$ rpki-client -vvvf rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft File: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft (raw, json) Hash identifier: AowHinMTKlg5y5s+FUu6p53FeAEulz0C+bFb9d1FpGE= Subject key identifier: 12:05:39:59:7D:DA:E5:53:63:2D:52:55:40:2E:D7:46:42:89:BF:96 Authority key identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A Certificate issuer: /CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Certificate serial: 4FF560AB433123CC6C5637D4517C1943F57F4B42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 16:49:59 +0000 Manifest this update: Wed 16 Sep 2026 16:44:59 +0000 Manifest next update: Thu 17 Sep 2026 17:30:59 +0000 Files and hashes: 1: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl (hash: zQXqwyHrNEECuSXGel28EiUuUg9dtXvOqr0VwciDIZw=) 2: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: B4j0qT4PT3YdDkrmlfhYyZnafUYLOfUdcba19kZ7mRY=) 3: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d37ZeGgHjVZzYq6CUddv0o+w23L0QGAKsBmc8dpggDQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f5:60:ab:43:31:23:cc:6c:56:37:d4:51:7c:19:43:f5:7f:4b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Validity Not Before: Sep 16 16:44:59 2026 GMT Not After : Sep 17 17:30:59 2026 GMT Subject: CN=120539597DDAE553632D5255402ED7464289BF96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:e9:e0:34:78:a3:f0:98:cc:b8:d2:e6:33: 73:ca:41:7e:78:26:56:66:33:c2:5a:90:ff:94:c4: d0:4d:de:7d:a4:ee:45:7e:e9:6b:de:0c:46:35:0a: 86:98:11:f2:94:91:b0:d7:e1:eb:38:8d:3f:53:3f: d8:85:82:c6:c1:47:2e:f9:1f:a4:36:d5:2c:3b:c8: d9:35:77:51:48:af:41:60:fc:6b:1a:48:63:9c:e4: 25:44:99:86:4b:93:26:83:14:57:72:8e:5b:26:66: 2e:0a:40:88:2a:73:e5:53:f8:92:18:92:8b:93:bf: 46:1a:18:49:58:5b:00:8c:a2:25:17:fa:55:24:d0: db:87:f0:6e:08:56:da:c0:6a:2a:ad:0f:7f:e9:74: fa:fd:f7:61:00:97:49:52:ed:f1:23:62:d0:4f:fc: cb:95:93:e7:c1:84:61:12:1c:28:b9:84:88:90:8e: 55:92:db:4c:92:3d:7e:0a:30:e8:9c:ff:81:d9:e5: af:50:4f:1b:a9:b1:75:c2:01:59:21:d8:e2:99:d1: 06:97:b9:d0:8d:5e:78:db:78:c6:85:19:13:48:80: 51:b7:66:03:1f:d1:30:93:bf:20:af:f5:9b:1f:b0: 56:e2:13:f4:87:62:7c:be:7d:2a:29:7e:9f:f4:6a: 16:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:05:39:59:7D:DA:E5:53:63:2D:52:55:40:2E:D7:46:42:89:BF:96 X509v3 Authority Key Identifier: keyid:AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2d:d8:f4:f7:7d:d9:ac:d4:cb:07:87:81:11:ae:7f:0d:f5: 99:94:ec:f0:a2:32:94:6b:00:f2:cb:e2:97:a2:3f:40:c2:b7: d5:aa:9b:84:c7:bf:9e:ea:e4:c8:13:58:e1:ed:5b:12:34:64: b1:ca:e9:65:4d:37:1d:85:3c:b0:2d:38:40:ff:d1:9f:11:12: 94:1d:9d:88:d8:a1:c6:4c:de:06:4c:ad:03:d4:8b:7d:7f:1c: da:92:df:6f:a1:8f:fc:48:f3:db:f1:cc:12:70:53:7b:4f:8d: 26:03:5d:00:b2:57:63:e6:36:6e:a1:84:be:95:5c:a1:20:8b: df:9c:d2:eb:fb:c3:d1:c0:bc:7f:87:c4:7a:e2:8f:45:df:93: ed:38:80:38:32:23:1f:60:85:b2:40:1f:ce:9f:68:ca:99:5a: 56:6f:bf:aa:46:b6:81:1e:8d:d5:ba:e7:14:d0:f9:c0:80:36: eb:2c:7f:40:46:77:01:a8:07:bf:51:6c:36:9f:30:73:1e:ed: 6b:13:06:4e:ff:a0:70:31:a6:14:7d:78:d2:29:fc:0b:11:19: 55:7e:31:ad:2c:86:60:b6:78:50:d2:4e:2a:9f:97:aa:59:dc: 1e:96:23:cf:26:ff:5c:6f:be:e7:e7:df:90:ef:59:db:cc:fe: 7a:4d:bd:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/Vgq0MxI8xsVjfUUXwZQ/V/S0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1N0Ux MjA5RDc3QTAeFw0yNjA5MTYxNjQ0NTlaFw0yNjA5MTcxNzMwNTlaMDMxMTAvBgNV BAMTKDEyMDUzOTU5N0REQUU1NTM2MzJENTI1NTQwMkVENzQ2NDI4OUJGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmbungNHij8JjMuNLmM3PKQX54 JlZmM8JakP+UxNBN3n2k7kV+6WveDEY1CoaYEfKUkbDX4es4jT9TP9iFgsbBRy75 H6Q21Sw7yNk1d1FIr0Fg/GsaSGOc5CVEmYZLkyaDFFdyjlsmZi4KQIgqc+VT+JIY kouTv0YaGElYWwCMoiUX+lUk0NuH8G4IVtrAaiqtD3/pdPr992EAl0lS7fEjYtBP /MuVk+fBhGESHCi5hIiQjlWS20ySPX4KMOic/4HZ5a9QTxupsXXCAVkh2OKZ0QaX udCNXnjbeMaFGRNIgFG3ZgMf0TCTvyCv9ZsfsFbiE/SHYny+fSopfp/0ahbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEgU5WX3a5VNjLVJVQC7XRkKJv5YwHwYDVR0j BBgwFoAUrxDC6QQK2x9BxavJ//3lfhIJ13owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUwNjMzZmMtZmUyMy00ZDgyLWJhNjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkw NDBBREIxRjQxQzVBQkM5RkZGREU1N0UxMjA5RDc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjEwQzJFOTA0MEFEQjFGNDFDNUFCQzlGRkZERTU3RTEyMDlE NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1 N0UxMjA5RDc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADot2PT3fdms1MsHh4ERrn8N9ZmU7PCiMpRr APLL4peiP0DCt9Wqm4THv57q5MgTWOHtWxI0ZLHK6WVNNx2FPLAtOED/0Z8REpQd nYjYocZM3gZMrQPUi31/HNqS32+hj/xI89vxzBJwU3tPjSYDXQCyV2PmNm6hhL6V XKEgi9+c0uv7w9HAvH+HxHrij0Xfk+04gDgyIx9ghbJAH86faMqZWlZvv6pGtoEe jdW65xTQ+cCANussf0BGdwGoB79RbDafMHMe7WsTBk7/oHAxphR9eNIp/AsRGVV+ Ma0shmC2eFDSTiqfl6pZ3B6WI88m/1xvvufn35DvWdvM/npNvWc= -----END CERTIFICATE-----Generated at Thu Sep 17 06:32:13 2026 by rpki-client