$ rpki-client -vvf rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft File: AFB831541A03B6BE413D492F67453655438B76F4.mft (raw, json) Hash identifier: BN7sEn2d674/Ntt/LQeyJv4ungB0RpvBGTq3mK58eYg= Subject key identifier: E2:4C:70:B0:3A:87:C8:08:34:17:10:E4:CA:D0:24:18:AE:58:A9:36 Authority key identifier: AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 Certificate issuer: /CN=AFB831541A03B6BE413D492F67453655438B76F4 Certificate serial: 7DE1A5D37BA0D60730BE4D9F42B55B74FEAE7C3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft Manifest number: 3B Signing time: Mon 15 Jun 2026 07:20:13 +0000 Manifest this update: Mon 15 Jun 2026 07:15:13 +0000 Manifest next update: Tue 16 Jun 2026 07:44:13 +0000 Files and hashes: 1: AFB831541A03B6BE413D492F67453655438B76F4.crl (hash: lXT+mQLM49Op5QkSJiba/3kM5GQq+JROcHNS+Ohg/lk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e1:a5:d3:7b:a0:d6:07:30:be:4d:9f:42:b5:5b:74:fe:ae:7c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFB831541A03B6BE413D492F67453655438B76F4 Validity Not Before: Jun 15 07:15:13 2026 GMT Not After : Jun 16 07:44:13 2026 GMT Subject: CN=E24C70B03A87C808341710E4CAD02418AE58A936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b2:07:b2:6a:87:32:b3:91:af:89:42:0d:a0: b2:d8:19:16:90:19:ee:ec:9b:29:d6:d5:0d:d1:cd: c0:a8:9f:f0:7d:fd:f8:a1:b2:80:d9:f0:22:f4:1a: fa:5a:76:10:ca:09:06:c6:3c:3e:83:75:56:fe:e6: 21:31:80:47:b0:aa:5b:10:13:dc:f9:55:b2:f7:c6: ad:14:4a:fd:28:2a:31:8d:d7:b9:08:4e:b5:24:7c: 91:1d:90:e4:5f:48:ac:fa:cf:3b:8b:77:bc:5a:bc: 49:e4:74:f7:d3:e7:ea:d7:d0:c9:7c:c4:bc:6d:2f: d0:d3:d2:9c:09:53:a3:ce:8f:bc:62:bf:83:7f:0e: 67:fc:a6:da:b3:59:90:c7:09:74:8f:d1:fa:7c:af: a3:8f:b0:25:54:60:62:77:45:e2:9b:4b:53:a5:04: 2c:3a:fa:ff:06:09:75:6e:ac:3b:67:d2:95:17:60: d5:39:67:10:f0:81:86:b7:ab:ac:d9:aa:9f:09:0d: 48:3c:e3:86:39:c1:ab:b1:a2:c2:cf:61:f1:f4:7d: 29:4a:76:db:ea:1f:c1:bc:11:c3:7a:36:a1:3e:58: 37:55:48:94:01:19:17:dd:c6:fb:e6:2c:d2:ce:42: 07:ad:6a:25:1b:3e:00:1c:18:9d:8b:81:5c:70:90: d5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4C:70:B0:3A:87:C8:08:34:17:10:E4:CA:D0:24:18:AE:58:A9:36 X509v3 Authority Key Identifier: keyid:AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:97:ac:b0:ac:d4:b5:3c:9d:6d:d7:f7:2c:e2:53:08:99:93: 66:77:08:b4:a6:b0:79:08:42:c4:a6:45:30:21:b8:8c:c2:fc: 29:ab:4c:c7:6b:ea:cc:58:b8:95:c8:31:95:2e:8b:a0:58:54: f1:09:a8:ea:9b:6b:7e:de:67:15:54:d1:71:8d:da:4f:49:b2: 0b:2d:9c:cc:df:86:46:b1:a8:dd:38:72:11:3b:90:39:19:14: 92:b8:ec:25:4c:7e:a9:08:10:58:cd:17:90:ea:a5:54:d7:94: 43:76:d3:1c:80:94:66:b4:02:fc:82:76:b4:b2:ab:42:22:7a: 91:0d:55:58:9d:08:1d:e1:f2:a9:7d:2f:c1:93:d3:c0:48:88: ce:e5:84:51:d7:b2:e7:23:c8:00:16:d6:52:52:9f:cf:6a:7a: 3f:17:3e:fc:23:3f:db:dc:4a:f2:f4:a5:39:19:37:80:d1:16: 54:c3:d6:33:0c:5c:fd:66:e9:56:5e:2c:79:d9:f1:fc:f3:1a: d4:b7:79:b7:38:e7:36:e5:02:06:b3:a8:57:55:36:b4:11:66: ab:11:ad:33:0f:4a:b8:ad:a1:e3:8b:1c:fd:9e:a3:ed:b8:83: a5:69:74:03:4c:2c:bc:ef:4b:ea:89:ec:b7:8f:2c:1b:52:79: 65:54:10:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfeGl03ug1gcwvk2fQrVbdP6ufD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0 MzhCNzZGNDAeFw0yNjA2MTUwNzE1MTNaFw0yNjA2MTYwNzQ0MTNaMDMxMTAvBgNV BAMTKEUyNEM3MEIwM0E4N0M4MDgzNDE3MTBFNENBRDAyNDE4QUU1OEE5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqsgeyaocys5GviUINoLLYGRaQ Ge7smynW1Q3RzcCon/B9/fihsoDZ8CL0GvpadhDKCQbGPD6DdVb+5iExgEewqlsQ E9z5VbL3xq0USv0oKjGN17kITrUkfJEdkORfSKz6zzuLd7xavEnkdPfT5+rX0Ml8 xLxtL9DT0pwJU6POj7xiv4N/Dmf8ptqzWZDHCXSP0fp8r6OPsCVUYGJ3ReKbS1Ol BCw6+v8GCXVurDtn0pUXYNU5ZxDwgYa3q6zZqp8JDUg844Y5wauxosLPYfH0fSlK dtvqH8G8EcN6NqE+WDdVSJQBGRfdxvvmLNLOQgetaiUbPgAcGJ2LgVxwkNVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4kxwsDqHyAg0FxDkytAkGK5YqTYwHwYDVR0j BBgwFoAUr7gxVBoDtr5BPUkvZ0U2VUOLdvQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI0YTY1ZjQtNGY0Yi00NGI2LWEyZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQx QTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0MzhCNzZGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkI4MzE1NDFBMDNCNkJFNDEzRDQ5MkY2NzQ1MzY1NTQzOEI3 NkY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2 NTU0MzhCNzZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2XrLCs1LU8nW3X9yziUwiZk2Z3CLSmsHkI QsSmRTAhuIzC/CmrTMdr6sxYuJXIMZUui6BYVPEJqOqba37eZxVU0XGN2k9Jsgst nMzfhkaxqN04chE7kDkZFJK47CVMfqkIEFjNF5DqpVTXlEN20xyAlGa0AvyCdrSy q0IiepENVVidCB3h8ql9L8GT08BIiM7lhFHXsucjyAAW1lJSn89qej8XPvwjP9vc SvL0pTkZN4DRFlTD1jMMXP1m6VZeLHnZ8fzzGtS3ebc45zblAgazqFdVNrQRZqsR rTMPSritoeOLHP2eo+24g6VpdANMLLzvS+qJ7LePLBtSeWVUEKM= -----END CERTIFICATE-----Generated at Mon Jun 15 13:58:17 2026 by rpki-client