$ rpki-client -vvf rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft File: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft (raw, json) Hash identifier: HN0oIc7fwmNdCyIajatIzg88ATF3/8Z8JGAbDzDpRDQ= Subject key identifier: F6:2A:10:DF:03:F2:7D:C8:EF:1E:E1:68:45:2C:3E:41:B0:43:E8:EA Authority key identifier: AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD Certificate issuer: /CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Certificate serial: 1F86D3D47EC2ECB884B1DBE487206280A9FC54DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 02:39:22 +0000 Manifest this update: Wed 29 Jul 2026 02:34:22 +0000 Manifest next update: Thu 30 Jul 2026 03:30:22 +0000 Files and hashes: 1: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl (hash: rQs+QzcZfHh26DvkbsurZtOrsf2+6k7BYWK+xrv8eGQ=) 2: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: +597iuB7PbfMY+3aubsI/GkbNTaFIoKUe/CnIoipNDU=) 3: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: odcITqAToT5yF34xeI2KwLrnQspjZLjDq5idgZAGEkU=) 4: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: 4yYHOQ19SUo4wUen+ovEY0nBNoIbYKAxFiddTf9qCzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:86:d3:d4:7e:c2:ec:b8:84:b1:db:e4:87:20:62:80:a9:fc:54:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Validity Not Before: Jul 29 02:34:22 2026 GMT Not After : Jul 30 03:30:22 2026 GMT Subject: CN=F62A10DF03F27DC8EF1EE168452C3E41B043E8EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:29:1f:03:10:1c:eb:73:d1:93:0a:ac:d2: d4:0f:e4:e8:6f:6a:b9:1e:d2:d9:08:5b:89:58:c6: 8e:64:c1:6d:2b:7b:fe:53:ae:73:11:ac:08:c6:1e: 6d:c5:03:ca:2f:c1:b5:7f:75:dd:ae:8f:bd:98:c4: cd:49:80:f3:ae:eb:ef:75:a5:09:7b:bd:1e:07:af: 3a:a3:5f:92:0f:5c:83:3e:8b:bd:dc:de:48:df:67: d4:eb:ae:aa:a8:80:46:79:33:7a:f1:33:dd:66:02: 98:d9:8d:f4:8b:32:16:83:dd:aa:48:af:31:ac:7f: 91:71:cc:89:68:d9:1e:a9:dc:87:d7:a8:c3:9b:6d: 21:b0:48:29:82:f2:f4:b4:6e:45:34:ab:69:8a:0a: 98:47:99:49:40:65:11:f0:19:c4:55:a1:35:85:95: 73:8e:7f:4e:fa:1a:49:5a:2a:20:3e:d0:a3:17:62: 30:c4:a6:92:72:7b:c7:58:df:99:eb:ed:64:f8:ee: d8:e5:42:52:82:87:10:cb:bf:93:dd:af:2c:4c:a5: 99:cc:a3:38:0c:c9:ce:c0:7b:7a:99:51:e8:2c:6f: ce:98:bc:c6:42:e5:fb:90:ec:80:74:9c:f9:51:fd: 99:69:21:40:b2:b3:0a:58:6c:6e:44:53:9b:ab:25: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2A:10:DF:03:F2:7D:C8:EF:1E:E1:68:45:2C:3E:41:B0:43:E8:EA X509v3 Authority Key Identifier: keyid:AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:93:b1:1b:7b:9e:a1:0a:68:c3:d9:67:c7:20:13:2d:b2:35: 2b:cc:15:c0:c9:95:d9:eb:c1:a9:a2:1a:bc:1d:04:52:a1:17: 7b:a1:8b:48:be:b0:47:fb:8d:d1:e6:52:36:f0:de:b6:f5:8b: 00:c6:44:8e:0b:aa:6e:f8:3c:ff:b1:bc:37:d9:f9:85:3c:ca: 28:03:71:c3:a0:e2:12:c7:ae:48:2e:1d:64:6f:eb:c7:4e:2a: 93:cc:2e:e8:7d:54:c1:7a:0c:12:e9:fc:95:27:91:36:fe:0c: cc:01:4d:d8:0f:19:05:cd:9c:75:4e:73:a2:6a:09:cb:a8:d0: 51:d6:8c:cd:ee:af:df:53:47:7e:8b:e2:58:d9:2e:2f:09:1d: 92:4d:db:f4:c0:bf:5c:71:f6:5a:d2:98:5e:71:4d:96:0e:92: 8d:ed:90:0a:10:1a:4e:37:07:4a:4f:73:55:00:a7:29:69:61: 9a:8c:97:4f:6c:97:97:87:74:ce:4e:a1:ab:9e:a9:66:da:27: c3:ee:10:e6:d5:12:da:e5:2f:9f:d7:71:21:59:25:57:82:a4: d6:80:b8:b4:c6:a6:44:7e:89:33:68:9b:ea:40:16:32:0f:2f: ac:41:0d:97:ad:20:57:4f:d2:40:4d:f8:f6:1f:97:91:6e:a2: 9b:a4:80:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4bT1H7C7LiEsdvkhyBigKn8VNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4 MEZERkRGRDAeFw0yNjA3MjkwMjM0MjJaFw0yNjA3MzAwMzMwMjJaMDMxMTAvBgNV BAMTKEY2MkExMERGMDNGMjdEQzhFRjFFRTE2ODQ1MkMzRTQxQjA0M0U4RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XCkfAxAc63PRkwqs0tQP5Ohv arke0tkIW4lYxo5kwW0re/5TrnMRrAjGHm3FA8ovwbV/dd2uj72YxM1JgPOu6+91 pQl7vR4HrzqjX5IPXIM+i73c3kjfZ9TrrqqogEZ5M3rxM91mApjZjfSLMhaD3apI rzGsf5FxzIlo2R6p3IfXqMObbSGwSCmC8vS0bkU0q2mKCphHmUlAZRHwGcRVoTWF lXOOf076GklaKiA+0KMXYjDEppJye8dY35nr7WT47tjlQlKChxDLv5PdryxMpZnM ozgMyc7Ae3qZUegsb86YvMZC5fuQ7IB0nPlR/ZlpIUCyswpYbG5EU5urJQxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ioQ3wPyfcjvHuFoRSw+QbBD6OowHwYDVR0j BBgwFoAUrz0etvO3SxJgZ5fDHCNTt4D9/f0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY3ODYwZTMtNmFkOC00N2E1LTk0YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZG M0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4MEZERkRGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjNEMUVCNkYzQjc0QjEyNjA2Nzk3QzMxQzIzNTNCNzgwRkRG REZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUz Qjc4MEZERkRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCTsRt7nqEKaMPZZ8cgEy2yNSvMFcDJldnr wamiGrwdBFKhF3uhi0i+sEf7jdHmUjbw3rb1iwDGRI4Lqm74PP+xvDfZ+YU8yigD ccOg4hLHrkguHWRv68dOKpPMLuh9VMF6DBLp/JUnkTb+DMwBTdgPGQXNnHVOc6Jq Ccuo0FHWjM3ur99TR36L4ljZLi8JHZJN2/TAv1xx9lrSmF5xTZYOko3tkAoQGk43 B0pPc1UApylpYZqMl09sl5eHdM5OoaueqWbaJ8PuEObVEtrlL5/XcSFZJVeCpNaA uLTGpkR+iTNom+pAFjIPL6xBDZetIFdP0kBN+PYfl5FuopukgA0= -----END CERTIFICATE-----Generated at Wed Jul 29 10:09:21 2026 by rpki-client