$ rpki-client -vvf rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft File: AF66100C07C72416053F944B967509CE9CB5BD57.mft (raw, json) Hash identifier: QmmngDpg6mQ7FKAdgCXNhBlryn/ZlBJTn3oTGyrNfdY= Subject key identifier: D4:91:CA:C3:D3:74:9E:60:1B:5C:56:AE:67:41:3B:3C:AC:76:CA:3A Authority key identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 Certificate issuer: /CN=AF66100C07C72416053F944B967509CE9CB5BD57 Certificate serial: BB2656F23C29CAE8F0A4BE6DEBF430B1F33C80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:25:40 +0000 Manifest this update: Wed 17 Jun 2026 02:20:40 +0000 Manifest next update: Thu 18 Jun 2026 04:22:40 +0000 Files and hashes: 1: AF66100C07C72416053F944B967509CE9CB5BD57.crl (hash: b7Lwn9t/bc20a/sC4f+5L/xPIvYNjvr+6fS3p2W3bAY=) 2: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: e5/61qyIWwgI66mDFz4ykNf/vzBfJVkF6ipuSKXTKDA=) 3: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: buno2xHiOqx8y/mt/ACsj7ZEe8dz2IpeqPkmLCji+Pw=) 4: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: ikUXpc34e4DmsIJzMJM3Qb8I/+cnOqhHLXKzsPXN57I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bb:26:56:f2:3c:29:ca:e8:f0:a4:be:6d:eb:f4:30:b1:f3:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF66100C07C72416053F944B967509CE9CB5BD57 Validity Not Before: Jun 17 02:20:40 2026 GMT Not After : Jun 18 04:22:40 2026 GMT Subject: CN=D491CAC3D3749E601B5C56AE67413B3CAC76CA3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:4f:49:83:14:82:18:7f:63:95:58:e6:7a: f6:4d:a8:68:d9:55:e8:c0:bb:22:3a:73:86:a2:df: f8:5b:99:5e:e2:fe:36:58:1f:85:8f:9f:7e:93:79: b4:a2:ab:73:da:d2:41:23:02:b6:8d:75:8f:6a:67: af:c3:a2:c2:9c:bc:bb:ec:8c:fc:70:7b:a7:37:7e: 68:1a:0d:a3:b5:f9:f7:86:f8:72:3c:69:fb:e1:b3: cf:7a:ad:04:bc:c2:bc:bd:0c:6e:d0:5d:eb:48:ab: 71:88:e5:0b:de:b3:81:cd:63:b2:15:24:b4:8a:63: 85:9a:03:05:3f:9b:2f:b2:4e:88:99:e9:a8:9b:ab: 86:70:bf:ee:bb:01:05:69:a8:4f:e2:47:4f:6b:85: 31:b8:bc:b4:07:f0:3e:9b:ba:01:0e:26:0f:71:fc: 89:ff:34:1a:65:82:3e:13:59:15:ec:aa:65:1c:04: da:8e:ca:25:41:e5:45:a8:f9:79:79:72:7a:cb:2a: ed:4b:5e:0a:b3:86:16:e0:87:02:f7:c6:a3:b4:4c: 4c:39:6f:d1:6b:26:ba:ff:85:51:c3:79:1f:3c:77: 25:da:cc:a6:24:5a:83:d7:6b:17:38:10:64:55:e1: 07:87:32:f9:e4:27:c5:a2:92:a9:3d:7d:17:d2:c5: 03:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:91:CA:C3:D3:74:9E:60:1B:5C:56:AE:67:41:3B:3C:AC:76:CA:3A X509v3 Authority Key Identifier: keyid:AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:77:17:e3:fc:89:6f:18:e3:61:0d:8a:08:e9:aa:a4:c0:d0: 47:a6:65:ad:30:7a:0d:bb:62:a5:54:84:4a:5d:53:93:ec:4d: f7:17:1b:33:72:1a:fa:cc:f4:1f:a5:89:da:fe:06:bc:ff:c0: 9c:14:8a:29:16:96:99:e1:fa:7d:54:df:f8:0d:76:38:dd:ef: f0:43:15:cb:d8:1d:f3:da:b4:ee:8a:0e:aa:05:6a:7f:a1:b7: 4d:d4:e4:00:d6:2b:61:3b:fa:53:55:dc:9f:74:17:75:48:88: e3:1a:4f:cf:ca:0b:f8:73:c1:4f:f6:70:cc:b8:38:f8:1a:46: d4:c7:e9:97:69:47:56:78:92:27:18:30:c9:46:58:1c:dd:e8: cd:da:fd:3d:75:d3:c0:d6:f3:49:57:ba:c0:88:e8:59:f2:a9: 7f:96:5d:cf:ef:7e:7c:c1:23:0a:44:b2:b2:80:b1:56:f4:7b: 76:4c:cc:9e:08:9a:73:40:8b:d9:82:77:93:f6:ad:40:6b:ab: 03:b2:cb:09:c1:38:19:59:47:77:d8:52:5d:1c:9a:9c:ef:71: 0d:65:85:78:38:55:12:7d:80:67:0e:22:0e:ee:66:7c:73:bc: 73:94:b9:98:db:7f:8a:e1:f1:1e:91:57:6b:93:84:91:03:a8: ba:1d:da:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUALsmVvI8Kcro8KS+bev0MLHzPIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5 Q0I1QkQ1NzAeFw0yNjA2MTcwMjIwNDBaFw0yNjA2MTgwNDIyNDBaMDMxMTAvBgNV BAMTKEQ0OTFDQUMzRDM3NDlFNjAxQjVDNTZBRTY3NDEzQjNDQUM3NkNBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkU9JgxSCGH9jlVjmevZNqGjZ VejAuyI6c4ai3/hbmV7i/jZYH4WPn36TebSiq3Pa0kEjAraNdY9qZ6/DosKcvLvs jPxwe6c3fmgaDaO1+feG+HI8afvhs896rQS8wry9DG7QXetIq3GI5Qves4HNY7IV JLSKY4WaAwU/my+yToiZ6aibq4Zwv+67AQVpqE/iR09rhTG4vLQH8D6bugEOJg9x /In/NBplgj4TWRXsqmUcBNqOyiVB5UWo+Xl5cnrLKu1LXgqzhhbghwL3xqO0TEw5 b9FrJrr/hVHDeR88dyXazKYkWoPXaxc4EGRV4QeHMvnkJ8Wikqk9fRfSxQOvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1JHKw9N0nmAbXFauZ0E7PKx2yjowHwYDVR0j BBgwFoAUr2YQDAfHJBYFP5RLlnUJzpy1vVcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYzFiYjktNDVmNi00NjY3LWIxOTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMw N0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5Q0I1QkQ1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjY2MTAwQzA3QzcyNDE2MDUzRjk0NEI5Njc1MDlDRTlDQjVC RDU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5 Q0U5Q0I1QkQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEl3F+P8iW8Y42ENigjpqqTA0EemZa0weg27 YqVUhEpdU5PsTfcXGzNyGvrM9B+lidr+Brz/wJwUiikWlpnh+n1U3/gNdjjd7/BD FcvYHfPatO6KDqoFan+ht03U5ADWK2E7+lNV3J90F3VIiOMaT8/KC/hzwU/2cMy4 OPgaRtTH6ZdpR1Z4kicYMMlGWBzd6M3a/T1108DW80lXusCI6FnyqX+WXc/vfnzB IwpEsrKAsVb0e3ZMzJ4ImnNAi9mCd5P2rUBrqwOyywnBOBlZR3fYUl0cmpzvcQ1l hXg4VRJ9gGcOIg7uZnxzvHOUuZjbf4rh8R6RV2uThJEDqLod2r0= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:48 2026 by rpki-client