$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft File: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft (raw, json) Hash identifier: 8mwC5fe5YxiXstDecr2KIupoXDUtpDMmlRMJCrJNqMk= Subject key identifier: 21:FD:E5:B4:E7:C8:AD:EA:36:20:B8:7C:BD:6E:43:B1:24:57:C1:48 Authority key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE Certificate issuer: /CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Certificate serial: 7CD707EAB2B67B1A0E450ACC9E775C6EA543C826 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 18:38:23 +0000 Manifest this update: Fri 19 Jun 2026 18:33:23 +0000 Manifest next update: Sat 20 Jun 2026 19:04:23 +0000 Files and hashes: 1: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl (hash: siU70zDVNt/Kt6MbfrSM1Y3i7rF0UGsTdSz4tOxAKzA=) 2: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: DURCQ0yaLxsLK0NyQoA/+8rorIbQkFZb7X0OVwrX9XQ=) 3: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: 8knmmlk6VbCEzOwxll8mjdcL7YeA/GevLWgeSXesFqE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d7:07:ea:b2:b6:7b:1a:0e:45:0a:cc:9e:77:5c:6e:a5:43:c8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Validity Not Before: Jun 19 18:33:23 2026 GMT Not After : Jun 20 19:04:23 2026 GMT Subject: CN=21FDE5B4E7C8ADEA3620B87CBD6E43B12457C148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5d:cd:1c:89:bd:2a:00:22:86:2a:0f:52:94: 29:11:dc:11:93:d6:91:f4:e8:ee:6f:b7:8e:fe:cf: 12:79:d6:86:f1:5d:c6:f9:6d:de:ba:8a:90:5e:05: 0e:88:ad:26:32:46:73:30:fb:fe:9f:c6:51:2f:22: b3:66:ab:c0:c8:3f:e1:c4:4f:8e:76:1d:1d:62:0b: b1:ae:f5:bc:fd:03:a0:95:da:d9:00:5f:4a:74:df: 0d:35:33:ad:08:00:de:a0:d0:57:45:ea:d4:e8:dd: 9e:16:d5:bc:ef:a6:f3:fc:0b:99:fe:b2:0f:b5:4c: 01:f0:c5:7b:bf:d8:6c:84:eb:f8:c6:66:63:9e:1a: ab:d0:46:6d:d2:dd:74:e2:56:da:8b:6c:4c:e6:e7: cc:33:15:6d:dd:32:23:9e:a4:bd:44:8d:c8:ab:a7: df:a8:d5:22:4a:ef:40:1c:54:df:e6:e0:53:a2:91: ed:9e:b0:e8:1a:6f:d0:43:bb:28:76:01:9f:8d:a8: 42:e6:70:25:33:b0:96:59:5d:9c:d4:5c:2f:ac:18: 7b:d1:c3:a2:ae:cb:9d:fb:02:d7:1c:c1:c6:bd:41: 4d:40:51:38:d9:3b:23:1f:27:3e:6d:a1:33:51:c0: ff:b2:5f:3d:b7:fa:93:31:19:ce:c5:2b:cb:93:9f: 15:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FD:E5:B4:E7:C8:AD:EA:36:20:B8:7C:BD:6E:43:B1:24:57:C1:48 X509v3 Authority Key Identifier: keyid:AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:43:26:89:db:5d:85:a6:d2:f5:59:cd:1b:18:21:0c:2d:8f: aa:ee:c3:1e:f5:12:62:18:95:2f:1b:85:f9:23:e6:5c:46:bc: 85:ba:e3:d5:85:bd:16:d7:05:65:2e:00:22:bc:69:c5:a5:56: 0f:26:30:56:29:40:12:84:08:e9:ac:d0:66:e3:18:6e:d5:a1: f1:c7:6c:47:ed:de:65:c9:f3:05:ca:b5:ee:ff:30:8a:30:f3: d0:ef:d2:b3:52:dd:1c:60:01:9e:a3:84:b5:75:17:b7:70:7c: 0b:91:14:7d:3a:c2:a5:d5:42:0e:a1:4a:0c:3a:01:f2:9c:c1: 04:c1:ff:38:f2:98:6c:aa:22:41:bb:f2:cf:13:ec:ab:a6:a9: 53:1f:a2:f5:97:34:5a:4a:db:9f:44:76:73:21:c3:3b:15:29: ae:12:8b:5c:ca:1c:c4:90:bb:4d:0d:13:eb:8f:d1:a4:94:34: 87:00:8a:20:7e:22:b0:9d:85:83:69:67:f1:6e:9e:d8:2f:de: 78:7c:70:5b:a5:86:df:e0:57:d5:53:da:ca:b7:fd:fc:47:8f: 7b:b1:16:69:ed:e8:6e:a6:af:00:7d:a5:4b:bb:5c:fc:a3:a8: 96:92:05:af:60:33:3b:df:8d:b1:28:f4:9a:14:6f:e7:61:58: 6b:3e:69:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNcH6rK2exoORQrMnndcbqVDyCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2 QzI3RTNDRTAeFw0yNjA2MTkxODMzMjNaFw0yNjA2MjAxOTA0MjNaMDMxMTAvBgNV BAMTKDIxRkRFNUI0RTdDOEFERUEzNjIwQjg3Q0JENkU0M0IxMjQ1N0MxNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXc0cib0qACKGKg9SlCkR3BGT 1pH06O5vt47+zxJ51obxXcb5bd66ipBeBQ6IrSYyRnMw+/6fxlEvIrNmq8DIP+HE T452HR1iC7Gu9bz9A6CV2tkAX0p03w01M60IAN6g0FdF6tTo3Z4W1bzvpvP8C5n+ sg+1TAHwxXu/2GyE6/jGZmOeGqvQRm3S3XTiVtqLbEzm58wzFW3dMiOepL1Ejcir p9+o1SJK70AcVN/m4FOike2esOgab9BDuyh2AZ+NqELmcCUzsJZZXZzUXC+sGHvR w6Kuy537Atccwca9QU1AUTjZOyMfJz5toTNRwP+yXz23+pMxGc7FK8uTnxWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIf3ltOfIreo2ILh8vW5DsSRXwUgwHwYDVR0j BBgwFoAUr0y0b6g1PLWjsj71fyMY1Gwn484wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWM4OTdjNGEtZTBmZi00NjUyLWE1OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZB ODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2QzI3RTNDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjRDQjQ2RkE4MzUzQ0I1QTNCMjNFRjU3RjIzMThENDZDMjdF M0NFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4 RDQ2QzI3RTNDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdDJonbXYWm0vVZzRsYIQwtj6ruwx71EmIY lS8bhfkj5lxGvIW649WFvRbXBWUuACK8acWlVg8mMFYpQBKECOms0GbjGG7VofHH bEft3mXJ8wXKte7/MIow89Dv0rNS3RxgAZ6jhLV1F7dwfAuRFH06wqXVQg6hSgw6 AfKcwQTB/zjymGyqIkG78s8T7KumqVMfovWXNFpK259EdnMhwzsVKa4Si1zKHMSQ u00NE+uP0aSUNIcAiiB+IrCdhYNpZ/Funtgv3nh8cFulht/gV9VT2sq3/fxHj3ux Fmnt6G6mrwB9pUu7XPyjqJaSBa9gMzvfjbEo9JoUb+dhWGs+aUU= -----END CERTIFICATE-----Generated at Sat Jun 20 08:49:30 2026 by rpki-client