$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft File: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft (raw, json) Hash identifier: Eh1ZdNW5OeInlPJqLC52YSlTyqT36oXOHbWkfI1S1WU= Subject key identifier: 40:0B:6F:33:BD:56:AD:98:A0:B9:41:7C:93:81:BA:7C:0C:F4:0D:A8 Authority key identifier: AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E Certificate issuer: /CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Certificate serial: 727F8B9835BD7BD1C9497898AFB0203B0F73AE2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft Manifest number: BD Signing time: Mon 21 Sep 2026 03:30:52 +0000 Manifest this update: Mon 21 Sep 2026 03:25:52 +0000 Manifest next update: Tue 22 Sep 2026 04:50:52 +0000 Files and hashes: 1: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl (hash: iDf9hE4+hfYECfhU7hHk+a3BOpxeNTyQGzcoCMXULoA=) 2: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: DT0k1jYnw4OjyEhmmqbUNUqGWP5UkTu1MpqB2VuvB0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7f:8b:98:35:bd:7b:d1:c9:49:78:98:af:b0:20:3b:0f:73:ae:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Validity Not Before: Sep 21 03:25:52 2026 GMT Not After : Sep 22 04:50:52 2026 GMT Subject: CN=400B6F33BD56AD98A0B9417C9381BA7C0CF40DA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:57:91:56:9f:d9:98:76:05:5a:6b:5e:4e: e6:3c:92:62:cc:f2:04:c8:87:67:46:fd:73:e5:a1: d1:17:88:84:93:b5:43:1f:ad:d2:e0:5a:5a:82:01: 16:f1:92:4f:10:44:cf:15:60:f1:65:e6:6a:78:5a: 18:a3:d8:17:1e:fb:69:a8:75:d2:62:55:d8:6e:06: 51:35:5a:a2:3d:f9:07:04:ce:bb:f9:6c:43:d7:e4: 65:e3:e6:f4:72:b0:f6:22:3f:0e:ca:4d:02:e3:46: 02:b5:d8:0b:f6:a6:c0:6e:f6:3e:d2:bf:01:15:94: ae:38:c5:d6:26:89:85:70:f6:9f:2d:25:6b:8c:e7: cb:1e:37:0c:a4:8a:7f:fc:0e:9e:f5:13:3a:94:69: 9b:c2:6f:f4:a1:73:4d:2d:ef:a7:1c:46:e4:3a:a9: 2b:d1:c0:01:38:e3:ab:1e:6c:ab:5e:53:f6:32:0c: a1:b0:56:34:68:d7:2b:36:1a:d0:6d:37:fa:b9:93: 6b:ad:1e:c4:6d:cd:33:e6:4c:e7:ac:5d:df:d3:8c: c5:61:65:3c:89:34:ba:88:5e:ba:23:a3:f1:9f:08: 45:d3:4d:26:35:55:e4:55:3c:08:db:f0:fb:0f:e6: b6:9f:dd:06:e1:43:34:5c:20:96:f0:49:4a:03:84: 20:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0B:6F:33:BD:56:AD:98:A0:B9:41:7C:93:81:BA:7C:0C:F4:0D:A8 X509v3 Authority Key Identifier: keyid:AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5e:72:81:62:8f:5d:0a:a3:f6:b5:98:45:fa:26:3c:11:46: 21:d6:3c:00:2a:33:57:da:c4:b7:bc:dd:17:4e:34:a1:39:15: b8:cd:b1:45:eb:d8:2a:20:c7:97:e4:a7:91:ce:8a:76:d1:7c: 8e:28:a0:2a:e1:2b:79:e1:53:b4:24:8d:04:9f:00:4b:a7:ca: ef:ed:44:cd:7b:12:84:7e:7b:e5:9f:14:af:53:e4:04:ae:ff: a2:6b:2e:50:84:aa:cc:97:8c:40:36:2d:c4:bf:37:d4:02:59: b7:56:2a:a5:97:2d:0f:ef:0d:b1:ac:aa:02:0d:a0:41:09:06: 42:1f:35:13:5d:60:2b:bf:54:2f:fe:e5:bc:22:86:bb:73:1d: 9a:19:90:e0:aa:c1:68:48:b4:cf:35:0a:bf:aa:cb:c5:87:42: 0b:a6:bb:d3:11:7d:37:ec:4b:ba:c0:ca:cd:5d:14:1b:e2:89: 07:e8:64:d4:e7:b8:f4:6e:32:3e:2f:76:c3:7e:b6:a8:b7:3f: 52:f7:f1:1d:3c:9f:3a:7a:40:5b:b6:c6:1f:80:2a:69:75:08: e6:11:6f:e5:88:66:72:00:2f:e6:7f:66:03:bb:2d:b5:6d:e5: 9e:65:c7:b9:88:2d:87:3f:e4:00:86:a1:d5:7d:6f:20:9f:05: 1e:38:64:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcn+LmDW9e9HJSXiYr7AgOw9zriwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUz QUEzNUU2RTAeFw0yNjA5MjEwMzI1NTJaFw0yNjA5MjIwNDUwNTJaMDMxMTAvBgNV BAMTKDQwMEI2RjMzQkQ1NkFEOThBMEI5NDE3QzkzODFCQTdDMENGNDBEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gVeRVp/ZmHYFWmteTuY8kmLM 8gTIh2dG/XPlodEXiISTtUMfrdLgWlqCARbxkk8QRM8VYPFl5mp4Whij2Bce+2mo ddJiVdhuBlE1WqI9+QcEzrv5bEPX5GXj5vRysPYiPw7KTQLjRgK12Av2psBu9j7S vwEVlK44xdYmiYVw9p8tJWuM58seNwykin/8Dp71EzqUaZvCb/Shc00t76ccRuQ6 qSvRwAE446sebKteU/YyDKGwVjRo1ys2GtBtN/q5k2utHsRtzTPmTOesXd/TjMVh ZTyJNLqIXrojo/GfCEXTTSY1VeRVPAjb8PsP5raf3QbhQzRcIJbwSUoDhCDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQAtvM71WrZiguUF8k4G6fAz0DagwHwYDVR0j BBgwFoAUrxrfWDrFADAnKBpOyr993jqjXm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiZjg2NDEtYmY3MC00ZTNmLTk4NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgz QUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUzQUEzNUU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjFBREY1ODNBQzUwMDMwMjcyODFBNEVDQUJGN0RERTNBQTM1 RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdE REUzQUEzNUU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVecoFij10Ko/a1mEX6JjwRRiHWPAAqM1fa xLe83RdONKE5FbjNsUXr2Cogx5fkp5HOinbRfI4ooCrhK3nhU7QkjQSfAEunyu/t RM17EoR+e+WfFK9T5ASu/6JrLlCEqsyXjEA2LcS/N9QCWbdWKqWXLQ/vDbGsqgIN oEEJBkIfNRNdYCu/VC/+5bwihrtzHZoZkOCqwWhItM81Cr+qy8WHQgumu9MRfTfs S7rAys1dFBviiQfoZNTnuPRuMj4vdsN+tqi3P1L38R08nzp6QFu2xh+AKml1COYR b+WIZnIAL+Z/ZgO7LbVt5Z5lx7mILYc/5ACGodV9byCfBR44ZMU= -----END CERTIFICATE-----Generated at Mon Sep 21 12:07:32 2026 by rpki-client