$ rpki-client -vvf rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft File: AF66100C07C72416053F944B967509CE9CB5BD57.mft (raw, json) Hash identifier: PO0b7B3ZqY0Of1hYF3r87uAvhh5NRlZ+oO/LL+DT3ao= Subject key identifier: 38:D0:7E:BE:05:79:1D:F9:FB:A7:11:B1:14:25:BD:9A:4B:55:AE:EB Authority key identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 Certificate issuer: /CN=AF66100C07C72416053F944B967509CE9CB5BD57 Certificate serial: 0AAAF89B3076131F1EC35AD20DE717585715C813 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:47:42 +0000 Manifest this update: Thu 23 Jul 2026 22:42:42 +0000 Manifest next update: Sat 25 Jul 2026 00:22:42 +0000 Files and hashes: 1: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: e5/61qyIWwgI66mDFz4ykNf/vzBfJVkF6ipuSKXTKDA=) 2: AF66100C07C72416053F944B967509CE9CB5BD57.crl (hash: axK/fOBtZgG/4PI9QYmwBtIVMcJRBX3PBz2WREJ75OU=) 3: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: ikUXpc34e4DmsIJzMJM3Qb8I/+cnOqhHLXKzsPXN57I=) 4: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: buno2xHiOqx8y/mt/ACsj7ZEe8dz2IpeqPkmLCji+Pw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:aa:f8:9b:30:76:13:1f:1e:c3:5a:d2:0d:e7:17:58:57:15:c8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF66100C07C72416053F944B967509CE9CB5BD57 Validity Not Before: Jul 23 22:42:42 2026 GMT Not After : Jul 25 00:22:42 2026 GMT Subject: CN=38D07EBE05791DF9FBA711B11425BD9A4B55AEEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:38:a1:d3:80:0e:ca:a9:40:b5:0d:db:0d:73: 3e:95:09:de:57:9c:02:d1:d8:d0:ad:fc:61:59:59: 4d:3a:6f:3f:96:55:61:1e:af:7a:5f:88:00:43:53: 23:37:c0:7e:20:90:da:65:32:d8:90:4d:59:15:14: e5:2f:de:8d:4f:f4:cc:6a:ca:e5:b0:54:34:1c:fb: 79:d3:6b:b9:ac:f0:c5:67:71:b6:f2:3c:f6:97:1e: ff:23:5e:6e:c6:9a:46:77:ac:09:97:5e:d7:e9:c0: 7c:63:22:74:17:91:84:e9:a1:f9:a8:2d:54:54:0b: cd:de:bf:3d:2a:02:7a:32:f1:51:39:7d:b6:a6:34: ea:df:ed:d0:7b:f2:7f:36:af:24:c9:37:fe:f5:33: d6:a9:9f:b5:e7:c0:a7:e4:49:fb:87:69:e2:bb:f2: 1c:a2:e4:c5:ff:5e:51:eb:c9:19:ee:77:b2:b8:53: e8:4b:06:44:a0:e4:74:74:07:fa:c1:e4:50:a9:aa: 70:36:f4:c4:ea:3c:db:67:12:b0:13:ac:fa:ae:e3: 18:ee:8b:78:0b:35:fa:13:a9:04:52:d5:5d:d7:f0: 9c:1e:65:40:af:9e:b0:9e:b0:0b:3f:40:6b:b3:aa: 42:7d:e7:c7:ae:1b:78:5a:83:fe:c5:a9:a0:1b:10: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D0:7E:BE:05:79:1D:F9:FB:A7:11:B1:14:25:BD:9A:4B:55:AE:EB X509v3 Authority Key Identifier: keyid:AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:20:bd:1f:00:11:81:96:0d:5c:fd:f7:b6:d0:60:88:e7:3d: 93:96:f3:66:ea:4c:96:6e:f3:99:83:9f:8b:e7:1b:a1:f4:67: fc:a9:19:57:8c:b4:43:5b:e6:39:44:2f:1b:d0:4a:c3:5e:c3: 0b:57:78:ec:3b:5f:02:58:8a:86:5b:be:94:cf:3d:a2:a3:3f: f2:77:ec:29:88:50:87:30:bd:fe:c6:be:57:a0:ec:26:3c:7b: 72:04:a4:33:7e:53:e2:0c:cf:39:10:fa:fc:55:32:05:79:95: 93:6f:81:b2:e4:a0:5a:e0:93:ce:32:11:56:66:16:0b:73:dc: b8:52:f7:4a:cc:fb:be:9a:cf:cc:b0:7b:c1:a2:4a:a3:a4:d6: ce:82:e1:34:3d:8f:3d:65:e9:c2:b6:8e:b4:6b:2e:78:32:91: 12:16:86:15:3c:c9:14:dd:a4:d2:36:15:2d:79:01:7b:c6:3f: 46:22:79:41:9a:65:1f:0c:74:91:1a:1f:63:eb:21:54:ff:16: 3c:89:86:91:13:fd:26:4d:48:07:c1:6f:cc:27:58:4e:e7:6c: e9:15:21:7d:18:2f:0c:c5:b0:af:0b:46:3b:81:b0:62:6a:af: 6c:0d:ed:64:4b:72:70:b7:87:ed:8a:55:c9:be:ed:f7:aa:ce: 77:f0:85:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqr4mzB2Ex8ew1rSDecXWFcVyBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5 Q0I1QkQ1NzAeFw0yNjA3MjMyMjQyNDJaFw0yNjA3MjUwMDIyNDJaMDMxMTAvBgNV BAMTKDM4RDA3RUJFMDU3OTFERjlGQkE3MTFCMTE0MjVCRDlBNEI1NUFFRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhOKHTgA7KqUC1DdsNcz6VCd5X nALR2NCt/GFZWU06bz+WVWEer3pfiABDUyM3wH4gkNplMtiQTVkVFOUv3o1P9Mxq yuWwVDQc+3nTa7ms8MVncbbyPPaXHv8jXm7GmkZ3rAmXXtfpwHxjInQXkYTpofmo LVRUC83evz0qAnoy8VE5fbamNOrf7dB78n82ryTJN/71M9apn7XnwKfkSfuHaeK7 8hyi5MX/XlHryRnud7K4U+hLBkSg5HR0B/rB5FCpqnA29MTqPNtnErATrPqu4xju i3gLNfoTqQRS1V3X8JweZUCvnrCesAs/QGuzqkJ958euG3hag/7FqaAbEG1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUONB+vgV5Hfn7pxGxFCW9mktVruswHwYDVR0j BBgwFoAUr2YQDAfHJBYFP5RLlnUJzpy1vVcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYzFiYjktNDVmNi00NjY3LWIxOTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMw N0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5Q0I1QkQ1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjY2MTAwQzA3QzcyNDE2MDUzRjk0NEI5Njc1MDlDRTlDQjVC RDU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5 Q0U5Q0I1QkQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4gvR8AEYGWDVz997bQYIjnPZOW82bqTJZu 85mDn4vnG6H0Z/ypGVeMtENb5jlELxvQSsNewwtXeOw7XwJYioZbvpTPPaKjP/J3 7CmIUIcwvf7Gvleg7CY8e3IEpDN+U+IMzzkQ+vxVMgV5lZNvgbLkoFrgk84yEVZm Fgtz3LhS90rM+76az8ywe8GiSqOk1s6C4TQ9jz1l6cK2jrRrLngykRIWhhU8yRTd pNI2FS15AXvGP0YieUGaZR8MdJEaH2PrIVT/FjyJhpET/SZNSAfBb8wnWE7nbOkV IX0YLwzFsK8LRjuBsGJqr2wN7WRLcnC3h+2KVcm+7feqznfwhZY= -----END CERTIFICATE-----Generated at Fri Jul 24 01:47:04 2026 by rpki-client