$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft File: A1AE56A4554AF816FB70C7D151B60B95E8688866.mft (raw, json) Hash identifier: ChgQ4fAadUXZS/QhQcZkvplZGnGGe52DWg/Yuxn0ASc= Subject key identifier: 72:FB:71:5F:9E:B8:15:93:17:82:67:51:EC:5F:51:83:A6:BA:6C:33 Authority key identifier: A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 Certificate issuer: /CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Certificate serial: 1A4B6BB2B5175E2D6F44B7F2428FB39BE772E224 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:23:21 +0000 Manifest this update: Fri 24 Jul 2026 03:18:21 +0000 Manifest next update: Sat 25 Jul 2026 03:29:21 +0000 Files and hashes: 1: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: GHM2a/obSFnIX4sm3ZBeoTgx7NT/IcpWeeqALQWuCgk=) 2: A1AE56A4554AF816FB70C7D151B60B95E8688866.crl (hash: dcn5Z26A++BU8/um6GLvZuc7xSDXd+iyBCt48dIPBtU=) 3: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 9v0FNIRz7U0Do3bFO3VnUQP4Wx+ba0tNG1r1AH/OeqY=) 4: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: He41ch40XucuK+aPHGiuSTFi+Lk7tn/MpsAXY1hRpGE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4b:6b:b2:b5:17:5e:2d:6f:44:b7:f2:42:8f:b3:9b:e7:72:e2:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1AE56A4554AF816FB70C7D151B60B95E8688866 Validity Not Before: Jul 24 03:18:21 2026 GMT Not After : Jul 25 03:29:21 2026 GMT Subject: CN=72FB715F9EB8159317826751EC5F5183A6BA6C33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:a8:37:d6:56:8d:d2:ef:d9:33:b7:68:ff: 49:9c:76:6f:65:7d:3f:cd:42:10:0b:5b:59:49:73: 93:96:90:95:08:17:a8:51:c2:68:9f:55:6e:cc:50: 3c:4e:62:79:83:de:57:09:30:c8:9a:fc:6a:70:61: 4e:a2:b4:64:d0:f2:d0:0a:6a:57:60:5c:3a:4b:9c: 8a:c8:64:b8:44:b6:b9:eb:5e:e8:9d:6b:86:d0:1f: 7f:ac:b9:00:ea:1b:9b:e7:b5:03:c1:d9:e6:de:f0: 9c:f3:b5:4c:69:78:a6:95:da:30:c9:3f:52:77:c6: 39:7f:55:24:34:d3:e0:41:54:33:8e:bd:fd:44:2d: 00:32:b0:c1:ec:7c:be:cb:b9:fd:ae:41:d6:26:e5: cf:3e:f7:9d:25:fc:39:44:8d:c1:d8:58:95:6e:42: 8b:fc:5e:34:11:4f:75:2c:17:2e:a6:2c:c9:ab:c5: 9e:5a:fb:64:16:f2:f8:dd:15:fc:d9:a2:40:ec:e5: 08:e3:1c:2c:fd:53:82:ef:70:78:31:2e:8d:9e:9e: e3:ec:35:ca:7c:53:82:7e:08:3d:a4:0e:ba:2d:06: 2b:b2:ee:8f:04:fd:5f:56:54:da:f4:ba:63:25:c2: 52:df:ca:56:b1:dd:ed:5e:b5:e3:37:f3:96:13:1b: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FB:71:5F:9E:B8:15:93:17:82:67:51:EC:5F:51:83:A6:BA:6C:33 X509v3 Authority Key Identifier: keyid:A1:AE:56:A4:55:4A:F8:16:FB:70:C7:D1:51:B6:0B:95:E8:68:88:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1AE56A4554AF816FB70C7D151B60B95E8688866.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/A1AE56A4554AF816FB70C7D151B60B95E8688866.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:bf:07:73:c6:46:80:27:4f:99:8b:27:de:d5:1c:af:19:e7: 4d:32:f7:ad:68:22:a3:a6:23:bb:74:81:f6:b1:ad:d0:78:11: 7f:b4:28:fd:46:ec:dd:1b:39:eb:d6:a6:0d:ed:3a:b9:aa:44: da:75:2e:a2:2b:0a:22:82:ce:d8:70:39:54:da:f0:b6:ba:60: ce:82:31:4b:8b:ea:a1:20:d8:36:03:89:6b:a7:ba:30:22:28: 16:80:84:11:9d:02:11:2c:32:ae:53:be:8e:16:66:a7:4f:e3: 1f:ba:12:69:f3:fd:d1:d1:d9:d9:fa:a2:ff:a5:5c:d2:1a:4c: 56:01:b1:45:81:73:39:80:fe:d6:25:fa:ca:fb:6b:e3:fa:3e: 56:b6:b4:02:0e:4f:30:c3:17:c7:2e:94:cf:50:7f:63:c8:68: 85:60:6b:a6:50:c1:a5:33:5b:02:4f:01:17:17:3e:4f:6b:e6: 14:a1:39:f1:3c:6d:ca:7f:c3:b9:ba:a8:65:f4:3f:ed:e3:06: 18:bc:9a:4a:b4:f1:ab:05:a6:2c:51:40:08:e9:de:07:7a:74: 45:50:42:40:16:06:11:72:9f:59:4d:5b:ba:0d:b4:29:90:7e: c2:34:90:a5:e2:cb:6b:e2:76:c7:e7:f7:e1:05:8f:60:b4:ed: a2:2e:4f:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGktrsrUXXi1vRLfyQo+zm+dy4iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVF ODY4ODg2NjAeFw0yNjA3MjQwMzE4MjFaFw0yNjA3MjUwMzI5MjFaMDMxMTAvBgNV BAMTKDcyRkI3MTVGOUVCODE1OTMxNzgyNjc1MUVDNUY1MTgzQTZCQTZDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCesqg31laN0u/ZM7do/0mcdm9l fT/NQhALW1lJc5OWkJUIF6hRwmifVW7MUDxOYnmD3lcJMMia/GpwYU6itGTQ8tAK aldgXDpLnIrIZLhEtrnrXuida4bQH3+suQDqG5vntQPB2ebe8JzztUxpeKaV2jDJ P1J3xjl/VSQ00+BBVDOOvf1ELQAysMHsfL7Luf2uQdYm5c8+950l/DlEjcHYWJVu Qov8XjQRT3UsFy6mLMmrxZ5a+2QW8vjdFfzZokDs5QjjHCz9U4LvcHgxLo2enuPs Ncp8U4J+CD2kDrotBiuy7o8E/V9WVNr0umMlwlLfylax3e1eteM385YTG5wNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcvtxX564FZMXgmdR7F9Rg6a6bDMwHwYDVR0j BBgwFoAUoa5WpFVK+Bb7cMfRUbYLlehoiGYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I1ZDcyZjMtMmRiMi00YmNjLTlmNzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1 NTRBRjgxNkZCNzBDN0QxNTFCNjBCOTVFODY4ODg2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMUFFNTZBNDU1NEFGODE2RkI3MEM3RDE1MUI2MEI5NUU4Njg4 ODY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvQTFBRTU2QTQ1NTRBRjgxNkZCNzBDN0QxNTFCNjBC OTVFODY4ODg2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2/B3PGRoAnT5mLJ97VHK8Z500y961oIqOm I7t0gfaxrdB4EX+0KP1G7N0bOevWpg3tOrmqRNp1LqIrCiKCzthwOVTa8La6YM6C MUuL6qEg2DYDiWunujAiKBaAhBGdAhEsMq5Tvo4WZqdP4x+6Emnz/dHR2dn6ov+l XNIaTFYBsUWBczmA/tYl+sr7a+P6Pla2tAIOTzDDF8culM9Qf2PIaIVga6ZQwaUz WwJPARcXPk9r5hShOfE8bcp/w7m6qGX0P+3jBhi8mkq08asFpixRQAjp3gd6dEVQ QkAWBhFyn1lNW7oNtCmQfsI0kKXiy2vidsfn9+EFj2C07aIuTwI= -----END CERTIFICATE-----Generated at Fri Jul 24 11:56:15 2026 by rpki-client