$ rpki-client -vvf rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft File: AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft (raw, json) Hash identifier: /eC0msuKjGg6ujIvhmlnSIgnVQNuwGSW6AAU6YwoAnU= Subject key identifier: FF:1F:D5:71:05:0A:2B:08:15:6E:4C:7D:0C:D9:93:E7:21:7C:96:0B Authority key identifier: AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 Certificate issuer: /CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Certificate serial: 4F8AB626FA059A26A79714DCF663A282619D02C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft Manifest number: 13 Signing time: Sat 16 May 2026 03:30:29 +0000 Manifest this update: Sat 16 May 2026 03:25:29 +0000 Manifest next update: Sun 17 May 2026 04:12:29 +0000 Files and hashes: 1: AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl (hash: /YCOQ6fLARx1SUp8KOA7ifZwjnPEaNWF4T9ZpdqxeDk=) 2: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: 6suli2oOGR88rqZA8HRkXIo1ZZ9as8r45IT5Ea+nUsw=) 3: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: /oNv82I3Vm7TPqNqjll+3TrmIZVD8/SYFvS2zGG/dvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 04:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8a:b6:26:fa:05:9a:26:a7:97:14:dc:f6:63:a2:82:61:9d:02:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Validity Not Before: May 16 03:25:29 2026 GMT Not After : May 17 04:12:29 2026 GMT Subject: CN=FF1FD571050A2B08156E4C7D0CD993E7217C960B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:28:f2:f6:58:fc:b5:1e:4e:df:a7:89:51: d1:55:36:39:7f:cf:4e:33:65:e7:01:b5:ea:01:1e: 27:8c:ee:52:c8:78:e1:9e:de:d8:9a:18:50:48:a7: d6:11:4f:ce:34:b2:af:f9:20:e1:82:db:39:3e:be: 8d:39:72:11:ba:80:4f:ed:58:32:8a:0b:60:1b:7f: 02:d9:6d:40:f6:33:1b:a2:6e:3a:de:28:4b:85:2a: 90:9d:d3:a3:11:df:7f:a7:9c:c1:bb:3a:49:44:3e: 76:d3:b2:b9:c2:d4:45:7f:93:7b:36:a3:05:d8:83: 1b:76:ff:a6:c5:22:3b:8a:f2:bb:36:ff:70:a8:09: 40:fc:b0:35:09:31:e2:43:3e:d3:07:f0:d1:35:96: b9:f1:9d:1b:64:db:12:57:80:57:2d:37:b1:34:24: 32:e1:ef:b0:05:a9:8a:46:40:ee:98:6e:0f:47:e5: 48:8f:20:4d:39:64:10:c2:ec:5b:cb:b5:fd:0e:20: 5d:f8:d8:03:c9:7c:e2:86:42:21:08:ec:7d:c6:00: da:0d:c4:84:10:8e:be:9a:ff:a8:bd:7d:52:3e:8d: 6c:04:d0:3c:0c:a1:2d:f0:37:33:08:11:21:1a:d1: 87:86:af:29:be:0b:a4:74:f2:77:45:61:54:94:a7: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1F:D5:71:05:0A:2B:08:15:6E:4C:7D:0C:D9:93:E7:21:7C:96:0B X509v3 Authority Key Identifier: keyid:AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:8e:bd:5c:02:f2:7b:a0:76:a4:82:7b:87:30:a5:39:52:c7: 77:66:25:6c:b8:70:d9:ad:eb:e7:0b:83:8d:ba:82:ea:df:67: c3:bc:ac:a4:e8:c1:6d:4d:4a:e8:97:dc:8d:25:f9:59:c6:90: c5:b7:a3:3e:eb:23:d4:1c:ce:0e:db:36:3a:fc:e6:f3:dd:65: cb:8d:14:d6:67:e4:b9:39:f7:4f:29:20:95:21:7f:76:31:b0: 56:eb:7e:34:85:48:52:83:ae:f9:27:4b:37:6f:53:82:1a:5f: 4a:ed:fd:d8:cb:88:99:08:b5:4e:ab:e7:dd:d2:45:81:94:d1: b4:67:82:f3:79:3c:ec:cc:1f:6e:28:60:fb:b9:f1:39:b1:4c: 04:a8:ac:b4:73:fc:8c:c4:f5:d4:30:af:1d:f4:c8:1f:a5:e5: 98:91:59:80:48:7c:e1:72:0d:bc:2e:a0:6d:02:99:a5:30:d8: 83:ff:6f:22:af:2b:88:e3:be:06:3c:c6:dc:36:c1:da:c1:53: e0:a6:47:fa:ea:ed:7a:79:51:9f:40:eb:a3:59:63:23:45:25: b7:26:84:3b:21:a9:71:7f:ce:ab:c7:e1:31:9e:17:d5:4d:a7: 94:cd:5c:9d:7e:b7:66:ab:66:c4:8d:80:95:51:1c:05:58:62: 5c:8f:fa:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4q2JvoFmianlxTc9mOigmGdAsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0N0Ux NjdDRTI5NjAeFw0yNjA1MTYwMzI1MjlaFw0yNjA1MTcwNDEyMjlaMDMxMTAvBgNV BAMTKEZGMUZENTcxMDUwQTJCMDgxNTZFNEM3RDBDRDk5M0U3MjE3Qzk2MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKSjy9lj8tR5O36eJUdFVNjl/ z04zZecBteoBHieM7lLIeOGe3tiaGFBIp9YRT840sq/5IOGC2zk+vo05chG6gE/t WDKKC2AbfwLZbUD2MxuibjreKEuFKpCd06MR33+nnMG7OklEPnbTsrnC1EV/k3s2 owXYgxt2/6bFIjuK8rs2/3CoCUD8sDUJMeJDPtMH8NE1lrnxnRtk2xJXgFctN7E0 JDLh77AFqYpGQO6Ybg9H5UiPIE05ZBDC7FvLtf0OIF342APJfOKGQiEI7H3GANoN xIQQjr6a/6i9fVI+jWwE0DwMoS3wNzMIESEa0YeGrym+C6R08ndFYVSUpzvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/x/VcQUKKwgVbkx9DNmT5yF8lgswHwYDVR0j BBgwFoAUr80mY9oQNY/ppxqUDcj0fhZ84pYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAwYWUwZjEtYjhjMC00NTJmLThlODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNE QTEwMzU4RkU5QTcxQTk0MERDOEY0N0UxNjdDRTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkNEMjY2M0RBMTAzNThGRTlBNzFBOTQwREM4RjQ3RTE2N0NF Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0 N0UxNjdDRTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmOvVwC8nugdqSCe4cwpTlSx3dmJWy4cNmt 6+cLg426gurfZ8O8rKTowW1NSuiX3I0l+VnGkMW3oz7rI9Qczg7bNjr85vPdZcuN FNZn5Lk5908pIJUhf3YxsFbrfjSFSFKDrvknSzdvU4IaX0rt/djLiJkItU6r593S RYGU0bRngvN5POzMH24oYPu58TmxTASorLRz/IzE9dQwrx30yB+l5ZiRWYBIfOFy DbwuoG0CmaUw2IP/byKvK4jjvgY8xtw2wdrBU+CmR/rq7Xp5UZ9A66NZYyNFJbcm hDshqXF/zqvH4TGeF9VNp5TNXJ1+t2arZsSNgJVRHAVYYlyP+nA= -----END CERTIFICATE-----Generated at Sat May 16 12:11:58 2026 by rpki-client