$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft File: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft (raw, json) Hash identifier: G/EMnprkNdC+pTPqvT95D9jjM3Ox55bxpW2cSwb/O7M= Subject key identifier: 59:29:0D:D6:AD:D8:F6:56:BC:F5:82:CF:E0:0D:8A:E0:63:DA:F4:83 Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F Certificate issuer: /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Certificate serial: 7D7AB9DE25C5F07E916BF943A718A15717FCFB51 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:41:28 +0000 Manifest this update: Thu 23 Jul 2026 21:36:28 +0000 Manifest next update: Fri 24 Jul 2026 22:20:28 +0000 Files and hashes: 1: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl (hash: tElbmfNDVZisyaqK+K+PhY2SrEwixWJbd06tr6uzwu8=) 2: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: e2uAqZhEI4sthRpgwRvzeAum7dq3RtxpLsp3efzH3Ks=) 3: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: r+jR1/p2ThsRDYRBZVdSZRsZB3W9lST2xfLZ/KbiEB8=) 4: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: zgZkOJSYpMwgECdH+bRBUbnyYSMNnazg9GbYpqDCf/E=) 5: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: bFTUf+z8L70TAAysx8eki8ep4WMyeqIA6kGU4zCgxhQ=) 6: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: OEHIL+0AeLTQdTnJq21EamkWU5d8RiSPVYNXIxcSpyg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7a:b9:de:25:c5:f0:7e:91:6b:f9:43:a7:18:a1:57:17:fc:fb:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Validity Not Before: Jul 23 21:36:28 2026 GMT Not After : Jul 24 22:20:28 2026 GMT Subject: CN=59290DD6ADD8F656BCF582CFE00D8AE063DAF483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a9:be:47:52:74:c8:16:93:bd:85:7c:f7:07: 0e:1f:11:28:b9:bc:41:36:99:12:82:a0:e0:3b:23: 9c:ce:fa:ed:f2:3b:33:ec:26:f9:93:46:3f:89:32: a9:60:08:30:df:d4:88:8a:3c:3b:5d:1c:f5:27:2b: a3:e1:28:fb:0c:7a:ca:cd:1e:96:ae:55:b4:09:22: 18:ca:33:f4:5a:f6:17:4c:14:aa:9e:f3:72:52:62: 49:5c:69:5e:72:95:85:c1:00:b9:71:46:c4:4a:98: 32:f3:28:04:c1:b0:f0:ec:5e:00:3a:56:3d:72:fb: ec:9b:be:e2:96:fc:1f:e7:72:cd:ae:22:57:fe:45: 7b:23:63:81:8a:f6:22:48:17:f4:4e:f9:c3:27:0f: 49:52:4e:ee:16:96:bf:f9:05:ea:ec:5d:91:c3:45: cb:af:f5:67:83:28:53:52:42:ff:3f:fc:3f:f9:5b: a6:a4:b8:8d:a3:6b:e7:4a:80:6c:f9:2c:b8:6e:a7: 7e:95:f9:5b:d5:8e:79:5e:ad:eb:1c:a3:f1:61:1b: 74:4f:56:3d:bb:e2:de:4d:ab:72:c4:80:9e:df:d9: 57:20:67:b2:97:46:85:22:3d:20:98:36:43:5f:be: 30:2e:a0:05:13:fc:b5:02:e4:b6:09:35:11:4b:df: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:29:0D:D6:AD:D8:F6:56:BC:F5:82:CF:E0:0D:8A:E0:63:DA:F4:83 X509v3 Authority Key Identifier: keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a0:31:59:fc:b2:38:fe:6a:18:bc:2e:b6:bf:bc:ff:d0:f9: bd:c5:32:31:c1:eb:31:be:eb:eb:73:8b:b2:ad:c3:1b:05:06: 39:e8:57:01:0b:ba:f2:8f:9f:b7:d2:5a:5e:58:58:09:e1:74: 48:e0:01:c7:23:74:21:c2:0d:c7:1c:f7:4e:6f:cf:d7:ff:31: d9:6e:5f:70:fa:bf:b2:6d:c9:8c:6a:97:cf:c9:11:da:18:6b: 8e:96:87:72:f8:c2:b2:9c:4d:e4:c8:2a:fc:29:b3:b3:2b:b5: d6:ad:72:e9:f3:47:c5:b0:5a:21:68:fc:7f:5f:ab:36:f6:60: 66:a3:05:68:7d:d9:75:5b:a7:f1:74:0a:60:34:9d:34:fa:79: 6a:61:83:c7:e7:4a:ea:21:d4:10:d7:5e:1d:6b:0b:11:aa:ba: b5:34:4a:98:93:96:a7:11:9d:2e:c8:4c:8d:8d:29:bb:23:86: e1:16:18:e3:b8:4f:6d:c0:df:8e:81:09:0c:b9:82:aa:8e:fd: 38:b7:39:68:27:d7:02:1b:d6:19:41:53:e3:f8:73:af:b9:85: c3:7d:41:47:12:7c:01:35:04:b0:60:b3:da:cf:07:92:5d:e9: c5:01:e3:56:f5:a3:06:39:4f:0c:f9:06:79:83:09:29:77:00: 43:cb:c5:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXq53iXF8H6Ra/lDpxihVxf8+1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkx RkMxODk4RjAeFw0yNjA3MjMyMTM2MjhaFw0yNjA3MjQyMjIwMjhaMDMxMTAvBgNV BAMTKDU5MjkwREQ2QUREOEY2NTZCQ0Y1ODJDRkUwMEQ4QUUwNjNEQUY0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIqb5HUnTIFpO9hXz3Bw4fESi5 vEE2mRKCoOA7I5zO+u3yOzPsJvmTRj+JMqlgCDDf1IiKPDtdHPUnK6PhKPsMesrN HpauVbQJIhjKM/Ra9hdMFKqe83JSYklcaV5ylYXBALlxRsRKmDLzKATBsPDsXgA6 Vj1y++ybvuKW/B/ncs2uIlf+RXsjY4GK9iJIF/RO+cMnD0lSTu4Wlr/5BersXZHD Rcuv9WeDKFNSQv8//D/5W6akuI2ja+dKgGz5LLhup36V+VvVjnleresco/FhG3RP Vj274t5Nq3LEgJ7f2VcgZ7KXRoUiPSCYNkNfvjAuoAUT/LUC5LYJNRFL33AxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWSkN1q3Y9la89YLP4A2K4GPa9IMwHwYDVR0j BBgwFoAUGvAW4XWpDRM8WyHfkfYPqR/BiY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU2MzJkOTktMzJiMi00NjdiLWI3ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3 NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkxRkMxODk4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUYwMTZFMTc1QTkwRDEzM0M1QjIxREY5MUY2MEZBOTFGQzE4 OThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBG QTkxRkMxODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMSgMVn8sjj+ahi8Lra/vP/Q+b3FMjHB6zG+ 6+tzi7KtwxsFBjnoVwELuvKPn7fSWl5YWAnhdEjgAccjdCHCDccc905vz9f/Mdlu X3D6v7JtyYxql8/JEdoYa46Wh3L4wrKcTeTIKvwps7MrtdatcunzR8WwWiFo/H9f qzb2YGajBWh92XVbp/F0CmA0nTT6eWphg8fnSuoh1BDXXh1rCxGqurU0SpiTlqcR nS7ITI2NKbsjhuEWGOO4T23A346BCQy5gqqO/Ti3OWgn1wIb1hlBU+P4c6+5hcN9 QUcSfAE1BLBgs9rPB5Jd6cUB41b1owY5Twz5BnmDCSl3AEPLxRc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:05 2026 by rpki-client