$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft File: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft (raw, json) Hash identifier: z6nMuNltHuVMRyKgHNlfkTJG8kx4DGxNp7NcAwICpL4= Subject key identifier: 41:C0:B3:68:59:88:E2:4F:71:92:62:D5:80:A4:70:7C:DF:57:64:5C Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F Certificate issuer: /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Certificate serial: 69DDB1FEA9BD6834DF6EFE5124EF33AD9E5618C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:43:04 +0000 Manifest this update: Wed 23 Sep 2026 13:38:04 +0000 Manifest next update: Thu 24 Sep 2026 14:08:04 +0000 Files and hashes: 1: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: zgZkOJSYpMwgECdH+bRBUbnyYSMNnazg9GbYpqDCf/E=) 2: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: e2uAqZhEI4sthRpgwRvzeAum7dq3RtxpLsp3efzH3Ks=) 3: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: bFTUf+z8L70TAAysx8eki8ep4WMyeqIA6kGU4zCgxhQ=) 4: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: OEHIL+0AeLTQdTnJq21EamkWU5d8RiSPVYNXIxcSpyg=) 5: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: r+jR1/p2ThsRDYRBZVdSZRsZB3W9lST2xfLZ/KbiEB8=) 6: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl (hash: czE0rDsqRZmWSSHO2NUCqwPwAYEFfYzi9a9bWddlh8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:dd:b1:fe:a9:bd:68:34:df:6e:fe:51:24:ef:33:ad:9e:56:18:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Validity Not Before: Sep 23 13:38:04 2026 GMT Not After : Sep 24 14:08:04 2026 GMT Subject: CN=41C0B3685988E24F719262D580A4707CDF57645C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:1d:22:50:7a:ca:ee:e4:26:3e:fc:50:4d: 31:dd:54:02:f6:32:cd:a7:b1:ee:0c:94:60:f6:24: e7:ea:94:5a:49:e6:2e:85:56:52:49:03:48:67:14: ce:9c:16:8b:0a:3a:ef:02:59:34:0e:7f:2d:a5:7f: 70:e9:62:82:8e:46:3c:cb:c1:96:0c:00:55:8f:c7: 29:19:a0:ff:bf:2d:d8:79:4d:c5:f3:9d:8f:d3:e3: 73:10:f5:1f:a7:ea:89:b2:a0:94:cd:1f:38:61:ea: b9:f6:90:cc:7c:0f:5d:7b:32:5b:f2:1c:f0:49:96: 0b:21:66:6e:67:33:3d:a2:05:b4:32:d3:cb:5a:b8: 62:cc:17:d1:b5:cf:ff:d1:80:0b:d0:d2:ea:54:a3: f2:78:d0:a6:4e:11:2a:e2:36:38:59:18:f2:bd:6e: 5b:b4:19:2f:98:7a:85:9a:56:41:ab:b5:1b:3c:06: 83:2f:8e:b3:cb:39:cf:33:b9:d4:bc:cd:d6:d3:e6: fe:b0:1c:5a:d4:2d:b6:be:45:dc:9e:99:f6:05:2c: ba:33:58:78:90:27:5c:75:25:83:42:e8:58:6e:c8: e4:fd:83:1b:b0:51:80:f6:7c:16:af:d8:fd:11:28: 11:4c:f8:7a:af:75:99:7c:3c:c0:a7:6a:1a:e4:64: b7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C0:B3:68:59:88:E2:4F:71:92:62:D5:80:A4:70:7C:DF:57:64:5C X509v3 Authority Key Identifier: keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7e:30:65:b4:73:d5:fc:35:66:2c:c7:8c:d5:40:20:5e:e6: 27:6d:0a:90:47:62:d2:f0:a3:a2:36:ec:0e:8e:ca:ae:1e:0f: 2b:dd:66:e7:cc:67:04:12:7a:53:96:8e:f8:cd:d2:81:20:38: 73:e9:5b:60:2f:f4:44:78:06:9a:ab:d7:c8:af:44:c5:75:db: 1a:ed:ad:bd:b0:fc:35:e6:62:9f:b2:53:9d:48:4d:83:45:b6: 3a:9a:a3:a8:f6:35:b8:b9:ce:6d:5e:64:3d:22:fa:fa:dc:15: 7a:c9:ae:a8:e9:10:9b:99:f7:9c:4c:be:10:52:ea:f1:54:6e: 2d:a5:c4:12:b7:77:62:5f:fc:b4:7e:c1:6f:05:43:0f:69:0d: e2:2c:23:f9:60:8f:fe:a8:c0:81:1f:5a:0d:98:af:25:77:28: ec:aa:8a:3e:30:9e:2b:49:35:72:7f:92:99:a5:bc:a2:fa:05: da:ca:6d:91:68:eb:3f:b4:f0:70:cd:43:e4:c2:87:b6:60:b2: 0b:55:f9:f7:b8:c7:b5:8f:ed:09:aa:d7:7d:d0:24:75:e9:cd: d4:8d:e3:7f:46:ee:67:f1:d4:17:d2:df:9d:ce:1e:d3:34:48: 1e:89:13:82:6f:aa:2d:f2:16:7c:c2:b1:e0:99:e4:ad:60:ef: 79:f6:07:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUad2x/qm9aDTfbv5RJO8zrZ5WGMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkx RkMxODk4RjAeFw0yNjA5MjMxMzM4MDRaFw0yNjA5MjQxNDA4MDRaMDMxMTAvBgNV BAMTKDQxQzBCMzY4NTk4OEUyNEY3MTkyNjJENTgwQTQ3MDdDREY1NzY0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMaB0iUHrK7uQmPvxQTTHdVAL2 Ms2nse4MlGD2JOfqlFpJ5i6FVlJJA0hnFM6cFosKOu8CWTQOfy2lf3DpYoKORjzL wZYMAFWPxykZoP+/Ldh5TcXznY/T43MQ9R+n6omyoJTNHzhh6rn2kMx8D117Mlvy HPBJlgshZm5nMz2iBbQy08tauGLMF9G1z//RgAvQ0upUo/J40KZOESriNjhZGPK9 blu0GS+YeoWaVkGrtRs8BoMvjrPLOc8zudS8zdbT5v6wHFrULba+RdyemfYFLLoz WHiQJ1x1JYNC6FhuyOT9gxuwUYD2fBav2P0RKBFM+HqvdZl8PMCnahrkZLdjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQcCzaFmI4k9xkmLVgKRwfN9XZFwwHwYDVR0j BBgwFoAUGvAW4XWpDRM8WyHfkfYPqR/BiY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU2MzJkOTktMzJiMi00NjdiLWI3ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3 NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkxRkMxODk4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUYwMTZFMTc1QTkwRDEzM0M1QjIxREY5MUY2MEZBOTFGQzE4 OThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBG QTkxRkMxODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9+MGW0c9X8NWYsx4zVQCBe5idtCpBHYtLw o6I27A6Oyq4eDyvdZufMZwQSelOWjvjN0oEgOHPpW2Av9ER4Bpqr18ivRMV12xrt rb2w/DXmYp+yU51ITYNFtjqao6j2Nbi5zm1eZD0i+vrcFXrJrqjpEJuZ95xMvhBS 6vFUbi2lxBK3d2Jf/LR+wW8FQw9pDeIsI/lgj/6owIEfWg2YryV3KOyqij4wnitJ NXJ/kpmlvKL6BdrKbZFo6z+08HDNQ+TCh7ZgsgtV+fe4x7WP7Qmq133QJHXpzdSN 439G7mfx1BfS353OHtM0SB6JE4Jvqi3yFnzCseCZ5K1g73n2BzA= -----END CERTIFICATE-----Generated at Wed Sep 23 20:18:21 2026 by rpki-client