:26:6b:83:7f:f5:f4:da:ed:fe:a3: c0:a5:63:80:aa:e7:d5:bd:ec:bb:e9:90:e5:07:ee: 7b:b9:cc:7f:4c:b7:55:e9:2e:7f:ac:32:8e:5a:8f: fa:1c:66:89:28:49:3d:92:66:9c:ec:f0:4b:99:f5: 35:7d:6e:d2:a4:eb:77:67:3f:75:54:c9:a2:2a:9b: ca:76:f1:8a:fb:16:03:5c:60:18:56:02:aa:be:60: 55:f4:bf:af:29:7c:2d:31:ee:20:2d:be:f0:bc:09: 1f:e5:3b:69:eb:15:38:e5:14:4f:e5:4b:17:03:03: f9:37:4f:52:91:f2:89:e1:f3:52:93:15:b2:e5:3a: 43:35:f5:d5:16:0d:5a:0c:00:e4:10:95:df:da:87: 82:ee:db:d9:60:c7:1a:1e:30:41:c0:1c:37:f1:15: 18:6d:ea:64:9c:e3:53:57:08:a9:c4:a4:7d:77:a2: 8d:6c:64:ed:b7:78:f0:6d:7d:71:67:3a:ed:0c:13: 49:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:23:18:78:B7:67:60:4F:15:2F:8A:8F:B1:40:FF:64:E7:FF:0A:A5 X509v3 Authority Key Identifier: keyid:AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b4:16:09:f0:d9:75:5e:4b:f0:d5:30:b4:90:5e:dd:a5:7b: 0d:ab:79:87:f1:1b:a6:04:dc:47:b5:a1:06:b6:0e:08:ec:46: 62:b4:8a:c0:65:ae:38:d8:6e:d4:f7:dd:ab:e4:ad:d3:cb:be: 17:55:2f:61:c9:0e:61:64:47:79:e9:43:d6:cb:5c:ed:d7:75: 9b:61:4a:62:65:2e:5e:10:94:9b:ab:01:66:fc:c0:b4:eb:8d: 8e:ba:02:dc:79:e5:fd:4a:9c:57:44:c9:a2:cf:68:75:98:c1: 46:82:8d:bd:02:11:86:22:04:66:74:27:ac:8f:c7:7a:e5:da: e0:91:58:c2:aa:f7:0e:ad:32:3c:c3:8d:bb:b0:c8:c2:6f:1a: e7:71:08:0f:1d:f2:49:d4:d3:54:7d:30:0f:ff:3e:5c:05:bb: 0a:41:bd:2f:2a:10:44:6e:4a:fd:3d:40:74:69:ae:bc:ee:8b: 69:61:34:6b:dc:98:df:d1:cd:44:28:9c:07:fe:c1:42:d8:e3: 29:96:4b:cb:2f:d3:07:ee:75:eb:31:10:13:5b:bb:d4:af:26: 64:64:bf:96:66:e6:92:2c:5a:75:f3:73:eb:59:c7:eb:39:93: a1:68:a2:9d:c9:fb:7a:4a:b0:8e:c6:b7:f1:37:76:2b:70:1e: 69:f9:8d:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0xMZKzuzTY5z+hSFhQLs25YcxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0N0Ux NjdDRTI5NjAeFw0yNjA3MDYwOTU3NTFaFw0yNjA3MDcxMDEwNTFaMDMxMTAvBgNV BAMTKDdCMjMxODc4Qjc2NzYwNEYxNTJGOEE4RkIxNDBGRjY0RTdGRjBBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhbsQWdNfHWFtkPlYV3r/ddIgj yq8Ca3yKpfhtEjUrYBqVsDMLitGrdDFOsg7Y6GxY6zhs+tfVvnJOGnbY5HdBJmuD f/X02u3+o8ClY4Cq59W97LvpkOUH7nu5zH9Mt1XpLn+sMo5aj/ocZokoST2SZpzs 8EuZ9TV9btKk63dnP3VUyaIqm8p28Yr7FgNcYBhWAqq+YFX0v68pfC0x7iAtvvC8 CR/lO2nrFTjlFE/lSxcDA/k3T1KR8onh81KTFbLlOkM19dUWDVoMAOQQld/ah4Lu 29lgxxoeMEHAHDfxFRht6mSc41NXCKnEpH13oo1sZO23ePBtfXFnOu0ME0lfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeyMYeLdnYE8VL4qPsUD/ZOf/CqUwHwYDVR0j BBgwFoAUr80mY9oQNY/ppxqUDcj0fhZ84pYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAwYWUwZjEtYjhjMC00NTJmLThlODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNE QTEwMzU4RkU5QTcxQTk0MERDOEY0N0UxNjdDRTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkNEMjY2M0RBMTAzNThGRTlBNzFBOTQwREM4RjQ3RTE2N0NF Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0 N0UxNjdDRTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGy0Fgnw2XVeS/DVMLSQXt2lew2reYfxG6YE 3Ee1oQa2DgjsRmK0isBlrjjYbtT33avkrdPLvhdVL2HJDmFkR3npQ9bLXO3XdZth SmJlLl4QlJurAWb8wLTrjY66Atx55f1KnFdEyaLPaHWYwUaCjb0CEYYiBGZ0J6yP x3rl2uCRWMKq9w6tMjzDjbuwyMJvGudxCA8d8knU01R9MA//PlwFuwpBvS8qEERu Sv09QHRprrzui2lhNGvcmN/RzUQonAf+wULY4ymWS8sv0wfudesxEBNbu9SvJmRk v5Zm5pIsWnXzc+tZx+s5k6Foop3J+3pKsI7Gt/E3ditwHmn5jbU= -----END CERTIFICATE-----Generated at Mon Jul 6 12:53:29 2026 by rpki-client