$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft File: AF66100C07C72416053F944B967509CE9CB5BD57.mft (raw, json) Hash identifier: hQZlnfCvPkzxgDR3uIGxjsv1EPV4sHOSMr6jGSjBDB8= Subject key identifier: 90:CF:C1:28:4D:33:15:06:E8:E7:E1:C2:1D:3D:4D:4C:85:16:53:A2 Authority key identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 Certificate issuer: /CN=AF66100C07C72416053F944B967509CE9CB5BD57 Certificate serial: 4F121A0010C53338C86EF26E7EE9FE238A1C4F7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:58:12 +0000 Manifest this update: Wed 23 Sep 2026 17:53:12 +0000 Manifest next update: Thu 24 Sep 2026 18:21:12 +0000 Files and hashes: 1: AF66100C07C72416053F944B967509CE9CB5BD57.crl (hash: POoUAGwTDao4dYQ6PmpFRLHpMXXDovEEx7eYK324J6U=) 2: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: e5/61qyIWwgI66mDFz4ykNf/vzBfJVkF6ipuSKXTKDA=) 3: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: ikUXpc34e4DmsIJzMJM3Qb8I/+cnOqhHLXKzsPXN57I=) 4: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: buno2xHiOqx8y/mt/ACsj7ZEe8dz2IpeqPkmLCji+Pw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:12:1a:00:10:c5:33:38:c8:6e:f2:6e:7e:e9:fe:23:8a:1c:4f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF66100C07C72416053F944B967509CE9CB5BD57 Validity Not Before: Sep 23 17:53:12 2026 GMT Not After : Sep 24 18:21:12 2026 GMT Subject: CN=90CFC1284D331506E8E7E1C21D3D4D4C851653A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:f2:f5:51:a9:b3:f6:8f:c8:2d:5c:c9:ae: 0b:34:44:a4:0a:b7:ac:96:f6:b6:af:c4:9c:1d:2d: 5d:be:29:c3:64:b7:5e:d2:f0:1a:cf:62:7f:51:d2: f0:7d:fd:75:64:22:30:2f:73:78:12:2a:2e:bf:83: 2f:11:7f:3a:55:48:8f:9f:b4:30:7d:94:7a:5b:91: 2d:ff:a9:f3:21:d2:6f:8b:8b:f3:ef:32:6a:f9:0b: c5:52:8a:66:5b:f7:83:88:4a:43:98:82:f5:47:96: 53:92:e6:a7:aa:0e:c0:8e:e6:bd:ab:86:4d:a2:b2: 94:97:b4:86:73:bf:03:17:f5:90:51:ed:62:09:17: e7:6e:d7:06:9e:53:29:da:53:2f:ae:7c:69:a9:21: 81:f3:44:22:de:7e:b6:e8:41:e9:79:cc:b0:f2:23: 4f:65:57:27:64:70:fe:1d:b9:db:69:e3:2f:5f:c9: d3:a9:33:e8:9a:38:fd:3c:12:d7:d8:bd:c6:06:8a: d1:59:d2:cb:db:5f:b2:80:ee:66:1d:a0:c7:23:57: 8c:a6:df:a3:26:da:d9:a5:6c:65:fe:6e:2d:c0:f3: f7:6f:f8:58:33:b2:1d:55:c1:1f:f9:96:1b:7d:3a: 98:6d:72:04:7b:25:ec:bd:8a:56:7d:2d:fa:cd:df: 27:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CF:C1:28:4D:33:15:06:E8:E7:E1:C2:1D:3D:4D:4C:85:16:53:A2 X509v3 Authority Key Identifier: keyid:AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1f:63:fb:c0:e8:67:f0:ee:ad:a7:b4:f6:1f:bc:69:69:51: 04:1f:b8:c1:20:65:82:7c:73:f5:4d:ff:dc:4c:75:71:8d:19: 1f:d2:ba:2d:7a:74:cb:21:7c:a1:98:32:b3:9d:9a:e8:cd:2a: 99:29:89:29:6c:98:21:28:f3:d6:4e:14:ec:2f:bc:a3:cf:07: 85:5b:d6:f9:f0:18:d4:c7:9f:7f:7c:0f:e9:7f:79:c1:27:ca: 6d:d5:6d:a6:dc:33:cb:ef:86:10:b5:29:f2:97:55:a2:98:51: 6f:4d:5a:96:a7:86:38:6e:f7:a6:28:e1:78:bc:e9:42:be:04: bb:8a:1b:ec:e3:02:66:09:ca:23:12:49:c0:e5:cc:54:6e:f9: ca:91:23:a8:8f:c5:a3:94:3b:9d:fc:75:15:48:b6:1e:b5:a2: 50:22:56:5d:82:9c:18:23:eb:5b:2b:f1:8f:aa:b7:06:d0:d4: 9c:79:c1:be:e2:ac:04:54:f1:fb:19:92:f1:fe:3a:c2:22:97: 1d:0c:91:8a:6a:67:c7:cb:d8:ee:69:32:25:2c:11:f0:a3:6b: 60:c9:ab:44:c5:d6:c2:9c:23:93:1b:ba:a4:b7:fa:39:a5:72: 58:75:76:ea:81:e6:ad:4e:e3:18:60:8a:d8:9d:4d:64:94:8d: f8:32:87:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxIaABDFMzjIbvJufun+I4ocT34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5 Q0I1QkQ1NzAeFw0yNjA5MjMxNzUzMTJaFw0yNjA5MjQxODIxMTJaMDMxMTAvBgNV BAMTKDkwQ0ZDMTI4NEQzMzE1MDZFOEU3RTFDMjFEM0Q0RDRDODUxNjUzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaiPL1Uamz9o/ILVzJrgs0RKQK t6yW9ravxJwdLV2+KcNkt17S8BrPYn9R0vB9/XVkIjAvc3gSKi6/gy8RfzpVSI+f tDB9lHpbkS3/qfMh0m+Li/PvMmr5C8VSimZb94OISkOYgvVHllOS5qeqDsCO5r2r hk2ispSXtIZzvwMX9ZBR7WIJF+du1waeUynaUy+ufGmpIYHzRCLefrboQel5zLDy I09lVydkcP4dudtp4y9fydOpM+iaOP08EtfYvcYGitFZ0svbX7KA7mYdoMcjV4ym 36Mm2tmlbGX+bi3A8/dv+Fgzsh1VwR/5lht9OphtcgR7Jey9ilZ9LfrN3ycvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkM/BKE0zFQbo5+HCHT1NTIUWU6IwHwYDVR0j BBgwFoAUr2YQDAfHJBYFP5RLlnUJzpy1vVcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYzFiYjktNDVmNi00NjY3LWIxOTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMw N0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5Q0I1QkQ1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjY2MTAwQzA3QzcyNDE2MDUzRjk0NEI5Njc1MDlDRTlDQjVC RDU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5 Q0U5Q0I1QkQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwfY/vA6Gfw7q2ntPYfvGlpUQQfuMEgZYJ8 c/VN/9xMdXGNGR/Sui16dMshfKGYMrOdmujNKpkpiSlsmCEo89ZOFOwvvKPPB4Vb 1vnwGNTHn398D+l/ecEnym3VbabcM8vvhhC1KfKXVaKYUW9NWpanhjhu96Yo4Xi8 6UK+BLuKG+zjAmYJyiMSScDlzFRu+cqRI6iPxaOUO538dRVIth61olAiVl2CnBgj 61sr8Y+qtwbQ1Jx5wb7irARU8fsZkvH+OsIilx0MkYpqZ8fL2O5pMiUsEfCja2DJ q0TF1sKcI5MbuqS3+jmlclh1duqB5q1O4xhgitidTWSUjfgyh9k= -----END CERTIFICATE-----Generated at Thu Sep 24 00:31:55 2026 by rpki-client