$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft File: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft (raw, json) Hash identifier: LXu9tS4K/QxLkJm6NVp1ygiy44MaKXx/Xrt1u6VFBR0= Subject key identifier: 34:F9:5A:0B:26:32:2C:45:C6:BF:10:C7:4E:13:FA:A2:4E:C4:4F:8C Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F Certificate issuer: /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Certificate serial: 7ADDE93E4B10C40D263B17CDB205869FDBF74A08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:01:03 +0000 Manifest this update: Tue 02 Jun 2026 08:56:03 +0000 Manifest next update: Wed 03 Jun 2026 11:06:03 +0000 Files and hashes: 1: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl (hash: 1VlTZTPemJ6OXcAco/KjwzuxVWrehoP92dLL1quICwU=) 2: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: zgZkOJSYpMwgECdH+bRBUbnyYSMNnazg9GbYpqDCf/E=) 3: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: OEHIL+0AeLTQdTnJq21EamkWU5d8RiSPVYNXIxcSpyg=) 4: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: r+jR1/p2ThsRDYRBZVdSZRsZB3W9lST2xfLZ/KbiEB8=) 5: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: e2uAqZhEI4sthRpgwRvzeAum7dq3RtxpLsp3efzH3Ks=) 6: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: bFTUf+z8L70TAAysx8eki8ep4WMyeqIA6kGU4zCgxhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:dd:e9:3e:4b:10:c4:0d:26:3b:17:cd:b2:05:86:9f:db:f7:4a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Validity Not Before: Jun 2 08:56:03 2026 GMT Not After : Jun 3 11:06:03 2026 GMT Subject: CN=34F95A0B26322C45C6BF10C74E13FAA24EC44F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:89:d9:10:e7:c9:39:c3:d0:1f:ce:4c:9d: 64:37:3b:88:67:d4:dd:34:35:b0:d8:d9:c3:1d:52: 67:52:36:88:0e:3f:a6:40:d0:a3:80:c1:6b:26:d4: ba:de:61:34:5d:8a:bb:9e:e9:e3:2d:4f:ba:98:2b: 05:7a:b3:81:b4:b0:e8:a4:35:83:ea:04:df:c9:5a: 88:3c:20:62:6a:dc:cf:77:d6:a2:00:19:d4:ad:99: 64:62:c2:37:4e:b0:ac:cd:d0:1f:77:e8:e2:e7:19: 57:57:18:34:99:7b:d8:2b:6f:4d:9f:c8:da:fb:1a: b5:7c:78:74:24:a2:bf:58:ce:c9:ba:a5:79:e3:26: 87:cf:b6:70:9d:5e:4b:2b:c3:ed:1f:75:41:7b:06: a6:c3:b4:03:fb:1a:06:3b:95:ce:62:3e:93:bd:8e: 17:02:da:f4:15:e7:2b:b4:0b:2b:e2:aa:1f:e3:17: 3a:bd:0d:de:d3:e7:22:28:e8:99:55:65:2b:f6:5f: 07:22:fe:4f:d4:0f:85:3c:d8:d4:fc:97:20:ae:cf: 32:50:3c:74:b6:8e:fa:e7:3a:3e:ae:94:c3:52:4f: 33:15:6e:0f:e9:75:16:7f:67:3b:9d:ab:b6:e2:dd: 41:52:84:a2:5d:0f:28:9f:f6:95:f4:71:30:83:e1: fb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F9:5A:0B:26:32:2C:45:C6:BF:10:C7:4E:13:FA:A2:4E:C4:4F:8C X509v3 Authority Key Identifier: keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c7:03:81:b0:30:2d:71:11:5d:22:c9:c2:d1:38:03:bb:47: ee:6c:1b:c3:eb:6c:b6:59:ea:32:8f:bd:4e:f2:7f:a2:55:d7: 9b:1e:9e:38:6a:58:3d:ad:03:e0:65:0f:ad:ae:ce:e8:89:6c: 95:d8:0b:f4:93:30:06:b4:e3:e1:0d:dc:af:96:f9:aa:2d:9e: f8:7b:f5:8c:7b:c8:80:26:4b:ba:63:38:5a:ed:ff:53:7b:06: ec:98:b3:19:7e:e8:f4:9b:ee:40:49:43:b3:c5:3d:6d:d8:3c: ca:21:bc:85:bf:04:f2:30:93:75:f7:f1:04:e0:6c:f7:18:4b: ad:58:dd:13:67:2a:93:1b:32:3c:41:86:e8:de:22:5f:96:c3: f8:e7:d2:e7:5c:ca:93:e3:3b:a4:2c:24:52:b7:7d:90:a8:0f: 24:03:ec:b6:3b:03:65:95:4a:dc:b0:46:20:e2:48:2e:6b:4a: 2e:62:64:e0:78:8a:af:2e:d2:d8:61:f6:7b:bb:54:36:d5:62: 04:ec:fa:f0:2b:c1:ed:f5:d2:69:91:ac:d6:a5:e9:79:a0:75: 83:a6:0e:0d:ff:6a:79:76:a5:1c:56:08:42:30:81:47:4b:c5: 6c:e6:2a:d7:01:dc:de:e0:b2:06:93:c7:86:d5:64:79:22:b7: dd:8b:bd:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUet3pPksQxA0mOxfNsgWGn9v3SggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkx RkMxODk4RjAeFw0yNjA2MDIwODU2MDNaFw0yNjA2MDMxMTA2MDNaMDMxMTAvBgNV BAMTKDM0Rjk1QTBCMjYzMjJDNDVDNkJGMTBDNzRFMTNGQUEyNEVDNDRGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFonZEOfJOcPQH85MnWQ3O4hn 1N00NbDY2cMdUmdSNogOP6ZA0KOAwWsm1LreYTRdirue6eMtT7qYKwV6s4G0sOik NYPqBN/JWog8IGJq3M931qIAGdStmWRiwjdOsKzN0B936OLnGVdXGDSZe9grb02f yNr7GrV8eHQkor9Yzsm6pXnjJofPtnCdXksrw+0fdUF7BqbDtAP7GgY7lc5iPpO9 jhcC2vQV5yu0Cyviqh/jFzq9Dd7T5yIo6JlVZSv2Xwci/k/UD4U82NT8lyCuzzJQ PHS2jvrnOj6ulMNSTzMVbg/pdRZ/Zzudq7bi3UFShKJdDyif9pX0cTCD4fsjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNPlaCyYyLEXGvxDHThP6ok7ET4wwHwYDVR0j BBgwFoAUGvAW4XWpDRM8WyHfkfYPqR/BiY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU2MzJkOTktMzJiMi00NjdiLWI3ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3 NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkxRkMxODk4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUYwMTZFMTc1QTkwRDEzM0M1QjIxREY5MUY2MEZBOTFGQzE4 OThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBG QTkxRkMxODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7HA4GwMC1xEV0iycLROAO7R+5sG8PrbLZZ 6jKPvU7yf6JV15senjhqWD2tA+BlD62uzuiJbJXYC/STMAa04+EN3K+W+aotnvh7 9Yx7yIAmS7pjOFrt/1N7BuyYsxl+6PSb7kBJQ7PFPW3YPMohvIW/BPIwk3X38QTg bPcYS61Y3RNnKpMbMjxBhujeIl+Ww/jn0udcypPjO6QsJFK3fZCoDyQD7LY7A2WV StywRiDiSC5rSi5iZOB4iq8u0thh9nu7VDbVYgTs+vArwe310mmRrNal6XmgdYOm Dg3/anl2pRxWCEIwgUdLxWzmKtcB3N7gsgaTx4bVZHkit92LvRM= -----END CERTIFICATE-----Generated at Wed Jun 3 03:49:52 2026 by rpki-client