$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft File: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft (raw, json) Hash identifier: kfjyVW3CkQqtW1PnOVViPhPfUcUyatZbBrgDCwjJsgQ= Subject key identifier: 81:5F:83:87:05:FD:4C:F2:4E:DE:2A:97:B2:39:23:CB:54:77:77:F6 Authority key identifier: AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A Certificate issuer: /CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Certificate serial: 42711FC9061664F5037B54FFD342FD96C25E1329 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 00:19:38 +0000 Manifest this update: Sun 15 Nov 2026 00:14:38 +0000 Manifest next update: Mon 16 Nov 2026 00:54:38 +0000 Files and hashes: 1: AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl (hash: Pr3gxq3rvt2S7os53t3YYgzt0Vs/XRLcm1evag8zP3g=) 2: 3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (hash: yrLvhSGItcv2/8/qx9t+UKr0DTpSKLWTcCZshoqb+Zo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 00:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:71:1f:c9:06:16:64:f5:03:7b:54:ff:d3:42:fd:96:c2:5e:13:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A Validity Not Before: Nov 15 00:14:38 2026 GMT Not After : Nov 16 00:54:38 2026 GMT Subject: CN=815F838705FD4CF24EDE2A97B23923CB547777F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bc:b2:28:5e:9b:5f:d5:8e:ad:7e:5a:de:e3: 81:74:12:bc:be:71:c6:f9:03:48:f2:50:54:37:c7: 26:d3:13:db:0c:be:2c:10:39:54:a4:0e:ef:63:0b: 72:fc:15:d6:74:bd:4b:3e:79:09:8d:f4:93:99:c0: f6:26:3f:42:3f:2c:93:93:95:de:68:e7:35:a5:34: ed:b6:c5:9f:d4:1b:70:8c:e6:48:42:c2:b2:63:6a: 26:11:46:3e:4c:c1:e0:89:66:6e:60:98:43:e5:63: eb:a9:0b:86:e3:d1:1f:e6:38:4b:5f:58:9f:f3:0f: fb:af:bf:52:90:da:15:12:54:a6:18:17:90:36:85: 53:4f:2f:49:91:07:43:66:a8:b8:8e:02:ff:b1:45: f3:e1:d6:62:5a:4d:2c:6f:25:9e:a6:53:8b:26:23: 24:7f:29:e0:a3:40:3a:7d:ae:0a:6f:c2:37:71:a4: 50:b2:e3:ff:27:16:5f:e6:7a:05:43:c4:a0:17:6a: 36:86:0e:cd:47:30:50:c0:d2:3e:7b:bd:29:67:7e: 41:24:d3:dd:a1:b3:27:a4:82:00:42:fb:1d:f7:ae: 45:f2:86:b8:98:f7:80:39:d4:45:7f:cf:1a:9c:f5: db:61:2e:a2:33:37:32:0e:44:05:ee:76:af:c0:3e: a7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5F:83:87:05:FD:4C:F2:4E:DE:2A:97:B2:39:23:CB:54:77:77:F6 X509v3 Authority Key Identifier: keyid:AF:3C:82:08:58:C3:FE:5A:6E:6C:57:E8:43:E1:CF:D0:1A:45:F2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/AF3C820858C3FE5A6E6C57E843E1CFD01A45F20A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6d:25:39:9f:22:4c:aa:8e:a5:3b:9e:3e:cf:0a:97:0c:8d: 32:f7:80:2a:19:a7:9f:47:0c:c0:58:5d:0d:00:f6:c1:49:ed: 3b:2d:25:71:4f:66:b9:22:b5:5f:c8:d8:04:47:12:be:5a:a9: ac:70:fc:10:0b:21:1a:56:df:23:1a:df:f1:8b:b9:26:07:98: 69:10:95:8d:52:21:26:69:21:85:ab:b1:e8:c7:2f:4c:cd:1d: 19:7b:1f:f2:3f:c6:fb:05:74:ef:f7:09:47:97:f2:be:18:b6: 9b:8a:2c:13:4d:e6:3a:80:f7:09:2b:b4:78:f4:2e:02:6c:e6: 47:9a:78:e2:ff:4e:19:7b:d4:b6:9d:40:c7:05:96:ba:96:b9: 60:45:39:d1:5b:3b:f9:00:78:6e:47:62:51:a3:40:45:6d:05: ff:38:be:e8:81:dc:b2:b7:97:81:d8:5c:ea:94:4f:02:95:ea: d5:e4:26:bf:89:64:94:b6:97:ae:bb:e6:cd:91:53:41:e0:34: 8a:87:97:27:b2:e5:68:a5:9b:9f:13:46:d5:46:63:3a:c8:89: 8b:a0:07:11:c5:d8:3e:90:21:dd:d7:bf:b1:10:57:c4:9c:95: 37:04:df:79:ff:4d:62:7f:af:a9:67:68:8a:3f:96:3d:24:e9: 6e:47:ca:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnEfyQYWZPUDe1T/00L9lsJeEykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAx QTQ1RjIwQTAeFw0yNjExMTUwMDE0MzhaFw0yNjExMTYwMDU0MzhaMDMxMTAvBgNV BAMTKDgxNUY4Mzg3MDVGRDRDRjI0RURFMkE5N0IyMzkyM0NCNTQ3Nzc3RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlvLIoXptf1Y6tflre44F0Ery+ ccb5A0jyUFQ3xybTE9sMviwQOVSkDu9jC3L8FdZ0vUs+eQmN9JOZwPYmP0I/LJOT ld5o5zWlNO22xZ/UG3CM5khCwrJjaiYRRj5MweCJZm5gmEPlY+upC4bj0R/mOEtf WJ/zD/uvv1KQ2hUSVKYYF5A2hVNPL0mRB0NmqLiOAv+xRfPh1mJaTSxvJZ6mU4sm IyR/KeCjQDp9rgpvwjdxpFCy4/8nFl/megVDxKAXajaGDs1HMFDA0j57vSlnfkEk 092hsyekggBC+x33rkXyhriY94A51EV/zxqc9dthLqIzNzIORAXudq/APqfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgV+DhwX9TPJO3iqXsjkjy1R3d/YwHwYDVR0j BBgwFoAUrzyCCFjD/lpubFfoQ+HP0BpF8gowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWM2YjVhYmMtMmM1NC00YzVmLWIzZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1 OEMzRkU1QTZFNkM1N0U4NDNFMUNGRDAxQTQ1RjIwQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjNDODIwODU4QzNGRTVBNkU2QzU3RTg0M0UxQ0ZEMDFBNDVG MjBBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWM2YjVhYmMtMmM1NC00YzVmLWIz ZjgtMzM0NmYxOWU2Y2M4LzAvQUYzQzgyMDg1OEMzRkU1QTZFNkM1N0U4NDNFMUNG RDAxQTQ1RjIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhtJTmfIkyqjqU7nj7PCpcMjTL3gCoZp59H DMBYXQ0A9sFJ7TstJXFPZrkitV/I2ARHEr5aqaxw/BALIRpW3yMa3/GLuSYHmGkQ lY1SISZpIYWrsejHL0zNHRl7H/I/xvsFdO/3CUeX8r4YtpuKLBNN5jqA9wkrtHj0 LgJs5keaeOL/Thl71LadQMcFlrqWuWBFOdFbO/kAeG5HYlGjQEVtBf84vuiB3LK3 l4HYXOqUTwKV6tXkJr+JZJS2l6675s2RU0HgNIqHlyey5Wilm58TRtVGYzrIiYug BxHF2D6QId3Xv7EQV8SclTcE33n/TWJ/r6lnaIo/lj0k6W5HyhE= -----END CERTIFICATE-----Generated at Sun Nov 15 15:26:30 2026 by rpki-client