$ rpki-client -vvf rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft File: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft (raw, json) Hash identifier: ZKdPhE4RvHHoxlCINivrT4CIqd7ztaL3JR0pD9jhJ6M= Subject key identifier: 4F:45:AE:E8:1B:35:DA:51:05:DF:50:A1:DD:BA:20:A2:65:2B:E3:E7 Authority key identifier: AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A Certificate issuer: /CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Certificate serial: 6788B5ABAC69AD9D0B0A2239A110B912A425EBA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:33:39 +0000 Manifest this update: Wed 17 Jun 2026 00:28:39 +0000 Manifest next update: Thu 18 Jun 2026 03:42:39 +0000 Files and hashes: 1: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl (hash: pCalhDx2ZULQQy+dXOOm4+DzFJ+IRVGBhDR46RMve9Q=) 2: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: yrLvhSGItcv2/8/qx9t+UKr0DTpSKLWTcCZshoqb+Zo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:88:b5:ab:ac:69:ad:9d:0b:0a:22:39:a1:10:b9:12:a4:25:eb:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Validity Not Before: Jun 17 00:28:39 2026 GMT Not After : Jun 18 03:42:39 2026 GMT Subject: CN=4F45AEE81B35DA5105DF50A1DDBA20A2652BE3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:50:8c:3f:5a:ad:6b:33:a1:cd:bc:1d:c0: eb:ae:c5:89:39:72:61:8d:fb:09:67:88:5c:9e:c9: 2f:96:6e:48:bb:09:32:25:d8:0e:29:48:ae:8e:97: a1:90:81:d8:12:1b:c6:50:09:6d:10:62:94:08:94: 4d:dc:75:8a:36:44:e6:8d:06:1e:f7:f6:e8:e6:e3: 15:17:1f:56:1e:0c:f6:d9:fe:6d:4d:b4:98:16:65: 4e:93:0b:c4:0e:0e:70:ef:e5:62:12:bc:5a:27:93: 40:03:c3:13:ae:e8:3b:0a:be:07:a7:2a:a4:5d:25: 6b:04:0a:9e:f6:c8:9b:04:0b:db:49:27:9e:8e:c4: f9:f4:a9:de:29:70:7d:7b:e7:2d:5e:35:43:97:02: cb:00:d0:b6:65:4b:ab:86:a6:89:a9:ae:a9:62:6a: 6b:7c:1f:48:bc:63:06:3f:ad:c7:29:5f:46:6e:ae: df:9a:ac:03:02:12:db:f3:99:77:70:c0:2e:44:ba: 3a:32:b1:fb:88:dd:c2:d2:a9:73:77:06:8c:9e:7f: a5:3f:23:95:a9:ce:e5:2f:29:73:d2:e5:0e:5a:42: 44:85:62:66:24:08:e4:2e:01:3e:3d:a6:5c:6d:eb: 52:dc:71:48:37:61:fc:29:ef:1b:38:8b:b9:4b:e1: fe:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:45:AE:E8:1B:35:DA:51:05:DF:50:A1:DD:BA:20:A2:65:2B:E3:E7 X509v3 Authority Key Identifier: keyid:AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:35:b2:ee:61:e0:c0:21:ce:0a:fa:26:b9:04:a9:f3:e3:a2: c8:9f:c6:89:c5:0e:17:12:e7:05:9e:42:cd:f8:63:a0:1a:f2: 78:ee:b2:c1:44:ce:0b:13:7d:17:38:4c:1e:b9:19:cf:bc:bd: 48:09:68:36:75:73:b0:ff:ec:78:77:30:1b:5a:b7:ea:b9:2e: c9:4e:fa:ca:bf:0e:aa:08:f2:43:0d:00:a7:3d:27:69:8c:2f: 57:8d:45:2d:15:40:a6:c4:df:51:f8:60:6f:5c:ba:1b:bf:17: 5c:f5:1b:72:7a:b4:59:0b:b5:70:80:d5:24:3a:21:e4:03:0a: 44:8d:05:34:de:d7:bb:0a:74:ea:35:f6:af:7f:b9:a4:9b:b3: a7:49:f6:da:82:c6:fa:8e:4f:bf:60:e6:61:35:50:4c:34:90: 30:18:43:51:ab:cd:85:f2:95:c4:27:89:63:a3:41:cc:6b:7f: 11:9f:74:e2:cb:bd:a5:8b:89:86:f3:51:e2:69:f6:f4:67:9e: 5d:57:64:4b:6f:98:1a:cc:cf:b6:57:fb:23:2e:79:9e:11:57: ef:28:89:12:ce:83:a8:aa:15:1c:fb:ec:b7:9c:35:2c:66:68: 22:2f:5a:4d:f6:54:32:0b:22:f5:54:87:43:95:b2:03:00:88: bb:e6:c4:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4i1q6xprZ0LCiI5oRC5EqQl66IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAx QTQ1RjIwQTAeFw0yNjA2MTcwMDI4MzlaFw0yNjA2MTgwMzQyMzlaMDMxMTAvBgNV BAMTKDRGNDVBRUU4MUIzNURBNTEwNURGNTBBMUREQkEyMEEyNjUyQkUzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCki1CMP1qtazOhzbwdwOuuxYk5 cmGN+wlniFyeyS+Wbki7CTIl2A4pSK6Ol6GQgdgSG8ZQCW0QYpQIlE3cdYo2ROaN Bh739ujm4xUXH1YeDPbZ/m1NtJgWZU6TC8QODnDv5WISvFonk0ADwxOu6DsKvgen KqRdJWsECp72yJsEC9tJJ56OxPn0qd4pcH175y1eNUOXAssA0LZlS6uGpomprqli amt8H0i8YwY/rccpX0Zurt+arAMCEtvzmXdwwC5EujoysfuI3cLSqXN3Boyef6U/ I5WpzuUvKXPS5Q5aQkSFYmYkCOQuAT49plxt61LccUg3Yfwp7xs4i7lL4f5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT0Wu6Bs12lEF31Ch3bogomUr4+cwHwYDVR0j BBgwFoAUrzyCCFjD/lpubFfoQ+HP0BpF8gowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM2YjVhYmMtMmM1NC00YzVmLWIzZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1 OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAxQTQ1RjIwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjNDODIwODU4QzNGRTVBNkU2QzU3RTg0M0UxQ0ZEMDFBNDVG MjBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNG RDAxQTQ1RjIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACM1su5h4MAhzgr6JrkEqfPjosifxonFDhcS 5wWeQs34Y6Aa8njussFEzgsTfRc4TB65Gc+8vUgJaDZ1c7D/7Hh3MBtat+q5LslO +sq/DqoI8kMNAKc9J2mML1eNRS0VQKbE31H4YG9cuhu/F1z1G3J6tFkLtXCA1SQ6 IeQDCkSNBTTe17sKdOo19q9/uaSbs6dJ9tqCxvqOT79g5mE1UEw0kDAYQ1GrzYXy lcQniWOjQcxrfxGfdOLLvaWLiYbzUeJp9vRnnl1XZEtvmBrMz7ZX+yMueZ4RV+8o iRLOg6iqFRz77LecNSxmaCIvWk32VDILIvVUh0OVsgMAiLvmxI0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:55 2026 by rpki-client