$ rpki-client -vvf rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft File: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft (raw, json) Hash identifier: fbI2KkxeocvVSZXvE5ZRWKYoeITw02rVpVMfoc9wtpg= Subject key identifier: 97:5F:3C:3D:C7:E9:A2:DA:B5:54:A8:98:7D:AA:17:98:F2:AB:A7:1B Authority key identifier: AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E Certificate issuer: /CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Certificate serial: 17E676A8AE2C4C049115B0D8AAEFF2EBC63EC646 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:25:37 +0000 Manifest this update: Wed 17 Jun 2026 02:20:37 +0000 Manifest next update: Thu 18 Jun 2026 05:52:37 +0000 Files and hashes: 1: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl (hash: +F1BJFlB2qogx9Rm1viCcbr4b8YV0Q81XQi/F7Eb+CA=) 2: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: DT0k1jYnw4OjyEhmmqbUNUqGWP5UkTu1MpqB2VuvB0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e6:76:a8:ae:2c:4c:04:91:15:b0:d8:aa:ef:f2:eb:c6:3e:c6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Validity Not Before: Jun 17 02:20:37 2026 GMT Not After : Jun 18 05:52:37 2026 GMT Subject: CN=975F3C3DC7E9A2DAB554A8987DAA1798F2ABA71B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cb:88:33:b8:2d:d1:b0:d0:c9:d3:54:84:2e: 5b:7a:2e:b3:e9:ec:9a:68:5c:d4:c8:90:61:4f:eb: e1:85:61:7c:03:61:3a:8e:e5:9f:78:de:a0:5b:b2: 74:79:f8:8e:c9:81:98:d1:6d:cb:94:8f:a6:4f:6e: 80:f7:52:9d:75:00:40:6b:40:54:c9:87:52:42:d5: 4f:4d:2b:b6:3f:eb:0c:6f:14:9d:14:46:be:2b:02: 56:92:35:6e:18:73:b7:96:bb:d3:64:23:67:cc:14: 9a:63:da:86:0f:cd:b1:44:70:df:86:00:f6:c1:05: 32:f0:fe:ed:a4:45:25:2a:a7:84:a1:eb:ac:7c:62: 6a:6f:7b:83:b7:c9:33:90:a8:df:37:9e:df:5b:6c: 11:75:8f:2c:31:89:82:86:45:f4:d9:c8:ff:dc:6f: b3:5c:62:5a:28:64:c7:69:9a:6f:88:8a:49:cf:bb: 85:40:b3:aa:b5:22:21:a6:27:05:90:07:61:81:87: 90:b9:22:69:63:fd:19:09:95:4a:d1:09:b9:9e:20: c1:12:15:07:7d:0b:c0:db:07:b4:8f:c5:cb:7f:ce: d4:f8:6e:b6:25:57:44:8c:7a:c5:7c:72:37:03:9a: 30:f3:5a:71:50:06:20:87:5f:6d:e9:d0:03:02:71: 1b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5F:3C:3D:C7:E9:A2:DA:B5:54:A8:98:7D:AA:17:98:F2:AB:A7:1B X509v3 Authority Key Identifier: keyid:AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:69:6c:40:ac:8a:f0:29:de:27:61:c8:d4:8f:53:5c:b4:6c: 86:46:d6:85:34:3b:30:d5:9f:cb:59:7b:b6:67:7a:e0:23:94: d5:e6:f6:ab:1f:80:86:10:37:ff:27:ce:16:54:50:16:ae:8f: 1a:be:ae:e5:91:bc:79:9d:f1:81:31:d0:1a:78:b1:aa:00:aa: ec:f0:e2:63:0a:e1:bf:86:3f:cc:d7:b1:77:75:e9:36:8c:a9: 3f:19:7d:32:91:6b:a0:3e:c9:48:28:04:4a:9d:8e:84:0e:37: 66:a0:74:a0:b8:55:fa:f9:c3:09:a9:67:67:2f:26:50:e9:0a: 93:ea:3c:e2:c8:29:cf:c0:5e:cd:f4:8c:37:df:3a:92:4f:d4: 89:1f:5d:cf:cf:47:9e:d7:03:f5:ca:c2:de:62:e7:ea:14:67: ff:10:ec:f2:75:db:62:99:42:9c:d5:65:3d:72:5d:8f:77:2d: 1c:7c:35:0e:c0:70:22:68:40:7a:e1:5c:82:ce:35:3f:32:18: c0:ec:63:36:9e:97:9f:57:0e:e7:c4:7c:13:b6:33:fc:9e:04: ca:a1:cc:c4:33:cd:3a:bb:1f:10:a0:a1:cb:3f:95:e8:eb:8e: ce:4e:3a:54:50:53:79:6e:7f:f7:27:5d:bb:e3:13:7d:d8:c4: 9b:45:22:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+Z2qK4sTASRFbDYqu/y68Y+xkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUz QUEzNUU2RTAeFw0yNjA2MTcwMjIwMzdaFw0yNjA2MTgwNTUyMzdaMDMxMTAvBgNV BAMTKDk3NUYzQzNEQzdFOUEyREFCNTU0QTg5ODdEQUExNzk4RjJBQkE3MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXy4gzuC3RsNDJ01SELlt6LrPp 7JpoXNTIkGFP6+GFYXwDYTqO5Z943qBbsnR5+I7JgZjRbcuUj6ZPboD3Up11AEBr QFTJh1JC1U9NK7Y/6wxvFJ0URr4rAlaSNW4Yc7eWu9NkI2fMFJpj2oYPzbFEcN+G APbBBTLw/u2kRSUqp4Sh66x8Ympve4O3yTOQqN83nt9bbBF1jywxiYKGRfTZyP/c b7NcYlooZMdpmm+IiknPu4VAs6q1IiGmJwWQB2GBh5C5Imlj/RkJlUrRCbmeIMES FQd9C8DbB7SPxct/ztT4brYlV0SMesV8cjcDmjDzWnFQBiCHX23p0AMCcRutAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl188Pcfpotq1VKiYfaoXmPKrpxswHwYDVR0j BBgwFoAUrxrfWDrFADAnKBpOyr993jqjXm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiZjg2NDEtYmY3MC00ZTNmLTk4NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgz QUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUzQUEzNUU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjFBREY1ODNBQzUwMDMwMjcyODFBNEVDQUJGN0RERTNBQTM1 RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdE REUzQUEzNUU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFpbECsivAp3idhyNSPU1y0bIZG1oU0OzDV n8tZe7ZneuAjlNXm9qsfgIYQN/8nzhZUUBaujxq+ruWRvHmd8YEx0Bp4saoAquzw 4mMK4b+GP8zXsXd16TaMqT8ZfTKRa6A+yUgoBEqdjoQON2agdKC4Vfr5wwmpZ2cv JlDpCpPqPOLIKc/AXs30jDffOpJP1IkfXc/PR57XA/XKwt5i5+oUZ/8Q7PJ122KZ QpzVZT1yXY93LRx8NQ7AcCJoQHrhXILONT8yGMDsYzael59XDufEfBO2M/yeBMqh zMQzzTq7HxCgocs/lejrjs5OOlRQU3luf/cnXbvjE33YxJtFIts= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:24 2026 by rpki-client