$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft File: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft (raw, json) Hash identifier: tOdKleXwpq5VIemQub19SSrjkmt1pKcDQst2knvK0q8= Subject key identifier: 12:6F:53:BD:DD:A3:35:2A:C7:E5:45:24:62:F1:74:93:FE:15:A3:92 Authority key identifier: AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E Certificate issuer: /CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Certificate serial: 3C3D7A12CF40922D5F983B914D617EA7D6D3DECD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 04:40:26 +0000 Manifest this update: Sat 20 Jun 2026 04:35:26 +0000 Manifest next update: Sun 21 Jun 2026 08:38:26 +0000 Files and hashes: 1: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl (hash: fLatlxsNDCofF1miTNq93IhmYUpIlA9QakOD4l4jD7k=) 2: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: DT0k1jYnw4OjyEhmmqbUNUqGWP5UkTu1MpqB2VuvB0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3d:7a:12:cf:40:92:2d:5f:98:3b:91:4d:61:7e:a7:d6:d3:de:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Validity Not Before: Jun 20 04:35:26 2026 GMT Not After : Jun 21 08:38:26 2026 GMT Subject: CN=126F53BDDDA3352AC7E5452462F17493FE15A392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:9e:1d:bc:53:f5:a6:25:b9:40:ef:ac:13: 52:ca:09:35:01:3d:c5:98:75:45:f6:cf:f6:e3:9c: 72:0c:c7:6b:3e:35:41:08:bb:38:78:33:4d:6f:c0: dc:78:09:fc:68:8c:96:d7:44:2a:77:fe:1e:c9:d5: d1:1e:9c:ab:07:ee:14:c5:ef:5c:ae:04:18:70:54: 46:82:8e:9f:7f:fa:71:8c:4a:41:32:8e:0f:b5:84: bd:11:bf:cd:07:8c:c0:61:09:98:4d:04:d7:ec:cf: d5:eb:ba:14:e8:d8:95:b0:84:2b:1a:8e:c7:70:62: fa:12:f4:49:97:09:ca:9f:11:04:3f:ab:0e:71:10: b2:1e:64:b4:6d:77:29:e5:c8:9a:f2:87:ac:58:ca: 82:5a:2f:36:f6:85:8d:3c:f2:5e:02:ed:e1:ee:79: 12:83:a2:a7:94:f2:df:d6:e0:87:ca:9f:ca:68:13: e2:11:0a:4a:a7:a2:b5:8d:9c:da:a3:3c:e7:cd:87: da:68:01:6f:59:60:5a:04:50:55:49:49:ad:ae:8f: 6c:2a:6e:72:4b:d8:da:69:d6:7e:17:53:9a:e2:72: d2:c4:05:db:be:f1:54:f5:3c:5c:13:c2:da:29:ba: 44:b8:ae:bc:ea:69:e1:75:92:ed:ed:e6:02:eb:4d: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6F:53:BD:DD:A3:35:2A:C7:E5:45:24:62:F1:74:93:FE:15:A3:92 X509v3 Authority Key Identifier: keyid:AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:be:93:73:74:52:10:96:c6:ea:0e:af:cd:67:ba:67:e5:f3: c5:be:27:70:38:2d:77:1d:09:e5:7c:0f:91:7d:dd:db:56:54: 27:65:86:97:32:01:77:c2:b4:ca:09:d7:ef:b7:2d:2e:29:2c: c5:78:4e:82:b1:be:86:23:d5:60:4b:7c:fc:17:90:79:cf:69: 71:3e:e4:4b:28:a4:7a:bd:9c:11:b4:e8:b1:1f:42:0b:2f:70: 21:d9:22:8a:5f:6f:46:46:2e:79:22:6f:1f:c0:72:42:aa:28: df:cc:40:36:bc:9b:c3:91:a1:50:c9:2f:25:8f:c9:43:cd:8d: 34:2a:b3:ba:28:86:7a:c3:06:aa:3f:67:a8:90:83:c8:11:c0: f4:39:18:34:1c:d1:17:a6:e9:c8:b8:2d:22:d5:c5:b2:e9:a2: 49:cc:19:08:3c:6d:cc:fb:2b:f7:05:f5:eb:43:ad:90:0c:7a: b7:4e:ee:e5:11:72:d3:1e:f0:f5:b6:f5:ee:93:23:29:2c:2b: c2:ba:48:db:42:c3:3e:5e:96:5b:9c:09:29:cd:0d:f7:91:96: 72:bc:65:29:50:2f:c6:fc:2f:09:2a:c8:b1:4f:b0:7a:94:b7: 12:b8:ad:0f:f4:a9:d2:c0:6f:97:74:dc:5e:56:5c:ab:31:90: 65:a9:a5:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPD16Es9Aki1fmDuRTWF+p9bT3s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUz QUEzNUU2RTAeFw0yNjA2MjAwNDM1MjZaFw0yNjA2MjEwODM4MjZaMDMxMTAvBgNV BAMTKDEyNkY1M0JERERBMzM1MkFDN0U1NDUyNDYyRjE3NDkzRkUxNUEzOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKp4dvFP1piW5QO+sE1LKCTUB PcWYdUX2z/bjnHIMx2s+NUEIuzh4M01vwNx4CfxojJbXRCp3/h7J1dEenKsH7hTF 71yuBBhwVEaCjp9/+nGMSkEyjg+1hL0Rv80HjMBhCZhNBNfsz9XruhTo2JWwhCsa jsdwYvoS9EmXCcqfEQQ/qw5xELIeZLRtdynlyJryh6xYyoJaLzb2hY088l4C7eHu eRKDoqeU8t/W4IfKn8poE+IRCkqnorWNnNqjPOfNh9poAW9ZYFoEUFVJSa2uj2wq bnJL2Npp1n4XU5rictLEBdu+8VT1PFwTwtopukS4rrzqaeF1ku3t5gLrTcR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEm9Tvd2jNSrH5UUkYvF0k/4Vo5IwHwYDVR0j BBgwFoAUrxrfWDrFADAnKBpOyr993jqjXm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiZjg2NDEtYmY3MC00ZTNmLTk4NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgz QUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUzQUEzNUU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjFBREY1ODNBQzUwMDMwMjcyODFBNEVDQUJGN0RERTNBQTM1 RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdE REUzQUEzNUU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6+k3N0UhCWxuoOr81numfl88W+J3A4LXcd CeV8D5F93dtWVCdlhpcyAXfCtMoJ1++3LS4pLMV4ToKxvoYj1WBLfPwXkHnPaXE+ 5EsopHq9nBG06LEfQgsvcCHZIopfb0ZGLnkibx/AckKqKN/MQDa8m8ORoVDJLyWP yUPNjTQqs7oohnrDBqo/Z6iQg8gRwPQ5GDQc0Rem6ci4LSLVxbLpoknMGQg8bcz7 K/cF9etDrZAMerdO7uURctMe8PW29e6TIyksK8K6SNtCwz5ellucCSnNDfeRlnK8 ZSlQL8b8LwkqyLFPsHqUtxK4rQ/0qdLAb5d03F5WXKsxkGWppfE= -----END CERTIFICATE-----Generated at Sat Jun 20 09:14:05 2026 by rpki-client