$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft File: AF0C42FF385AC16D8868625322DDC9687E064976.mft (raw, json) Hash identifier: VQsbdhd8s3eMqZ+H0iLjWUhQIFH4gBZMpu5kAcCOP6k= Subject key identifier: E4:85:67:E4:4F:49:04:E2:F1:B9:D9:81:15:EA:F2:74:E9:4D:74:76 Authority key identifier: AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 Certificate issuer: /CN=AF0C42FF385AC16D8868625322DDC9687E064976 Certificate serial: 132ED79E3303474A12FCDE59B16EF2817EED73EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 02:41:51 +0000 Manifest this update: Thu 17 Sep 2026 02:36:51 +0000 Manifest next update: Fri 18 Sep 2026 06:33:51 +0000 Files and hashes: 1: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: oLBZrJQYooXv1AaJqvvqFmmqga9DhEWLnd2Rras7ouk=) 2: AF0C42FF385AC16D8868625322DDC9687E064976.crl (hash: y9PswzvrFphVvXavstg8C4bb3CLSroSfBRpveeT0bgc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2e:d7:9e:33:03:47:4a:12:fc:de:59:b1:6e:f2:81:7e:ed:73:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF0C42FF385AC16D8868625322DDC9687E064976 Validity Not Before: Sep 17 02:36:51 2026 GMT Not After : Sep 18 06:33:51 2026 GMT Subject: CN=E48567E44F4904E2F1B9D98115EAF274E94D7476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:7b:0a:07:98:8f:71:0a:36:cb:4c:3f:34: 12:b7:e5:c8:9c:e7:e7:d4:7b:35:c1:1f:e2:4f:ec: 82:50:af:a1:e3:8e:5b:62:22:71:5d:e0:6c:68:99: 9b:60:85:cd:f2:16:0c:97:bb:2d:e7:25:f6:16:f3: da:4f:04:b6:02:08:0f:09:38:e2:dd:fb:bb:d2:0e: 7d:01:99:bf:f2:2d:ac:9d:e6:45:fa:2f:be:e3:c8: 28:2d:a5:d1:4f:cf:f3:fc:fc:40:ef:7d:5e:74:06: d0:19:7e:ce:15:b3:fb:69:b6:bc:7c:a1:eb:3c:77: 8e:09:b0:5d:b1:43:77:f6:65:ff:bf:1f:66:56:e8: 22:ab:28:01:97:0c:01:6b:3e:3d:e3:ce:dc:98:21: 61:e4:06:f2:0d:7c:69:0e:a7:b7:a6:48:82:8e:7f: 56:a2:9b:15:c1:01:43:fa:a6:05:71:cc:2c:74:9a: c5:35:7c:8f:1f:f8:92:6c:ec:55:34:bf:03:52:7b: 2d:cb:01:5c:f2:3f:f9:ed:d7:af:34:08:29:9c:78: 14:4e:6b:66:73:1e:fa:91:c5:3a:f4:6f:0d:a5:27: 89:ab:71:00:9d:76:3f:d0:83:f3:54:fa:27:5d:4e: 3e:39:fa:5f:8a:0d:70:42:2c:85:11:77:c0:22:c1: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:85:67:E4:4F:49:04:E2:F1:B9:D9:81:15:EA:F2:74:E9:4D:74:76 X509v3 Authority Key Identifier: keyid:AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d6:b9:bc:ea:7b:dc:c6:57:57:e3:34:d0:87:d7:a9:d2:c7: b4:62:25:1b:21:1f:73:f4:aa:48:05:d9:dc:8b:6d:0b:39:bb: 84:3f:b1:36:aa:16:d2:f3:b2:8e:1f:95:8b:10:a6:9e:57:9a: 3c:2b:0f:31:19:28:d5:30:d0:60:93:f0:66:37:1a:69:7b:c6: 55:5a:45:20:c5:dd:53:98:00:c3:1b:9f:3d:8b:1e:7b:fa:53: b9:66:c5:7a:e8:4c:94:8e:8b:73:fb:cd:fc:01:5a:03:ba:3d: 9c:4b:8d:7a:7a:59:49:61:88:0e:20:eb:3f:bd:90:3d:d7:61: 58:df:da:75:50:7b:72:55:5d:fa:22:3b:1e:cb:3e:88:a5:43: 6c:a6:6c:df:2e:19:62:01:30:70:d9:d4:c4:93:32:1d:34:c6: db:2e:3b:4d:83:8c:c6:2d:52:a2:25:62:74:13:17:f0:ae:ba: f2:9b:d5:b2:99:df:23:98:17:80:07:7a:a8:f7:89:8d:3f:42: 26:98:b7:37:17:c2:09:e5:3d:13:fa:a6:9f:d2:e3:e7:ed:d8: 43:ec:d4:09:d7:5d:3f:aa:1f:58:0c:d9:91:2a:ea:8b:10:5a: 1c:27:e8:d4:01:69:45:e2:21:86:3b:74:a3:72:8a:27:17:1e: 77:65:4a:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEy7XnjMDR0oS/N5ZsW7ygX7tc+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3 RTA2NDk3NjAeFw0yNjA5MTcwMjM2NTFaFw0yNjA5MTgwNjMzNTFaMDMxMTAvBgNV BAMTKEU0ODU2N0U0NEY0OTA0RTJGMUI5RDk4MTE1RUFGMjc0RTk0RDc0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaHsKB5iPcQo2y0w/NBK35cic 5+fUezXBH+JP7IJQr6HjjltiInFd4GxomZtghc3yFgyXuy3nJfYW89pPBLYCCA8J OOLd+7vSDn0Bmb/yLayd5kX6L77jyCgtpdFPz/P8/EDvfV50BtAZfs4Vs/tptrx8 oes8d44JsF2xQ3f2Zf+/H2ZW6CKrKAGXDAFrPj3jztyYIWHkBvINfGkOp7emSIKO f1aimxXBAUP6pgVxzCx0msU1fI8f+JJs7FU0vwNSey3LAVzyP/nt1680CCmceBRO a2ZzHvqRxTr0bw2lJ4mrcQCddj/Qg/NU+iddTj45+l+KDXBCLIURd8AiwYWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5IVn5E9JBOLxudmBFerydOlNdHYwHwYDVR0j BBgwFoAUrwxC/zhawW2IaGJTIt3JaH4GSXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYz ODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3RTA2NDk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjBDNDJGRjM4NUFDMTZEODg2ODYyNTMyMkREQzk2ODdFMDY0 OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5 Njg3RTA2NDk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITWubzqe9zGV1fjNNCH16nSx7RiJRshH3P0 qkgF2dyLbQs5u4Q/sTaqFtLzso4flYsQpp5XmjwrDzEZKNUw0GCT8GY3Gml7xlVa RSDF3VOYAMMbnz2LHnv6U7lmxXroTJSOi3P7zfwBWgO6PZxLjXp6WUlhiA4g6z+9 kD3XYVjf2nVQe3JVXfoiOx7LPoilQ2ymbN8uGWIBMHDZ1MSTMh00xtsuO02DjMYt UqIlYnQTF/CuuvKb1bKZ3yOYF4AHeqj3iY0/QiaYtzcXwgnlPRP6pp/S4+ft2EPs 1AnXXT+qH1gM2ZEq6osQWhwn6NQBaUXiIYY7dKNyiicXHndlSno= -----END CERTIFICATE-----Generated at Thu Sep 17 13:54:36 2026 by rpki-client