$ rpki-client -vvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft File: AF0C42FF385AC16D8868625322DDC9687E064976.mft (raw, json) Hash identifier: T9axRnxs0X4PO50Jn2RjX+MOzbYJdobzLTYezS/uU08= Subject key identifier: 6D:90:5E:02:30:4D:74:65:FB:5B:59:56:B8:F6:8F:34:EE:BC:A1:33 Authority key identifier: AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 Certificate issuer: /CN=AF0C42FF385AC16D8868625322DDC9687E064976 Certificate serial: 6D4B1A8AE0E2E3D628900D61304EA248EF605E7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 13:28:13 +0000 Manifest this update: Thu 18 Jun 2026 13:23:13 +0000 Manifest next update: Fri 19 Jun 2026 15:01:13 +0000 Files and hashes: 1: AF0C42FF385AC16D8868625322DDC9687E064976.crl (hash: slYi1eHWhdvksmq+c0AxWF/F5N+2JszFPR8L1p10o5o=) 2: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: oLBZrJQYooXv1AaJqvvqFmmqga9DhEWLnd2Rras7ouk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4b:1a:8a:e0:e2:e3:d6:28:90:0d:61:30:4e:a2:48:ef:60:5e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF0C42FF385AC16D8868625322DDC9687E064976 Validity Not Before: Jun 18 13:23:13 2026 GMT Not After : Jun 19 15:01:13 2026 GMT Subject: CN=6D905E02304D7465FB5B5956B8F68F34EEBCA133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:29:2f:bb:c9:4c:b7:f3:6a:0c:1e:54:dc:97: 40:0a:0a:14:4e:9e:c4:4f:61:c2:0e:3e:e4:25:f0: 11:10:2d:8b:dd:c7:0c:19:39:e8:6a:7d:d7:81:cd: bd:d1:4d:be:21:97:c7:77:26:39:e7:29:37:50:bf: 09:4f:e9:eb:ec:c3:df:a3:80:36:54:72:93:26:9d: 49:5f:2f:07:74:f9:d1:ce:60:c2:e5:bc:09:b4:96: 41:98:ea:1d:5b:f7:db:2d:1b:2c:85:fe:a3:0f:06: cf:46:c7:b5:b2:c1:86:27:bf:66:d3:08:bd:50:c7: 44:16:fc:31:6a:35:4e:70:1f:ce:8a:03:db:3b:6d: d4:c4:f7:b6:9c:a5:1c:6b:d3:45:93:ce:bc:5f:83: 3b:5b:c5:ca:ca:03:05:a8:73:76:a3:99:87:00:99: d8:7e:15:56:93:4c:d8:06:34:4f:87:9b:99:21:7d: 9b:0c:36:6c:06:7e:94:dc:73:10:f7:60:b1:66:b9: 5b:22:eb:be:14:c6:f1:7c:44:10:4d:56:c7:95:70: 76:ae:e5:f8:90:c6:7f:b2:b4:c2:bc:50:28:aa:ef: 96:6b:56:dc:bd:60:42:38:6e:99:e2:f7:6c:c4:54: 02:74:29:b4:24:33:2d:22:6d:b7:98:be:3e:2a:2a: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:90:5E:02:30:4D:74:65:FB:5B:59:56:B8:F6:8F:34:EE:BC:A1:33 X509v3 Authority Key Identifier: keyid:AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:33:c2:af:14:55:d0:a7:25:f1:44:58:b6:11:cf:7c:1b:eb: 1a:f4:36:2c:a2:bb:9b:c8:e5:fc:f1:34:91:9f:e8:73:d1:bc: 4a:a4:4f:87:ce:b5:4b:ae:eb:a4:c6:b9:51:99:f0:70:cb:ff: e4:e2:4d:4b:7e:c3:0f:fe:6e:29:e6:27:b7:fd:96:19:e1:de: 32:c8:f9:e1:cd:9e:b0:30:cb:ba:3b:72:40:f2:f7:22:6e:b2: 38:e6:ae:34:63:6d:5e:a0:8b:97:75:23:5e:ef:21:d7:74:af: a0:69:d4:18:7b:38:14:ee:e2:9a:9e:44:49:17:16:a6:83:a3: ec:26:59:77:9b:42:73:3d:b3:aa:f1:dd:05:d7:db:69:8c:59: 93:a7:27:c0:09:b6:44:00:e0:ee:8a:84:e9:9f:e8:96:0d:cf: 2e:e7:49:4f:7a:e0:e9:12:34:81:43:9b:89:65:39:18:a6:2d: 8a:a3:ff:41:38:6d:3b:23:eb:6d:5c:ee:af:92:92:42:47:cb: f6:f1:09:a9:8f:a0:96:48:d3:65:7a:e7:ae:57:a6:c9:0c:a7: a4:d8:cc:de:2e:4e:f1:6e:99:05:7d:29:b5:4d:58:5e:bd:42: cc:e2:44:84:c3:db:69:33:a4:65:57:4b:ef:1a:de:9d:fb:a7: dd:29:0d:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUsaiuDi49YokA1hME6iSO9gXnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3 RTA2NDk3NjAeFw0yNjA2MTgxMzIzMTNaFw0yNjA2MTkxNTAxMTNaMDMxMTAvBgNV BAMTKDZEOTA1RTAyMzA0RDc0NjVGQjVCNTk1NkI4RjY4RjM0RUVCQ0ExMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWKS+7yUy382oMHlTcl0AKChRO nsRPYcIOPuQl8BEQLYvdxwwZOehqfdeBzb3RTb4hl8d3JjnnKTdQvwlP6evsw9+j gDZUcpMmnUlfLwd0+dHOYMLlvAm0lkGY6h1b99stGyyF/qMPBs9Gx7WywYYnv2bT CL1Qx0QW/DFqNU5wH86KA9s7bdTE97acpRxr00WTzrxfgztbxcrKAwWoc3ajmYcA mdh+FVaTTNgGNE+Hm5khfZsMNmwGfpTccxD3YLFmuVsi674UxvF8RBBNVseVcHau 5fiQxn+ytMK8UCiq75ZrVty9YEI4bpni92zEVAJ0KbQkMy0ibbeYvj4qKlB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbZBeAjBNdGX7W1lWuPaPNO68oTMwHwYDVR0j BBgwFoAUrwxC/zhawW2IaGJTIt3JaH4GSXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYz ODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3RTA2NDk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjBDNDJGRjM4NUFDMTZEODg2ODYyNTMyMkREQzk2ODdFMDY0 OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5 Njg3RTA2NDk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEzwq8UVdCnJfFEWLYRz3wb6xr0Niyiu5vI 5fzxNJGf6HPRvEqkT4fOtUuu66TGuVGZ8HDL/+TiTUt+ww/+binmJ7f9lhnh3jLI +eHNnrAwy7o7ckDy9yJusjjmrjRjbV6gi5d1I17vIdd0r6Bp1Bh7OBTu4pqeREkX FqaDo+wmWXebQnM9s6rx3QXX22mMWZOnJ8AJtkQA4O6KhOmf6JYNzy7nSU964OkS NIFDm4llORimLYqj/0E4bTsj621c7q+SkkJHy/bxCamPoJZI02V6565XpskMp6TY zN4uTvFumQV9KbVNWF69QsziRITD22kzpGVXS+8a3p37p90pDUU= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:23 2026 by rpki-client