$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft File: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft (raw, json) Hash identifier: 3oVM8LspC86qhuSspkFK0R+qVTydqfiB2r8ap7jcdG0= Subject key identifier: 57:3A:99:6D:24:D8:30:6F:CB:24:D3:35:64:2D:81:68:79:FB:F2:D9 Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F Certificate issuer: /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Certificate serial: 23A7C3F5D6CDF93A802F57D532198ACB7C899BC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:53:37 +0000 Manifest this update: Wed 16 Sep 2026 19:48:37 +0000 Manifest next update: Thu 17 Sep 2026 23:50:37 +0000 Files and hashes: 1: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: zgZkOJSYpMwgECdH+bRBUbnyYSMNnazg9GbYpqDCf/E=) 2: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: r+jR1/p2ThsRDYRBZVdSZRsZB3W9lST2xfLZ/KbiEB8=) 3: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: bFTUf+z8L70TAAysx8eki8ep4WMyeqIA6kGU4zCgxhQ=) 4: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl (hash: YnGS9Ku7Le5ry7NZVyZZnBt7zqzp29LxqfNmscsqnDY=) 5: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: OEHIL+0AeLTQdTnJq21EamkWU5d8RiSPVYNXIxcSpyg=) 6: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: e2uAqZhEI4sthRpgwRvzeAum7dq3RtxpLsp3efzH3Ks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a7:c3:f5:d6:cd:f9:3a:80:2f:57:d5:32:19:8a:cb:7c:89:9b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Validity Not Before: Sep 16 19:48:37 2026 GMT Not After : Sep 17 23:50:37 2026 GMT Subject: CN=573A996D24D8306FCB24D335642D816879FBF2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:f5:c8:6d:fd:31:ef:85:e4:a3:9b:5e:25: 70:99:f5:83:df:fd:83:39:63:05:cf:1c:1b:0b:d4: fc:f8:4f:5c:04:ee:1f:25:a0:f9:40:2d:05:cc:cc: 32:31:73:32:f4:c6:dc:33:29:46:28:39:91:ed:8e: d1:89:2b:b1:04:4e:85:b5:eb:c7:7f:0b:33:2d:11: c3:82:ee:ab:4d:65:17:db:12:ec:0c:5b:6b:d0:8c: 72:b6:28:4a:6a:82:41:fe:5b:64:22:fd:87:fa:6b: 0e:77:f5:92:46:a1:59:49:3a:b5:0d:ad:a5:61:14: 63:b4:2d:9b:60:43:a4:af:50:f3:12:b7:46:6f:62: 8f:53:2f:56:cb:ab:43:4c:83:e4:99:fc:ea:0a:5e: 86:c3:bb:1c:99:fd:ed:fd:86:d0:6e:aa:a4:a3:a4: 98:54:36:7a:0d:80:03:b7:8f:e1:14:ac:8b:90:48: 82:43:2f:8a:9b:45:56:59:72:4b:f3:1c:5a:d9:2a: 88:f9:b5:77:c6:3d:ca:a7:9d:fa:11:fd:6a:41:13: 2b:c4:75:0e:d3:59:fe:53:20:ca:f8:f0:36:8d:2e: 0c:25:78:0e:b4:f0:84:5e:4c:39:91:65:8b:1e:49: df:64:a1:f9:f1:01:34:27:1b:12:09:85:c2:cb:60: b9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3A:99:6D:24:D8:30:6F:CB:24:D3:35:64:2D:81:68:79:FB:F2:D9 X509v3 Authority Key Identifier: keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:79:a9:b1:60:de:c1:a5:c4:22:59:e9:e7:0c:93:e9:66:84: ba:35:85:60:4c:60:2c:61:20:ce:e5:22:69:20:fd:c1:71:af: b4:51:71:26:b1:8a:8c:97:f4:52:91:bf:02:bb:36:9f:19:17: a7:8a:c5:b5:7c:b7:bf:ed:14:5a:d3:3d:8a:8c:eb:47:22:52: 60:de:7b:27:ea:48:21:70:21:b5:d4:72:48:05:1b:1f:43:d9: 0d:33:bd:0a:88:7d:28:6a:c8:10:e5:a4:a3:52:4f:09:ca:87: 65:45:3e:af:ca:d7:fc:ed:47:1e:d1:d0:32:cc:24:61:68:75: 51:b5:4d:1e:fe:c8:1e:69:69:71:90:cf:4e:08:8d:fd:76:58: 4f:30:62:ae:c0:3a:75:16:db:90:74:bd:8f:20:b3:aa:28:f8: 0c:71:1a:c5:35:40:c5:80:25:82:df:2f:74:69:12:85:1b:9d: e3:2e:84:0b:cd:35:fc:68:73:9e:d8:8d:fc:7a:34:ff:ef:c4: ab:48:4d:8a:a8:63:1c:bd:70:ba:2a:e4:ed:28:35:a6:29:89: 21:7c:70:8b:ee:78:33:93:3c:ab:72:b6:40:e7:6b:c4:3c:2c: ba:ac:4e:68:09:5c:6b:ab:06:5a:56:56:47:81:6f:94:76:26: bb:bc:e6:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6fD9dbN+TqAL1fVMhmKy3yJm8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkx RkMxODk4RjAeFw0yNjA5MTYxOTQ4MzdaFw0yNjA5MTcyMzUwMzdaMDMxMTAvBgNV BAMTKDU3M0E5OTZEMjREODMwNkZDQjI0RDMzNTY0MkQ4MTY4NzlGQkYyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssPXIbf0x74Xko5teJXCZ9YPf /YM5YwXPHBsL1Pz4T1wE7h8loPlALQXMzDIxczL0xtwzKUYoOZHtjtGJK7EEToW1 68d/CzMtEcOC7qtNZRfbEuwMW2vQjHK2KEpqgkH+W2Qi/Yf6aw539ZJGoVlJOrUN raVhFGO0LZtgQ6SvUPMSt0ZvYo9TL1bLq0NMg+SZ/OoKXobDuxyZ/e39htBuqqSj pJhUNnoNgAO3j+EUrIuQSIJDL4qbRVZZckvzHFrZKoj5tXfGPcqnnfoR/WpBEyvE dQ7TWf5TIMr48DaNLgwleA608IReTDmRZYseSd9kofnxATQnGxIJhcLLYLkpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVzqZbSTYMG/LJNM1ZC2BaHn78tkwHwYDVR0j BBgwFoAUGvAW4XWpDRM8WyHfkfYPqR/BiY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU2MzJkOTktMzJiMi00NjdiLWI3ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3 NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkxRkMxODk4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUYwMTZFMTc1QTkwRDEzM0M1QjIxREY5MUY2MEZBOTFGQzE4 OThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBG QTkxRkMxODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI15qbFg3sGlxCJZ6ecMk+lmhLo1hWBMYCxh IM7lImkg/cFxr7RRcSaxioyX9FKRvwK7Np8ZF6eKxbV8t7/tFFrTPYqM60ciUmDe eyfqSCFwIbXUckgFGx9D2Q0zvQqIfShqyBDlpKNSTwnKh2VFPq/K1/ztRx7R0DLM JGFodVG1TR7+yB5paXGQz04Ijf12WE8wYq7AOnUW25B0vY8gs6oo+AxxGsU1QMWA JYLfL3RpEoUbneMuhAvNNfxoc57Yjfx6NP/vxKtITYqoYxy9cLoq5O0oNaYpiSF8 cIvueDOTPKtytkDna8Q8LLqsTmgJXGurBlpWVkeBb5R2Jru85ko= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:10 2026 by rpki-client