$ rpki-client -vvvf rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft File: AFB831541A03B6BE413D492F67453655438B76F4.mft (raw, json) Hash identifier: 2mYZZx+O2DURTGKXye7X7KmzZC9wlS7DsZG5Wze09H4= Subject key identifier: B9:9D:50:C9:11:94:5B:02:9E:D3:BE:10:5C:69:73:1E:6B:02:7E:F9 Authority key identifier: AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 Certificate issuer: /CN=AFB831541A03B6BE413D492F67453655438B76F4 Certificate serial: 2197F9B31873ACC6B380CA3A96163D9E31A8CEDA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 18:06:30 +0000 Manifest this update: Wed 16 Sep 2026 18:01:30 +0000 Manifest next update: Thu 17 Sep 2026 18:45:30 +0000 Files and hashes: 1: AFB831541A03B6BE413D492F67453655438B76F4.crl (hash: fQJCMLMmOcgvNbVWMgqc/KjChJlo41mCAHtDQ3k/0jo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:97:f9:b3:18:73:ac:c6:b3:80:ca:3a:96:16:3d:9e:31:a8:ce:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFB831541A03B6BE413D492F67453655438B76F4 Validity Not Before: Sep 16 18:01:30 2026 GMT Not After : Sep 17 18:45:30 2026 GMT Subject: CN=B99D50C911945B029ED3BE105C69731E6B027EF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:41:50:f5:b7:88:54:0e:c1:e6:30:72:25: e5:9a:90:59:c4:0f:07:dc:26:54:78:89:2d:d2:90: be:1d:9c:fa:ae:e0:46:10:a9:a4:d3:1a:81:44:6f: a4:01:3f:60:50:48:8a:61:0d:38:26:95:12:f0:94: 6a:bb:ed:ec:46:99:ab:f9:0f:13:b7:94:d2:d5:3e: 5b:e2:88:c0:66:e6:1b:8f:6d:8a:ff:ca:a8:5d:03: 9d:2a:05:79:1f:1e:0f:f4:04:d0:e3:36:75:e5:dc: b6:db:da:c0:90:95:7f:e1:5b:e2:c2:3a:7d:71:d1: 09:c4:ef:74:70:cc:71:36:4f:fb:91:b7:7b:51:a2: aa:47:c3:63:6b:c3:48:4c:c5:98:fa:64:58:92:f2: af:1c:1e:8c:c6:85:c8:d9:d1:17:5d:4d:c2:d3:91: cd:d7:65:1f:f1:dd:e7:55:8f:96:3f:d6:05:79:3c: e8:00:9b:e8:40:64:34:fb:26:da:ea:5c:92:31:76: 64:ee:76:89:95:2b:bd:a2:d9:08:56:f6:33:37:48: 1f:e5:f6:ef:8f:4d:ed:dd:04:54:8b:1f:0c:b9:8b: d6:92:d8:75:30:4d:23:3b:14:e9:a8:fc:3a:17:0b: a5:97:5b:a3:04:70:d2:c5:ec:b9:82:16:46:09:a4: b4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9D:50:C9:11:94:5B:02:9E:D3:BE:10:5C:69:73:1E:6B:02:7E:F9 X509v3 Authority Key Identifier: keyid:AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c3:36:c5:55:1d:b0:71:b7:d9:97:0b:41:f4:50:b4:1b:f1: 76:66:7f:b4:b8:c2:53:3f:03:8a:95:f7:f6:9f:6c:b9:e3:84: a5:29:8e:f1:0b:b1:14:7d:92:85:c1:11:0f:7a:fb:cb:70:59: f8:ad:1a:9a:fc:4f:9c:a8:ce:d6:e5:eb:39:1c:32:43:99:0c: e2:40:31:e3:9a:51:bf:fa:2a:5e:2c:4a:d1:e0:ef:6d:a6:97: 21:d9:ce:02:e6:d4:66:39:58:8d:78:84:9e:92:9f:9d:d2:2d: 7a:d2:a6:81:83:36:66:01:d6:d0:ed:24:01:e3:d3:9d:61:ed: 59:4f:e3:2c:5d:bd:6f:f3:db:1a:90:92:0b:67:86:82:4a:c9: 77:fb:8e:cc:23:c7:74:cd:c6:50:47:98:e5:98:ce:87:7a:c2: 12:a6:f8:a7:90:af:ba:a1:41:6d:d6:06:b7:12:f6:00:19:56: 55:0b:9b:38:fe:bd:41:05:b6:4c:cb:f6:34:8a:bc:86:8a:9e: 42:b1:08:f9:2d:8f:ef:f8:a6:ce:51:50:c9:a9:05:d9:28:ca: b0:bc:b3:5e:41:8d:5f:68:99:a9:49:51:95:b7:69:6c:00:a5: 20:1e:7b:77:78:73:70:18:94:68:34:d0:52:75:a5:24:37:09: 58:70:6d:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZf5sxhzrMazgMo6lhY9njGoztowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0 MzhCNzZGNDAeFw0yNjA5MTYxODAxMzBaFw0yNjA5MTcxODQ1MzBaMDMxMTAvBgNV BAMTKEI5OUQ1MEM5MTE5NDVCMDI5RUQzQkUxMDVDNjk3MzFFNkIwMjdFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeR0FQ9beIVA7B5jByJeWakFnE DwfcJlR4iS3SkL4dnPqu4EYQqaTTGoFEb6QBP2BQSIphDTgmlRLwlGq77exGmav5 DxO3lNLVPlviiMBm5huPbYr/yqhdA50qBXkfHg/0BNDjNnXl3Lbb2sCQlX/hW+LC On1x0QnE73RwzHE2T/uRt3tRoqpHw2Nrw0hMxZj6ZFiS8q8cHozGhcjZ0RddTcLT kc3XZR/x3edVj5Y/1gV5POgAm+hAZDT7JtrqXJIxdmTudomVK72i2QhW9jM3SB/l 9u+PTe3dBFSLHwy5i9aS2HUwTSM7FOmo/DoXC6WXW6MEcNLF7LmCFkYJpLR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuZ1QyRGUWwKe074QXGlzHmsCfvkwHwYDVR0j BBgwFoAUr7gxVBoDtr5BPUkvZ0U2VUOLdvQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI0YTY1ZjQtNGY0Yi00NGI2LWEyZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQx QTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0MzhCNzZGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkI4MzE1NDFBMDNCNkJFNDEzRDQ5MkY2NzQ1MzY1NTQzOEI3 NkY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2 NTU0MzhCNzZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzDNsVVHbBxt9mXC0H0ULQb8XZmf7S4wlM/ A4qV9/afbLnjhKUpjvELsRR9koXBEQ96+8twWfitGpr8T5yoztbl6zkcMkOZDOJA MeOaUb/6Kl4sStHg722mlyHZzgLm1GY5WI14hJ6Sn53SLXrSpoGDNmYB1tDtJAHj 051h7VlP4yxdvW/z2xqQkgtnhoJKyXf7jswjx3TNxlBHmOWYzod6whKm+KeQr7qh QW3WBrcS9gAZVlULmzj+vUEFtkzL9jSKvIaKnkKxCPktj+/4ps5RUMmpBdkoyrC8 s15BjV9omalJUZW3aWwApSAee3d4c3AYlGg00FJ1pSQ3CVhwbT8= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:37 2026 by rpki-client