$ rpki-client -vvvf rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft File: AFB831541A03B6BE413D492F67453655438B76F4.mft (raw, json) Hash identifier: z2+WxtB8fTwapbQEIWY+P6WrpRirPz/HQ4ff+PwSUdA= Subject key identifier: 2C:3B:BD:6E:8C:B1:82:64:47:AF:67:E8:5E:6F:32:70:73:27:A0:98 Authority key identifier: AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 Certificate issuer: /CN=AFB831541A03B6BE413D492F67453655438B76F4 Certificate serial: 57B2E4361D4C8FD1FF3246B5C1873AFBDA98DC94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 16:16:38 +0000 Manifest this update: Tue 10 Nov 2026 16:11:38 +0000 Manifest next update: Wed 11 Nov 2026 19:51:38 +0000 Files and hashes: 1: AFB831541A03B6BE413D492F67453655438B76F4.crl (hash: 9VxFtk+QjrY3g/qzxLE+EBEvwr6RlATU48KkDwlhyD8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b2:e4:36:1d:4c:8f:d1:ff:32:46:b5:c1:87:3a:fb:da:98:dc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFB831541A03B6BE413D492F67453655438B76F4 Validity Not Before: Nov 10 16:11:38 2026 GMT Not After : Nov 11 19:51:38 2026 GMT Subject: CN=2C3BBD6E8CB1826447AF67E85E6F32707327A098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:0e:07:09:22:c6:2c:25:1e:f7:7a:59:9a: 91:36:5c:c6:89:a6:ad:a4:39:58:d9:d3:ba:c9:0b: f5:53:80:af:9a:2f:3d:93:19:98:c3:0c:07:37:13: 9b:56:1d:2a:a8:bc:c1:74:61:cb:86:44:9e:a7:18: 0b:5c:55:7a:62:e9:00:11:4b:b6:5d:1b:6b:b7:f1: fc:53:19:ed:bb:1d:28:70:9a:cb:10:94:01:f7:8f: 91:82:ed:b9:ad:83:88:00:42:53:cf:6a:ea:3d:03: ab:2b:8c:d5:3e:78:6c:05:53:0f:ff:b7:20:de:f9: b6:22:85:5d:de:e6:1e:a3:f3:35:bc:14:1e:73:35: 05:25:e4:85:25:36:9a:5c:59:0d:28:6f:7e:0e:45: 56:b1:7f:7a:69:0f:20:3f:68:b1:4a:48:87:9f:5a: 8a:f1:9c:c9:a7:f4:c0:38:0a:82:f6:60:66:5b:bd: 7c:bb:b9:83:5f:ee:88:9d:21:d5:18:3d:b5:17:30: 7e:bb:1a:85:b3:9b:4a:7e:67:2d:73:06:36:29:19: ee:85:de:61:c9:00:4d:34:44:b3:78:4f:58:bd:7f: e9:8c:1a:34:23:f4:c8:2f:12:f0:e3:88:fb:84:e9: e0:97:14:85:62:b9:e5:ea:d5:3e:76:49:04:7b:a5: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3B:BD:6E:8C:B1:82:64:47:AF:67:E8:5E:6F:32:70:73:27:A0:98 X509v3 Authority Key Identifier: keyid:AF:B8:31:54:1A:03:B6:BE:41:3D:49:2F:67:45:36:55:43:8B:76:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFB831541A03B6BE413D492F67453655438B76F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/AFB831541A03B6BE413D492F67453655438B76F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:fd:19:80:74:dd:94:bc:5c:99:d8:ad:bf:5e:15:fb:f8:8c: a6:2e:02:e2:4c:a1:53:31:db:20:d5:01:3b:f8:ef:df:09:3a: 72:18:53:f1:d4:da:2e:07:28:80:8d:ae:7b:fc:cc:a9:28:76: f7:2f:97:3c:4f:cf:b9:cb:96:c7:f5:0f:91:03:cb:ba:d9:19: c0:21:92:b7:98:41:f5:f1:29:a4:1e:12:6f:d0:82:7a:7f:c8: 24:0d:10:96:e2:78:34:5e:69:2a:59:02:d4:3e:8d:ca:29:ae: 7d:f7:79:52:83:b2:3f:f2:bd:09:df:c1:b1:8e:38:80:3a:09: db:7a:a9:0e:6e:d8:38:09:06:cc:3a:de:92:66:fb:77:ba:51: bf:9b:3f:6f:0f:79:c9:16:ed:18:23:0a:fa:36:96:18:9e:a9: d7:c4:8f:e1:a0:22:e8:bd:4b:9b:ef:a7:e9:78:4e:bf:16:ed: 2e:48:cf:2a:81:81:20:a1:1f:86:01:95:6b:5a:49:cd:61:2a: f3:f0:6c:c5:15:63:27:ff:6e:1d:6e:84:7e:a6:ff:c4:a3:29: f0:a4:7a:48:ff:ab:85:ce:2e:d8:d7:62:88:67:79:3b:63:6c: 90:2d:8c:31:52:fb:c3:a2:dc:05:52:af:f0:ac:88:f4:14:ac: 67:ef:01:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7LkNh1Mj9H/Mka1wYc6+9qY3JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0 MzhCNzZGNDAeFw0yNjExMTAxNjExMzhaFw0yNjExMTExOTUxMzhaMDMxMTAvBgNV BAMTKDJDM0JCRDZFOENCMTgyNjQ0N0FGNjdFODVFNkYzMjcwNzMyN0EwOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Kg4HCSLGLCUe93pZmpE2XMaJ pq2kOVjZ07rJC/VTgK+aLz2TGZjDDAc3E5tWHSqovMF0YcuGRJ6nGAtcVXpi6QAR S7ZdG2u38fxTGe27HShwmssQlAH3j5GC7bmtg4gAQlPPauo9A6srjNU+eGwFUw// tyDe+bYihV3e5h6j8zW8FB5zNQUl5IUlNppcWQ0ob34ORVaxf3ppDyA/aLFKSIef WorxnMmn9MA4CoL2YGZbvXy7uYNf7oidIdUYPbUXMH67GoWzm0p+Zy1zBjYpGe6F 3mHJAE00RLN4T1i9f+mMGjQj9MgvEvDjiPuE6eCXFIViueXq1T52SQR7pfP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULDu9boyxgmRHr2foXm8ycHMnoJgwHwYDVR0j BBgwFoAUr7gxVBoDtr5BPUkvZ0U2VUOLdvQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI0YTY1ZjQtNGY0Yi00NGI2LWEyZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQx QTAzQjZCRTQxM0Q0OTJGNjc0NTM2NTU0MzhCNzZGNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkI4MzE1NDFBMDNCNkJFNDEzRDQ5MkY2NzQ1MzY1NTQzOEI3 NkY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvQUZCODMxNTQxQTAzQjZCRTQxM0Q0OTJGNjc0NTM2 NTU0MzhCNzZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP9GYB03ZS8XJnYrb9eFfv4jKYuAuJMoVMx 2yDVATv4798JOnIYU/HU2i4HKICNrnv8zKkodvcvlzxPz7nLlsf1D5EDy7rZGcAh kreYQfXxKaQeEm/Qgnp/yCQNEJbieDReaSpZAtQ+jcoprn33eVKDsj/yvQnfwbGO OIA6Cdt6qQ5u2DgJBsw63pJm+3e6Ub+bP28PeckW7RgjCvo2lhieqdfEj+GgIui9 S5vvp+l4Tr8W7S5IzyqBgSChH4YBlWtaSc1hKvPwbMUVYyf/bh1uhH6m/8SjKfCk ekj/q4XOLtjXYohneTtjbJAtjDFS+8Oi3AVSr/CsiPQUrGfvAdc= -----END CERTIFICATE-----Generated at Wed Nov 11 03:59:10 2026 by rpki-client