$ rpki-client -vvf rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft File: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft (raw, json) Hash identifier: 3uS4Q/ldazp1OCMygt59yrSjBS8SeqUXOjosI9rXDks= Subject key identifier: 10:EB:7B:86:13:06:DE:CE:22:91:9B:A4:61:25:BE:A2:69:A1:EA:92 Authority key identifier: AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD Certificate issuer: /CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Certificate serial: 0EC7EFBFD89EA8F939CC35C31D36B445B8C82B63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 19:13:41 +0000 Manifest this update: Fri 12 Jun 2026 19:08:41 +0000 Manifest next update: Sat 13 Jun 2026 22:43:41 +0000 Files and hashes: 1: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (hash: odcITqAToT5yF34xeI2KwLrnQspjZLjDq5idgZAGEkU=) 2: 3136302e32352e3131342e302f32342d3234203d3e20313533303731.roa (hash: 4yYHOQ19SUo4wUen+ovEY0nBNoIbYKAxFiddTf9qCzI=) 3: 3136302e32352e3131342e302f32332d3234203d3e20313533303731.roa (hash: +597iuB7PbfMY+3aubsI/GkbNTaFIoKUe/CnIoipNDU=) 4: AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl (hash: BBmYdEuCoICiuLonTYcz2wTUDkczlVe2j1BmTx5cjzE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c7:ef:bf:d8:9e:a8:f9:39:cc:35:c3:1d:36:b4:45:b8:c8:2b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Validity Not Before: Jun 12 19:08:41 2026 GMT Not After : Jun 13 22:43:41 2026 GMT Subject: CN=10EB7B861306DECE22919BA46125BEA269A1EA92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:16:7c:3f:9a:9c:e9:e1:a5:17:0f:b5:8b: b6:3e:2b:df:15:ac:7b:d7:a1:7c:4b:be:79:b6:08: 76:db:61:e0:f8:32:e4:24:1d:32:b7:9f:cf:8e:b3: 85:7c:26:c1:fd:93:01:17:d3:9a:53:ba:c5:02:b9: 25:2c:65:5c:06:cb:2a:0d:f6:59:5b:82:d1:7c:6c: 10:0c:cf:36:b5:ca:e8:36:69:6d:a0:ce:ff:df:23: f5:14:d3:28:29:55:f6:3a:a4:23:44:95:e6:78:93: b0:8e:ba:7a:76:7b:7d:88:58:7c:66:23:77:07:42: 39:b1:03:7b:0a:8a:c4:31:f8:4a:07:0d:b9:0e:36: 32:e4:02:21:32:1e:f8:5f:b4:ea:9c:de:a5:31:5d: 0c:5b:8a:92:1a:30:f8:dd:4f:e5:58:e8:af:c4:61: 1e:bf:25:c4:66:e1:68:1c:0b:a5:20:9f:fd:6d:e5: c8:e7:cc:a2:ec:21:0e:d5:15:b8:ee:9b:fb:16:6e: 1b:ca:a1:90:58:ba:2e:56:66:0e:7a:78:e5:32:ab: ed:78:c4:e9:14:3d:50:b2:ae:fa:8e:bb:a8:79:1f: 5e:7b:2d:a0:73:6b:9f:dc:8e:70:41:02:7c:4d:cf: 73:e0:ec:5c:82:db:f4:ca:0d:9d:ec:a1:5d:25:1f: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EB:7B:86:13:06:DE:CE:22:91:9B:A4:61:25:BE:A2:69:A1:EA:92 X509v3 Authority Key Identifier: keyid:AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:79:02:26:30:95:1e:9e:ab:c9:ac:2a:7b:57:ec:42:e9:68: 88:1f:43:b5:50:82:72:8b:e9:4b:7d:e1:0e:fa:3c:ae:52:94: 4a:43:9d:18:ea:f3:bb:7b:db:e8:bf:ec:f1:83:45:5f:b8:94: 1a:73:8d:0e:91:61:3b:4f:bd:9a:e1:3f:f9:d1:6e:e2:cf:77: 00:53:53:73:78:ad:e5:7b:8e:db:19:dd:73:4e:f9:9f:7f:c8: 61:8e:80:bc:4b:ae:81:9b:08:15:8f:e8:17:8b:c5:91:3a:8a: c7:43:16:11:10:8c:1d:9d:7a:0a:c3:1b:69:9b:53:fa:d5:58: e5:bd:4b:4e:36:a5:a7:7f:0f:b3:6c:4c:8f:2a:44:37:98:5c: d0:aa:aa:f5:ca:f8:c9:f3:e8:84:67:a8:91:d6:de:f1:bd:39: a2:8c:97:2c:ee:85:5f:ed:02:a8:89:64:d3:32:83:e2:c8:94: 49:91:09:04:6d:7e:ff:0d:69:db:ee:0b:95:07:53:c9:83:9c: 1c:19:79:91:5d:d0:8b:32:67:c0:3c:6e:cd:70:88:03:4e:6b: ec:2e:08:94:be:17:51:13:2c:94:45:a1:48:55:19:96:f1:3a: 4d:27:73:e2:b5:ad:2e:dc:6c:6d:9d:1f:b8:bf:9e:98:f4:ed: a2:3c:7c:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDsfvv9ieqPk5zDXDHTa0RbjIK2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4 MEZERkRGRDAeFw0yNjA2MTIxOTA4NDFaFw0yNjA2MTMyMjQzNDFaMDMxMTAvBgNV BAMTKDEwRUI3Qjg2MTMwNkRFQ0UyMjkxOUJBNDYxMjVCRUEyNjlBMUVBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zxZ8P5qc6eGlFw+1i7Y+K98V rHvXoXxLvnm2CHbbYeD4MuQkHTK3n8+Os4V8JsH9kwEX05pTusUCuSUsZVwGyyoN 9llbgtF8bBAMzza1yug2aW2gzv/fI/UU0ygpVfY6pCNEleZ4k7COunp2e32IWHxm I3cHQjmxA3sKisQx+EoHDbkONjLkAiEyHvhftOqc3qUxXQxbipIaMPjdT+VY6K/E YR6/JcRm4WgcC6Ugn/1t5cjnzKLsIQ7VFbjum/sWbhvKoZBYui5WZg56eOUyq+14 xOkUPVCyrvqOu6h5H157LaBza5/cjnBBAnxNz3Pg7FyC2/TKDZ3soV0lH23lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEOt7hhMG3s4ikZukYSW+ommh6pIwHwYDVR0j BBgwFoAUrz0etvO3SxJgZ5fDHCNTt4D9/f0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY3ODYwZTMtNmFkOC00N2E1LTk0YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZG M0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4MEZERkRGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjNEMUVCNkYzQjc0QjEyNjA2Nzk3QzMxQzIzNTNCNzgwRkRG REZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY3ODYwZTMtNmFkOC00N2E1LTk0 YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUz Qjc4MEZERkRGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEB5AiYwlR6eq8msKntX7ELpaIgfQ7VQgnKL 6Ut94Q76PK5SlEpDnRjq87t72+i/7PGDRV+4lBpzjQ6RYTtPvZrhP/nRbuLPdwBT U3N4reV7jtsZ3XNO+Z9/yGGOgLxLroGbCBWP6BeLxZE6isdDFhEQjB2degrDG2mb U/rVWOW9S042pad/D7NsTI8qRDeYXNCqqvXK+Mnz6IRnqJHW3vG9OaKMlyzuhV/t AqiJZNMyg+LIlEmRCQRtfv8NadvuC5UHU8mDnBwZeZFd0IsyZ8A8bs1wiANOa+wu CJS+F1ETLJRFoUhVGZbxOk0nc+K1rS7cbG2dH7i/npj07aI8fDc= -----END CERTIFICATE-----Generated at Sat Jun 13 15:00:23 2026 by rpki-client