$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft File: AF0C42FF385AC16D8868625322DDC9687E064976.mft (raw, json) Hash identifier: iHFuHzEJP3FC0fy8AWEp4WO6LYCD5uTS2raykzsPxb0= Subject key identifier: 3B:64:5E:9D:66:B1:C8:E3:28:96:95:E2:E8:37:03:96:E0:9E:61:39 Authority key identifier: AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 Certificate issuer: /CN=AF0C42FF385AC16D8868625322DDC9687E064976 Certificate serial: 5EB86FD02E34D674A4CAF5B8098150A27DC0FBB9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 17:49:53 +0000 Manifest this update: Tue 03 Nov 2026 17:44:53 +0000 Manifest next update: Wed 04 Nov 2026 18:22:53 +0000 Files and hashes: 1: AF0C42FF385AC16D8868625322DDC9687E064976.crl (hash: O21fsHqg7JJvYtcUdxzABy0gCzIBvhBHY7NOTaGmiGU=) 2: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: oLBZrJQYooXv1AaJqvvqFmmqga9DhEWLnd2Rras7ouk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b8:6f:d0:2e:34:d6:74:a4:ca:f5:b8:09:81:50:a2:7d:c0:fb:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF0C42FF385AC16D8868625322DDC9687E064976 Validity Not Before: Nov 3 17:44:53 2026 GMT Not After : Nov 4 18:22:53 2026 GMT Subject: CN=3B645E9D66B1C8E3289695E2E8370396E09E6139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:e9:a5:82:d7:6b:ab:07:ea:b2:40:b0:68: 60:5c:48:76:e4:9c:8a:99:24:3c:a4:c9:03:70:6c: b4:7c:42:81:36:24:cb:00:fd:10:a3:7c:e7:33:d7: e6:03:eb:76:30:d3:56:0c:67:40:f1:61:15:fb:74: 5e:09:f3:9f:f0:bd:9a:78:05:aa:1d:e6:3b:68:37: 29:61:4f:60:45:39:35:15:a4:bf:d8:41:79:d2:bf: a4:52:cc:36:16:87:d9:a3:77:bb:c4:72:09:23:3a: 19:c2:26:e4:94:48:ab:71:3f:80:32:2b:dc:18:c7: 04:f6:67:a5:b7:a9:d5:69:d0:2b:da:ce:c5:cc:bf: 43:4a:d1:17:15:64:2a:56:dd:9a:25:81:04:8e:a6: 23:34:b9:50:1b:6f:30:2a:f3:71:26:47:17:25:09: f3:c4:6d:38:78:bd:e0:eb:03:ef:10:5a:da:f2:c9: d3:67:b8:43:08:1a:ee:9a:76:3e:a0:90:be:dc:db: b2:1d:44:90:d6:bc:70:32:84:2a:80:26:da:df:bf: 89:26:7f:bc:78:04:12:ac:a6:96:10:19:c8:bf:24: 13:8f:ad:89:2a:08:ae:cf:b2:27:bd:13:94:0b:43: f4:81:93:ce:49:fe:41:97:2f:de:37:06:a7:97:bd: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:64:5E:9D:66:B1:C8:E3:28:96:95:E2:E8:37:03:96:E0:9E:61:39 X509v3 Authority Key Identifier: keyid:AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:93:e9:f1:b6:8e:69:8e:2a:4a:bd:05:8a:9b:5d:01:07:20: 68:dc:05:6d:31:e7:59:95:ab:7c:30:6d:4a:10:04:57:ba:b1: 83:f7:54:36:36:64:bd:c2:8e:99:cf:f4:d4:fa:7a:50:88:6c: 0e:e2:56:b2:7f:34:6f:6c:89:dd:ca:34:b0:07:6f:41:3a:6a: c4:ca:75:db:57:96:2f:9f:3b:af:5e:1a:03:2b:db:06:a3:57: 4d:02:3c:1a:4b:09:6c:0c:34:d0:b2:4a:7c:3d:65:f0:a2:fa: 88:cb:5a:e3:17:13:06:da:57:f7:ef:4a:f1:f5:9a:b5:c5:b9: ba:9b:24:05:33:e9:0e:76:ba:69:2a:1c:4e:75:8e:ca:e8:6b: 5a:bb:5e:73:87:35:53:62:ce:2f:35:23:6c:84:3b:32:c2:7e: 9b:a0:22:5e:94:18:cc:2f:6d:18:6b:3a:18:a9:f9:7f:0b:c5: df:09:69:4c:7c:06:9d:bf:41:b8:24:82:2c:63:d2:41:a4:9b: 68:20:72:ad:ae:7e:6d:d6:61:1d:8a:16:2c:52:05:fb:9e:15: b7:51:b5:c1:5c:2f:54:a1:68:66:05:f1:76:ff:39:9b:54:ee: 28:a0:66:27:ac:c9:f7:74:b9:44:22:31:87:56:6b:73:42:9b: a1:0b:94:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrhv0C401nSkyvW4CYFQon3A+7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3 RTA2NDk3NjAeFw0yNjExMDMxNzQ0NTNaFw0yNjExMDQxODIyNTNaMDMxMTAvBgNV BAMTKDNCNjQ1RTlENjZCMUM4RTMyODk2OTVFMkU4MzcwMzk2RTA5RTYxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsj+mlgtdrqwfqskCwaGBcSHbk nIqZJDykyQNwbLR8QoE2JMsA/RCjfOcz1+YD63Yw01YMZ0DxYRX7dF4J85/wvZp4 Baod5jtoNylhT2BFOTUVpL/YQXnSv6RSzDYWh9mjd7vEcgkjOhnCJuSUSKtxP4Ay K9wYxwT2Z6W3qdVp0CvazsXMv0NK0RcVZCpW3ZolgQSOpiM0uVAbbzAq83EmRxcl CfPEbTh4veDrA+8QWtryydNnuEMIGu6adj6gkL7c27IdRJDWvHAyhCqAJtrfv4km f7x4BBKsppYQGci/JBOPrYkqCK7Psie9E5QLQ/SBk85J/kGXL943BqeXve71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO2RenWaxyOMolpXi6DcDluCeYTkwHwYDVR0j BBgwFoAUrwxC/zhawW2IaGJTIt3JaH4GSXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYz ODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3RTA2NDk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjBDNDJGRjM4NUFDMTZEODg2ODYyNTMyMkREQzk2ODdFMDY0 OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5 Njg3RTA2NDk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuT6fG2jmmOKkq9BYqbXQEHIGjcBW0x51mV q3wwbUoQBFe6sYP3VDY2ZL3CjpnP9NT6elCIbA7iVrJ/NG9sid3KNLAHb0E6asTK ddtXli+fO69eGgMr2wajV00CPBpLCWwMNNCySnw9ZfCi+ojLWuMXEwbaV/fvSvH1 mrXFubqbJAUz6Q52umkqHE51jsroa1q7XnOHNVNizi81I2yEOzLCfpugIl6UGMwv bRhrOhip+X8Lxd8JaUx8Bp2/Qbgkgixj0kGkm2ggcq2ufm3WYR2KFixSBfueFbdR tcFcL1ShaGYF8Xb/OZtU7iigZiesyfd0uUQiMYdWa3NCm6ELlFI= -----END CERTIFICATE-----Generated at Wed Nov 4 03:07:19 2026 by rpki-client