$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft File: A1AE56A4554AF816FB70C7D151B60B95E8688866.mft (raw, json) Hash identifier: VVen3TzEk9iuX8HtXeD3ssSipUc2V5FTXz8DywGhMIQ= Subject key identifier: 66:74:32:77:CD:53:5B:3A:62:4F:1B:BD:10:DD:8B:B7:AF:23:77:B5 Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 Certificate issuer: /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Certificate serial: 61B700D84C5362D602CBED5FF5E9FD5461F52B4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft Manifest number: 66 Signing time: Fri 17 Jul 2026 08:18:08 +0000 Manifest this update: Fri 17 Jul 2026 08:13:08 +0000 Manifest next update: Sat 18 Jul 2026 11:11:08 +0000 Files and hashes: 1: A1AE56A4554AF816FB70C7D151B60B95E8688866.crl (hash: AxW3P9/opiS2fsN43TUfqSl5ojrk/ul8L3rBfBtc1DU=) 2: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 9v0FNIRz7U0Do3bFO3VnUQP4Wx+ba0tNG1r1AH/OeqY=) 3: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: GHM2a/obSFnIX4sm3ZBeoTgx7NT/IcpWeeqALQWuCgk=) 4: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: He41ch40XucuK+aPHGiuSTFi+Lk7tn/MpsAXY1hRpGE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 11:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b7:00:d8:4c:53:62:d6:02:cb:ed:5f:f5:e9:fd:54:61:f5:2b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Validity Not Before: Jul 17 08:13:08 2026 GMT Not After : Jul 18 11:11:08 2026 GMT Subject: CN=66743277CD535B3A624F1BBD10DD8BB7AF2377B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:2a:7a:bd:f1:1f:6c:1c:d8:f7:2d:da:b3: c2:e6:86:ea:0c:34:b6:26:82:73:19:01:03:91:f0: 4c:82:f2:cd:ff:13:c1:da:aa:34:64:11:f3:1b:46: f0:68:0b:9e:d6:77:66:a1:9d:86:ea:a0:80:e0:73: 4e:9a:15:c5:2f:d8:73:79:2d:5d:b0:a1:dd:10:64: 18:ec:96:fb:df:d1:ce:87:39:f7:57:ae:3b:5b:82: 3a:f5:98:26:55:15:78:80:26:60:1e:80:07:ba:a4: 86:01:89:fa:59:9c:bc:ea:5a:39:8b:be:8b:5b:e5: fd:ac:5c:da:45:03:34:05:73:03:40:90:e5:5c:c2: cc:ca:51:b3:f1:0e:ff:26:3d:f0:6c:b1:1a:0c:25: a9:45:40:17:d4:c0:8e:da:22:64:9c:9f:22:10:51: 4d:c5:38:8a:6e:58:5c:d1:be:fd:d6:3e:ed:52:c5: 0c:07:a8:20:43:eb:13:22:58:28:ff:0b:8d:cc:a0: a7:7e:c8:47:73:08:6c:96:ce:9e:b5:8b:c0:09:8d: 9d:42:65:f9:cc:64:a7:06:5d:c0:02:43:e4:c1:b5: 95:c1:44:f4:76:af:1d:3a:e8:3c:61:2b:28:a4:fe: e5:5a:9c:14:22:86:96:70:01:e0:84:1c:f0:cb:fe: 8a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:74:32:77:CD:53:5B:3A:62:4F:1B:BD:10:DD:8B:B7:AF:23:77:B5 X509v3 Authority Key Identifier: keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e2:0c:e2:32:43:bd:39:51:d4:b7:ea:6d:d3:7e:a6:7f:1a: 56:d8:18:eb:8d:66:1e:a7:79:a2:c0:2f:84:e8:2c:e0:06:d1: 3d:b5:23:a5:c6:ec:05:35:3e:86:24:02:b8:3e:dd:00:83:54: cb:ce:47:0f:f5:cf:bd:fb:b8:04:1a:6b:e9:ae:b5:a7:c9:c0: 23:b8:52:64:1f:7c:04:89:00:92:23:3e:63:d0:c8:26:ba:62: 23:6c:f5:c0:86:34:2a:f0:d5:14:74:a2:18:4f:f4:77:32:f7: a5:d3:8f:0b:3a:3e:59:1e:a4:45:10:9e:12:e9:7c:de:72:a4: bd:52:a3:18:1e:4b:c5:1a:df:c0:5d:99:dc:e6:bb:c1:a7:ee: 6f:6f:62:8d:a5:db:ff:0e:a7:54:98:50:31:7a:83:41:f1:1e: 5b:79:e1:df:6d:b1:4a:7a:da:a0:1b:3c:4c:d7:b2:76:f4:3b: f3:95:c0:f8:16:bf:76:c2:c1:35:8c:7e:d6:da:4e:be:15:64: 17:e7:26:a8:14:3e:3e:03:04:b6:d2:84:08:3e:5d:a3:29:67: f0:91:78:80:66:74:d5:96:e7:e1:bf:b2:5e:5e:40:54:26:a1: 7f:23:86:5d:b3:03:8b:72:5b:32:e8:e4:8f:55:6d:03:ff:2d: 07:65:8e:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYbcA2ExTYtYCy+1f9en9VGH1K00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVF ODY4ODg2NjAeFw0yNjA3MTcwODEzMDhaFw0yNjA3MTgxMTExMDhaMDMxMTAvBgNV BAMTKDY2NzQzMjc3Q0Q1MzVCM0E2MjRGMUJCRDEwREQ4QkI3QUYyMzc3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV3Cp6vfEfbBzY9y3as8LmhuoM NLYmgnMZAQOR8EyC8s3/E8HaqjRkEfMbRvBoC57Wd2ahnYbqoIDgc06aFcUv2HN5 LV2wod0QZBjslvvf0c6HOfdXrjtbgjr1mCZVFXiAJmAegAe6pIYBifpZnLzqWjmL votb5f2sXNpFAzQFcwNAkOVcwszKUbPxDv8mPfBssRoMJalFQBfUwI7aImScnyIQ UU3FOIpuWFzRvv3WPu1SxQwHqCBD6xMiWCj/C43MoKd+yEdzCGyWzp61i8AJjZ1C ZfnMZKcGXcACQ+TBtZXBRPR2rx066DxhKyik/uVanBQihpZwAeCEHPDL/ooVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZnQyd81TWzpiTxu9EN2Lt68jd7UwHwYDVR0j BBgwFoAUoa5WpFVK+Bb7cMfRUbYLlehoiGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZDcyZjMtMmRiMi00YmNjLTlmNzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1 NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVFODY4ODg2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUFFNTZBNDU1NEFGODE2RkI3MEM3RDE1MUI2MEI5NUU4Njg4 ODY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBC OTVFODY4ODg2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbiDOIyQ705UdS36m3TfqZ/GlbYGOuNZh6n eaLAL4ToLOAG0T21I6XG7AU1PoYkArg+3QCDVMvORw/1z737uAQaa+mutafJwCO4 UmQffASJAJIjPmPQyCa6YiNs9cCGNCrw1RR0ohhP9Hcy96XTjws6PlkepEUQnhLp fN5ypL1SoxgeS8Ua38Bdmdzmu8Gn7m9vYo2l2/8Op1SYUDF6g0HxHlt54d9tsUp6 2qAbPEzXsnb0O/OVwPgWv3bCwTWMftbaTr4VZBfnJqgUPj4DBLbShAg+XaMpZ/CR eIBmdNWW5+G/sl5eQFQmoX8jhl2zA4tyWzLo5I9VbQP/LQdljiU= -----END CERTIFICATE-----Generated at Sat Jul 18 01:49:16 2026 by rpki-client