$ rpki-client -vvf rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft File: AF66100C07C72416053F944B967509CE9CB5BD57.mft (raw, json) Hash identifier: 7I0fT2lN7T1PMt4WTAnu+7LYp6KTGb7MAOPKYCzbZrA= Subject key identifier: F6:1B:AC:0C:70:28:4D:89:AE:E3:CB:D1:88:6E:DC:D7:A1:AB:94:A7 Authority key identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 Certificate issuer: /CN=AF66100C07C72416053F944B967509CE9CB5BD57 Certificate serial: 47BCA75B7475F0ADAE1B575BD46FDF4A205D0E6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 12:27:15 +0000 Manifest this update: Sun 19 Jul 2026 12:22:15 +0000 Manifest next update: Mon 20 Jul 2026 12:59:15 +0000 Files and hashes: 1: AF66100C07C72416053F944B967509CE9CB5BD57.crl (hash: dIf1DMf7+Hic4LI0vw2S23lcGvvcmzvpfUHgIIyHOh8=) 2: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: e5/61qyIWwgI66mDFz4ykNf/vzBfJVkF6ipuSKXTKDA=) 3: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: buno2xHiOqx8y/mt/ACsj7ZEe8dz2IpeqPkmLCji+Pw=) 4: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: ikUXpc34e4DmsIJzMJM3Qb8I/+cnOqhHLXKzsPXN57I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:bc:a7:5b:74:75:f0:ad:ae:1b:57:5b:d4:6f:df:4a:20:5d:0e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF66100C07C72416053F944B967509CE9CB5BD57 Validity Not Before: Jul 19 12:22:15 2026 GMT Not After : Jul 20 12:59:15 2026 GMT Subject: CN=F61BAC0C70284D89AEE3CBD1886EDCD7A1AB94A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:3b:9c:cf:1e:1a:4e:a5:81:a0:15:47:23: d9:17:ea:5b:d3:83:26:06:b2:84:89:af:db:e9:e7: a8:e0:3c:5c:5c:c3:ca:75:1d:c6:d7:c3:af:e0:cb: 5e:1b:6f:3a:85:7e:da:45:cd:38:41:1b:d9:8d:d3: b6:c4:32:00:8f:dc:31:42:88:be:6d:fd:26:85:ea: 83:89:92:ea:34:2c:f7:60:3b:bb:49:fb:f5:80:0b: 5d:75:86:ed:44:ae:4e:78:94:a0:c5:60:0e:ac:15: 65:67:48:5d:d6:93:78:80:54:86:a4:83:e3:4c:fe: 24:16:fb:58:13:59:92:7e:35:60:fd:5b:1a:78:ad: 5e:c7:b8:59:c2:06:9c:22:0c:c0:52:4e:fc:35:21: 38:7c:22:18:68:aa:66:44:73:c6:3d:1b:5b:65:fd: 12:08:97:6f:b9:51:68:79:d2:f7:c4:78:85:89:a0: 12:72:eb:cb:9d:e3:a2:75:42:c5:a1:f6:7a:cf:9e: f9:0f:c7:4b:12:14:1d:3e:ca:4c:ef:0a:d4:cc:26: 7c:f8:6c:87:eb:b6:9d:be:32:b7:ff:15:ee:5a:ea: a3:25:f5:be:b8:ea:89:e7:ae:87:a6:ae:67:b7:31: 85:23:09:70:80:18:f9:31:34:90:24:a4:81:6c:99: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1B:AC:0C:70:28:4D:89:AE:E3:CB:D1:88:6E:DC:D7:A1:AB:94:A7 X509v3 Authority Key Identifier: keyid:AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:3f:ec:26:f0:08:ab:0e:53:58:5c:9c:73:2a:93:a7:5d:d4: d5:25:8e:ac:ab:40:56:c1:88:09:19:b8:84:cc:ab:22:59:71: dc:31:c9:0d:fe:94:a4:31:05:7c:5b:41:e3:b7:d7:65:e9:20: ee:43:47:de:6b:c8:48:c6:3a:62:4d:1c:bc:19:79:3d:78:69: 23:8c:2c:e7:8b:4a:46:c6:88:96:a2:14:11:5a:d5:41:ea:08: 79:21:dc:4b:17:00:3b:b9:7b:9c:35:34:e5:d0:38:49:5d:26: 62:b1:89:ca:87:c4:0b:a8:50:e9:03:14:94:90:75:a6:7a:63: f2:c2:e1:d8:1e:f1:2d:1c:04:01:d0:b4:4c:1f:d2:42:0e:36: e2:5b:d2:ff:2a:fc:82:e8:dc:4e:87:6b:33:75:da:c8:a4:5e: 87:8d:74:ee:00:be:a5:ce:ba:6c:46:57:99:38:54:f5:00:74: 77:89:f8:38:72:e1:c1:33:03:8d:25:41:1b:0c:0c:0d:4c:b5: 01:42:c0:ed:17:aa:75:b7:87:29:38:15:97:34:66:e3:fc:f6: 21:3c:7e:1e:27:22:14:7c:59:f4:29:cc:4c:71:14:d1:6f:f7: b8:df:88:6e:9a:03:68:2f:f2:9a:9d:3b:ee:be:a8:81:20:1c: 94:e4:ac:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7ynW3R18K2uG1db1G/fSiBdDmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5 Q0I1QkQ1NzAeFw0yNjA3MTkxMjIyMTVaFw0yNjA3MjAxMjU5MTVaMDMxMTAvBgNV BAMTKEY2MUJBQzBDNzAyODREODlBRUUzQ0JEMTg4NkVEQ0Q3QTFBQjk0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVmTuczx4aTqWBoBVHI9kX6lvT gyYGsoSJr9vp56jgPFxcw8p1HcbXw6/gy14bbzqFftpFzThBG9mN07bEMgCP3DFC iL5t/SaF6oOJkuo0LPdgO7tJ+/WAC111hu1Erk54lKDFYA6sFWVnSF3Wk3iAVIak g+NM/iQW+1gTWZJ+NWD9Wxp4rV7HuFnCBpwiDMBSTvw1ITh8IhhoqmZEc8Y9G1tl /RIIl2+5UWh50vfEeIWJoBJy68ud46J1QsWh9nrPnvkPx0sSFB0+ykzvCtTMJnz4 bIfrtp2+Mrf/Fe5a6qMl9b646onnroemrme3MYUjCXCAGPkxNJAkpIFsmddBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9husDHAoTYmu48vRiG7c16GrlKcwHwYDVR0j BBgwFoAUr2YQDAfHJBYFP5RLlnUJzpy1vVcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYzFiYjktNDVmNi00NjY3LWIxOTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMw N0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5Q0I1QkQ1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjY2MTAwQzA3QzcyNDE2MDUzRjk0NEI5Njc1MDlDRTlDQjVC RDU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5 Q0U5Q0I1QkQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIA/7CbwCKsOU1hcnHMqk6dd1NUljqyrQFbB iAkZuITMqyJZcdwxyQ3+lKQxBXxbQeO312XpIO5DR95ryEjGOmJNHLwZeT14aSOM LOeLSkbGiJaiFBFa1UHqCHkh3EsXADu5e5w1NOXQOEldJmKxicqHxAuoUOkDFJSQ daZ6Y/LC4dge8S0cBAHQtEwf0kIONuJb0v8q/ILo3E6HazN12sikXoeNdO4AvqXO umxGV5k4VPUAdHeJ+Dhy4cEzA40lQRsMDA1MtQFCwO0XqnW3hyk4FZc0ZuP89iE8 fh4nIhR8WfQpzExxFNFv97jfiG6aA2gv8pqdO+6+qIEgHJTkrEU= -----END CERTIFICATE-----Generated at Sun Jul 19 23:06:51 2026 by rpki-client