$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft File: AF66100C07C72416053F944B967509CE9CB5BD57.mft (raw, json) Hash identifier: Zv+cTWg0DsZ/57F30CVHTYdRQ9h2OW/xzAUfO61lomU= Subject key identifier: CC:7B:09:19:32:5C:10:27:6E:61:AB:62:39:78:FF:7F:8C:BC:7B:47 Authority key identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 Certificate issuer: /CN=AF66100C07C72416053F944B967509CE9CB5BD57 Certificate serial: 7230C5C3E1DA8243C3FAE6E65BC191B48F58AF3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft Manifest number: F0 Signing time: Wed 28 Oct 2026 12:46:05 +0000 Manifest this update: Wed 28 Oct 2026 12:41:05 +0000 Manifest next update: Thu 29 Oct 2026 14:07:05 +0000 Files and hashes: 1: AF66100C07C72416053F944B967509CE9CB5BD57.crl (hash: oyEgsUllmI2fYjIQggjz5b94QwV3/hzPquZy522FEtU=) 2: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: e5/61qyIWwgI66mDFz4ykNf/vzBfJVkF6ipuSKXTKDA=) 3: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: ikUXpc34e4DmsIJzMJM3Qb8I/+cnOqhHLXKzsPXN57I=) 4: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: buno2xHiOqx8y/mt/ACsj7ZEe8dz2IpeqPkmLCji+Pw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 07:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:30:c5:c3:e1:da:82:43:c3:fa:e6:e6:5b:c1:91:b4:8f:58:af:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF66100C07C72416053F944B967509CE9CB5BD57 Validity Not Before: Oct 28 12:41:05 2026 GMT Not After : Oct 29 14:07:05 2026 GMT Subject: CN=CC7B0919325C10276E61AB623978FF7F8CBC7B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:81:50:fe:eb:ed:90:49:ad:de:9f:0b:42: ed:49:b7:d0:a2:1b:3d:1b:61:a0:75:13:33:c0:a1: b9:af:76:5f:77:38:b6:eb:b4:32:18:d5:ec:38:0d: 51:77:8b:e0:38:74:df:1b:a7:98:d8:c1:fc:fc:00: 60:42:d2:b3:2a:bd:b9:f6:ae:05:84:be:f4:72:6e: 78:63:40:19:a1:93:44:e3:a9:5f:1c:38:d5:5a:83: 64:53:8e:90:d4:34:4d:39:50:cd:71:62:97:83:90: ed:6c:03:9b:7f:5d:82:b1:8c:c7:39:28:c5:28:ce: 50:b8:f2:a0:ad:67:2b:cd:fc:01:a6:df:3d:67:b1: a3:be:32:fe:fa:27:a7:1e:2c:92:31:33:1e:6d:f5: 49:af:e3:ec:3e:a8:45:10:56:e1:42:f3:4f:ae:25: 75:0f:58:46:81:2b:91:40:f2:e2:8f:2a:3a:75:76: 8b:be:41:29:ab:b1:50:44:a7:73:f2:37:d1:2b:d3: 25:43:3b:f9:98:6a:22:9f:f0:20:80:55:d3:5c:61: bd:93:de:3d:fd:c4:36:b3:90:86:46:2c:12:a4:42: bc:34:75:75:d2:fe:ea:44:ed:6e:1d:78:2b:aa:37: 5a:5c:88:5d:bf:e0:fe:53:5a:e6:bb:38:b7:d1:5b: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7B:09:19:32:5C:10:27:6E:61:AB:62:39:78:FF:7F:8C:BC:7B:47 X509v3 Authority Key Identifier: keyid:AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2c:63:7e:f3:62:5f:81:4a:51:30:b4:3b:cd:d8:8d:c0:1d: 05:8e:65:7e:0e:93:be:a4:9a:9c:10:7d:34:17:77:11:bc:84: c0:5c:70:34:f2:2d:e3:af:52:6b:ef:b3:a0:14:12:e8:04:b8: 5f:1b:88:11:30:0e:49:db:fd:d9:d7:cc:5f:7b:da:fc:7c:90: e7:4a:e0:39:97:ac:67:9f:b4:48:db:b1:2a:76:25:7c:13:e4: 68:c0:b0:9c:0f:3a:ad:5d:fd:7e:cc:bc:6b:30:58:90:fc:65: e0:f3:c1:e4:30:dd:48:17:13:c2:83:68:5b:9c:5f:c4:46:6e: a6:91:e6:9e:f7:b1:1b:f9:92:e9:5a:c6:d7:3e:0d:a4:99:0f: da:f7:df:58:5b:37:84:06:6f:75:48:b1:7b:8d:26:16:af:c9: 12:4e:c6:09:30:31:21:86:da:4d:6b:1b:be:a3:00:30:49:de: 8d:f1:db:43:08:c7:ef:f0:ee:97:c1:d6:6c:97:eb:e9:6d:de: ca:a6:16:0a:62:01:87:a8:40:64:40:0c:9b:0c:8f:4c:23:a6: 54:d3:7d:4c:77:c5:1c:66:a5:23:42:87:91:dc:44:82:a2:96: 39:ae:75:1c:fb:9e:96:0c:ff:0e:bd:ff:39:25:b6:ee:1f:f3: df:2d:10:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjDFw+HagkPD+ubmW8GRtI9Yrz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5 Q0I1QkQ1NzAeFw0yNjEwMjgxMjQxMDVaFw0yNjEwMjkxNDA3MDVaMDMxMTAvBgNV BAMTKENDN0IwOTE5MzI1QzEwMjc2RTYxQUI2MjM5NzhGRjdGOENCQzdCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuo4FQ/uvtkEmt3p8LQu1Jt9Ci Gz0bYaB1EzPAobmvdl93OLbrtDIY1ew4DVF3i+A4dN8bp5jYwfz8AGBC0rMqvbn2 rgWEvvRybnhjQBmhk0TjqV8cONVag2RTjpDUNE05UM1xYpeDkO1sA5t/XYKxjMc5 KMUozlC48qCtZyvN/AGm3z1nsaO+Mv76J6ceLJIxMx5t9Umv4+w+qEUQVuFC80+u JXUPWEaBK5FA8uKPKjp1dou+QSmrsVBEp3PyN9Er0yVDO/mYaiKf8CCAVdNcYb2T 3j39xDazkIZGLBKkQrw0dXXS/upE7W4deCuqN1pciF2/4P5TWua7OLfRW/SfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzHsJGTJcECduYatiOXj/f4y8e0cwHwYDVR0j BBgwFoAUr2YQDAfHJBYFP5RLlnUJzpy1vVcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYzFiYjktNDVmNi00NjY3LWIxOTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMw N0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5Q0I1QkQ1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjY2MTAwQzA3QzcyNDE2MDUzRjk0NEI5Njc1MDlDRTlDQjVC RDU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5 Q0U5Q0I1QkQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcsY37zYl+BSlEwtDvN2I3AHQWOZX4Ok76k mpwQfTQXdxG8hMBccDTyLeOvUmvvs6AUEugEuF8biBEwDknb/dnXzF972vx8kOdK 4DmXrGeftEjbsSp2JXwT5GjAsJwPOq1d/X7MvGswWJD8ZeDzweQw3UgXE8KDaFuc X8RGbqaR5p73sRv5kulaxtc+DaSZD9r331hbN4QGb3VIsXuNJhavyRJOxgkwMSGG 2k1rG76jADBJ3o3x20MIx+/w7pfB1myX6+lt3sqmFgpiAYeoQGRADJsMj0wjplTT fUx3xRxmpSNCh5HcRIKiljmudRz7npYM/w69/zkltu4f898tEK4= -----END CERTIFICATE-----Generated at Wed Oct 28 16:32:55 2026 by rpki-client