$ rpki-client -vvf rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft File: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft (raw, json) Hash identifier: WI2aCUY+B2ppND+uoU2krXCw2rems6lgdmg0tJJqwmY= Subject key identifier: 95:E2:71:45:69:CC:7E:4A:E2:0B:8D:12:B3:99:0D:ED:13:33:ED:A1 Authority key identifier: AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD Certificate issuer: /CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Certificate serial: 2BC0FE2A0653DC19559F7746DD349ECC6712225E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 15:00:36 +0000 Manifest this update: Sun 02 Aug 2026 14:55:36 +0000 Manifest next update: Mon 03 Aug 2026 15:44:36 +0000 Files and hashes: 1: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: +597iuB7PbfMY+3aubsI/GkbNTaFIoKUe/CnIoipNDU=) 2: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: odcITqAToT5yF34xeI2KwLrnQspjZLjDq5idgZAGEkU=) 3: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: 4yYHOQ19SUo4wUen+ovEY0nBNoIbYKAxFiddTf9qCzI=) 4: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl (hash: bA066k4HG8eI8TjfOxn7SBU5rHWNM3tgoimotWURbTQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 15:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c0:fe:2a:06:53:dc:19:55:9f:77:46:dd:34:9e:cc:67:12:22:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Validity Not Before: Aug 2 14:55:36 2026 GMT Not After : Aug 3 15:44:36 2026 GMT Subject: CN=95E2714569CC7E4AE20B8D12B3990DED1333EDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:71:2c:5e:44:60:bb:05:c4:8f:58:6d:79: bd:48:83:27:2a:37:19:e2:bc:6b:f9:a8:18:29:32: 3a:4c:be:6e:8f:46:9a:ce:ea:c4:60:74:c7:b1:d9: df:df:70:8e:37:40:4b:4c:39:6c:30:13:43:3f:66: 05:86:fa:4a:97:61:f7:06:e6:fa:59:8f:10:4d:a4: 01:ed:d6:35:8b:09:d7:4a:f5:11:53:8a:96:be:65: 27:e5:38:1f:53:9d:84:b0:7b:f9:74:76:d5:ea:20: 99:c0:80:71:8a:9d:45:ec:19:01:b9:1e:ee:cc:db: 9b:00:3c:28:bc:10:ca:bd:c8:ae:b3:89:da:ea:86: fa:69:1e:d8:f1:60:85:6b:76:ac:bc:c2:96:6e:02: cf:60:5f:11:ac:67:d6:e9:ad:46:7f:25:bb:ac:35: d5:14:34:45:3f:0a:e3:6e:fc:9a:29:5c:0b:84:aa: d0:ac:85:14:34:a0:9a:56:db:06:54:b9:81:5e:2f: 9a:c1:54:a0:e5:6d:2b:11:46:0c:96:2c:10:8c:8d: 74:05:a6:7a:04:9e:01:08:61:b3:2f:50:14:96:ba: fa:74:c0:0b:95:00:50:9b:24:7d:30:dd:f6:63:ab: 2f:0a:e5:75:d1:71:58:68:60:7c:2e:a0:88:94:45: fc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E2:71:45:69:CC:7E:4A:E2:0B:8D:12:B3:99:0D:ED:13:33:ED:A1 X509v3 Authority Key Identifier: keyid:AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:75:ee:81:f2:d9:0f:df:27:3f:87:4e:96:e2:6f:f6:3f:97: 86:40:8f:cb:7f:8c:cd:06:e4:99:8b:9e:70:30:49:4d:dc:17: 44:c0:a7:e2:fc:f6:ad:e0:2a:c1:39:ae:75:fd:52:88:66:6a: 3f:11:53:8b:c7:c1:19:12:a7:92:cd:02:f4:c9:09:bd:57:2b: 38:12:b5:b1:5a:dc:d8:fc:08:54:6f:93:15:df:ec:e6:0e:d3: 12:9a:3b:91:c8:99:7b:5a:e3:7d:7d:b8:5f:79:c3:70:f9:85: 7a:5e:3f:be:9c:21:79:64:5f:7a:0e:bc:6c:f8:6d:53:72:ad: 15:b2:ff:e0:fc:93:4a:17:43:31:ea:07:42:8b:da:38:57:3a: f2:88:87:95:98:c0:1a:30:56:e6:94:e8:86:dd:0d:00:0b:22: 71:e9:91:fe:79:74:7f:35:6a:bf:12:b0:69:2a:74:39:d5:4f: fa:78:ac:21:74:d9:a4:b3:1a:1d:ff:93:11:4d:6a:51:6c:bc: eb:9c:59:d1:63:15:c0:40:40:4f:ac:c4:eb:ed:85:10:6b:d5: d9:09:1c:fe:0e:15:c6:ca:4b:3f:b1:d7:98:be:2c:17:04:73: 0e:35:99:e7:02:be:ba:b4:08:2e:1b:0f:96:6f:74:10:9d:ed: 84:1b:6b:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8D+KgZT3BlVn3dG3TSezGcSIl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4 MEZERkRGRDAeFw0yNjA4MDIxNDU1MzZaFw0yNjA4MDMxNTQ0MzZaMDMxMTAvBgNV BAMTKDk1RTI3MTQ1NjlDQzdFNEFFMjBCOEQxMkIzOTkwREVEMTMzM0VEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OHEsXkRguwXEj1hteb1Igycq NxnivGv5qBgpMjpMvm6PRprO6sRgdMex2d/fcI43QEtMOWwwE0M/ZgWG+kqXYfcG 5vpZjxBNpAHt1jWLCddK9RFTipa+ZSflOB9TnYSwe/l0dtXqIJnAgHGKnUXsGQG5 Hu7M25sAPCi8EMq9yK6zidrqhvppHtjxYIVrdqy8wpZuAs9gXxGsZ9bprUZ/Jbus NdUUNEU/CuNu/JopXAuEqtCshRQ0oJpW2wZUuYFeL5rBVKDlbSsRRgyWLBCMjXQF pnoEngEIYbMvUBSWuvp0wAuVAFCbJH0w3fZjqy8K5XXRcVhoYHwuoIiURfzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUleJxRWnMfkriC40Ss5kN7RMz7aEwHwYDVR0j BBgwFoAUrz0etvO3SxJgZ5fDHCNTt4D9/f0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY3ODYwZTMtNmFkOC00N2E1LTk0YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZG M0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4MEZERkRGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjNEMUVCNkYzQjc0QjEyNjA2Nzk3QzMxQzIzNTNCNzgwRkRG REZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUz Qjc4MEZERkRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA917oHy2Q/fJz+HTpbib/Y/l4ZAj8t/jM0G 5JmLnnAwSU3cF0TAp+L89q3gKsE5rnX9Uohmaj8RU4vHwRkSp5LNAvTJCb1XKzgS tbFa3Nj8CFRvkxXf7OYO0xKaO5HImXta4319uF95w3D5hXpeP76cIXlkX3oOvGz4 bVNyrRWy/+D8k0oXQzHqB0KL2jhXOvKIh5WYwBowVuaU6IbdDQALInHpkf55dH81 ar8SsGkqdDnVT/p4rCF02aSzGh3/kxFNalFsvOucWdFjFcBAQE+sxOvthRBr1dkJ HP4OFcbKSz+x15i+LBcEcw41mecCvrq0CC4bD5ZvdBCd7YQba4U= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:58 2026 by rpki-client