$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft File: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft (raw, json) Hash identifier: PgW10GT7FVPlbAWB8afakBmoCQGGrL7FUJ4x48tWnhs= Subject key identifier: 1D:46:6C:BB:83:E6:C3:DB:7A:34:76:4F:4A:CF:75:DC:3D:78:4E:A8 Authority key identifier: AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A Certificate issuer: /CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Certificate serial: 0733C3CF47CA9329C997414A7034D545FC00CE86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 01:45:39 +0000 Manifest this update: Thu 17 Sep 2026 01:40:39 +0000 Manifest next update: Fri 18 Sep 2026 01:57:39 +0000 Files and hashes: 1: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl (hash: YsK3Dgr57tvySuU+m5OTBCSpi9YHeSO30DUNY1RLbNs=) 2: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: yrLvhSGItcv2/8/qx9t+UKr0DTpSKLWTcCZshoqb+Zo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:33:c3:cf:47:ca:93:29:c9:97:41:4a:70:34:d5:45:fc:00:ce:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Validity Not Before: Sep 17 01:40:39 2026 GMT Not After : Sep 18 01:57:39 2026 GMT Subject: CN=1D466CBB83E6C3DB7A34764F4ACF75DC3D784EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:6c:4e:e0:0b:b7:42:9c:06:a4:02:d8:04: 51:81:d8:95:73:75:7d:0f:c4:89:a4:87:56:df:8e: 03:05:65:3a:e5:07:32:e6:8c:7c:0b:35:8b:c4:a9: 36:b2:2a:a6:76:57:e2:a7:0f:64:d8:86:e5:83:1b: 32:b6:f9:9f:52:cc:e5:63:aa:9d:39:ff:1d:8c:19: c1:a1:03:dc:0c:df:ab:d2:9e:70:15:0b:22:06:e4: 88:58:40:9b:0b:2a:b0:f2:d5:78:f7:0b:30:ed:3b: 46:e1:c1:fc:96:6c:55:ae:b6:73:e9:41:90:9a:ea: cd:68:6a:d8:32:de:bb:24:0f:ca:18:c5:d3:86:5f: 69:4d:9b:1e:f9:79:16:90:e3:2c:6f:8a:0a:7e:4b: f9:1c:b2:64:f3:c5:75:26:e2:70:5d:75:8e:94:15: d9:1c:29:91:2e:3a:37:4c:3e:fc:4b:e3:93:b2:a5: 1e:42:cb:4c:3d:30:dd:c7:86:68:8e:06:6b:b9:6a: 0f:03:5b:8f:d2:cf:87:92:c9:07:24:2e:57:b5:f3: f3:1a:bb:96:ae:45:6c:8b:aa:b2:c5:79:52:71:bb: e0:a7:32:d5:2f:fe:20:5c:7a:0c:d5:97:b7:71:b0: 5c:2f:76:b3:58:fe:6e:56:f7:63:da:2a:eb:81:1e: 4c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:46:6C:BB:83:E6:C3:DB:7A:34:76:4F:4A:CF:75:DC:3D:78:4E:A8 X509v3 Authority Key Identifier: keyid:AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d1:2f:f4:52:38:dd:da:d4:db:d7:8b:c2:5e:32:4c:ea:fd: 48:4c:03:2f:18:92:2a:c2:c2:de:d3:5d:f6:04:12:f4:23:2c: 65:52:90:30:ba:40:3c:b0:9b:fd:51:01:d6:a9:a5:0f:e3:9d: 05:4e:56:cb:cd:cd:d1:9e:05:19:76:d2:98:c1:99:09:c6:38: 1b:82:b0:5b:b2:0e:e0:7e:11:24:92:7a:c9:c7:15:72:21:a7: dc:ee:67:04:c7:30:d4:23:bf:27:3a:49:d0:17:c1:5b:c3:e8: aa:56:10:67:40:2e:d7:a6:3c:af:f1:04:46:54:38:ca:93:fc: b0:4e:9f:9b:83:4a:96:7f:31:a6:4c:50:5a:3c:57:f8:d9:36: 1f:38:62:8d:5e:a7:71:a2:d3:5e:25:f6:53:0e:3c:b4:e5:47: 42:2f:58:02:96:cf:d5:18:99:55:84:0a:b6:30:c7:ec:55:15: fd:eb:78:88:20:e2:3b:13:f3:e6:b8:a1:46:4c:fb:70:2d:36: 06:86:4d:79:8c:cb:7e:4a:01:74:bf:e8:af:37:91:c2:41:88: b1:11:31:4e:4a:4e:78:37:e6:f3:58:d4:c8:cf:fd:63:33:75: 50:cf:66:7b:9d:70:e9:d4:a1:b4:16:97:02:fb:27:9c:bd:1f: 57:8a:55:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzPDz0fKkynJl0FKcDTVRfwAzoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAx QTQ1RjIwQTAeFw0yNjA5MTcwMTQwMzlaFw0yNjA5MTgwMTU3MzlaMDMxMTAvBgNV BAMTKDFENDY2Q0JCODNFNkMzREI3QTM0NzY0RjRBQ0Y3NURDM0Q3ODRFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcTWxO4Au3QpwGpALYBFGB2JVz dX0PxImkh1bfjgMFZTrlBzLmjHwLNYvEqTayKqZ2V+KnD2TYhuWDGzK2+Z9SzOVj qp05/x2MGcGhA9wM36vSnnAVCyIG5IhYQJsLKrDy1Xj3CzDtO0bhwfyWbFWutnPp QZCa6s1oatgy3rskD8oYxdOGX2lNmx75eRaQ4yxvigp+S/kcsmTzxXUm4nBddY6U FdkcKZEuOjdMPvxL45OypR5Cy0w9MN3HhmiOBmu5ag8DW4/Sz4eSyQckLle18/Ma u5auRWyLqrLFeVJxu+CnMtUv/iBcegzVl7dxsFwvdrNY/m5W92PaKuuBHkxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHUZsu4Pmw9t6NHZPSs913D14TqgwHwYDVR0j BBgwFoAUrzyCCFjD/lpubFfoQ+HP0BpF8gowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM2YjVhYmMtMmM1NC00YzVmLWIzZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1 OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAxQTQ1RjIwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjNDODIwODU4QzNGRTVBNkU2QzU3RTg0M0UxQ0ZEMDFBNDVG MjBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNG RDAxQTQ1RjIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPRL/RSON3a1NvXi8JeMkzq/UhMAy8YkirC wt7TXfYEEvQjLGVSkDC6QDywm/1RAdappQ/jnQVOVsvNzdGeBRl20pjBmQnGOBuC sFuyDuB+ESSSesnHFXIhp9zuZwTHMNQjvyc6SdAXwVvD6KpWEGdALtemPK/xBEZU OMqT/LBOn5uDSpZ/MaZMUFo8V/jZNh84Yo1ep3Gi014l9lMOPLTlR0IvWAKWz9UY mVWECrYwx+xVFf3reIgg4jsT8+a4oUZM+3AtNgaGTXmMy35KAXS/6K83kcJBiLER MU5KTng35vNY1MjP/WMzdVDPZnudcOnUobQWlwL7J5y9H1eKVWY= -----END CERTIFICATE-----Generated at Thu Sep 17 13:50:16 2026 by rpki-client