$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft File: AF0C42FF385AC16D8868625322DDC9687E064976.mft (raw, json) Hash identifier: NcDtv/WyGaKEInl1qrc2ScpkHLZEhmE6/V7P9I3moCM= Subject key identifier: EA:6D:2A:3D:65:EC:83:01:61:FC:D8:4B:A8:17:8C:10:E8:4D:2C:70 Authority key identifier: AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 Certificate issuer: /CN=AF0C42FF385AC16D8868625322DDC9687E064976 Certificate serial: 0246C91F0C72D1DD7B6062A297E32ED65EBE120C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft Manifest number: BE Signing time: Mon 21 Sep 2026 02:29:35 +0000 Manifest this update: Mon 21 Sep 2026 02:24:35 +0000 Manifest next update: Tue 22 Sep 2026 04:51:35 +0000 Files and hashes: 1: AF0C42FF385AC16D8868625322DDC9687E064976.crl (hash: uqs8uw4BcrlKeQ/C+RQGJivW6auv63JWLKI2pbpnGCQ=) 2: 323030313a6466333a623034303a3a2f34382d3438203d3e20313532343432.roa (hash: oLBZrJQYooXv1AaJqvvqFmmqga9DhEWLnd2Rras7ouk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:46:c9:1f:0c:72:d1:dd:7b:60:62:a2:97:e3:2e:d6:5e:be:12:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF0C42FF385AC16D8868625322DDC9687E064976 Validity Not Before: Sep 21 02:24:35 2026 GMT Not After : Sep 22 04:51:35 2026 GMT Subject: CN=EA6D2A3D65EC830161FCD84BA8178C10E84D2C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:73:6a:4c:44:74:00:e0:57:4f:db:5c:ac: 13:27:fa:2a:16:09:44:7b:e3:15:68:a3:d6:e1:61: e9:d9:11:22:e1:32:7a:b5:a0:ba:4b:a1:02:71:fa: 9f:5d:5e:13:ce:16:11:8e:43:39:12:bc:7c:88:e1: 5e:93:aa:99:86:2b:0c:a4:40:fd:20:27:40:6e:94: 7a:a1:21:ea:de:d1:7a:f4:43:c7:ef:a0:be:cb:aa: 36:70:d2:93:02:c0:fa:10:99:29:35:72:82:33:94: 67:6d:92:45:fe:a4:73:ac:a3:37:9c:8a:e1:26:1f: 73:14:63:50:da:2c:e3:27:7f:91:d8:fd:7b:be:9f: c0:06:fc:c0:63:f9:fd:48:17:02:39:27:0c:be:e3: 98:5b:f7:6e:32:9c:f3:5b:bd:bf:71:a2:f5:dc:45: a8:b8:26:4d:10:93:b7:fd:24:42:28:7f:50:1f:c8: 82:c3:3e:7a:71:f5:54:e6:b5:fb:20:ff:8f:48:af: 69:ee:50:75:b2:b8:e1:73:b2:5b:84:d3:89:69:9b: 8d:51:d0:2a:1e:1c:e1:7d:42:64:50:b7:33:dd:0b: 6a:04:2a:0c:29:e6:0b:3a:c8:67:06:fc:ab:d2:06: 65:33:8b:31:28:fb:ca:b2:96:5a:73:ff:b0:38:c1: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6D:2A:3D:65:EC:83:01:61:FC:D8:4B:A8:17:8C:10:E8:4D:2C:70 X509v3 Authority Key Identifier: keyid:AF:0C:42:FF:38:5A:C1:6D:88:68:62:53:22:DD:C9:68:7E:06:49:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF0C42FF385AC16D8868625322DDC9687E064976.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/1/AF0C42FF385AC16D8868625322DDC9687E064976.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:02:49:31:38:9f:4c:3c:80:53:40:b7:73:c0:7d:a1:6a:29: 19:48:b1:8c:5c:39:90:4c:6e:cd:14:8f:8d:65:96:44:a3:00: 2b:98:d8:e0:2a:08:8f:42:d0:6c:b4:0b:1c:b6:1f:c7:64:2a: ff:3c:4e:21:4d:9e:c3:ad:38:bd:aa:c1:b2:0b:a9:f4:b0:2e: ca:be:e7:8f:53:0a:da:23:0e:6d:38:d9:fc:ce:eb:ad:7e:d1: e9:e4:df:bb:9a:c2:6c:af:43:79:d0:e2:8c:87:b5:85:4f:86: 07:8d:b3:ec:2f:93:70:1e:ee:c4:32:79:4e:cf:2b:6f:fe:b2: e5:c3:1d:a8:4d:61:05:12:47:3f:00:58:d3:df:9b:1d:6d:2d: 26:35:f6:2e:22:ef:cf:b2:d3:3f:90:d0:6b:34:36:ef:58:61: f6:4e:8c:a9:b4:b6:56:1e:4c:00:a6:c2:da:5b:ad:6c:b2:ed: 7a:54:a8:33:45:2d:69:1f:50:d0:37:57:52:30:5f:65:37:46: f0:b7:9d:36:b3:c6:39:60:c7:85:da:2a:a2:7c:36:0a:5d:8c: e4:86:ad:83:56:f7:42:62:74:fe:8d:00:e3:f2:57:d0:9c:7a: 4d:73:56:25:4a:ea:30:79:9b:7e:00:b0:45:9a:bf:fe:85:44: 9c:91:4d:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkbJHwxy0d17YGKil+Mu1l6+EgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3 RTA2NDk3NjAeFw0yNjA5MjEwMjI0MzVaFw0yNjA5MjIwNDUxMzVaMDMxMTAvBgNV BAMTKEVBNkQyQTNENjVFQzgzMDE2MUZDRDg0QkE4MTc4QzEwRTg0RDJDNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgXNqTER0AOBXT9tcrBMn+ioW CUR74xVoo9bhYenZESLhMnq1oLpLoQJx+p9dXhPOFhGOQzkSvHyI4V6TqpmGKwyk QP0gJ0BulHqhIere0Xr0Q8fvoL7LqjZw0pMCwPoQmSk1coIzlGdtkkX+pHOsozec iuEmH3MUY1DaLOMnf5HY/Xu+n8AG/MBj+f1IFwI5Jwy+45hb924ynPNbvb9xovXc Rai4Jk0Qk7f9JEIof1AfyILDPnpx9VTmtfsg/49Ir2nuUHWyuOFzsluE04lpm41R 0CoeHOF9QmRQtzPdC2oEKgwp5gs6yGcG/KvSBmUzizEo+8qyllpz/7A4wXffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6m0qPWXsgwFh/NhLqBeMEOhNLHAwHwYDVR0j BBgwFoAUrwxC/zhawW2IaGJTIt3JaH4GSXYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg3ZGQ1OTctNDBjZC00MDliLWIzYzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYz ODVBQzE2RDg4Njg2MjUzMjJEREM5Njg3RTA2NDk3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjBDNDJGRjM4NUFDMTZEODg2ODYyNTMyMkREQzk2ODdFMDY0 OTc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzEvQUYwQzQyRkYzODVBQzE2RDg4Njg2MjUzMjJEREM5 Njg3RTA2NDk3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABACSTE4n0w8gFNAt3PAfaFqKRlIsYxcOZBM bs0Uj41llkSjACuY2OAqCI9C0Gy0Cxy2H8dkKv88TiFNnsOtOL2qwbILqfSwLsq+ 549TCtojDm042fzO661+0enk37uawmyvQ3nQ4oyHtYVPhgeNs+wvk3Ae7sQyeU7P K2/+suXDHahNYQUSRz8AWNPfmx1tLSY19i4i78+y0z+Q0Gs0Nu9YYfZOjKm0tlYe TACmwtpbrWyy7XpUqDNFLWkfUNA3V1IwX2U3RvC3nTazxjlgx4XaKqJ8NgpdjOSG rYNW90JidP6NAOPyV9Ccek1zViVK6jB5m34AsEWav/6FRJyRTZ0= -----END CERTIFICATE-----Generated at Mon Sep 21 19:56:37 2026 by rpki-client