$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft File: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft (raw, json) Hash identifier: JbGcc5LAcBpExG5lA5RDWQCrOUUZr42Gkr+5LfZ5We8= Subject key identifier: F6:9E:57:26:FA:82:04:CE:9B:76:0F:51:F8:51:24:7D:5E:89:57:55 Authority key identifier: 1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F Certificate issuer: /CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Certificate serial: 7DC4AAE2744E8606AF7314E30CCDB0D94EE5C707 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft Manifest number: BD Signing time: Sun 20 Sep 2026 13:54:07 +0000 Manifest this update: Sun 20 Sep 2026 13:49:07 +0000 Manifest next update: Mon 21 Sep 2026 16:02:07 +0000 Files and hashes: 1: 1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl (hash: rJbdJWEV58fBugI5JqWuiAgXHmz01n0M1R8lOcqIGYg=) 2: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: e2uAqZhEI4sthRpgwRvzeAum7dq3RtxpLsp3efzH3Ks=) 3: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: r+jR1/p2ThsRDYRBZVdSZRsZB3W9lST2xfLZ/KbiEB8=) 4: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: bFTUf+z8L70TAAysx8eki8ep4WMyeqIA6kGU4zCgxhQ=) 5: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: OEHIL+0AeLTQdTnJq21EamkWU5d8RiSPVYNXIxcSpyg=) 6: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: zgZkOJSYpMwgECdH+bRBUbnyYSMNnazg9GbYpqDCf/E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c4:aa:e2:74:4e:86:06:af:73:14:e3:0c:cd:b0:d9:4e:e5:c7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AF016E175A90D133C5B21DF91F60FA91FC1898F Validity Not Before: Sep 20 13:49:07 2026 GMT Not After : Sep 21 16:02:07 2026 GMT Subject: CN=F69E5726FA8204CE9B760F51F851247D5E895755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:a8:32:1b:a3:c8:24:47:73:25:4c:2c:a4: 00:8e:f7:54:35:36:8f:f5:32:78:11:6e:5e:90:46: 1d:92:29:0a:55:7b:a2:bc:f2:3e:91:ce:4c:32:50: f0:bb:9e:c1:c0:33:36:03:02:c6:73:6e:85:f1:c3: 89:3e:94:dc:03:ab:c8:10:61:b7:f4:3d:78:9e:16: e1:39:39:fb:06:6c:25:58:1d:22:9b:c0:5e:22:22: 38:c6:5c:67:9b:8d:5d:bf:7a:85:c2:ef:10:66:4c: df:49:bd:e0:a1:0f:6b:ef:16:91:70:ce:20:98:43: f6:b8:9e:0f:01:59:7e:0b:34:b1:86:fa:95:2a:01: c6:9d:0c:ca:d8:be:c3:18:eb:36:0c:d7:f0:0a:5f: 53:b9:03:92:65:f7:05:ed:e5:df:ee:5a:23:3c:8d: 84:41:c8:6d:0a:56:7d:cb:4e:99:16:c4:72:e1:63: da:19:0b:5f:a1:6f:71:3d:99:fc:1f:6d:73:40:ca: 41:38:e0:1f:02:3e:92:47:15:5e:3b:37:a9:cb:90: 46:e3:ec:45:51:c0:05:54:11:44:4d:85:51:e9:6c: 94:40:e0:93:2b:c3:2c:02:d6:b0:b4:2a:2c:92:4d: 39:e1:07:4d:1e:09:d0:78:40:e4:e6:72:5f:e0:93: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9E:57:26:FA:82:04:CE:9B:76:0F:51:F8:51:24:7D:5E:89:57:55 X509v3 Authority Key Identifier: keyid:1A:F0:16:E1:75:A9:0D:13:3C:5B:21:DF:91:F6:0F:A9:1F:C1:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1AF016E175A90D133C5B21DF91F60FA91FC1898F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1AF016E175A90D133C5B21DF91F60FA91FC1898F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:45:95:ba:39:35:3f:30:63:24:eb:8b:f9:0d:53:70:48:16: 9f:c2:29:a9:a7:27:06:44:be:60:f7:b8:1a:9f:6a:2c:75:fc: ec:ff:07:11:22:1c:44:43:5d:7e:99:4d:62:7f:92:b4:dc:60: b2:95:f8:ed:d5:0d:55:d0:e7:32:92:89:c1:7d:43:a9:0b:1d: 5e:55:f7:9a:f3:55:e5:b4:bd:ba:66:5e:19:60:e5:cb:3d:2c: c3:a3:9f:ad:7b:93:f4:f5:e6:1d:46:22:85:68:02:74:2e:35: 4d:2c:6f:36:b6:55:99:2c:7e:4f:a0:27:9e:f0:c1:bb:5c:62: 21:9c:57:48:06:fa:a2:18:23:e8:4c:42:97:3c:6c:20:d2:df: 4b:66:1e:a4:f0:e8:b9:24:be:e2:11:09:85:72:69:19:e3:3e: 65:a6:73:3e:d0:2c:f0:24:e5:66:32:b9:70:c1:3c:cb:e3:61: b6:be:c0:f6:72:98:d4:c0:7e:81:5b:7e:ac:e6:d1:38:15:8c: 2c:69:da:2b:58:48:6a:40:dc:b4:ea:d1:e8:da:23:34:43:98: 97:46:63:4b:36:76:be:59:45:1a:06:82:74:a3:d4:1d:7e:55: 2c:98:d6:fc:43:80:15:78:23:c1:28:83:8b:83:a2:39:f3:e5: e7:ff:83:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfcSq4nROhgavcxTjDM2w2U7lxwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkx RkMxODk4RjAeFw0yNjA5MjAxMzQ5MDdaFw0yNjA5MjExNjAyMDdaMDMxMTAvBgNV BAMTKEY2OUU1NzI2RkE4MjA0Q0U5Qjc2MEY1MUY4NTEyNDdENUU4OTU3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0UqgyG6PIJEdzJUwspACO91Q1 No/1MngRbl6QRh2SKQpVe6K88j6RzkwyUPC7nsHAMzYDAsZzboXxw4k+lNwDq8gQ Ybf0PXieFuE5OfsGbCVYHSKbwF4iIjjGXGebjV2/eoXC7xBmTN9JveChD2vvFpFw ziCYQ/a4ng8BWX4LNLGG+pUqAcadDMrYvsMY6zYM1/AKX1O5A5Jl9wXt5d/uWiM8 jYRByG0KVn3LTpkWxHLhY9oZC1+hb3E9mfwfbXNAykE44B8CPpJHFV47N6nLkEbj 7EVRwAVUEURNhVHpbJRA4JMrwywC1rC0KiySTTnhB00eCdB4QOTmcl/gk3bZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9p5XJvqCBM6bdg9R+FEkfV6JV1UwHwYDVR0j BBgwFoAUGvAW4XWpDRM8WyHfkfYPqR/BiY8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjU2MzJkOTktMzJiMi00NjdiLWI3ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3 NUE5MEQxMzNDNUIyMURGOTFGNjBGQTkxRkMxODk4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQUYwMTZFMTc1QTkwRDEzM0M1QjIxREY5MUY2MEZBOTFGQzE4 OThGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUFGMDE2RTE3NUE5MEQxMzNDNUIyMURGOTFGNjBG QTkxRkMxODk4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdFlbo5NT8wYyTri/kNU3BIFp/CKamnJwZE vmD3uBqfaix1/Oz/BxEiHERDXX6ZTWJ/krTcYLKV+O3VDVXQ5zKSicF9Q6kLHV5V 95rzVeW0vbpmXhlg5cs9LMOjn617k/T15h1GIoVoAnQuNU0sbza2VZksfk+gJ57w wbtcYiGcV0gG+qIYI+hMQpc8bCDS30tmHqTw6LkkvuIRCYVyaRnjPmWmcz7QLPAk 5WYyuXDBPMvjYba+wPZymNTAfoFbfqzm0TgVjCxp2itYSGpA3LTq0ejaIzRDmJdG Y0s2dr5ZRRoGgnSj1B1+VSyY1vxDgBV4I8Eog4uDojnz5ef/g4w= -----END CERTIFICATE-----Generated at Sun Sep 20 20:12:07 2026 by rpki-client