$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft File: AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft (raw, json) Hash identifier: rJAGJXwd9MNNF9fd6p7eeWaAT8Ok8TkbHQMwE7dZ2EU= Subject key identifier: 3F:72:29:61:9E:4F:68:48:63:E3:2C:4E:82:C5:84:EB:C4:36:B0:0D Authority key identifier: AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 Certificate issuer: /CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Certificate serial: 75B4398C9E47EF86B7B0578A47BFC1CADC91C8A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 09:08:33 +0000 Manifest this update: Thu 03 Sep 2026 09:03:33 +0000 Manifest next update: Fri 04 Sep 2026 10:04:33 +0000 Files and hashes: 1: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: 6suli2oOGR88rqZA8HRkXIo1ZZ9as8r45IT5Ea+nUsw=) 2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: /oNv82I3Vm7TPqNqjll+3TrmIZVD8/SYFvS2zGG/dvA=) 3: AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl (hash: IG4iVzzldZhH2BAAWzf3OeF/+TiSh1wWHoF3I3raBYs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 10:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b4:39:8c:9e:47:ef:86:b7:b0:57:8a:47:bf:c1:ca:dc:91:c8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Validity Not Before: Sep 3 09:03:33 2026 GMT Not After : Sep 4 10:04:33 2026 GMT Subject: CN=3F7229619E4F684863E32C4E82C584EBC436B00D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4d:be:81:cb:58:d6:48:e9:d0:8f:fe:7c:a1: 89:80:44:66:3c:7c:3c:0c:68:ca:69:44:97:b3:03: 2c:76:4f:9c:d5:c8:5a:c6:b9:cf:36:19:07:dd:2b: 5c:8a:1e:f6:93:64:b0:d0:4c:ff:e8:8b:b8:9e:d5: ba:33:d1:88:9e:c9:7d:0f:9b:39:1f:a5:fd:a5:30: af:46:06:c7:61:36:ab:46:36:aa:78:5f:74:19:84: e6:3a:13:4b:87:9d:80:e6:67:e9:c5:ad:1e:ae:04: 69:e0:35:39:2f:40:09:50:ff:61:2b:1a:01:6b:d1: 05:aa:89:aa:f6:ef:f4:5e:3f:3d:53:8c:39:83:30: d7:d0:5a:46:e7:e2:4b:09:cb:02:90:43:dc:d0:44: fa:59:a6:84:82:d1:09:9f:9f:fb:58:b6:42:61:d4: dd:ac:7b:4c:fa:5c:a5:b6:1f:69:d5:ad:33:c5:46: 8e:6a:6d:4c:f8:76:32:05:d1:ed:47:a4:20:f0:a0: 09:02:b7:4f:41:ee:06:bc:6f:e5:34:65:0e:23:c7: 8b:ef:e0:56:fa:89:a3:ad:cb:9e:e1:34:a6:1f:32: 3b:63:fe:a1:88:3b:79:0f:21:13:88:04:a7:38:29: 41:c1:82:92:c5:46:53:74:1f:07:e7:0a:2b:3a:7e: 04:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:72:29:61:9E:4F:68:48:63:E3:2C:4E:82:C5:84:EB:C4:36:B0:0D X509v3 Authority Key Identifier: keyid:AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:79:ea:c4:a4:67:46:af:e7:d6:03:56:ad:ae:14:3e:10:88: 77:75:a4:2c:6d:28:ab:f1:e5:e6:3f:96:cb:2e:57:e6:5b:a6: dc:32:d8:b1:c7:64:4d:bd:53:32:ae:cc:cf:fb:6d:fe:3a:6a: 6c:39:9e:58:48:de:62:94:3d:c4:d6:1a:83:b8:5d:f6:a3:11: 56:55:19:d2:6c:a9:25:ad:05:9d:28:41:76:b5:37:01:c3:12: 48:d4:d8:59:43:f6:b4:32:07:68:56:a9:33:b2:f2:73:2c:c4: 3f:41:8d:27:87:16:68:7d:46:49:1b:b7:69:87:cc:78:b7:f8: 78:4d:ed:9e:d6:4c:95:a7:2b:48:29:1a:91:45:52:d2:b6:e3: a5:b1:85:2e:8f:7f:eb:cf:a5:1d:78:24:6f:df:d7:8a:95:59: f5:a5:df:34:af:ea:7f:47:76:0f:79:e7:03:12:cd:86:5e:e1: df:9d:a4:1d:47:dd:92:be:2a:0e:97:5e:23:4b:4f:8d:90:57: 7f:f1:e4:4e:82:87:c6:29:81:15:a5:b3:35:33:2d:eb:b0:b2: 54:64:90:93:80:c9:5b:3f:31:66:8b:94:7d:43:ad:19:5d:75: 14:bb:39:af:86:42:2a:9c:c5:5e:c6:29:d6:25:31:70:ad:e4: 01:74:fb:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbQ5jJ5H74a3sFeKR7/BytyRyKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0N0Ux NjdDRTI5NjAeFw0yNjA5MDMwOTAzMzNaFw0yNjA5MDQxMDA0MzNaMDMxMTAvBgNV BAMTKDNGNzIyOTYxOUU0RjY4NDg2M0UzMkM0RTgyQzU4NEVCQzQzNkIwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTb6By1jWSOnQj/58oYmARGY8 fDwMaMppRJezAyx2T5zVyFrGuc82GQfdK1yKHvaTZLDQTP/oi7ie1boz0YieyX0P mzkfpf2lMK9GBsdhNqtGNqp4X3QZhOY6E0uHnYDmZ+nFrR6uBGngNTkvQAlQ/2Er GgFr0QWqiar27/RePz1TjDmDMNfQWkbn4ksJywKQQ9zQRPpZpoSC0Qmfn/tYtkJh 1N2se0z6XKW2H2nVrTPFRo5qbUz4djIF0e1HpCDwoAkCt09B7ga8b+U0ZQ4jx4vv 4Fb6iaOty57hNKYfMjtj/qGIO3kPIROIBKc4KUHBgpLFRlN0HwfnCis6fgR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP3IpYZ5PaEhj4yxOgsWE68Q2sA0wHwYDVR0j BBgwFoAUr80mY9oQNY/ppxqUDcj0fhZ84pYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAwYWUwZjEtYjhjMC00NTJmLThlODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNE QTEwMzU4RkU5QTcxQTk0MERDOEY0N0UxNjdDRTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkNEMjY2M0RBMTAzNThGRTlBNzFBOTQwREM4RjQ3RTE2N0NF Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0 N0UxNjdDRTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJ56sSkZ0av59YDVq2uFD4QiHd1pCxtKKvx 5eY/lssuV+Zbptwy2LHHZE29UzKuzM/7bf46amw5nlhI3mKUPcTWGoO4XfajEVZV GdJsqSWtBZ0oQXa1NwHDEkjU2FlD9rQyB2hWqTOy8nMsxD9BjSeHFmh9Rkkbt2mH zHi3+HhN7Z7WTJWnK0gpGpFFUtK246WxhS6Pf+vPpR14JG/f14qVWfWl3zSv6n9H dg955wMSzYZe4d+dpB1H3ZK+Kg6XXiNLT42QV3/x5E6Ch8YpgRWlszUzLeuwslRk kJOAyVs/MWaLlH1DrRlddRS7Oa+GQiqcxV7GKdYlMXCt5AF0+2g= -----END CERTIFICATE-----Generated at Thu Sep 3 16:19:37 2026 by rpki-client