$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft File: AF66100C07C72416053F944B967509CE9CB5BD57.mft (raw, json) Hash identifier: dwkpRQJH91Abk8d4H6/XgD7oyrtNjPidhxX7Iygo0Sc= Subject key identifier: 44:57:0F:03:8C:BA:17:97:BE:06:22:FB:44:21:0B:E7:CF:5A:9B:91 Authority key identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 Certificate issuer: /CN=AF66100C07C72416053F944B967509CE9CB5BD57 Certificate serial: 28FC3D20B17BB6D9B77CEBAAD98DB3D7EBD4EC67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 22:51:13 +0000 Manifest this update: Wed 02 Sep 2026 22:46:13 +0000 Manifest next update: Thu 03 Sep 2026 23:41:13 +0000 Files and hashes: 1: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: ikUXpc34e4DmsIJzMJM3Qb8I/+cnOqhHLXKzsPXN57I=) 2: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: buno2xHiOqx8y/mt/ACsj7ZEe8dz2IpeqPkmLCji+Pw=) 3: AF66100C07C72416053F944B967509CE9CB5BD57.crl (hash: 5DYStFFxjEGGGCgjclceOZPYy7DbAtAsLzDHRNUHnlk=) 4: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: e5/61qyIWwgI66mDFz4ykNf/vzBfJVkF6ipuSKXTKDA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:fc:3d:20:b1:7b:b6:d9:b7:7c:eb:aa:d9:8d:b3:d7:eb:d4:ec:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF66100C07C72416053F944B967509CE9CB5BD57 Validity Not Before: Sep 2 22:46:13 2026 GMT Not After : Sep 3 23:41:13 2026 GMT Subject: CN=44570F038CBA1797BE0622FB44210BE7CF5A9B91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:51:17:3d:d8:a0:aa:98:65:fc:7c:4a:e5:d6: 33:95:fd:9b:95:b4:62:64:55:72:92:f3:34:d5:07: c5:27:f7:4f:43:b6:d9:07:bb:4e:5f:c7:b8:9c:06: c4:be:df:2f:04:66:c8:91:e0:f7:22:d9:7b:59:38: a0:0f:c6:18:b5:94:16:36:c2:37:22:c7:a3:e2:11: a2:38:9b:f3:80:c0:f8:a8:b8:f3:be:54:c3:1c:b2: c4:ba:bd:fa:2e:d9:a7:4b:b0:3d:1b:39:0d:13:ff: f4:fc:8b:88:92:3d:a3:c1:88:b4:ec:a8:aa:8b:05: 0d:79:d4:74:f6:03:19:fb:07:da:2a:e0:06:20:33: 29:86:90:af:ea:6c:c7:03:fd:64:1f:4c:27:0f:35: 2d:54:a5:c3:46:c9:84:ab:a7:f7:7e:5f:cb:a9:1a: 21:c5:73:62:84:47:b8:27:fe:c4:34:7a:99:1d:5a: 16:ec:1a:c7:41:1a:af:22:eb:98:00:15:3c:63:d3: 5f:65:bc:6e:d2:77:3d:0c:4f:b7:aa:e0:db:ca:f2: b9:e7:79:21:e3:ef:a6:09:c7:c4:20:0a:b8:d0:5c: 61:35:3b:53:9f:6f:a5:e3:b4:1d:42:b7:27:1c:35: 3c:33:99:91:96:2d:fd:f7:8e:92:2b:7b:bf:bd:59: c9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:57:0F:03:8C:BA:17:97:BE:06:22:FB:44:21:0B:E7:CF:5A:9B:91 X509v3 Authority Key Identifier: keyid:AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4b:af:6c:34:a9:8e:79:8b:3a:b8:03:06:dd:93:c0:b4:f1: c9:ad:c6:cc:05:d0:ea:44:a2:9a:88:ff:83:43:e9:76:d9:c7: d3:4d:73:be:03:65:08:ba:fa:3a:7e:84:3f:1e:72:2c:c4:4f: 53:31:b8:3b:8e:a8:70:eb:84:7b:bf:44:ec:26:1d:02:e5:7e: fd:dc:e0:ad:de:34:33:a5:8a:11:bb:19:a6:a0:d9:cb:6a:ee: cc:64:bb:32:cc:a9:7e:05:e5:fa:8d:c2:9c:63:f1:5e:4d:39: c3:23:ef:b1:08:d5:bf:dc:48:f9:c0:00:0e:9f:1f:94:0b:e0: 87:c1:89:2f:de:fd:16:a1:73:9b:90:68:38:30:82:80:d8:65: da:04:ad:39:fc:e9:38:96:77:8b:05:8a:67:20:6e:38:45:d8: 67:45:bd:6f:dc:18:6a:24:41:91:73:f5:33:b1:64:3c:b7:91: 31:c7:57:4d:c2:dc:83:4a:ea:b6:75:ae:13:9b:9d:89:49:5d: 11:b8:c1:b2:95:b5:11:f5:cf:85:b8:64:0d:ae:c0:e9:f9:62: 71:97:a2:1e:e5:e9:72:e2:28:37:65:49:b8:ba:f7:de:86:17: fc:8c:94:23:c3:af:84:f4:73:dd:66:ab:23:4c:1b:1d:33:f9: fe:ab:d7:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKPw9ILF7ttm3fOuq2Y2z1+vU7GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5 Q0I1QkQ1NzAeFw0yNjA5MDIyMjQ2MTNaFw0yNjA5MDMyMzQxMTNaMDMxMTAvBgNV BAMTKDQ0NTcwRjAzOENCQTE3OTdCRTA2MjJGQjQ0MjEwQkU3Q0Y1QTlCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfURc92KCqmGX8fErl1jOV/ZuV tGJkVXKS8zTVB8Un909DttkHu05fx7icBsS+3y8EZsiR4Pci2XtZOKAPxhi1lBY2 wjcix6PiEaI4m/OAwPiouPO+VMMcssS6vfou2adLsD0bOQ0T//T8i4iSPaPBiLTs qKqLBQ151HT2Axn7B9oq4AYgMymGkK/qbMcD/WQfTCcPNS1UpcNGyYSrp/d+X8up GiHFc2KER7gn/sQ0epkdWhbsGsdBGq8i65gAFTxj019lvG7Sdz0MT7eq4NvK8rnn eSHj76YJx8QgCrjQXGE1O1Ofb6XjtB1CtyccNTwzmZGWLf33jpIre7+9Wcm1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURFcPA4y6F5e+BiL7RCEL589am5EwHwYDVR0j BBgwFoAUr2YQDAfHJBYFP5RLlnUJzpy1vVcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYzFiYjktNDVmNi00NjY3LWIxOTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMw N0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5Q0I1QkQ1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjY2MTAwQzA3QzcyNDE2MDUzRjk0NEI5Njc1MDlDRTlDQjVC RDU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5 Q0U5Q0I1QkQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1Lr2w0qY55izq4Awbdk8C08cmtxswF0OpE opqI/4ND6XbZx9NNc74DZQi6+jp+hD8ecizET1MxuDuOqHDrhHu/ROwmHQLlfv3c 4K3eNDOlihG7Gaag2ctq7sxkuzLMqX4F5fqNwpxj8V5NOcMj77EI1b/cSPnAAA6f H5QL4IfBiS/e/Rahc5uQaDgwgoDYZdoErTn86TiWd4sFimcgbjhF2GdFvW/cGGok QZFz9TOxZDy3kTHHV03C3INK6rZ1rhObnYlJXRG4wbKVtRH1z4W4ZA2uwOn5YnGX oh7l6XLiKDdlSbi6996GF/yMlCPDr4T0c91mqyNMGx0z+f6r13o= -----END CERTIFICATE-----Generated at Thu Sep 3 05:14:28 2026 by rpki-client