$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft File: AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft (raw, json) Hash identifier: +zzMvkX08zdeosew0pf2jNwcSuavIhHuCAIUmY3YBxk= Subject key identifier: 02:A6:F9:38:2A:85:2D:F5:E9:B8:89:00:78:DB:3D:B4:83:84:77:64 Authority key identifier: AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 Certificate issuer: /CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Certificate serial: 1D20A9BD6EEBC8EE07D9B49D0ED3C7021D94F01B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft Manifest number: BE Signing time: Mon 21 Sep 2026 20:37:08 +0000 Manifest this update: Mon 21 Sep 2026 20:32:08 +0000 Manifest next update: Tue 22 Sep 2026 21:34:08 +0000 Files and hashes: 1: AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl (hash: NMuMEvUj++LQbAG+U619YfLUzmgJRcYdQKN/yQoK9Pw=) 2: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: 6suli2oOGR88rqZA8HRkXIo1ZZ9as8r45IT5Ea+nUsw=) 3: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: /oNv82I3Vm7TPqNqjll+3TrmIZVD8/SYFvS2zGG/dvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:20:a9:bd:6e:eb:c8:ee:07:d9:b4:9d:0e:d3:c7:02:1d:94:f0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCD2663DA10358FE9A71A940DC8F47E167CE296 Validity Not Before: Sep 21 20:32:08 2026 GMT Not After : Sep 22 21:34:08 2026 GMT Subject: CN=02A6F9382A852DF5E9B8890078DB3DB483847764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:20:9b:8c:c0:01:c0:3f:cb:2b:3c:17:11: 9f:70:4c:6e:3e:d4:f9:09:91:30:80:07:6f:a9:c5: 76:f4:ba:c4:89:da:72:48:9d:84:54:05:21:35:5c: b0:65:7a:db:18:25:2c:81:b9:cf:d8:12:35:9e:7c: df:75:c9:0d:59:4d:45:3a:6d:04:bb:39:59:87:cd: c4:a6:d6:26:36:d2:67:3c:52:b7:2c:c9:38:0f:e5: 60:0a:4c:b0:17:f4:bb:44:dc:5b:0d:ca:7d:fa:21: 10:4e:af:ab:bd:f5:90:3e:c1:b8:c9:de:ae:7b:ac: 78:2a:a6:3d:59:34:37:cd:f3:ec:78:c6:08:7c:a4: b4:74:53:59:45:e2:16:d8:fc:f4:8b:b4:3a:60:b5: 63:e4:45:f8:b9:89:19:33:32:eb:66:66:46:80:18: d0:ca:fe:ca:43:33:72:0b:c4:1f:7a:5b:2f:64:08: 34:c2:9d:3e:e2:b3:7e:d1:39:e2:c8:c8:f8:d3:e1: 50:fc:ba:7e:64:a8:32:6c:c2:2e:f1:09:1e:b3:3f: fe:ac:e2:b8:9d:70:8e:35:1b:4d:1d:e0:a9:de:7a: 37:05:d0:4f:a3:a1:e3:30:39:13:ea:7c:06:ee:46: 2a:29:79:a6:01:4d:13:bb:3d:ee:c8:1a:fa:85:6b: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A6:F9:38:2A:85:2D:F5:E9:B8:89:00:78:DB:3D:B4:83:84:77:64 X509v3 Authority Key Identifier: keyid:AF:CD:26:63:DA:10:35:8F:E9:A7:1A:94:0D:C8:F4:7E:16:7C:E2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AFCD2663DA10358FE9A71A940DC8F47E167CE296.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/AFCD2663DA10358FE9A71A940DC8F47E167CE296.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c5:7c:61:49:ec:10:6a:15:ba:40:e6:b6:e4:d8:cc:49:0a: b6:0d:13:75:27:b6:30:ae:72:e1:0a:95:8e:35:f2:15:ec:96: 0e:60:9c:41:40:25:4a:18:96:69:fe:8b:2b:80:51:b9:09:2e: 5f:de:ab:75:68:dd:ad:b0:90:74:87:ab:61:66:bf:d0:f8:2d: 7e:87:22:9e:9f:d6:9b:cc:b9:0a:fc:21:21:37:9e:44:3c:c0: b4:b9:c3:c6:62:1e:c4:75:42:06:f3:ad:a9:83:a0:a1:60:52: ce:3c:66:7b:06:e2:fd:3f:17:5c:e9:83:b1:9e:68:fe:d1:c2: 80:a7:16:76:15:29:63:df:97:60:41:b3:28:63:fc:98:6b:78: 88:58:25:ef:13:1b:5e:19:62:e8:94:58:86:c9:37:1a:bf:1c: eb:71:c1:1c:44:04:95:2d:80:51:74:ec:7a:38:29:ea:7a:b4: bf:1f:f7:24:9a:51:cf:88:31:8a:ea:d9:ff:5f:a3:b2:5c:2e: 25:ac:18:4c:31:6e:24:b9:25:d6:f2:d7:f8:9d:da:fc:4a:20: 90:44:30:ea:11:51:91:67:94:e2:97:50:9f:fb:88:7c:91:d3: 89:4d:d0:d3:fa:ec:d7:ec:14:e7:78:33:a5:86:8e:cc:c0:5e: 87:92:6d:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHSCpvW7ryO4H2bSdDtPHAh2U8BswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0N0Ux NjdDRTI5NjAeFw0yNjA5MjEyMDMyMDhaFw0yNjA5MjIyMTM0MDhaMDMxMTAvBgNV BAMTKDAyQTZGOTM4MkE4NTJERjVFOUI4ODkwMDc4REIzREI0ODM4NDc3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbiCbjMABwD/LKzwXEZ9wTG4+ 1PkJkTCAB2+pxXb0usSJ2nJInYRUBSE1XLBletsYJSyBuc/YEjWefN91yQ1ZTUU6 bQS7OVmHzcSm1iY20mc8UrcsyTgP5WAKTLAX9LtE3FsNyn36IRBOr6u99ZA+wbjJ 3q57rHgqpj1ZNDfN8+x4xgh8pLR0U1lF4hbY/PSLtDpgtWPkRfi5iRkzMutmZkaA GNDK/spDM3ILxB96Wy9kCDTCnT7is37ROeLIyPjT4VD8un5kqDJswi7xCR6zP/6s 4ridcI41G00d4KneejcF0E+joeMwORPqfAbuRiopeaYBTRO7Pe7IGvqFa6fxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAqb5OCqFLfXpuIkAeNs9tIOEd2QwHwYDVR0j BBgwFoAUr80mY9oQNY/ppxqUDcj0fhZ84pYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzAwYWUwZjEtYjhjMC00NTJmLThlODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNE QTEwMzU4RkU5QTcxQTk0MERDOEY0N0UxNjdDRTI5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRkNEMjY2M0RBMTAzNThGRTlBNzFBOTQwREM4RjQ3RTE2N0NF Mjk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQUZDRDI2NjNEQTEwMzU4RkU5QTcxQTk0MERDOEY0 N0UxNjdDRTI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzFfGFJ7BBqFbpA5rbk2MxJCrYNE3UntjCu cuEKlY418hXslg5gnEFAJUoYlmn+iyuAUbkJLl/eq3Vo3a2wkHSHq2Fmv9D4LX6H Ip6f1pvMuQr8ISE3nkQ8wLS5w8ZiHsR1QgbzramDoKFgUs48ZnsG4v0/F1zpg7Ge aP7RwoCnFnYVKWPfl2BBsyhj/JhreIhYJe8TG14ZYuiUWIbJNxq/HOtxwRxEBJUt gFF07Ho4Kep6tL8f9ySaUc+IMYrq2f9fo7JcLiWsGEwxbiS5Jdby1/id2vxKIJBE MOoRUZFnlOKXUJ/7iHyR04lN0NP67NfsFOd4M6WGjszAXoeSbbg= -----END CERTIFICATE-----Generated at Tue Sep 22 06:31:43 2026 by rpki-client