$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft File: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft (raw, json) Hash identifier: EH8RZBu+D1q+zETvoKNYvAmWm4vc88dfTwtdgx3b0Io= Subject key identifier: 47:11:51:DD:53:4D:53:D2:57:ED:D9:33:BC:82:9F:B6:BC:32:56:6A Authority key identifier: AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE Certificate issuer: /CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Certificate serial: 5CB1B254B248BBCDBBF1F552506F39438BD27D37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft Manifest number: BD Signing time: Mon 21 Sep 2026 10:39:37 +0000 Manifest this update: Mon 21 Sep 2026 10:34:37 +0000 Manifest next update: Tue 22 Sep 2026 11:40:37 +0000 Files and hashes: 1: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: 8knmmlk6VbCEzOwxll8mjdcL7YeA/GevLWgeSXesFqE=) 2: AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl (hash: JO7huVOQwj8tuX+AD+zmhkrZfac2l3+hIk7J1ddkiFA=) 3: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: DURCQ0yaLxsLK0NyQoA/+8rorIbQkFZb7X0OVwrX9XQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b1:b2:54:b2:48:bb:cd:bb:f1:f5:52:50:6f:39:43:8b:d2:7d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE Validity Not Before: Sep 21 10:34:37 2026 GMT Not After : Sep 22 11:40:37 2026 GMT Subject: CN=471151DD534D53D257EDD933BC829FB6BC32566A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:12:29:89:8d:1a:a5:99:cd:34:81:8f:a8:c6: 0c:0f:c6:93:01:6e:5b:b2:d2:89:5a:ad:76:ba:c3: 4f:32:5a:44:51:31:f5:a5:04:12:9f:00:a9:a2:18: 39:3d:62:74:40:f0:bd:56:48:21:ea:45:35:6f:c7: 54:3d:fc:8c:19:97:dc:38:25:84:85:ed:61:ad:1d: 2f:d8:c7:c2:25:0b:a5:59:27:fd:46:05:af:8c:79: 80:61:0a:4f:1b:c3:48:e1:dd:5a:0a:7f:02:52:d8: fd:e8:45:09:78:46:4a:72:24:43:ab:9b:96:95:7e: b0:d3:99:8e:67:c9:9d:e8:2d:ea:64:9a:05:fc:10: 05:4f:72:cc:c0:ac:f6:9b:5a:10:5c:72:57:32:b1: 1a:89:2a:ec:ea:d5:af:00:19:1a:77:f6:37:f6:1e: 7a:50:84:5d:d0:5b:30:d5:c0:42:42:f1:fd:f0:32: af:01:27:84:2a:21:31:16:2e:b2:17:33:4f:fc:44: 54:98:a0:75:35:b6:86:f3:96:8e:ea:69:cd:c1:03: ee:a7:ad:d4:32:b6:23:a8:5b:d3:e9:03:77:2e:b0: 1b:3b:93:4e:86:04:32:2e:e2:b2:e4:4b:71:60:2f: 01:5d:da:e6:10:97:e2:d5:95:2c:9c:ea:a7:e7:64: 97:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:11:51:DD:53:4D:53:D2:57:ED:D9:33:BC:82:9F:B6:BC:32:56:6A X509v3 Authority Key Identifier: keyid:AF:4C:B4:6F:A8:35:3C:B5:A3:B2:3E:F5:7F:23:18:D4:6C:27:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/AF4CB46FA8353CB5A3B23EF57F2318D46C27E3CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e5:e0:3d:fc:b7:be:53:df:64:55:40:f2:8e:7a:f1:86:6f: f7:c2:0f:7b:19:64:62:14:c9:11:f6:f8:27:23:a4:c0:2b:1f: 82:b2:c7:23:ea:c6:e4:2e:fe:aa:1e:a5:ee:cd:7a:4c:20:cb: f5:98:d2:94:b2:d9:92:4e:e2:18:15:b3:bf:bd:d3:64:9e:22: 26:16:94:2f:ad:23:c2:c9:a6:38:40:cd:4e:dc:b7:90:5d:66: ef:ee:2e:db:bf:82:d5:e0:1b:e7:e1:81:56:32:ff:be:fc:ad: 41:6f:6e:46:68:9c:18:ec:3c:07:f5:a4:bb:32:11:79:da:e7: ce:25:01:9d:68:3f:24:d6:4d:eb:6e:e6:17:93:b6:b7:87:4a: 4d:37:5a:72:3c:f0:36:15:ad:79:1b:d7:0f:96:62:54:ef:3c: 95:8e:82:82:11:b1:39:7c:d1:20:3a:1d:b9:4d:0e:44:ab:37: af:9c:df:28:84:3a:cd:37:02:4f:7c:a8:9a:da:7f:90:66:16: bc:aa:06:b5:26:5b:23:48:41:c1:39:6b:e2:4c:96:f7:b3:cc: 0b:55:28:41:0c:01:1b:be:8a:c3:39:a9:a7:5b:f1:03:31:32: 8a:c7:28:80:0b:b0:e3:19:e0:56:a3:7d:41:ce:ea:2b:76:c4: b8:64:96:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLGyVLJIu8278fVSUG85Q4vSfTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2 QzI3RTNDRTAeFw0yNjA5MjExMDM0MzdaFw0yNjA5MjIxMTQwMzdaMDMxMTAvBgNV BAMTKDQ3MTE1MURENTM0RDUzRDI1N0VERDkzM0JDODI5RkI2QkMzMjU2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVEimJjRqlmc00gY+oxgwPxpMB bluy0olarXa6w08yWkRRMfWlBBKfAKmiGDk9YnRA8L1WSCHqRTVvx1Q9/IwZl9w4 JYSF7WGtHS/Yx8IlC6VZJ/1GBa+MeYBhCk8bw0jh3VoKfwJS2P3oRQl4RkpyJEOr m5aVfrDTmY5nyZ3oLepkmgX8EAVPcszArPabWhBcclcysRqJKuzq1a8AGRp39jf2 HnpQhF3QWzDVwEJC8f3wMq8BJ4QqITEWLrIXM0/8RFSYoHU1tobzlo7qac3BA+6n rdQytiOoW9PpA3cusBs7k06GBDIu4rLkS3FgLwFd2uYQl+LVlSyc6qfnZJc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURxFR3VNNU9JX7dkzvIKftrwyVmowHwYDVR0j BBgwFoAUr0y0b6g1PLWjsj71fyMY1Gwn484wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWM4OTdjNGEtZTBmZi00NjUyLWE1OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZB ODM1M0NCNUEzQjIzRUY1N0YyMzE4RDQ2QzI3RTNDRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjRDQjQ2RkE4MzUzQ0I1QTNCMjNFRjU3RjIzMThENDZDMjdF M0NFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvQUY0Q0I0NkZBODM1M0NCNUEzQjIzRUY1N0YyMzE4 RDQ2QzI3RTNDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzl4D38t75T32RVQPKOevGGb/fCD3sZZGIU yRH2+CcjpMArH4KyxyPqxuQu/qoepe7Nekwgy/WY0pSy2ZJO4hgVs7+902SeIiYW lC+tI8LJpjhAzU7ct5BdZu/uLtu/gtXgG+fhgVYy/778rUFvbkZonBjsPAf1pLsy EXna584lAZ1oPyTWTetu5heTtreHSk03WnI88DYVrXkb1w+WYlTvPJWOgoIRsTl8 0SA6HblNDkSrN6+c3yiEOs03Ak98qJraf5BmFryqBrUmWyNIQcE5a+JMlvezzAtV KEEMARu+isM5qadb8QMxMorHKIALsOMZ4FajfUHO6it2xLhklgg= -----END CERTIFICATE-----Generated at Mon Sep 21 18:27:43 2026 by rpki-client