$ rpki-client -vvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft File: AF0C42FF385AC16D8868625322DDC9687E064976.mft (raw, json) Hash identifier: Q833auk+vUzqn6qdS8dUuu/RC7GFanrNWQzHe1w4E5U= Subject key identifier: 8D:A0:1E:77:BC:96:60:D2:66:7C:4E:33:E4:FA:57:A4:E4:D1:B2:CF Authority key identifier: AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 Certificate issuer: /CN=AF0C42FF385AC16D8868625322DDC9687E064976 Certificate serial: 75B6435D496C81C39E99D57EAE7C4FF22F293FCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 22:46:43 +0000 Manifest this update: Sat 13 Jun 2026 22:41:43 +0000 Manifest next update: Mon 15 Jun 2026 02:30:43 +0000 Files and hashes: 1: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: oLBZrJQYooXv1AaJqvvqFmmqga9DhEWLnd2Rras7ouk=) 2: AF0C42FF385AC16D8868625322DDC9687E064976.crl (hash: S8TWiVRXQEoF18fGqvleA1gNXn6KLK4VB0n4qRdp8qY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b6:43:5d:49:6c:81:c3:9e:99:d5:7e:ae:7c:4f:f2:2f:29:3f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF0C42FF385AC16D8868625322DDC9687E064976 Validity Not Before: Jun 13 22:41:43 2026 GMT Not After : Jun 15 02:30:43 2026 GMT Subject: CN=8DA01E77BC9660D2667C4E33E4FA57A4E4D1B2CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:39:d4:96:4c:5c:48:e1:e3:5f:e1:1c:39: 15:aa:97:34:62:01:4a:68:9e:ba:6e:ef:bb:13:d9: 8e:08:2b:60:c1:ed:b4:10:f5:60:00:d0:58:17:bd: 2b:c6:ba:a7:d5:b3:58:ff:02:37:cf:f3:ec:f0:16: 5a:c5:68:24:13:98:fe:35:93:d9:f6:b1:de:cc:2d: 7e:1a:53:c9:c3:96:3a:6c:fb:6b:af:c2:d6:88:c7: af:1c:2b:e6:50:51:f5:66:e5:37:42:fe:6e:a1:b6: 87:7f:aa:a6:83:97:f4:90:8f:90:d5:12:1c:e1:61: 4d:16:ed:b7:41:51:a4:e1:41:86:14:6f:e3:73:f3: dd:38:be:da:d4:df:48:1b:ab:b2:0b:f3:91:0e:cc: 41:a1:c5:db:71:6f:3f:9f:9a:f4:31:12:a6:27:6f: a3:8d:f7:1a:6f:1b:52:46:42:60:71:e9:7f:9d:d3: c4:f1:81:bf:17:f4:b0:24:05:95:e5:e8:46:8c:dd: 13:bd:8b:c9:1e:81:8d:69:f9:9d:d7:cf:c1:30:7e: 73:ab:5a:98:ba:6f:1f:94:d4:64:b3:b4:e8:03:b0: 01:b9:70:f2:3c:7c:68:9b:ca:9c:b5:50:33:50:11: ca:0c:e4:5f:d8:ab:ed:aa:51:78:ca:03:9e:94:e8: b8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A0:1E:77:BC:96:60:D2:66:7C:4E:33:E4:FA:57:A4:E4:D1:B2:CF X509v3 Authority Key Identifier: keyid:AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:00:b9:fa:e9:63:f3:ba:fe:f9:4d:b1:f6:f8:29:b0:bf:07: f3:c9:c4:90:12:04:92:8c:ca:9d:cc:b8:df:0b:51:40:32:77: 6b:d1:2f:f0:ef:72:4b:a1:f7:28:97:fd:85:6b:d7:13:e4:0a: ad:7d:8a:20:e6:9e:b9:f3:ec:f4:0e:d2:b6:04:39:95:57:cd: 87:81:3d:a0:bd:78:a7:13:c6:ff:6a:14:00:90:3c:11:7d:da: c4:0a:61:23:df:d0:48:3c:41:fd:d8:09:89:37:67:c8:c5:62: 5d:21:4f:50:6e:cf:b8:0e:08:a4:5a:8d:1b:55:6c:6c:cd:4e: 71:77:9d:85:33:8b:5d:2c:3c:42:96:70:72:11:1f:f5:63:ff: d2:05:ab:81:90:02:df:bb:13:66:84:ed:4b:16:3e:2b:32:58: 6a:ca:e3:0c:3d:14:a4:39:fb:f5:73:2a:4c:1b:1f:a4:58:67: 67:a7:3e:10:a9:c6:cf:b8:69:c2:0a:04:9b:3b:d1:aa:45:fd: 85:93:b8:4b:e6:fa:40:9e:6d:36:7b:5a:5e:f7:34:3b:f9:9a: 4c:cf:00:c1:ea:c8:aa:7c:73:06:79:01:18:a1:db:e4:37:81: f3:36:00:1e:0b:24:5c:04:7e:8c:04:46:f7:52:2d:4a:37:7b: 53:d5:ed:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbZDXUlsgcOemdV+rnxP8i8pP84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3 RTA2NDk3NjAeFw0yNjA2MTMyMjQxNDNaFw0yNjA2MTUwMjMwNDNaMDMxMTAvBgNV BAMTKDhEQTAxRTc3QkM5NjYwRDI2NjdDNEUzM0U0RkE1N0E0RTREMUIyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdjnUlkxcSOHjX+EcORWqlzRi AUponrpu77sT2Y4IK2DB7bQQ9WAA0FgXvSvGuqfVs1j/AjfP8+zwFlrFaCQTmP41 k9n2sd7MLX4aU8nDljps+2uvwtaIx68cK+ZQUfVm5TdC/m6htod/qqaDl/SQj5DV EhzhYU0W7bdBUaThQYYUb+Nz8904vtrU30gbq7IL85EOzEGhxdtxbz+fmvQxEqYn b6ON9xpvG1JGQmBx6X+d08Txgb8X9LAkBZXl6EaM3RO9i8kegY1p+Z3Xz8EwfnOr Wpi6bx+U1GSztOgDsAG5cPI8fGibypy1UDNQEcoM5F/Yq+2qUXjKA56U6Lg7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjaAed7yWYNJmfE4z5PpXpOTRss8wHwYDVR0j BBgwFoAUrwxC/zhawW2IaGJTIt3JaH4GSXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYz ODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3RTA2NDk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjBDNDJGRjM4NUFDMTZEODg2ODYyNTMyMkREQzk2ODdFMDY0 OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5 Njg3RTA2NDk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsAufrpY/O6/vlNsfb4KbC/B/PJxJASBJKM yp3MuN8LUUAyd2vRL/Dvckuh9yiX/YVr1xPkCq19iiDmnrnz7PQO0rYEOZVXzYeB PaC9eKcTxv9qFACQPBF92sQKYSPf0Eg8Qf3YCYk3Z8jFYl0hT1Buz7gOCKRajRtV bGzNTnF3nYUzi10sPEKWcHIRH/Vj/9IFq4GQAt+7E2aE7UsWPisyWGrK4ww9FKQ5 +/VzKkwbH6RYZ2enPhCpxs+4acIKBJs70apF/YWTuEvm+kCebTZ7Wl73NDv5mkzP AMHqyKp8cwZ5ARih2+Q3gfM2AB4LJFwEfowERvdSLUo3e1PV7Vg= -----END CERTIFICATE-----Generated at Sun Jun 14 04:45:47 2026 by rpki-client