$ rpki-client -vvf rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft File: AF66100C07C72416053F944B967509CE9CB5BD57.mft (raw, json) Hash identifier: +aqfvW38j5oocXD3n9rv0rH5tX2sGuNz2Vk3rGJOo/8= Subject key identifier: 81:B6:B7:1E:3B:D4:6F:A6:08:DB:F7:90:D2:9A:DE:28:A0:1D:8E:55 Authority key identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 Certificate issuer: /CN=AF66100C07C72416053F944B967509CE9CB5BD57 Certificate serial: 1FC5D23F333FED7B653016864349ABA42E635603 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:42:40 +0000 Manifest this update: Tue 12 May 2026 17:37:40 +0000 Manifest next update: Wed 13 May 2026 19:14:40 +0000 Files and hashes: 1: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: ikUXpc34e4DmsIJzMJM3Qb8I/+cnOqhHLXKzsPXN57I=) 2: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: e5/61qyIWwgI66mDFz4ykNf/vzBfJVkF6ipuSKXTKDA=) 3: AF66100C07C72416053F944B967509CE9CB5BD57.crl (hash: sA6m9P1fhEEJiK18/8MogGTcMhS05rFGSkwVULmSBP4=) 4: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: buno2xHiOqx8y/mt/ACsj7ZEe8dz2IpeqPkmLCji+Pw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:c5:d2:3f:33:3f:ed:7b:65:30:16:86:43:49:ab:a4:2e:63:56:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF66100C07C72416053F944B967509CE9CB5BD57 Validity Not Before: May 12 17:37:40 2026 GMT Not After : May 13 19:14:40 2026 GMT Subject: CN=81B6B71E3BD46FA608DBF790D29ADE28A01D8E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:a3:39:89:e3:9a:2a:9e:17:1d:29:cb:1b: 99:09:55:05:b2:ba:5f:68:10:41:39:fb:c4:b9:97: e8:59:76:1a:75:1f:fb:a0:0f:e6:cb:4a:bc:40:0f: f2:65:e3:b9:66:8c:de:93:27:b1:54:b9:71:ee:f7: 4f:00:22:2c:d7:78:17:90:a9:a9:69:9d:9d:9c:fe: 06:93:cc:63:70:6e:b6:73:f4:90:2b:6e:fb:1a:9b: 6a:02:7b:a0:ce:ae:96:42:00:78:a4:24:f8:0d:a2: d6:60:9d:b6:6e:27:84:e9:22:79:44:bd:04:03:19: 9f:e0:81:50:6e:bb:54:c4:5b:e3:f4:d4:2b:4b:33: 4f:ac:ef:82:b7:8b:3b:a1:e7:0e:9a:61:a1:35:12: 86:a8:c0:f7:0c:c4:c5:c1:da:3d:e3:36:38:f0:98: 94:07:27:d8:67:2e:fe:0b:90:b6:77:9e:ad:56:b7: c1:2a:81:22:73:cd:e2:f3:3c:56:77:fb:5f:21:7b: 23:f8:85:37:a1:ea:4b:0b:54:e4:78:82:cd:01:e6: db:4b:fa:a8:ee:97:77:f2:e4:0b:c2:b6:be:0e:a7: be:c6:9c:39:74:6f:5f:68:a4:c0:cf:37:e0:7a:06: 5a:9b:82:05:dd:01:02:ee:fd:4b:b9:3b:ad:08:5f: 90:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B6:B7:1E:3B:D4:6F:A6:08:DB:F7:90:D2:9A:DE:28:A0:1D:8E:55 X509v3 Authority Key Identifier: keyid:AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:15:df:f6:a8:df:c9:2a:ec:7d:42:53:a3:7c:9f:c4:d2:cd: b2:f0:a4:08:94:4e:b8:00:89:0a:2d:fc:93:21:5a:c5:77:a6: c8:19:41:18:13:7d:2a:5c:f5:1d:a9:6a:fc:ae:c0:b3:38:2a: 3d:50:79:f1:cb:25:17:d4:b4:d8:cd:0f:54:52:8f:58:df:78: 0c:53:78:ca:48:2b:b6:2a:0b:17:8b:57:d5:84:43:2c:3e:33: b9:5b:52:cd:53:fd:83:6f:e9:41:73:43:65:76:dc:b9:fd:1e: cd:60:61:4e:70:87:04:27:79:12:ee:ca:67:0f:00:42:f1:57: 21:e0:99:57:9c:b1:4e:47:b2:60:04:5b:d8:40:9d:87:9a:6e: eb:f4:9e:20:9a:6f:20:3c:99:95:69:08:a9:a8:a4:43:a2:47: 6a:6b:3d:7a:d7:62:1e:ed:44:52:52:5f:a8:be:e3:fc:50:07: 8b:2c:c7:f4:4e:ab:1f:22:36:e9:a9:ca:45:40:a0:f4:10:a7: c4:44:9a:23:2f:0d:8d:0d:6b:75:49:5b:a9:f7:46:cd:3f:dc: ed:f7:d4:d9:13:3a:f1:d3:b1:82:29:2e:98:f3:c9:76:73:2e: c3:99:f7:7d:0e:4c:18:22:0c:c1:1f:4d:bb:e9:ba:d8:be:c7: 38:6e:91:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8XSPzM/7XtlMBaGQ0mrpC5jVgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5 Q0I1QkQ1NzAeFw0yNjA1MTIxNzM3NDBaFw0yNjA1MTMxOTE0NDBaMDMxMTAvBgNV BAMTKDgxQjZCNzFFM0JENDZGQTYwOERCRjc5MEQyOUFERTI4QTAxRDhFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCek6M5ieOaKp4XHSnLG5kJVQWy ul9oEEE5+8S5l+hZdhp1H/ugD+bLSrxAD/Jl47lmjN6TJ7FUuXHu908AIizXeBeQ qalpnZ2c/gaTzGNwbrZz9JArbvsam2oCe6DOrpZCAHikJPgNotZgnbZuJ4TpInlE vQQDGZ/ggVBuu1TEW+P01CtLM0+s74K3izuh5w6aYaE1EoaowPcMxMXB2j3jNjjw mJQHJ9hnLv4LkLZ3nq1Wt8EqgSJzzeLzPFZ3+18heyP4hTeh6ksLVOR4gs0B5ttL +qjul3fy5AvCtr4Op77GnDl0b19opMDPN+B6BlqbggXdAQLu/Uu5O60IX5B7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgba3HjvUb6YI2/eQ0preKKAdjlUwHwYDVR0j BBgwFoAUr2YQDAfHJBYFP5RLlnUJzpy1vVcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYzFiYjktNDVmNi00NjY3LWIxOTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMw N0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5Q0I1QkQ1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjY2MTAwQzA3QzcyNDE2MDUzRjk0NEI5Njc1MDlDRTlDQjVC RDU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5 Q0U5Q0I1QkQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMV3/ao38kq7H1CU6N8n8TSzbLwpAiUTrgA iQot/JMhWsV3psgZQRgTfSpc9R2pavyuwLM4Kj1QefHLJRfUtNjND1RSj1jfeAxT eMpIK7YqCxeLV9WEQyw+M7lbUs1T/YNv6UFzQ2V23Ln9Hs1gYU5whwQneRLuymcP AELxVyHgmVecsU5HsmAEW9hAnYeabuv0niCabyA8mZVpCKmopEOiR2prPXrXYh7t RFJSX6i+4/xQB4ssx/ROqx8iNumpykVAoPQQp8REmiMvDY0Na3VJW6n3Rs0/3O33 1NkTOvHTsYIpLpjzyXZzLsOZ930OTBgiDMEfTbvputi+xzhukRQ= -----END CERTIFICATE-----Generated at Wed May 13 04:16:34 2026 by rpki-client