$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft File: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft (raw, json) Hash identifier: fY1x+3xE018gS/azZQdUfKyW1+ju3BkhXyy+VGuZFRY= Subject key identifier: 2F:36:2D:96:A4:71:1E:3F:48:86:FD:BA:2A:20:33:11:17:CB:65:F0 Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F Certificate issuer: /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Certificate serial: 5867963B670B7158CF4AD57B15DE2B21FE021813 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:11:54 +0000 Manifest this update: Tue 12 May 2026 17:06:54 +0000 Manifest next update: Wed 13 May 2026 19:14:54 +0000 Files and hashes: 1: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: bFTUf+z8L70TAAysx8eki8ep4WMyeqIA6kGU4zCgxhQ=) 2: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: e2uAqZhEI4sthRpgwRvzeAum7dq3RtxpLsp3efzH3Ks=) 3: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: r+jR1/p2ThsRDYRBZVdSZRsZB3W9lST2xfLZ/KbiEB8=) 4: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl (hash: SqbZ4vvnlxpjOSJMOUQaW25YkHlF5kcBtQNa2hUNXoY=) 5: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: zgZkOJSYpMwgECdH+bRBUbnyYSMNnazg9GbYpqDCf/E=) 6: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: OEHIL+0AeLTQdTnJq21EamkWU5d8RiSPVYNXIxcSpyg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:67:96:3b:67:0b:71:58:cf:4a:d5:7b:15:de:2b:21:fe:02:18:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Validity Not Before: May 12 17:06:54 2026 GMT Not After : May 13 19:14:54 2026 GMT Subject: CN=2F362D96A4711E3F4886FDBA2A20331117CB65F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:6a:91:b9:8d:de:2a:3e:0e:51:a6:cb:a6: e3:88:26:2a:7d:02:ba:c8:26:5d:f8:99:fe:0d:53: 4c:1f:2d:09:b1:aa:d0:af:f0:18:77:98:49:b4:98: bc:95:0e:ef:fe:f8:29:d6:de:28:76:79:71:8a:6f: cf:46:31:6f:e0:5b:8f:09:31:08:c8:76:b1:86:8f: 22:95:b2:a1:a6:83:2e:38:8d:f2:62:c3:f6:3a:8c: 35:31:f3:c7:ce:46:dc:b0:e4:3d:ba:28:e1:d6:41: c7:5f:56:40:e9:90:b4:2c:f8:c5:20:b3:59:fd:51: 98:e2:99:f9:c6:e6:15:48:e2:85:16:d4:91:03:04: 3b:f2:31:82:f8:af:b5:9b:3e:5c:93:27:7f:51:7c: 2d:c7:c3:37:6e:21:d3:da:6a:cd:5a:d6:83:22:df: 01:ec:83:d4:35:94:e5:f2:ce:6b:a5:fc:c1:61:fc: aa:ee:65:88:88:8d:2b:70:67:2c:c1:c9:f2:a0:e7: 18:2d:15:36:94:d2:94:75:73:d2:09:ae:69:5e:cb: 33:c3:bf:ee:30:79:ac:90:7a:59:22:02:da:7f:e3: a5:21:78:7c:cf:2b:cd:cc:b9:83:62:71:ad:a3:05: 24:b6:00:b4:23:4a:f8:7b:21:e9:f9:b7:c4:d1:6c: b5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:36:2D:96:A4:71:1E:3F:48:86:FD:BA:2A:20:33:11:17:CB:65:F0 X509v3 Authority Key Identifier: keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b7:b3:e4:08:ba:57:cf:41:80:6e:58:76:e7:54:59:3c:bc: e0:fd:b9:76:66:92:5a:4c:89:84:31:d6:77:e9:f7:4c:f3:52: e0:8c:d9:cf:0d:e3:00:8c:b6:01:65:51:b3:4b:d8:d7:a6:c5: 63:af:cf:d2:55:91:f6:43:82:42:c7:54:a9:f8:1f:84:ec:c5: 83:00:4d:5d:81:12:d7:a1:67:a9:99:33:11:1a:0c:ad:b8:4e: b5:02:2b:7a:6c:f8:3e:88:e9:aa:ae:93:4d:c4:b7:bb:24:24: de:68:01:93:3a:8c:00:b1:d5:3c:f9:f5:b5:87:35:25:83:0c: 4e:b2:85:5a:01:3d:ff:b0:f8:b7:e8:6a:03:30:15:a5:b0:6a: 44:26:d4:42:b6:f6:b5:5d:fb:53:4d:0d:5b:0d:01:d1:3f:42: bb:23:09:81:a5:0e:23:ff:7d:a4:21:cd:d1:6b:e4:f8:66:68: 5f:90:02:8a:26:c3:44:3e:f7:77:d0:e6:9b:51:f7:c8:72:0e: 8e:3c:f5:3e:fd:83:f4:39:ad:88:77:2a:20:d7:88:f2:cd:56: b8:11:a1:23:58:7f:60:24:ea:80:42:bd:19:27:a3:53:00:8a: a8:9a:7c:a3:ca:31:10:20:18:d6:9a:8d:1c:18:76:de:fd:ca: 37:1c:ea:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWGeWO2cLcVjPStV7Fd4rIf4CGBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkx RkMxODk4RjAeFw0yNjA1MTIxNzA2NTRaFw0yNjA1MTMxOTE0NTRaMDMxMTAvBgNV BAMTKDJGMzYyRDk2QTQ3MTFFM0Y0ODg2RkRCQTJBMjAzMzExMTdDQjY1RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtWqRuY3eKj4OUabLpuOIJip9 ArrIJl34mf4NU0wfLQmxqtCv8Bh3mEm0mLyVDu/++CnW3ih2eXGKb89GMW/gW48J MQjIdrGGjyKVsqGmgy44jfJiw/Y6jDUx88fORtyw5D26KOHWQcdfVkDpkLQs+MUg s1n9UZjimfnG5hVI4oUW1JEDBDvyMYL4r7WbPlyTJ39RfC3HwzduIdPaas1a1oMi 3wHsg9Q1lOXyzmul/MFh/KruZYiIjStwZyzByfKg5xgtFTaU0pR1c9IJrmleyzPD v+4weayQelkiAtp/46UheHzPK83MuYNica2jBSS2ALQjSvh7Ien5t8TRbLXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULzYtlqRxHj9Ihv26KiAzERfLZfAwHwYDVR0j BBgwFoAUGvAW4XWpDRM8WyHfkfYPqR/BiY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU2MzJkOTktMzJiMi00NjdiLWI3ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3 NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkxRkMxODk4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUYwMTZFMTc1QTkwRDEzM0M1QjIxREY5MUY2MEZBOTFGQzE4 OThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBG QTkxRkMxODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALG3s+QIulfPQYBuWHbnVFk8vOD9uXZmklpM iYQx1nfp90zzUuCM2c8N4wCMtgFlUbNL2NemxWOvz9JVkfZDgkLHVKn4H4TsxYMA TV2BEtehZ6mZMxEaDK24TrUCK3ps+D6I6aquk03Et7skJN5oAZM6jACx1Tz59bWH NSWDDE6yhVoBPf+w+LfoagMwFaWwakQm1EK29rVd+1NNDVsNAdE/QrsjCYGlDiP/ faQhzdFr5PhmaF+QAoomw0Q+93fQ5ptR98hyDo489T79g/Q5rYh3KiDXiPLNVrgR oSNYf2Ak6oBCvRkno1MAiqiafKPKMRAgGNaajRwYdt79yjcc6m0= -----END CERTIFICATE-----Generated at Wed May 13 00:31:30 2026 by rpki-client