$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft File: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft (raw, json) Hash identifier: DBl2IIGRysqgNcJBB9GB36bSCqe/Dkh1S1UKjn/1zms= Subject key identifier: 50:86:B2:10:67:96:0F:1F:DD:2E:65:7D:A4:FD:5F:D7:93:A2:E4:5D Authority key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE Certificate issuer: /CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Certificate serial: 623056FD412F4FB086B9BEB84D733E8723F90D2E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft Manifest number: EE Signing time: Sun 25 Oct 2026 15:41:13 +0000 Manifest this update: Sun 25 Oct 2026 15:36:13 +0000 Manifest next update: Mon 26 Oct 2026 17:15:13 +0000 Files and hashes: 1: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: ab/HK68d875hQq74b61/hCy2EN7S6mcH+EybuMGUXCU=) 2: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: EMSp9sTBEYIxpwZzZRzI+gE7gVdIs4Im9QUStOiQIZc=) 3: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl (hash: +KLXOCqL/0MF9K+tGS6cup9aX3ERxaQ6TSDAlu20NsQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:30:56:fd:41:2f:4f:b0:86:b9:be:b8:4d:73:3e:87:23:f9:0d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Validity Not Before: Oct 25 15:36:13 2026 GMT Not After : Oct 26 17:15:13 2026 GMT Subject: CN=5086B21067960F1FDD2E657DA4FD5FD793A2E45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:eb:79:10:cd:9e:2a:6e:23:8f:cf:a6:e4: 1a:df:c1:78:ef:c4:68:fe:42:7e:f3:46:0c:d7:9f: bf:6e:4a:00:2a:69:c0:c0:b1:f9:3f:ab:f9:f7:7b: d3:91:6c:b6:6b:a8:cf:6b:c0:d7:bd:10:45:b3:71: cd:38:16:80:f3:cd:61:41:f4:23:89:b5:77:2f:7f: 43:02:f6:75:4f:cf:a2:0e:00:93:75:26:7e:b3:3a: f0:af:f1:e0:ef:f7:06:e1:70:39:34:bd:1f:f0:d6: 36:3c:41:c9:44:74:d5:1a:93:4d:6a:20:cf:95:19: 09:ff:dc:37:f9:42:b5:d4:b4:c9:4c:10:8b:3b:42: 6d:33:60:ea:d8:c6:6f:80:bf:80:55:30:3a:b3:0b: a6:e9:ce:ad:6f:2f:00:b8:57:5d:49:ee:0a:f4:1c: 86:e9:fb:a0:33:4c:34:b1:58:75:e8:d7:5e:d2:f9: 7c:ad:b3:c4:84:99:b0:89:15:e4:c1:54:8e:35:b3: a2:bf:49:01:4c:4c:a7:f9:96:e3:95:0b:13:34:a5: 0f:59:bc:3a:7c:d4:81:4e:df:39:52:be:a6:5b:ab: 47:79:f2:af:dd:a0:47:77:6d:cd:5c:e6:f0:59:38: 34:9f:16:df:fe:4f:2c:3a:c5:22:4c:ed:ec:9f:a2: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:86:B2:10:67:96:0F:1F:DD:2E:65:7D:A4:FD:5F:D7:93:A2:E4:5D X509v3 Authority Key Identifier: keyid:AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8e:22:0b:c0:7f:e4:09:26:ab:02:5b:e1:3b:64:a1:e7:99: cd:83:50:f5:ad:6c:06:ef:94:fc:53:db:25:76:6d:f6:d2:2c: 77:79:25:79:f8:5e:74:94:e1:35:b1:58:6a:09:ff:f1:e9:16: 6a:df:06:41:12:14:88:f6:20:c9:65:c3:d7:a0:fb:51:b3:6b: 3c:05:1c:46:a0:0a:be:6d:35:2c:f5:ff:35:03:1c:57:bc:d7: 53:af:27:b8:95:9b:3e:60:5e:81:00:d9:59:67:a7:96:6d:9c: 32:b4:c8:27:3f:5d:ad:15:b2:96:ae:f6:57:94:6e:e7:2f:42: e8:90:2f:34:5a:75:dc:dd:d8:2b:06:55:24:9c:18:24:78:3b: a6:97:0a:cc:bd:34:84:4d:fe:53:5f:b1:d1:c3:40:b5:da:d4: 3a:15:e4:42:b6:e1:7f:a0:e8:cd:25:6a:49:df:0f:08:57:c8: 2c:64:fa:46:58:bc:05:13:12:f9:96:38:23:f8:3e:9a:26:7d: c8:cd:58:90:2a:fa:63:f0:c4:35:09:dc:7b:63:8b:24:9f:20: 8a:c6:e0:4e:e5:eb:69:40:c8:21:08:57:6c:8f:81:d9:ad:dc: 57:72:86:1a:45:3e:aa:73:2b:26:c6:fa:cb:e4:68:d3:cf:93: ce:fd:cc:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjBW/UEvT7CGub64TXM+hyP5DS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2 QzI3RTNDRTAeFw0yNjEwMjUxNTM2MTNaFw0yNjEwMjYxNzE1MTNaMDMxMTAvBgNV BAMTKDUwODZCMjEwNjc5NjBGMUZERDJFNjU3REE0RkQ1RkQ3OTNBMkU0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXOt5EM2eKm4jj8+m5BrfwXjv xGj+Qn7zRgzXn79uSgAqacDAsfk/q/n3e9ORbLZrqM9rwNe9EEWzcc04FoDzzWFB 9COJtXcvf0MC9nVPz6IOAJN1Jn6zOvCv8eDv9wbhcDk0vR/w1jY8QclEdNUak01q IM+VGQn/3Df5QrXUtMlMEIs7Qm0zYOrYxm+Av4BVMDqzC6bpzq1vLwC4V11J7gr0 HIbp+6AzTDSxWHXo117S+Xyts8SEmbCJFeTBVI41s6K/SQFMTKf5luOVCxM0pQ9Z vDp81IFO3zlSvqZbq0d58q/doEd3bc1c5vBZODSfFt/+Tyw6xSJM7eyfosb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUIayEGeWDx/dLmV9pP1f15Oi5F0wHwYDVR0j BBgwFoAUr0y0b6g1PLWjsj71fyMY1Gwn484wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWM4OTdjNGEtZTBmZi00NjUyLWE1OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZB ODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2QzI3RTNDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjRDQjQ2RkE4MzUzQ0I1QTNCMjNFRjU3RjIzMThENDZDMjdF M0NFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4 RDQ2QzI3RTNDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqOIgvAf+QJJqsCW+E7ZKHnmc2DUPWtbAbv lPxT2yV2bfbSLHd5JXn4XnSU4TWxWGoJ//HpFmrfBkESFIj2IMllw9eg+1GzazwF HEagCr5tNSz1/zUDHFe811OvJ7iVmz5gXoEA2Vlnp5ZtnDK0yCc/Xa0Vspau9leU bucvQuiQLzRaddzd2CsGVSScGCR4O6aXCsy9NIRN/lNfsdHDQLXa1DoV5EK24X+g 6M0laknfDwhXyCxk+kZYvAUTEvmWOCP4PpomfcjNWJAq+mPwxDUJ3HtjiySfIIrG 4E7l62lAyCEIV2yPgdmt3FdyhhpFPqpzKybG+svkaNPPk879zJ4= -----END CERTIFICATE-----Generated at Sun Oct 25 20:04:42 2026 by rpki-client