$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft File: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft (raw, json) Hash identifier: Bl32tZyMfRFEHYWy0ii8LWahAuwTIDvjltr653ZW0ns= Subject key identifier: 62:1A:7D:79:57:0F:8F:1D:4A:D9:20:E8:59:2E:99:36:15:59:7E:10 Authority key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE Certificate issuer: /CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Certificate serial: 6BFD105807571107457614C8A03878D3B8892858 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft Manifest number: ED Signing time: Sat 24 Oct 2026 22:11:48 +0000 Manifest this update: Sat 24 Oct 2026 22:06:48 +0000 Manifest next update: Sun 25 Oct 2026 23:38:48 +0000 Files and hashes: 1: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: EMSp9sTBEYIxpwZzZRzI+gE7gVdIs4Im9QUStOiQIZc=) 2: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: ab/HK68d875hQq74b61/hCy2EN7S6mcH+EybuMGUXCU=) 3: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl (hash: LMhlEWL0HQGsAzYsKUJ/tlETYed1jSzqVOMhk5X9ov8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 23:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fd:10:58:07:57:11:07:45:76:14:c8:a0:38:78:d3:b8:89:28:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Validity Not Before: Oct 24 22:06:48 2026 GMT Not After : Oct 25 23:38:48 2026 GMT Subject: CN=621A7D79570F8F1D4AD920E8592E993615597E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:65:90:8e:36:dd:43:74:6f:9e:cc:98:47:47: c0:e3:b0:70:90:44:d9:29:dd:8d:99:eb:f5:a4:b4: f0:9e:80:50:b8:1e:4c:6c:ea:11:c6:81:7d:32:c2: 9d:b3:f7:33:48:29:42:31:15:a7:d3:e3:88:3e:ec: 6c:3d:fb:9c:1c:42:96:35:bb:ea:bb:f0:78:c0:8b: bf:ef:de:33:2c:a2:6b:67:3d:a4:67:73:f7:6c:91: 84:82:89:4d:3f:49:7c:d4:4b:ad:2e:04:27:aa:c4: b2:09:02:7e:af:4c:9b:23:aa:14:e2:9e:6b:b5:cf: f4:74:ce:4d:aa:79:9d:23:9a:55:38:2d:22:5b:a5: 97:27:c7:82:5a:9a:a9:c7:5a:c9:85:00:da:7d:fe: b6:20:77:e1:f9:d1:3c:12:4e:60:7e:b6:1e:89:ca: 61:25:43:24:23:db:8f:5d:8c:3d:c1:4a:c2:7e:a4: 0a:62:5b:d8:89:50:6f:cf:06:38:16:bc:0d:10:b7: 27:1b:bd:58:a7:bf:f4:cc:50:b2:d6:4d:f1:f1:fd: fa:71:d7:14:f0:04:7b:99:0e:1b:67:5b:3b:71:8f: 1f:54:f6:da:7d:96:35:66:6f:32:5b:86:61:ac:bc: c5:22:ef:27:99:da:1b:87:04:0d:cd:ef:e4:8c:16: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1A:7D:79:57:0F:8F:1D:4A:D9:20:E8:59:2E:99:36:15:59:7E:10 X509v3 Authority Key Identifier: keyid:AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:dc:49:86:49:64:0c:ef:1f:f3:9b:30:a8:0c:2f:8a:01:b4: 85:7d:61:88:5b:26:0a:7a:a6:87:0e:ba:59:90:2f:61:54:85: 28:75:9e:0f:92:13:21:82:e7:0a:67:a7:78:c9:51:3b:f3:ac: 98:b2:2d:e7:95:4a:8c:c1:37:ad:7b:09:17:65:7b:2d:25:87: 62:a9:fc:dc:09:90:ed:5c:4f:23:fd:7d:72:7f:ba:75:41:5c: 59:3f:e0:99:e9:2f:9f:1a:39:32:9d:3c:31:26:9b:d5:d3:47: 12:c6:a6:7c:07:93:ac:b7:37:89:86:6d:03:29:0c:69:30:c1: 9a:2e:22:59:5a:b0:c5:57:fe:27:b3:04:dd:ff:24:df:c2:c4: a4:32:e9:66:e3:3d:82:70:75:ae:15:c9:e1:b4:cf:f5:df:bf: ea:af:ac:12:de:4b:d4:f5:1a:ff:79:2a:eb:ba:bc:61:0e:61: 2e:9a:3b:65:3f:2c:33:79:50:52:e2:e5:93:ab:86:8c:1c:61: 2c:a1:91:54:4b:d6:98:5b:ee:2d:68:1b:fa:a9:8f:1e:0f:cc: 99:85:fa:04:0c:72:d9:57:d5:0d:3c:9e:b9:e3:8c:f1:fd:75: 6f:f2:1c:7d:f3:31:00:90:79:53:68:a5:33:87:e3:f3:9f:a1: 5c:4a:85:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/0QWAdXEQdFdhTIoDh407iJKFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2 QzI3RTNDRTAeFw0yNjEwMjQyMjA2NDhaFw0yNjEwMjUyMzM4NDhaMDMxMTAvBgNV BAMTKDYyMUE3RDc5NTcwRjhGMUQ0QUQ5MjBFODU5MkU5OTM2MTU1OTdFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6ZZCONt1DdG+ezJhHR8DjsHCQ RNkp3Y2Z6/WktPCegFC4Hkxs6hHGgX0ywp2z9zNIKUIxFafT44g+7Gw9+5wcQpY1 u+q78HjAi7/v3jMsomtnPaRnc/dskYSCiU0/SXzUS60uBCeqxLIJAn6vTJsjqhTi nmu1z/R0zk2qeZ0jmlU4LSJbpZcnx4JamqnHWsmFANp9/rYgd+H50TwSTmB+th6J ymElQyQj249djD3BSsJ+pApiW9iJUG/PBjgWvA0QtycbvVinv/TMULLWTfHx/fpx 1xTwBHuZDhtnWztxjx9U9tp9ljVmbzJbhmGsvMUi7yeZ2huHBA3N7+SMFvT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYhp9eVcPjx1K2SDoWS6ZNhVZfhAwHwYDVR0j BBgwFoAUr0y0b6g1PLWjsj71fyMY1Gwn484wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWM4OTdjNGEtZTBmZi00NjUyLWE1OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZB ODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2QzI3RTNDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjRDQjQ2RkE4MzUzQ0I1QTNCMjNFRjU3RjIzMThENDZDMjdF M0NFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4 RDQ2QzI3RTNDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfcSYZJZAzvH/ObMKgML4oBtIV9YYhbJgp6 pocOulmQL2FUhSh1ng+SEyGC5wpnp3jJUTvzrJiyLeeVSozBN617CRdley0lh2Kp /NwJkO1cTyP9fXJ/unVBXFk/4JnpL58aOTKdPDEmm9XTRxLGpnwHk6y3N4mGbQMp DGkwwZouIllasMVX/iezBN3/JN/CxKQy6WbjPYJwda4VyeG0z/Xfv+qvrBLeS9T1 Gv95Kuu6vGEOYS6aO2U/LDN5UFLi5ZOrhowcYSyhkVRL1phb7i1oG/qpjx4PzJmF +gQMctlX1Q08nrnjjPH9dW/yHH3zMQCQeVNopTOH4/OfoVxKhQs= -----END CERTIFICATE-----Generated at Sun Oct 25 17:56:53 2026 by rpki-client