$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft File: AF6B7BCDACF90BA83205EA298327379BAB489418.mft (raw, json) Hash identifier: QLu4Zqlga29iI1bVbLpM0Kx+LV1OkP+mXScae5IGzgE= Subject key identifier: 2D:AC:04:8B:88:9A:A1:59:81:24:FC:FA:8F:41:46:80:03:49:2B:8B Authority key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18 Certificate issuer: /CN=AF6B7BCDACF90BA83205EA298327379BAB489418 Certificate serial: 29763B0918451EDE867086773AD582929059C734 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft Manifest number: ED Signing time: Mon 26 Oct 2026 15:45:02 +0000 Manifest this update: Mon 26 Oct 2026 15:40:02 +0000 Manifest next update: Tue 27 Oct 2026 17:25:02 +0000 Files and hashes: 1: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: m+sPMgDP6AqfDbfIIzCUcgfgt53+FkXMgNrd1zzKT1I=) 2: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: +CIQNtkENDgMFXO899OFs+eQgqEbZwGsuSxbjsO2CJU=) 3: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: K8j/ZLU+ci7JWbQ44lPBg2aflFRtCWtRODUltXPnDVo=) 4: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: qCc2JIEbiwtQdnz7uQXbC2p3w6YwxAaU8dCI6McQWsM=) 5: AF6B7BCDACF90BA83205EA298327379BAB489418.crl (hash: AUYus42OKqqYqKLvaLZgp1gvED2kVt19tvimipEvD20=) 6: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: xu1cN52iKwYrST7ZHiU1OG9/BN4NR23in1R/aZa/9/Y=) 7: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: Lg4qdsj1osZUt2Wgs1cQh8M+Cq27I8kA05MBhaZ1e2E=) 8: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: y5wzCpmCgccfr9+aDXB1mUmJvFdLQ1aEGTJds2iwsoo=) 9: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: oE4Q0cuL75fyXaIHf3JDUpfM+2/K4+wsnH/TeLPodS0=) 10: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: sxFoSO5566DvevtkqciXR0xAuQamF9AudcC/0/+/BMA=) 11: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: g0pqFy9DWm0Sz42lbSirSeYkq3Vdx407OgsTjSScBgc=) 12: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: EFzx2gdrAoK4dLqP6OWhoqarBZwTNPP8hlTF8ndHsA8=) 13: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: BxCzNrTcp0dp4A7C91gDRudiTOOmKrDBcvkaJa1pltE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 17:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:76:3b:09:18:45:1e:de:86:70:86:77:3a:d5:82:92:90:59:c7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6B7BCDACF90BA83205EA298327379BAB489418 Validity Not Before: Oct 26 15:40:02 2026 GMT Not After : Oct 27 17:25:02 2026 GMT Subject: CN=2DAC048B889AA1598124FCFA8F41468003492B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:df:f2:dc:06:e9:d7:8d:89:b3:4a:35:b3:49: cb:12:26:3b:0d:23:d6:4d:71:36:c9:75:7d:89:f5: 23:8b:e8:0f:22:e3:07:e7:c0:7a:63:32:40:1c:00: 0a:7b:2b:33:89:06:f6:0b:1a:d3:74:9d:b7:a6:13: db:02:74:e2:f3:97:b1:c0:e1:99:1f:b3:3c:e6:ec: cf:b4:08:b7:db:51:60:f0:2e:8d:00:1f:dc:91:02: c0:04:6b:16:29:68:9e:77:f3:38:3f:f9:84:12:07: 08:d7:54:a3:f7:f5:2e:32:3e:6a:0e:3e:93:1e:a1: 96:07:8c:46:fa:97:74:a8:5e:24:5c:a3:d3:0c:84: 35:98:d0:48:3b:0b:65:a3:92:ea:c8:1b:06:13:77: 8b:2a:ff:9a:75:7f:2f:3b:b1:6a:39:12:dd:64:a2: f4:88:af:20:e3:cd:14:94:3d:ad:13:06:bc:8c:09: da:84:61:f0:d8:2f:c8:6c:2a:29:70:11:8c:99:76: f5:b9:38:71:66:26:64:88:8f:0d:63:87:c8:da:ac: a4:55:19:65:7d:15:47:b7:65:24:3f:13:da:5b:96: 08:fc:0d:0c:e0:58:28:16:fc:ea:16:7b:85:25:e4: 59:f9:0f:79:a6:d7:d1:c7:ca:4a:42:93:17:1c:3c: 38:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AC:04:8B:88:9A:A1:59:81:24:FC:FA:8F:41:46:80:03:49:2B:8B X509v3 Authority Key Identifier: keyid:AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:35:6e:b8:e4:01:d2:af:78:23:cb:8f:ca:46:03:29:cf:56: c0:d2:f6:23:8e:82:3a:44:de:50:8a:14:eb:70:5a:1b:5f:01: 81:0b:ee:5c:33:66:e1:0f:29:a7:6a:97:a0:a5:83:68:98:20: 09:84:b3:15:a5:e5:0c:1b:3e:6d:32:07:4a:6c:95:ca:a0:c6: ed:85:ff:47:24:ab:92:6e:12:15:e0:3a:6f:bb:b7:a9:36:8c: 85:d9:27:2d:38:0a:b5:3a:6d:60:cb:6e:be:d1:d9:4b:79:00: ac:b7:93:4f:ce:3e:f3:b9:7c:ba:9e:a1:b6:f5:78:d1:e0:30: 2d:d0:82:82:bf:45:9c:f5:03:ca:70:97:86:0d:ae:ee:08:29: 57:e3:b9:db:55:5e:ea:96:7a:88:ed:29:39:f0:12:52:48:da: f0:c7:ac:6d:80:17:70:3d:e2:14:7e:0b:d5:c3:ab:3e:0c:e9: 85:4b:ff:e4:b8:66:32:5d:62:0d:93:ef:76:1d:ac:f2:83:84: 9a:ae:e2:c3:99:7d:cb:c2:58:8f:75:b1:46:b4:48:51:8b:87: 97:77:1a:ba:66:d4:59:a7:68:80:81:59:a9:53:58:e4:4f:af: 31:5e:00:65:10:ed:58:d2:51:cd:2b:9a:6c:80:3f:ca:45:9d: 30:65:cc:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKXY7CRhFHt6GcIZ3OtWCkpBZxzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2QjdCQ0RBQ0Y5MEJBODMyMDVFQTI5ODMyNzM3OUJB QjQ4OTQxODAeFw0yNjEwMjYxNTQwMDJaFw0yNjEwMjcxNzI1MDJaMDMxMTAvBgNV BAMTKDJEQUMwNDhCODg5QUExNTk4MTI0RkNGQThGNDE0NjgwMDM0OTJCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh3/LcBunXjYmzSjWzScsSJjsN I9ZNcTbJdX2J9SOL6A8i4wfnwHpjMkAcAAp7KzOJBvYLGtN0nbemE9sCdOLzl7HA 4Zkfszzm7M+0CLfbUWDwLo0AH9yRAsAEaxYpaJ538zg/+YQSBwjXVKP39S4yPmoO PpMeoZYHjEb6l3SoXiRco9MMhDWY0Eg7C2WjkurIGwYTd4sq/5p1fy87sWo5Et1k ovSIryDjzRSUPa0TBryMCdqEYfDYL8hsKilwEYyZdvW5OHFmJmSIjw1jh8jarKRV GWV9FUe3ZSQ/E9pblgj8DQzgWCgW/OoWe4Ul5Fn5D3mm19HHykpCkxccPDgvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULawEi4iaoVmBJPz6j0FGgANJK4swHwYDVR0j BBgwFoAUr2t7zaz5C6gyBeopgyc3m6tIlBgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWE5OTAxMjUtNjA5YS00OGM4LWFjODYtMWMzYmMzMTViYWQ2LzAvQUY2QjdCQ0RB Q0Y5MEJBODMyMDVFQTI5ODMyNzM3OUJBQjQ4OTQxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjZCN0JDREFDRjkwQkE4MzIwNUVBMjk4MzI3Mzc5QkFCNDg5 NDE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWE5OTAxMjUtNjA5YS00OGM4LWFj ODYtMWMzYmMzMTViYWQ2LzAvQUY2QjdCQ0RBQ0Y5MEJBODMyMDVFQTI5ODMyNzM3 OUJBQjQ4OTQxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw1brjkAdKveCPLj8pGAynPVsDS9iOOgjpE 3lCKFOtwWhtfAYEL7lwzZuEPKadql6Clg2iYIAmEsxWl5QwbPm0yB0pslcqgxu2F /0ckq5JuEhXgOm+7t6k2jIXZJy04CrU6bWDLbr7R2Ut5AKy3k0/OPvO5fLqeobb1 eNHgMC3QgoK/RZz1A8pwl4YNru4IKVfjudtVXuqWeojtKTnwElJI2vDHrG2AF3A9 4hR+C9XDqz4M6YVL/+S4ZjJdYg2T73YdrPKDhJqu4sOZfcvCWI91sUa0SFGLh5d3 Grpm1FmnaICBWalTWORPrzFeAGUQ7VjSUc0rmmyAP8pFnTBlzKY= -----END CERTIFICATE-----Generated at Tue Oct 27 09:16:53 2026 by rpki-client