$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft File: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft (raw, json) Hash identifier: 1Pny8bTac6CO5UvU2WE++VEnyO5fcoQdgRIFp0L2F58= Subject key identifier: 80:77:CE:4C:C5:59:8E:8F:BC:8C:07:C9:2B:DD:9B:9E:86:80:E9:2D Authority key identifier: AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E Certificate issuer: /CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Certificate serial: 5BB51CCF1805CC3B6790A3E4CFD17118CCD76A22 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 11:58:47 +0000 Manifest this update: Sat 24 Oct 2026 11:53:47 +0000 Manifest next update: Sun 25 Oct 2026 13:32:47 +0000 Files and hashes: 1: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl (hash: trx/aUjmzNACzsDxAhdA39Dj01GAcnp6AD4iB+bu/U0=) 2: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: DT0k1jYnw4OjyEhmmqbUNUqGWP5UkTu1MpqB2VuvB0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 13:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b5:1c:cf:18:05:cc:3b:67:90:a3:e4:cf:d1:71:18:cc:d7:6a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Validity Not Before: Oct 24 11:53:47 2026 GMT Not After : Oct 25 13:32:47 2026 GMT Subject: CN=8077CE4CC5598E8FBC8C07C92BDD9B9E8680E92D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:c2:92:04:8e:97:2b:71:6b:bf:61:77:19: b0:c0:cb:b7:58:10:c6:cb:22:6d:1a:a3:8d:e7:41: 45:89:5d:64:37:44:d9:db:7c:02:b0:ec:8a:1f:0c: c4:28:d6:b2:2a:23:0b:6e:7f:b0:e3:c1:4f:a3:a7: 42:78:0f:78:73:cb:5b:ac:8f:86:a7:df:9a:c4:43: 43:67:f5:18:55:ae:0d:86:9b:38:cc:dc:63:fa:5e: 0c:4a:54:b7:b9:ae:6d:ea:4e:38:c7:05:19:12:5c: e2:82:f4:4a:0d:80:1d:ec:2d:65:81:61:de:61:f1: ad:ee:8f:10:28:3a:f0:0e:d0:d6:71:76:29:3c:e2: 90:d3:b6:6a:05:15:da:78:ab:af:b6:db:72:83:c2: 04:15:ad:a6:ad:03:45:1f:d3:f3:f9:6e:c3:34:bd: c3:dd:4c:17:9e:4c:7c:c6:23:a2:e2:72:06:ab:08: 47:ce:b9:a9:dd:9f:aa:08:a3:29:44:c2:5e:4a:0f: dd:e9:e0:c3:8c:91:2b:ae:3d:7f:95:f1:87:4f:a1: 84:17:d3:35:05:6e:12:e7:5b:8a:1e:50:20:3c:ed: 81:dc:60:36:b0:b7:31:d8:7c:b9:7f:12:06:31:75: b5:2e:ee:8f:d6:1f:d7:70:8d:5b:dd:b6:3c:5e:08: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:77:CE:4C:C5:59:8E:8F:BC:8C:07:C9:2B:DD:9B:9E:86:80:E9:2D X509v3 Authority Key Identifier: keyid:AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a2:5b:4d:36:25:f2:91:1b:29:13:82:ae:f2:13:36:08:63: 9d:90:b3:9e:73:69:13:db:b3:79:60:17:aa:d9:6c:85:c1:87: 43:ba:f1:21:54:9d:2d:d7:4f:24:2f:2e:5f:68:84:b2:74:67: 5e:0c:b7:b3:fe:05:ea:d7:98:e1:0e:70:ff:14:0e:61:ae:64: 1b:2c:f7:f2:c0:94:85:58:a2:01:5e:21:eb:36:35:42:cd:f3: 2d:8a:6b:78:ef:65:7b:d6:26:36:9d:08:fa:66:ca:bd:15:da: 44:a3:64:90:d1:f4:a8:e8:21:1f:e6:99:8e:01:4c:fb:88:87: 8d:05:08:e1:07:73:5b:8a:90:a4:b7:39:fa:5a:e6:4b:9c:9b: 77:76:f8:28:0c:c9:1b:43:fd:06:b0:e3:4c:ac:26:3a:a0:69: 87:5e:90:e0:f2:2e:9d:72:7c:58:0a:38:13:13:5e:c1:42:e6: 3f:3e:e1:5d:fc:49:e0:0e:80:da:62:76:10:bd:3a:2d:8c:52: af:51:b3:70:34:6e:70:1f:ca:dd:00:c1:25:83:0d:d7:e9:92: 54:e4:2e:17:16:ce:91:78:6e:3e:1a:8f:46:e8:8b:d2:8c:65: eb:d8:10:07:51:66:1b:06:58:17:67:d3:c6:d9:63:a2:f6:62: c2:f4:f6:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7UczxgFzDtnkKPkz9FxGMzXaiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUz QUEzNUU2RTAeFw0yNjEwMjQxMTUzNDdaFw0yNjEwMjUxMzMyNDdaMDMxMTAvBgNV BAMTKDgwNzdDRTRDQzU1OThFOEZCQzhDMDdDOTJCREQ5QjlFODY4MEU5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDL8KSBI6XK3Frv2F3GbDAy7dY EMbLIm0ao43nQUWJXWQ3RNnbfAKw7IofDMQo1rIqIwtuf7DjwU+jp0J4D3hzy1us j4an35rEQ0Nn9RhVrg2GmzjM3GP6XgxKVLe5rm3qTjjHBRkSXOKC9EoNgB3sLWWB Yd5h8a3ujxAoOvAO0NZxdik84pDTtmoFFdp4q6+223KDwgQVraatA0Uf0/P5bsM0 vcPdTBeeTHzGI6LicgarCEfOuandn6oIoylEwl5KD93p4MOMkSuuPX+V8YdPoYQX 0zUFbhLnW4oeUCA87YHcYDawtzHYfLl/EgYxdbUu7o/WH9dwjVvdtjxeCJZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgHfOTMVZjo+8jAfJK92bnoaA6S0wHwYDVR0j BBgwFoAUrxrfWDrFADAnKBpOyr993jqjXm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiZjg2NDEtYmY3MC00ZTNmLTk4NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgz QUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUzQUEzNUU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjFBREY1ODNBQzUwMDMwMjcyODFBNEVDQUJGN0RERTNBQTM1 RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdE REUzQUEzNUU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSiW002JfKRGykTgq7yEzYIY52Qs55zaRPb s3lgF6rZbIXBh0O68SFUnS3XTyQvLl9ohLJ0Z14Mt7P+BerXmOEOcP8UDmGuZBss 9/LAlIVYogFeIes2NULN8y2Ka3jvZXvWJjadCPpmyr0V2kSjZJDR9KjoIR/mmY4B TPuIh40FCOEHc1uKkKS3Ofpa5kucm3d2+CgMyRtD/Qaw40ysJjqgaYdekODyLp1y fFgKOBMTXsFC5j8+4V38SeAOgNpidhC9Oi2MUq9Rs3A0bnAfyt0AwSWDDdfpklTk LhcWzpF4bj4aj0boi9KMZevYEAdRZhsGWBdn08bZY6L2YsL09jg= -----END CERTIFICATE-----Generated at Sun Oct 25 01:28:57 2026 by rpki-client