$ rpki-client -vvf rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft File: AF66100C07C72416053F944B967509CE9CB5BD57.mft (raw, json) Hash identifier: Ae8ynFnhCvqVE6Yy8WGH04ps2vZskKm2idhnYHoDCNE= Subject key identifier: 69:F9:D4:14:E7:6B:F3:70:BF:5A:3C:05:54:A6:FE:14:26:FF:BF:21 Authority key identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 Certificate issuer: /CN=AF66100C07C72416053F944B967509CE9CB5BD57 Certificate serial: 11A4107D75A5F29660DFF70ED423A1080BC93E47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 00:30:31 +0000 Manifest this update: Wed 03 Jun 2026 00:25:31 +0000 Manifest next update: Thu 04 Jun 2026 03:40:31 +0000 Files and hashes: 1: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: ikUXpc34e4DmsIJzMJM3Qb8I/+cnOqhHLXKzsPXN57I=) 2: AF66100C07C72416053F944B967509CE9CB5BD57.crl (hash: /28Ft4zH0wGBCkie9GiGGKiIpLg09MLUNki69KbvBAE=) 3: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: buno2xHiOqx8y/mt/ACsj7ZEe8dz2IpeqPkmLCji+Pw=) 4: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: e5/61qyIWwgI66mDFz4ykNf/vzBfJVkF6ipuSKXTKDA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a4:10:7d:75:a5:f2:96:60:df:f7:0e:d4:23:a1:08:0b:c9:3e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF66100C07C72416053F944B967509CE9CB5BD57 Validity Not Before: Jun 3 00:25:31 2026 GMT Not After : Jun 4 03:40:31 2026 GMT Subject: CN=69F9D414E76BF370BF5A3C0554A6FE1426FFBF21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:d9:9b:ba:34:cf:c2:28:04:71:64:11:89: 1f:9e:df:55:c0:55:f4:07:c3:df:4a:46:3e:ca:a8: f5:a9:09:f6:20:94:84:0e:76:e5:ff:11:1d:39:4b: 16:7a:55:8d:c1:75:3c:bc:29:8d:70:1c:29:41:c9: 73:93:2f:76:39:8e:c9:f3:ec:85:c2:ec:c5:a3:9b: a1:fe:33:57:b4:e0:b6:89:f4:3d:01:de:c9:04:d7: 5f:4c:05:42:a4:18:97:f4:d4:8e:37:e6:df:8e:99: 86:90:98:fe:34:64:9a:54:a0:81:bf:2a:4b:7c:c6: f7:83:df:c1:cb:93:83:56:e3:53:2a:b7:d4:d7:db: 6e:d4:fc:e3:d3:0d:67:c9:8a:9f:1a:12:59:15:59: c5:74:89:83:ef:26:2e:4a:b8:98:db:52:16:27:d3: 82:39:fb:1d:6c:13:59:f0:6c:d8:23:25:90:5d:1f: b6:95:f9:9e:dc:ba:d4:22:fa:1e:ad:16:85:99:73: e8:27:92:66:26:b7:b9:2e:5f:91:53:75:16:d6:17: ab:45:7e:f5:bc:99:81:1d:1c:1a:5e:71:39:23:d1: 42:cb:8d:8d:c2:7d:fe:ce:ec:e1:4a:44:00:1f:1a: 24:99:b5:84:fc:04:77:ca:e6:aa:87:71:ea:b8:37: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F9:D4:14:E7:6B:F3:70:BF:5A:3C:05:54:A6:FE:14:26:FF:BF:21 X509v3 Authority Key Identifier: keyid:AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:35:9d:d6:68:dc:69:69:7d:ad:c6:20:d5:25:d1:c7:fc:b8: c3:d0:03:14:2e:6c:54:77:05:2b:13:36:27:92:cf:62:18:2a: 01:10:22:c7:7b:90:fd:14:46:00:4e:9e:b0:7b:8c:c6:64:9f: ad:fe:9f:8b:0f:2e:3a:16:21:84:11:be:23:9a:80:32:4e:48: 7d:c2:67:30:42:c8:b8:d5:7b:b1:77:89:90:91:14:85:47:8f: 12:b6:3b:b5:2c:99:6f:27:e2:69:9e:87:cb:7e:89:cb:1e:37: 1d:14:de:f4:23:aa:f7:66:2c:d3:d9:4e:bd:d6:d9:93:d1:89: 53:bb:f7:c9:b5:fc:3c:0a:78:e3:d4:29:f0:fa:c8:4b:a4:7f: 6b:45:32:2a:cd:29:02:5c:fe:4d:01:84:bc:6d:d8:b6:71:66: 40:d9:6e:08:17:67:ee:11:30:38:27:b1:de:9a:79:d6:fd:cf: 1f:cb:42:65:44:46:7a:52:f0:d8:29:a0:e7:d1:d7:3d:7e:42: 9f:4c:45:5a:21:83:03:06:78:03:ea:6d:c8:61:6c:76:d0:90: ee:6c:53:66:83:0a:6a:f1:76:e3:f0:ba:16:89:6f:52:38:ab: 65:40:18:81:1e:7f:e4:78:b7:1c:5f:b0:60:1a:1d:33:a0:2f: 62:ce:bc:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEaQQfXWl8pZg3/cO1COhCAvJPkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5 Q0I1QkQ1NzAeFw0yNjA2MDMwMDI1MzFaFw0yNjA2MDQwMzQwMzFaMDMxMTAvBgNV BAMTKDY5RjlENDE0RTc2QkYzNzBCRjVBM0MwNTU0QTZGRTE0MjZGRkJGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcHNmbujTPwigEcWQRiR+e31XA VfQHw99KRj7KqPWpCfYglIQOduX/ER05SxZ6VY3BdTy8KY1wHClByXOTL3Y5jsnz 7IXC7MWjm6H+M1e04LaJ9D0B3skE119MBUKkGJf01I435t+OmYaQmP40ZJpUoIG/ Kkt8xveD38HLk4NW41Mqt9TX227U/OPTDWfJip8aElkVWcV0iYPvJi5KuJjbUhYn 04I5+x1sE1nwbNgjJZBdH7aV+Z7cutQi+h6tFoWZc+gnkmYmt7kuX5FTdRbWF6tF fvW8mYEdHBpecTkj0ULLjY3Cff7O7OFKRAAfGiSZtYT8BHfK5qqHceq4N81FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUafnUFOdr83C/WjwFVKb+FCb/vyEwHwYDVR0j BBgwFoAUr2YQDAfHJBYFP5RLlnUJzpy1vVcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYzFiYjktNDVmNi00NjY3LWIxOTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMw N0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5Q0I1QkQ1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjY2MTAwQzA3QzcyNDE2MDUzRjk0NEI5Njc1MDlDRTlDQjVC RDU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5 Q0U5Q0I1QkQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU1ndZo3Glpfa3GINUl0cf8uMPQAxQubFR3 BSsTNieSz2IYKgEQIsd7kP0URgBOnrB7jMZkn63+n4sPLjoWIYQRviOagDJOSH3C ZzBCyLjVe7F3iZCRFIVHjxK2O7UsmW8n4mmeh8t+icseNx0U3vQjqvdmLNPZTr3W 2ZPRiVO798m1/DwKeOPUKfD6yEukf2tFMirNKQJc/k0BhLxt2LZxZkDZbggXZ+4R MDgnsd6aedb9zx/LQmVERnpS8NgpoOfR1z1+Qp9MRVohgwMGeAPqbchhbHbQkO5s U2aDCmrxduPwuhaJb1I4q2VAGIEef+R4txxfsGAaHTOgL2LOvHY= -----END CERTIFICATE-----Generated at Wed Jun 3 03:20:57 2026 by rpki-client