$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft File: AF2070B1260531FBF069F7AE728D1824E0197266.mft (raw, json) Hash identifier: 2l3OHHQwSpoXjCjuB5/gMQqwjhAjW/955lZqEr3ru+I= Subject key identifier: DB:68:F2:FA:61:C6:2C:3E:E8:22:2E:60:50:A1:25:AD:01:2F:61:99 Authority key identifier: AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 Certificate issuer: /CN=AF2070B1260531FBF069F7AE728D1824E0197266 Certificate serial: 2463069D66B892CC516C643AFB72625DE53626EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 12:40:03 +0000 Manifest this update: Sat 13 Jun 2026 12:35:03 +0000 Manifest next update: Sun 14 Jun 2026 13:47:03 +0000 Files and hashes: 1: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: EKUa1vnxpRzh4ZDuHDfZ4gRqG//+vsL4hxhqb+zan3U=) 2: AF2070B1260531FBF069F7AE728D1824E0197266.crl (hash: ou2MT5rj2YSNdWLjr5nIgtRxpuuA4Zr7EaTMbJsvVkA=) 3: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: Cn5QDaDrkWjZkYo9i7Qsji3m8C/nPclaYaM3+4eiEFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 13:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:63:06:9d:66:b8:92:cc:51:6c:64:3a:fb:72:62:5d:e5:36:26:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2070B1260531FBF069F7AE728D1824E0197266 Validity Not Before: Jun 13 12:35:03 2026 GMT Not After : Jun 14 13:47:03 2026 GMT Subject: CN=DB68F2FA61C62C3EE8222E6050A125AD012F6199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:db:0b:b3:3a:32:0e:6a:fe:5d:a1:68:fe:e1: 7d:c5:59:8e:23:a9:ed:c3:e8:68:bf:d6:2c:b8:50: 45:66:38:38:85:8e:ae:70:2a:f5:3b:98:d4:fe:a1: a3:c1:4d:d5:9e:78:59:3a:ae:d2:f1:a4:be:76:bd: f6:c4:81:fa:ed:c8:3b:d2:64:be:91:29:b6:4b:7f: 98:aa:3e:b6:82:9f:b9:63:80:e7:1d:85:fc:1c:6e: 3f:0c:b1:eb:24:2d:ed:c6:f3:db:68:2b:02:7d:c9: 77:53:88:5d:f1:63:53:70:95:b3:35:70:2c:5e:98: 39:9f:97:0d:08:3c:98:4e:73:87:ea:3d:17:1b:45: f7:b8:da:02:6f:6b:fa:81:58:d7:ce:41:a0:48:0b: ac:39:9c:6c:b4:fa:38:47:3c:3e:6b:58:d3:f0:b0: ec:ce:1f:ed:a2:66:02:3a:06:56:fb:a9:88:5e:82: 72:fd:0d:80:a4:33:36:6d:ae:6a:e2:46:4a:84:b2: 31:bc:04:a8:78:20:9b:9b:32:f4:19:31:c8:8e:fe: 96:53:72:cb:6d:46:87:92:cb:46:c8:3a:5c:63:e2: c2:33:ab:ae:07:ef:3f:aa:7d:96:98:fa:f8:d2:1e: c2:0a:ea:20:d2:01:70:11:b1:97:37:e0:95:70:cd: 35:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:68:F2:FA:61:C6:2C:3E:E8:22:2E:60:50:A1:25:AD:01:2F:61:99 X509v3 Authority Key Identifier: keyid:AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:49:b4:ac:7d:b2:fe:dc:68:44:49:7f:d0:9d:c5:98:ad:4b: 0b:04:fb:3a:5b:69:c4:41:e4:55:71:a6:22:d9:6b:6e:66:ed: ee:f0:63:cd:b9:53:ae:78:5a:2b:ce:23:4e:75:84:b5:bf:fd: 9c:41:b6:07:be:a6:d9:bd:3f:1d:8f:5b:97:48:2d:9a:71:4a: e5:66:32:53:37:44:0d:b3:85:43:4a:74:bf:af:79:1e:8e:21: 56:19:18:c0:49:d6:50:ac:9e:b8:11:52:9c:9e:b2:3e:65:67: 2a:37:7d:44:1a:db:f9:0f:12:b8:6f:5b:e1:d4:4b:43:54:5f: e3:c7:36:20:44:6c:e5:5f:15:2e:d9:25:cb:d8:1d:cd:1e:fa: 96:50:e8:3d:a9:15:24:87:59:9a:16:a5:be:a5:54:ba:c8:57: b3:b4:37:06:6a:e5:38:35:17:63:8f:63:8f:fe:67:28:71:54: 42:87:63:8d:b1:02:c1:d2:fc:40:8d:b3:91:6e:f4:99:ae:2e: 1b:cb:88:fc:f4:a2:c0:d5:9b:18:27:e2:0a:16:77:d3:fd:11: f5:7d:91:f6:71:dc:33:74:95:05:60:97:b9:fd:d6:b3:8a:3c: 30:b8:6c:ff:e4:a6:97:58:2f:85:9e:16:66:bf:1e:10:9d:b4: 7f:2f:79:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGMGnWa4ksxRbGQ6+3JiXeU2JuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRF MDE5NzI2NjAeFw0yNjA2MTMxMjM1MDNaFw0yNjA2MTQxMzQ3MDNaMDMxMTAvBgNV BAMTKERCNjhGMkZBNjFDNjJDM0VFODIyMkU2MDUwQTEyNUFEMDEyRjYxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa2wuzOjIOav5doWj+4X3FWY4j qe3D6Gi/1iy4UEVmODiFjq5wKvU7mNT+oaPBTdWeeFk6rtLxpL52vfbEgfrtyDvS ZL6RKbZLf5iqPraCn7ljgOcdhfwcbj8MseskLe3G89toKwJ9yXdTiF3xY1NwlbM1 cCxemDmflw0IPJhOc4fqPRcbRfe42gJva/qBWNfOQaBIC6w5nGy0+jhHPD5rWNPw sOzOH+2iZgI6Blb7qYhegnL9DYCkMzZtrmriRkqEsjG8BKh4IJubMvQZMciO/pZT csttRoeSy0bIOlxj4sIzq64H7z+qfZaY+vjSHsIK6iDSAXARsZc34JVwzTVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU22jy+mHGLD7oIi5gUKElrQEvYZkwHwYDVR0j BBgwFoAUryBwsSYFMfvwafeuco0YJOAZcmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFmMTVhMWQtNWRhYy00Y2M5LTgxMWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEy NjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRFMDE5NzI2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjIwNzBCMTI2MDUzMUZCRjA2OUY3QUU3MjhEMTgyNEUwMTk3 MjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4 MjRFMDE5NzI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRJtKx9sv7caERJf9CdxZitSwsE+zpbacRB 5FVxpiLZa25m7e7wY825U654WivOI051hLW//ZxBtge+ptm9Px2PW5dILZpxSuVm MlM3RA2zhUNKdL+veR6OIVYZGMBJ1lCsnrgRUpyesj5lZyo3fUQa2/kPErhvW+HU S0NUX+PHNiBEbOVfFS7ZJcvYHc0e+pZQ6D2pFSSHWZoWpb6lVLrIV7O0NwZq5Tg1 F2OPY4/+ZyhxVEKHY42xAsHS/ECNs5Fu9JmuLhvLiPz0osDVmxgn4goWd9P9EfV9 kfZx3DN0lQVgl7n91rOKPDC4bP/kppdYL4WeFma/HhCdtH8vedQ= -----END CERTIFICATE-----Generated at Sat Jun 13 16:09:45 2026 by rpki-client