$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft File: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft (raw, json) Hash identifier: UBZacO3zqoN0+RY5ZCcbFjCTP2dPdHB5dRGmyNOWPiY= Subject key identifier: A4:F9:65:F7:B3:3E:B0:28:CE:87:88:58:03:15:BB:FF:5A:AA:99:CC Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F Certificate issuer: /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Certificate serial: 46B985F51EAC35C987FEBD11EB6AD5BAE32EEF5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:21:51 +0000 Manifest this update: Wed 17 Jun 2026 03:16:51 +0000 Manifest next update: Thu 18 Jun 2026 04:34:51 +0000 Files and hashes: 1: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: r+jR1/p2ThsRDYRBZVdSZRsZB3W9lST2xfLZ/KbiEB8=) 2: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: OEHIL+0AeLTQdTnJq21EamkWU5d8RiSPVYNXIxcSpyg=) 3: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl (hash: anrQOmAevH2hFruROpGUZufX2F+qgkyPFPf7KkNT43A=) 4: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: zgZkOJSYpMwgECdH+bRBUbnyYSMNnazg9GbYpqDCf/E=) 5: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: e2uAqZhEI4sthRpgwRvzeAum7dq3RtxpLsp3efzH3Ks=) 6: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: bFTUf+z8L70TAAysx8eki8ep4WMyeqIA6kGU4zCgxhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b9:85:f5:1e:ac:35:c9:87:fe:bd:11:eb:6a:d5:ba:e3:2e:ef:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Validity Not Before: Jun 17 03:16:51 2026 GMT Not After : Jun 18 04:34:51 2026 GMT Subject: CN=A4F965F7B33EB028CE8788580315BBFF5AAA99CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9d:ac:40:f2:a7:41:7e:70:5d:36:2b:3b:10: 14:b1:9f:18:97:03:79:cc:5e:17:0d:8e:27:48:ec: 11:1d:dd:04:1e:fb:14:ec:38:98:54:86:01:92:7a: aa:6a:1f:f8:7f:8a:f5:d4:0f:2f:de:74:d1:fe:9e: 16:84:c7:37:ff:66:9d:58:4f:08:d1:fe:b0:4c:fe: 50:d4:09:68:e6:3c:ad:77:b5:4c:c4:61:62:02:5a: c5:97:c1:e8:9e:0e:d1:9a:c8:7c:c2:be:d6:7b:80: 09:4e:1d:3b:06:2b:71:fa:f8:ea:5c:c4:a8:f4:10: f2:ec:37:22:91:71:36:a5:dc:94:19:51:45:52:24: cf:8b:f6:f5:4d:7e:ea:04:ad:01:79:05:00:32:92: 52:b5:20:58:fd:80:f6:b4:70:ea:ef:34:87:b0:17: ce:e5:d5:8d:e8:80:6e:97:69:4a:c0:c3:23:40:c1: fa:f0:dc:d2:79:ec:6a:1a:78:cb:48:7b:16:93:85: 9e:b7:85:1e:12:20:e5:20:f2:b1:41:a9:25:9a:64: 69:b3:ed:89:68:7e:d1:08:54:ae:91:de:9d:f7:56: ca:22:eb:6f:4f:a6:b2:4a:44:9f:b2:d8:da:e4:d1: 60:68:04:69:d3:b6:87:3b:1a:6b:2b:27:0d:c5:52: 0a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F9:65:F7:B3:3E:B0:28:CE:87:88:58:03:15:BB:FF:5A:AA:99:CC X509v3 Authority Key Identifier: keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0e:32:fc:c7:bf:ab:d4:42:99:51:35:97:da:fd:d5:bf:95: ec:87:29:16:d5:21:6a:7d:a1:e3:a5:e6:e7:23:69:bf:ab:39: ce:8f:e4:93:83:a5:59:88:0c:17:b3:c2:f9:c2:ff:86:19:54: 94:a8:78:d3:ce:bd:47:11:b7:96:6f:91:11:75:ab:f2:6a:ae: 56:98:01:58:97:8c:d9:00:c0:fd:86:25:b7:61:87:ba:a3:44: e3:3c:de:8e:d6:39:f1:e9:08:c5:c8:6d:d4:be:3d:f6:99:a4: 03:cf:3a:43:7b:56:52:98:d6:fe:b4:c5:d6:78:ba:b0:62:24: 5e:09:fa:af:80:23:ba:83:51:7b:93:92:e5:16:84:0e:f4:80: 29:22:1e:38:5d:ed:c6:59:3c:76:61:c1:b9:77:2a:33:62:84: c1:6b:97:df:5a:1d:e9:f0:9d:57:49:af:9d:ca:e1:70:d5:94: 1d:f5:fc:6a:c4:4c:0f:e1:d5:85:47:ee:f2:1d:09:3b:38:df: f4:46:45:4b:1c:76:1a:15:0e:41:f3:1f:a3:70:a4:83:0c:c1: 34:b0:e7:52:06:63:80:b5:34:35:89:62:97:ec:64:81:1e:65: 94:9d:db:a8:da:bd:57:c8:d6:77:15:8f:61:22:68:13:ac:e9: 84:91:25:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrmF9R6sNcmH/r0R62rVuuMu71swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkx RkMxODk4RjAeFw0yNjA2MTcwMzE2NTFaFw0yNjA2MTgwNDM0NTFaMDMxMTAvBgNV BAMTKEE0Rjk2NUY3QjMzRUIwMjhDRTg3ODg1ODAzMTVCQkZGNUFBQTk5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInaxA8qdBfnBdNis7EBSxnxiX A3nMXhcNjidI7BEd3QQe+xTsOJhUhgGSeqpqH/h/ivXUDy/edNH+nhaExzf/Zp1Y TwjR/rBM/lDUCWjmPK13tUzEYWICWsWXweieDtGayHzCvtZ7gAlOHTsGK3H6+Opc xKj0EPLsNyKRcTal3JQZUUVSJM+L9vVNfuoErQF5BQAyklK1IFj9gPa0cOrvNIew F87l1Y3ogG6XaUrAwyNAwfrw3NJ57GoaeMtIexaThZ63hR4SIOUg8rFBqSWaZGmz 7YloftEIVK6R3p33Vsoi629PprJKRJ+y2Nrk0WBoBGnTtoc7GmsrJw3FUgr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpPll97M+sCjOh4hYAxW7/1qqmcwwHwYDVR0j BBgwFoAUGvAW4XWpDRM8WyHfkfYPqR/BiY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU2MzJkOTktMzJiMi00NjdiLWI3ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3 NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkxRkMxODk4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUYwMTZFMTc1QTkwRDEzM0M1QjIxREY5MUY2MEZBOTFGQzE4 OThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBG QTkxRkMxODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkOMvzHv6vUQplRNZfa/dW/leyHKRbVIWp9 oeOl5ucjab+rOc6P5JODpVmIDBezwvnC/4YZVJSoeNPOvUcRt5ZvkRF1q/JqrlaY AViXjNkAwP2GJbdhh7qjROM83o7WOfHpCMXIbdS+PfaZpAPPOkN7VlKY1v60xdZ4 urBiJF4J+q+AI7qDUXuTkuUWhA70gCkiHjhd7cZZPHZhwbl3KjNihMFrl99aHenw nVdJr53K4XDVlB31/GrETA/h1YVH7vIdCTs43/RGRUscdhoVDkHzH6NwpIMMwTSw 51IGY4C1NDWJYpfsZIEeZZSd26javVfI1ncVj2EiaBOs6YSRJdI= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:21 2026 by rpki-client