$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft File: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft (raw, json) Hash identifier: Fz6tqT1cKGR65S/rCdLJAeYimHBL5cQSKyCggE8tFMA= Subject key identifier: 71:D9:E2:17:87:B1:02:45:10:BF:9E:55:60:0E:78:37:57:F4:C5:FE Authority key identifier: AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E Certificate issuer: /CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Certificate serial: 34188895698049F3B2F2625FDF8A29A360175518 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft Manifest number: FF Signing time: Mon 09 Nov 2026 21:53:01 +0000 Manifest this update: Mon 09 Nov 2026 21:48:01 +0000 Manifest next update: Tue 10 Nov 2026 22:28:01 +0000 Files and hashes: 1: AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl (hash: QM2faHXxsXG9i1eB603eGjL9atgnQ65zajpwiN1vn1g=) 2: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: DT0k1jYnw4OjyEhmmqbUNUqGWP5UkTu1MpqB2VuvB0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:18:88:95:69:80:49:f3:b2:f2:62:5f:df:8a:29:a3:60:17:55:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E Validity Not Before: Nov 9 21:48:01 2026 GMT Not After : Nov 10 22:28:01 2026 GMT Subject: CN=71D9E21787B1024510BF9E55600E783757F4C5FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:91:9a:a3:08:1d:9c:11:a4:e5:6d:0c:f1: f5:57:c8:00:a7:55:2b:85:ee:73:bc:e2:b4:80:64: 76:83:51:07:e8:d1:47:a4:07:dc:83:9f:2d:e2:60: 24:f0:ee:0f:ab:25:70:1b:72:dc:4b:2b:97:58:0e: 08:f3:6d:f1:a3:6a:f8:be:30:4f:d5:ed:24:72:81: 1a:1e:6c:bb:94:9d:9e:d5:eb:00:1a:2f:41:24:94: a6:5e:d5:84:74:24:bc:dd:81:b2:a5:23:5f:6e:02: 96:b7:b1:50:bb:2b:c4:e9:91:5a:3f:63:39:e8:9f: 08:73:bd:21:b2:c7:68:94:4e:14:c8:81:f2:c5:7a: 08:de:d2:cf:b2:7e:ac:74:a3:01:bf:d6:a1:02:4c: b8:89:37:2e:e9:86:0a:e3:c9:49:da:e1:57:49:d5: 4e:85:34:91:4f:d0:17:6f:84:ff:73:03:c3:46:ae: 7c:37:c1:5e:3e:af:27:48:e3:e9:91:24:56:ae:e3: 81:5e:d3:be:0c:19:9b:42:99:e4:bd:ac:6a:3d:3e: fb:d1:a5:3a:25:de:e3:ba:03:e7:b1:a3:cb:0e:f4: 3e:42:e4:01:d2:39:7e:0f:92:5f:d2:64:7c:55:46: 36:06:ee:1c:ba:cc:5c:0d:68:44:80:71:33:9d:d3: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D9:E2:17:87:B1:02:45:10:BF:9E:55:60:0E:78:37:57:F4:C5:FE X509v3 Authority Key Identifier: keyid:AF:1A:DF:58:3A:C5:00:30:27:28:1A:4E:CA:BF:7D:DE:3A:A3:5E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/AF1ADF583AC5003027281A4ECABF7DDE3AA35E6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:92:08:ad:5f:e2:ca:20:c0:83:91:cb:52:57:1d:a0:52:15: 4b:d8:d1:04:d7:7c:77:8f:50:99:69:63:d8:79:57:c6:43:55: b7:a4:da:a9:cd:0f:09:6d:65:74:0a:c3:eb:2e:e3:f8:21:bd: fe:68:4e:0f:c5:2f:09:9f:a7:a2:00:c5:b4:f0:c3:46:b9:bf: cf:88:2b:38:07:45:5d:a9:bc:cc:14:2a:f8:b0:84:60:45:65: 17:cc:bb:da:08:89:e4:ed:83:4b:e4:5d:ef:9f:ae:0c:af:af: 79:20:a3:ff:cd:42:0d:96:97:0a:53:d6:53:09:6b:0d:cb:8f: be:44:6e:a1:e6:a2:8c:39:e3:89:8a:e5:c3:a8:cc:9a:e4:c2: f6:59:f3:8d:7f:de:91:36:83:55:87:dc:95:56:6f:bc:57:cc: 93:f4:09:f1:e8:db:e3:da:19:a5:b1:51:73:62:bf:ad:e4:39: 4c:8b:41:50:be:9a:d9:85:44:ef:0b:ed:a7:dd:9e:b9:f5:0f: e3:b9:b4:e6:1c:67:e1:50:5b:b8:c9:33:fe:0d:21:36:43:b7: 7e:3d:25:f9:79:89:e1:4f:c4:92:05:11:e9:a0:c5:22:87:77: 7f:51:6e:fe:c2:f8:7b:08:36:39:e3:5b:66:e2:54:4b:d7:66: 68:ca:9c:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBiIlWmASfOy8mJf34opo2AXVRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUz QUEzNUU2RTAeFw0yNjExMDkyMTQ4MDFaFw0yNjExMTAyMjI4MDFaMDMxMTAvBgNV BAMTKDcxRDlFMjE3ODdCMTAyNDUxMEJGOUU1NTYwMEU3ODM3NTdGNEM1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ApGaowgdnBGk5W0M8fVXyACn VSuF7nO84rSAZHaDUQfo0UekB9yDny3iYCTw7g+rJXAbctxLK5dYDgjzbfGjavi+ ME/V7SRygRoebLuUnZ7V6wAaL0EklKZe1YR0JLzdgbKlI19uApa3sVC7K8TpkVo/ YznonwhzvSGyx2iUThTIgfLFegje0s+yfqx0owG/1qECTLiJNy7phgrjyUna4VdJ 1U6FNJFP0BdvhP9zA8NGrnw3wV4+rydI4+mRJFau44Fe074MGZtCmeS9rGo9PvvR pTol3uO6A+exo8sO9D5C5AHSOX4Pkl/SZHxVRjYG7hy6zFwNaESAcTOd0wW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcdniF4exAkUQv55VYA54N1f0xf4wHwYDVR0j BBgwFoAUrxrfWDrFADAnKBpOyr993jqjXm4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjRiZjg2NDEtYmY3MC00ZTNmLTk4NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgz QUM1MDAzMDI3MjgxQTRFQ0FCRjdEREUzQUEzNUU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjFBREY1ODNBQzUwMDMwMjcyODFBNEVDQUJGN0RERTNBQTM1 RTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQUYxQURGNTgzQUM1MDAzMDI3MjgxQTRFQ0FCRjdE REUzQUEzNUU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+SCK1f4sogwIORy1JXHaBSFUvY0QTXfHeP UJlpY9h5V8ZDVbek2qnNDwltZXQKw+su4/ghvf5oTg/FLwmfp6IAxbTww0a5v8+I KzgHRV2pvMwUKviwhGBFZRfMu9oIieTtg0vkXe+frgyvr3kgo//NQg2WlwpT1lMJ aw3Lj75EbqHmoow544mK5cOozJrkwvZZ841/3pE2g1WH3JVWb7xXzJP0CfHo2+Pa GaWxUXNiv63kOUyLQVC+mtmFRO8L7afdnrn1D+O5tOYcZ+FQW7jJM/4NITZDt349 Jfl5ieFPxJIFEemgxSKHd39Rbv7C+HsINjnjW2biVEvXZmjKnAc= -----END CERTIFICATE-----Generated at Mon Nov 9 23:45:43 2026 by rpki-client