$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft File: AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft (raw, json) Hash identifier: vJL12v6d+L9pkq77TnCajwsVSqjo9ZIU9+XlN07/RGk= Subject key identifier: 35:BF:50:72:32:3D:A0:6A:C7:F4:82:0D:BC:F9:C2:C9:DC:7C:66:6D Authority key identifier: AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 Certificate issuer: /CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Certificate serial: 05A812B9B4E54C73E04CA16156632EFD16DEB3C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft Manifest number: EB Signing time: Sun 25 Oct 2026 20:52:48 +0000 Manifest this update: Sun 25 Oct 2026 20:47:48 +0000 Manifest next update: Tue 27 Oct 2026 00:00:48 +0000 Files and hashes: 1: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: 6suli2oOGR88rqZA8HRkXIo1ZZ9as8r45IT5Ea+nUsw=) 2: AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl (hash: x2Tk0f9S4WSYOiu89qn4UvmfOFpGiT3XQH6+HxP+SiA=) 3: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: /oNv82I3Vm7TPqNqjll+3TrmIZVD8/SYFvS2zGG/dvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a8:12:b9:b4:e5:4c:73:e0:4c:a1:61:56:63:2e:fd:16:de:b3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Validity Not Before: Oct 25 20:47:48 2026 GMT Not After : Oct 27 00:00:48 2026 GMT Subject: CN=35BF5072323DA06AC7F4820DBCF9C2C9DC7C666D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:40:59:c2:3e:2d:8f:d9:84:c9:a2:b7:8e: d8:8c:39:42:83:1e:11:c7:49:e6:f7:01:33:46:05: 3e:29:c9:bb:64:42:2f:ec:77:9a:7e:b8:48:12:7f: 31:f6:9d:54:eb:b7:c2:23:c4:1b:eb:a3:c8:e3:7c: 13:f1:15:cb:61:23:0e:8c:83:96:32:76:04:d7:1f: 31:e2:48:d4:9f:6e:aa:99:ad:97:ab:6d:2d:c9:7d: be:ca:93:19:8f:d3:9c:37:dc:91:6d:42:9c:5e:3f: 1f:df:2a:df:38:d1:21:6b:d9:7f:21:c2:3b:23:61: 87:50:41:c9:1d:7d:58:d8:05:11:8f:b5:14:3f:7a: 10:7a:51:40:e4:15:71:35:b2:c8:f3:56:06:7a:2d: c6:64:82:1c:1b:7c:13:0f:b5:46:dd:5f:a4:a0:b9: 76:46:5c:1f:6a:e5:46:c8:ed:aa:75:2e:62:c4:b6: 9e:1f:98:30:9f:7f:a7:26:e9:a9:2d:ea:6b:0f:b2: 1f:11:02:79:98:11:ee:a7:4c:c2:55:da:27:68:57: 9a:41:50:f9:cd:eb:eb:ce:be:bb:2f:81:3e:8e:d7: 39:a6:0d:77:b9:a0:54:6f:3a:3e:a7:cc:ae:3e:cd: fb:ce:a9:0e:68:dd:34:c4:7b:03:5a:80:2d:d0:23: 81:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BF:50:72:32:3D:A0:6A:C7:F4:82:0D:BC:F9:C2:C9:DC:7C:66:6D X509v3 Authority Key Identifier: keyid:AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:b6:37:08:91:9a:4e:82:8c:24:30:a2:5c:94:59:39:c2:ff: 4c:e4:8c:06:7f:63:46:a2:a8:e0:6e:4b:2c:68:4b:fe:67:10: 4f:51:3a:df:6f:92:35:bd:be:38:5b:3f:4a:82:3b:08:f1:43: 79:cc:b4:d4:75:40:0b:94:23:b2:4d:78:44:a2:9f:a6:75:ec: 43:e6:8b:f2:6e:09:5b:36:38:e0:bf:20:3d:3c:09:cc:68:6f: 92:68:28:ad:5b:68:62:58:e8:bf:b4:50:5c:74:7d:48:d8:77: 65:77:7a:3e:88:12:90:38:4f:9b:c8:f8:bd:91:78:37:98:de: c3:33:f7:29:b9:29:37:dd:08:c6:cf:9a:98:f8:fa:4b:76:9a: ab:5a:2b:ca:0b:0b:7e:94:88:3b:b3:e3:4f:81:eb:b2:54:de: c8:03:15:cc:d3:49:28:ab:39:fa:ef:b9:b1:6d:52:01:bf:05: 20:fb:06:87:fd:48:e3:2b:a7:96:0f:be:94:9b:17:a6:7d:5b: 3d:e9:2c:b6:b7:01:68:e9:a8:59:5a:cf:68:7a:2d:e3:be:78: 0f:ae:83:7b:83:0d:3c:f2:9c:c7:34:74:a8:c7:be:50:f0:78: 12:3b:18:8b:60:e0:ca:c8:f5:56:4a:70:97:5d:08:29:58:c3: 0a:a4:a4:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBagSubTlTHPgTKFhVmMu/Rbes8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0N0Ux NjdDRTI5NjAeFw0yNjEwMjUyMDQ3NDhaFw0yNjEwMjcwMDAwNDhaMDMxMTAvBgNV BAMTKDM1QkY1MDcyMzIzREEwNkFDN0Y0ODIwREJDRjlDMkM5REM3QzY2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pUBZwj4tj9mEyaK3jtiMOUKD HhHHSeb3ATNGBT4pybtkQi/sd5p+uEgSfzH2nVTrt8IjxBvro8jjfBPxFcthIw6M g5YydgTXHzHiSNSfbqqZrZerbS3Jfb7KkxmP05w33JFtQpxePx/fKt840SFr2X8h wjsjYYdQQckdfVjYBRGPtRQ/ehB6UUDkFXE1ssjzVgZ6LcZkghwbfBMPtUbdX6Sg uXZGXB9q5UbI7ap1LmLEtp4fmDCff6cm6akt6msPsh8RAnmYEe6nTMJV2idoV5pB UPnN6+vOvrsvgT6O1zmmDXe5oFRvOj6nzK4+zfvOqQ5o3TTEewNagC3QI4GlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNb9QcjI9oGrH9IINvPnCydx8Zm0wHwYDVR0j BBgwFoAUr80mY9oQNY/ppxqUDcj0fhZ84pYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAwYWUwZjEtYjhjMC00NTJmLThlODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNE QTEwMzU4RkU5QTcxQTk0MERDOEY0N0UxNjdDRTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkNEMjY2M0RBMTAzNThGRTlBNzFBOTQwREM4RjQ3RTE2N0NF Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0 N0UxNjdDRTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALu2NwiRmk6CjCQwolyUWTnC/0zkjAZ/Y0ai qOBuSyxoS/5nEE9ROt9vkjW9vjhbP0qCOwjxQ3nMtNR1QAuUI7JNeESin6Z17EPm i/JuCVs2OOC/ID08Ccxob5JoKK1baGJY6L+0UFx0fUjYd2V3ej6IEpA4T5vI+L2R eDeY3sMz9ym5KTfdCMbPmpj4+kt2mqtaK8oLC36UiDuz40+B67JU3sgDFczTSSir OfrvubFtUgG/BSD7Bof9SOMrp5YPvpSbF6Z9Wz3pLLa3AWjpqFlaz2h6LeO+eA+u g3uDDTzynMc0dKjHvlDweBI7GItg4MrI9VZKcJddCClYwwqkpFY= -----END CERTIFICATE-----Generated at Mon Oct 26 12:41:01 2026 by rpki-client