$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft File: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft (raw, json) Hash identifier: 2tTwVDaaEmUmd9/wsqZFLVi/NbrW5Vxz8xCbiyEAG5g= Subject key identifier: 0B:C0:70:3B:D7:A3:E1:5C:4A:FA:9D:79:5B:BD:5D:CB:9C:46:E1:7E Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F Certificate issuer: /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Certificate serial: 2B7AB786D80DFD253D9770C3EB4877D4D4ED00C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 19:05:00 +0000 Manifest this update: Mon 20 Jul 2026 19:00:00 +0000 Manifest next update: Tue 21 Jul 2026 20:33:00 +0000 Files and hashes: 1: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: r+jR1/p2ThsRDYRBZVdSZRsZB3W9lST2xfLZ/KbiEB8=) 2: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: OEHIL+0AeLTQdTnJq21EamkWU5d8RiSPVYNXIxcSpyg=) 3: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl (hash: 6vbaGqOv6tu28L5iCr55blBdZ4L+EkXuXskfR2Nmm0c=) 4: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: zgZkOJSYpMwgECdH+bRBUbnyYSMNnazg9GbYpqDCf/E=) 5: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: e2uAqZhEI4sthRpgwRvzeAum7dq3RtxpLsp3efzH3Ks=) 6: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: bFTUf+z8L70TAAysx8eki8ep4WMyeqIA6kGU4zCgxhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7a:b7:86:d8:0d:fd:25:3d:97:70:c3:eb:48:77:d4:d4:ed:00:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Validity Not Before: Jul 20 19:00:00 2026 GMT Not After : Jul 21 20:33:00 2026 GMT Subject: CN=0BC0703BD7A3E15C4AFA9D795BBD5DCB9C46E17E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:d8:30:15:78:04:b5:d5:c9:9e:b8:b6:4f: 85:bf:7c:f0:0c:d2:0c:70:8d:7b:2e:ad:67:7d:41: 25:8b:36:fd:4a:0e:f9:20:97:7b:b9:84:e7:81:1d: e3:ab:c8:53:5d:10:5e:fe:fb:c0:c2:7e:8c:bd:fa: 7d:cd:fa:07:72:83:b4:b6:68:55:6e:33:64:a1:01: 01:c6:0e:67:8e:73:a8:4e:8c:3a:de:3c:1b:04:71: 4b:36:54:b3:80:1e:4e:cd:f2:f3:c7:42:86:9a:1d: 69:9b:72:61:6a:1a:4f:5d:24:fb:67:d5:fe:1e:3e: 61:ff:cd:da:3d:ca:c6:43:cc:b7:f6:60:15:0d:e7: f5:3c:8d:6e:d1:47:8e:01:ed:6d:b8:80:68:8c:50: 34:b9:98:2a:56:4c:c9:94:d3:81:e2:89:63:79:2f: 94:c6:4f:d0:f9:4c:ce:7b:02:a4:d2:86:70:79:3f: 4d:49:24:37:90:5f:45:f0:5b:b1:87:e0:b2:5e:d4: 3a:b6:d6:ac:1c:57:ad:74:1d:c2:6c:26:f0:4c:65: 7e:f9:94:df:46:38:fb:32:61:f0:0c:4e:94:d7:ff: 1a:51:92:02:05:7b:3f:00:28:4e:3c:11:b9:81:1f: 4a:03:7b:fb:a7:74:d1:c5:7c:bd:d4:64:28:bf:bb: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C0:70:3B:D7:A3:E1:5C:4A:FA:9D:79:5B:BD:5D:CB:9C:46:E1:7E X509v3 Authority Key Identifier: keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c4:2b:c5:93:1a:ba:47:94:c0:b0:e5:70:46:ba:8c:3e:8d: 5f:09:e3:8d:47:4e:85:0e:68:60:0c:bf:e0:1d:ab:b0:a8:73: 8a:2d:b4:f6:af:a6:0a:aa:ed:9b:82:7d:4c:6d:e1:a8:d5:69: 07:70:56:c8:a1:bf:0c:60:a5:09:38:76:e0:e7:dc:06:eb:a0: 5a:9c:35:f2:d6:0e:05:94:4d:67:2e:76:ac:db:d3:ec:9f:57: 21:c0:eb:c5:2d:2d:ab:e6:16:58:e1:fc:f3:b8:b2:dc:0a:c1: 7d:88:ae:32:1d:b9:8e:41:1b:48:74:fc:44:5b:79:e0:84:e6: d3:7b:4b:51:73:28:16:a0:f0:07:62:24:4e:ae:fa:52:7a:6b: 48:20:f4:53:8b:35:f7:4d:be:8b:aa:2a:4a:a3:22:28:0c:0d: 38:3f:f4:80:fd:90:75:43:0f:72:fd:d4:a8:d8:cc:d4:76:4d: d0:d6:80:3a:2a:5b:06:a7:ba:b8:9c:18:48:27:e4:cb:b2:6b: 13:72:c0:8a:24:ae:9a:c9:c4:6a:69:e2:ac:df:53:80:d8:d3: 95:68:64:23:5d:2a:17:08:a6:4f:00:e1:bc:c2:8e:6c:81:19: 87:6f:07:68:ff:1d:6f:ef:90:ec:c3:da:4d:2c:7a:6b:23:81: eb:6e:5c:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3q3htgN/SU9l3DD60h31NTtAMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkx RkMxODk4RjAeFw0yNjA3MjAxOTAwMDBaFw0yNjA3MjEyMDMzMDBaMDMxMTAvBgNV BAMTKDBCQzA3MDNCRDdBM0UxNUM0QUZBOUQ3OTVCQkQ1RENCOUM0NkUxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3dgwFXgEtdXJnri2T4W/fPAM 0gxwjXsurWd9QSWLNv1KDvkgl3u5hOeBHeOryFNdEF7++8DCfoy9+n3N+gdyg7S2 aFVuM2ShAQHGDmeOc6hOjDrePBsEcUs2VLOAHk7N8vPHQoaaHWmbcmFqGk9dJPtn 1f4ePmH/zdo9ysZDzLf2YBUN5/U8jW7RR44B7W24gGiMUDS5mCpWTMmU04HiiWN5 L5TGT9D5TM57AqTShnB5P01JJDeQX0XwW7GH4LJe1Dq21qwcV610HcJsJvBMZX75 lN9GOPsyYfAMTpTX/xpRkgIFez8AKE48EbmBH0oDe/undNHFfL3UZCi/u1BBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC8BwO9ej4VxK+p15W71dy5xG4X4wHwYDVR0j BBgwFoAUGvAW4XWpDRM8WyHfkfYPqR/BiY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU2MzJkOTktMzJiMi00NjdiLWI3ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3 NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkxRkMxODk4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUYwMTZFMTc1QTkwRDEzM0M1QjIxREY5MUY2MEZBOTFGQzE4 OThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBG QTkxRkMxODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3EK8WTGrpHlMCw5XBGuow+jV8J441HToUO aGAMv+Adq7Coc4ottPavpgqq7ZuCfUxt4ajVaQdwVsihvwxgpQk4duDn3AbroFqc NfLWDgWUTWcudqzb0+yfVyHA68UtLavmFljh/PO4stwKwX2IrjIduY5BG0h0/ERb eeCE5tN7S1FzKBag8AdiJE6u+lJ6a0gg9FOLNfdNvouqKkqjIigMDTg/9ID9kHVD D3L91KjYzNR2TdDWgDoqWwanuricGEgn5MuyaxNywIokrprJxGpp4qzfU4DY05Vo ZCNdKhcIpk8A4bzCjmyBGYdvB2j/HW/vkOzD2k0semsjgetuXGM= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:54 2026 by rpki-client