$ rpki-client -vvvf rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft File: AFB831541A03B6BE413D492F67453655438B76F4.mft (raw, json) Hash identifier: HxwcSsWz2gVrILkLh60Ig2rFsEF3NJU7KUv4oWqKJWQ= Subject key identifier: F0:C1:00:7C:CF:D4:3D:CA:AF:F0:F6:71:84:06:2F:B1:44:05:E2:9D Authority key identifier: AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 Certificate issuer: /CN=AFB831541A03B6BE413D492F67453655438B76F4 Certificate serial: 1FB36D4414A86827E7672F85AFBB675996A06932 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft Manifest number: BC Signing time: Sun 20 Sep 2026 08:42:53 +0000 Manifest this update: Sun 20 Sep 2026 08:37:53 +0000 Manifest next update: Mon 21 Sep 2026 10:17:53 +0000 Files and hashes: 1: AFB831541A03B6BE413D492F67453655438B76F4.crl (hash: RtqRC15OGs21KPesKA+mfaW3EkWs/zoz4UQN5rFsjP4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b3:6d:44:14:a8:68:27:e7:67:2f:85:af:bb:67:59:96:a0:69:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFB831541A03B6BE413D492F67453655438B76F4 Validity Not Before: Sep 20 08:37:53 2026 GMT Not After : Sep 21 10:17:53 2026 GMT Subject: CN=F0C1007CCFD43DCAAFF0F67184062FB14405E29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:ae:2c:f4:8d:a9:8c:30:22:21:48:df:c9: 0d:84:27:d8:c7:1b:1a:80:69:b7:12:d2:ee:f0:f6: 5b:62:84:1d:13:42:4a:a4:58:60:d5:42:18:a3:9e: 87:ad:b8:e5:45:37:b2:05:6f:89:03:33:f0:d0:4b: 39:1c:1f:ec:e5:10:c6:d6:12:80:32:66:1d:51:b5: 33:4e:99:bb:e5:bf:ce:b1:55:aa:d9:ea:43:89:61: 02:16:09:0b:2e:74:25:d1:14:61:5a:e7:5e:88:86: c0:ce:11:0a:fa:6c:3a:ff:ae:d5:28:58:ca:e9:74: 57:be:6f:1f:97:18:18:00:5a:d1:bd:d5:bb:90:07: 34:14:70:a5:8b:41:e2:2a:b8:3e:1c:b0:2b:74:6d: 06:87:fe:7c:c4:54:ae:07:42:92:fb:f9:94:05:bb: f2:fa:eb:8f:2b:ce:44:f0:28:14:e2:c2:7e:f0:15: 76:14:bb:0c:e1:af:10:20:5f:cd:a0:9c:e5:6e:98: 6c:08:cb:c5:1a:14:8e:4f:8f:1c:ec:15:2f:80:fe: c8:06:71:f3:8d:ea:9f:50:61:f7:f7:fa:49:78:81: 06:b5:2a:34:42:01:9f:34:85:cf:64:36:64:90:73: 06:44:70:90:63:3c:6f:75:20:d4:ac:ac:d5:5b:aa: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C1:00:7C:CF:D4:3D:CA:AF:F0:F6:71:84:06:2F:B1:44:05:E2:9D X509v3 Authority Key Identifier: keyid:AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:b0:d9:cc:d2:0c:11:44:3b:e6:2b:e3:db:bc:51:76:0a:26: 50:ac:33:48:92:59:7d:56:a2:15:c8:ac:77:48:5a:90:47:a3: ed:26:11:2b:52:1e:ed:c6:84:f4:a0:18:d6:97:4e:50:c6:d9: ea:47:fd:19:82:4e:3c:2a:6e:20:7f:14:19:6a:0a:45:3a:c5: b6:f5:bd:7b:73:9a:0c:50:10:78:6d:1b:74:25:16:ad:ac:5f: 9b:da:f2:db:9b:69:3a:64:0e:bc:bb:4b:8b:8c:e9:11:10:d8: 8a:8f:a8:c7:65:3b:9b:43:2d:8a:da:65:1c:7b:89:dd:f4:0f: 3d:25:d8:a6:f2:de:05:13:f6:9c:5a:b6:53:71:8c:5b:57:1f: e5:d3:9b:61:2d:1a:81:e7:9f:40:b3:cf:d3:d6:73:f1:ec:bd: 1c:bc:db:ed:f2:84:f1:70:41:34:4d:2f:8c:e1:e8:85:28:2f: d3:eb:77:ed:71:4d:62:f1:3a:ef:25:c2:41:ce:c6:36:33:b3: 13:cb:27:0f:3e:51:b2:3d:38:4b:c1:e2:ee:1c:cb:4b:ca:45: 1a:dd:a4:51:0a:ff:a2:c0:25:51:d8:e3:d7:87:02:06:3d:7d: 91:4e:61:64:b6:46:40:88:1c:2b:95:69:bc:6e:e5:60:bb:d7: 40:b7:f3:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7NtRBSoaCfnZy+Fr7tnWZagaTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0 MzhCNzZGNDAeFw0yNjA5MjAwODM3NTNaFw0yNjA5MjExMDE3NTNaMDMxMTAvBgNV BAMTKEYwQzEwMDdDQ0ZENDNEQ0FBRkYwRjY3MTg0MDYyRkIxNDQwNUUyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHR64s9I2pjDAiIUjfyQ2EJ9jH GxqAabcS0u7w9ltihB0TQkqkWGDVQhijnoetuOVFN7IFb4kDM/DQSzkcH+zlEMbW EoAyZh1RtTNOmbvlv86xVarZ6kOJYQIWCQsudCXRFGFa516IhsDOEQr6bDr/rtUo WMrpdFe+bx+XGBgAWtG91buQBzQUcKWLQeIquD4csCt0bQaH/nzEVK4HQpL7+ZQF u/L6648rzkTwKBTiwn7wFXYUuwzhrxAgX82gnOVumGwIy8UaFI5PjxzsFS+A/sgG cfON6p9QYff3+kl4gQa1KjRCAZ80hc9kNmSQcwZEcJBjPG91INSsrNVbqrDZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8MEAfM/UPcqv8PZxhAYvsUQF4p0wHwYDVR0j BBgwFoAUr7gxVBoDtr5BPUkvZ0U2VUOLdvQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI0YTY1ZjQtNGY0Yi00NGI2LWEyZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQx QTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0MzhCNzZGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkI4MzE1NDFBMDNCNkJFNDEzRDQ5MkY2NzQ1MzY1NTQzOEI3 NkY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2 NTU0MzhCNzZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANiw2czSDBFEO+Yr49u8UXYKJlCsM0iSWX1W ohXIrHdIWpBHo+0mEStSHu3GhPSgGNaXTlDG2epH/RmCTjwqbiB/FBlqCkU6xbb1 vXtzmgxQEHhtG3QlFq2sX5va8tubaTpkDry7S4uM6REQ2IqPqMdlO5tDLYraZRx7 id30Dz0l2Kby3gUT9pxatlNxjFtXH+XTm2EtGoHnn0Czz9PWc/HsvRy82+3yhPFw QTRNL4zh6IUoL9Prd+1xTWLxOu8lwkHOxjYzsxPLJw8+UbI9OEvB4u4cy0vKRRrd pFEK/6LAJVHY49eHAgY9fZFOYWS2RkCIHCuVabxu5WC710C385o= -----END CERTIFICATE-----Generated at Mon Sep 21 03:24:18 2026 by rpki-client