$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft File: AF66100C07C72416053F944B967509CE9CB5BD57.mft (raw, json) Hash identifier: DLVjonKFh26zd0KUXsxN07wHHtRgPwyhdrr5qm/K4I4= Subject key identifier: 34:B1:92:FA:10:FB:FA:5B:97:1C:87:0D:9C:87:04:77:2D:32:5D:BB Authority key identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 Certificate issuer: /CN=AF66100C07C72416053F944B967509CE9CB5BD57 Certificate serial: 5B5ED92EE087FA753A9E27364BB1F1A0FBE0EA59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 03:49:58 +0000 Manifest this update: Fri 25 Sep 2026 03:44:58 +0000 Manifest next update: Sat 26 Sep 2026 05:43:58 +0000 Files and hashes: 1: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: ikUXpc34e4DmsIJzMJM3Qb8I/+cnOqhHLXKzsPXN57I=) 2: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: buno2xHiOqx8y/mt/ACsj7ZEe8dz2IpeqPkmLCji+Pw=) 3: AF66100C07C72416053F944B967509CE9CB5BD57.crl (hash: 36kUjgxsip0B88q/UXd3THv6LAPG8QjIbgXOAy7/UeQ=) 4: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: e5/61qyIWwgI66mDFz4ykNf/vzBfJVkF6ipuSKXTKDA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5e:d9:2e:e0:87:fa:75:3a:9e:27:36:4b:b1:f1:a0:fb:e0:ea:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF66100C07C72416053F944B967509CE9CB5BD57 Validity Not Before: Sep 25 03:44:58 2026 GMT Not After : Sep 26 05:43:58 2026 GMT Subject: CN=34B192FA10FBFA5B971C870D9C8704772D325DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:b0:0e:ad:34:6f:56:e9:a2:a7:e4:f7:70: 6c:09:3b:e3:86:8c:1a:82:e1:54:b0:36:86:22:04: fa:76:23:ea:7c:1b:de:e1:b0:91:cc:26:64:61:8b: 3e:92:11:9f:00:5f:11:2d:bc:b6:52:1c:2d:92:19: 1c:0a:0d:5f:df:25:12:92:fd:11:94:be:ca:c7:16: 5c:a1:f2:d1:c4:9d:c8:89:65:72:c1:28:4b:3c:59: 93:ed:ed:3b:36:d3:14:76:75:fc:26:18:f4:31:87: 51:d8:bf:94:49:4b:5d:8c:25:89:db:ea:3e:9d:73: f6:71:ab:0e:7c:ca:e2:3d:b8:30:d3:59:7d:17:e4: 36:d0:8f:fc:e8:ec:8f:c0:58:c0:ea:67:39:8c:5e: e6:17:ca:71:2b:a2:19:9d:61:85:7e:43:da:61:1a: 2c:83:28:59:3a:71:ec:5b:30:75:80:94:5a:18:9d: e5:e2:af:91:0b:53:f6:4c:c0:a4:20:7d:5a:98:99: 67:48:01:92:c8:1c:6a:1b:e0:89:ff:1d:cd:15:d6: 82:08:9e:11:22:ef:05:47:58:99:ce:99:c8:ee:97: 3b:0a:f2:88:51:ec:3e:70:5e:79:17:df:0a:d5:83: 2c:03:52:19:6c:4a:90:e6:d1:45:76:f0:7b:6c:6a: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B1:92:FA:10:FB:FA:5B:97:1C:87:0D:9C:87:04:77:2D:32:5D:BB X509v3 Authority Key Identifier: keyid:AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:0c:7c:e2:0f:45:2c:f6:40:1b:23:47:03:59:a3:0b:f6:8e: 2f:61:79:70:3b:ef:c7:d7:4b:36:88:0a:0e:f2:74:1f:31:27: 34:88:0c:43:6d:14:ff:70:29:16:03:c5:72:2a:87:15:21:95: df:98:fc:fd:22:05:f5:b5:c2:c8:dd:a5:ed:6e:af:43:bb:53: 9c:2c:78:44:ae:ca:ea:45:2e:41:af:c6:4d:56:7c:19:dc:b6: ec:53:dd:fc:de:e5:85:18:0a:3f:b0:0d:d6:75:0b:fb:c1:ae: 03:f4:be:64:e7:24:fc:39:9e:0c:4e:bb:65:20:0c:55:60:75: eb:b7:5e:33:fc:eb:cf:b8:e1:a0:ef:3b:2c:8a:84:eb:f7:c1: 7b:26:dd:56:f3:c6:bb:9e:6a:c4:37:0b:db:cb:3d:9b:61:aa: 27:ff:6f:d4:77:ec:23:c0:e0:31:5b:26:cc:90:3c:55:aa:e2: 31:0d:bb:56:ad:55:19:4c:2b:57:06:4b:8b:f3:b5:ec:a4:7c: aa:f3:6c:3e:90:1b:ab:9c:51:92:18:90:43:bd:e5:c4:f1:47: e5:4d:ee:34:68:3f:ed:32:28:10:5e:9c:74:59:a7:2e:c5:ea: ac:5d:91:5e:9a:37:3d:08:63:ba:53:2a:ce:81:02:21:74:fb: 9e:7c:35:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW17ZLuCH+nU6nic2S7HxoPvg6lkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5 Q0I1QkQ1NzAeFw0yNjA5MjUwMzQ0NThaFw0yNjA5MjYwNTQzNThaMDMxMTAvBgNV BAMTKDM0QjE5MkZBMTBGQkZBNUI5NzFDODcwRDlDODcwNDc3MkQzMjVEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH0bAOrTRvVumip+T3cGwJO+OG jBqC4VSwNoYiBPp2I+p8G97hsJHMJmRhiz6SEZ8AXxEtvLZSHC2SGRwKDV/fJRKS /RGUvsrHFlyh8tHEnciJZXLBKEs8WZPt7Ts20xR2dfwmGPQxh1HYv5RJS12MJYnb 6j6dc/Zxqw58yuI9uDDTWX0X5DbQj/zo7I/AWMDqZzmMXuYXynErohmdYYV+Q9ph GiyDKFk6cexbMHWAlFoYneXir5ELU/ZMwKQgfVqYmWdIAZLIHGob4In/Hc0V1oII nhEi7wVHWJnOmcjulzsK8ohR7D5wXnkX3wrVgywDUhlsSpDm0UV28HtsauGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNLGS+hD7+luXHIcNnIcEdy0yXbswHwYDVR0j BBgwFoAUr2YQDAfHJBYFP5RLlnUJzpy1vVcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYzFiYjktNDVmNi00NjY3LWIxOTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMw N0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5Q0I1QkQ1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjY2MTAwQzA3QzcyNDE2MDUzRjk0NEI5Njc1MDlDRTlDQjVC RDU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5 Q0U5Q0I1QkQ1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgMfOIPRSz2QBsjRwNZowv2ji9heXA778fX SzaICg7ydB8xJzSIDENtFP9wKRYDxXIqhxUhld+Y/P0iBfW1wsjdpe1ur0O7U5ws eESuyupFLkGvxk1WfBnctuxT3fze5YUYCj+wDdZ1C/vBrgP0vmTnJPw5ngxOu2Ug DFVgdeu3XjP868+44aDvOyyKhOv3wXsm3VbzxrueasQ3C9vLPZthqif/b9R37CPA 4DFbJsyQPFWq4jENu1atVRlMK1cGS4vzteykfKrzbD6QG6ucUZIYkEO95cTxR+VN 7jRoP+0yKBBenHRZpy7F6qxdkV6aNz0IY7pTKs6BAiF0+558NVE= -----END CERTIFICATE-----Generated at Fri Sep 25 07:39:57 2026 by rpki-client