$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft File: AF2070B1260531FBF069F7AE728D1824E0197266.mft (raw, json) Hash identifier: OKN4rsNAOdZNIINjYx2CYS5ueoaJ4xGGNkZvy2fuwY8= Subject key identifier: C6:C2:63:0F:4B:7C:10:4D:A1:8D:A8:93:EC:B1:D9:EE:4D:FC:27:31 Authority key identifier: AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 Certificate issuer: /CN=AF2070B1260531FBF069F7AE728D1824E0197266 Certificate serial: 59141DF1063A82179190D32738EC06DF5FACB192 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft Manifest number: BD Signing time: Sun 20 Sep 2026 17:03:00 +0000 Manifest this update: Sun 20 Sep 2026 16:58:00 +0000 Manifest next update: Mon 21 Sep 2026 18:09:00 +0000 Files and hashes: 1: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: EKUa1vnxpRzh4ZDuHDfZ4gRqG//+vsL4hxhqb+zan3U=) 2: AF2070B1260531FBF069F7AE728D1824E0197266.crl (hash: h0DvVTta5h0s5cn1grMxJ/1Ly+yzqEkGDE1ZX+I4Iww=) 3: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: Cn5QDaDrkWjZkYo9i7Qsji3m8C/nPclaYaM3+4eiEFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:14:1d:f1:06:3a:82:17:91:90:d3:27:38:ec:06:df:5f:ac:b1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2070B1260531FBF069F7AE728D1824E0197266 Validity Not Before: Sep 20 16:58:00 2026 GMT Not After : Sep 21 18:09:00 2026 GMT Subject: CN=C6C2630F4B7C104DA18DA893ECB1D9EE4DFC2731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:31:be:12:7a:1d:64:28:3b:41:5a:92:41: 08:0b:66:72:8b:14:26:97:2b:0d:21:74:14:08:d8: 82:89:10:c2:3a:8f:f9:f7:50:fb:c8:da:2e:c2:9d: bb:a6:d0:da:72:0c:3e:72:b0:c8:d7:ff:a5:28:16: 20:32:0b:0f:75:69:c6:b0:21:f4:75:41:3d:05:fa: 41:a5:cb:f5:a9:7d:7e:2a:b9:3d:af:ec:b8:7c:ad: 77:83:6f:90:3a:95:9c:52:4d:f9:3a:85:44:2d:0a: d2:e5:de:16:e2:2b:ce:e9:70:27:df:2c:f0:b4:68: 06:55:1d:ab:f2:f6:05:2b:b1:c3:3c:b2:85:80:ac: 83:80:84:9f:6f:3e:94:b5:32:99:cd:8d:8a:e3:07: a2:15:5c:32:9e:2d:e4:55:b5:b3:a2:9a:d3:2e:ce: f9:fd:11:94:40:c8:86:70:43:55:44:9b:ba:f7:12: c8:74:aa:15:b7:5e:72:6b:e8:de:dc:81:5c:0c:70: 1d:9a:33:41:97:0d:b3:45:15:e8:ae:d8:b8:73:37: a5:00:d7:63:e1:c9:32:d0:19:ce:2c:11:a3:b6:ff: fb:bb:13:87:6a:4b:a5:c6:70:21:1f:01:3c:64:9e: e0:22:c3:fd:2b:86:19:03:e2:58:35:13:73:be:11: 5c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C2:63:0F:4B:7C:10:4D:A1:8D:A8:93:EC:B1:D9:EE:4D:FC:27:31 X509v3 Authority Key Identifier: keyid:AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:f3:4d:bc:cf:2e:16:30:fa:8d:89:9e:ad:64:2a:66:1e:10: cf:e7:4f:44:d2:d0:d8:93:f9:2d:04:a1:31:cf:eb:73:06:c4: 61:4e:11:a4:95:0c:de:d1:89:b1:c4:e6:e1:bd:cc:2e:66:50: 03:8b:a4:75:17:8d:eb:08:7c:a1:5b:10:29:9f:d6:7f:63:e9: 4a:f4:dd:56:4b:68:c8:75:d9:c4:ae:bb:93:dc:b4:dc:df:88: fb:de:a5:8f:fd:fb:58:77:93:a4:52:74:1b:1b:63:3b:b8:fc: 48:9a:55:ab:fe:c1:ae:3a:6d:fa:09:8e:22:19:d9:0e:3d:be: 21:96:9f:3d:ab:95:18:df:c6:b8:50:90:d0:e0:1e:b5:eb:76: a6:04:6e:e7:6e:00:b2:b7:19:99:49:b3:85:42:30:ca:4c:a5: 36:3e:90:3f:f3:c0:20:53:f5:d6:cd:b8:5f:71:3f:f2:e6:f5: cb:96:2f:90:04:bf:ce:30:ed:47:7c:37:a0:5c:36:df:15:2c: eb:97:b4:2a:31:6d:53:70:4b:ee:9a:97:9e:81:59:c3:ac:4a: 0e:8c:28:ba:07:c9:0a:9b:73:c3:b5:09:e2:38:d8:4a:17:69: e3:56:86:5e:c6:40:75:99:05:c9:35:d7:2e:85:65:d0:7f:c7: 7e:0b:ab:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWRQd8QY6gheRkNMnOOwG31+ssZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRF MDE5NzI2NjAeFw0yNjA5MjAxNjU4MDBaFw0yNjA5MjExODA5MDBaMDMxMTAvBgNV BAMTKEM2QzI2MzBGNEI3QzEwNERBMThEQTg5M0VDQjFEOUVFNERGQzI3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiJDG+EnodZCg7QVqSQQgLZnKL FCaXKw0hdBQI2IKJEMI6j/n3UPvI2i7Cnbum0NpyDD5ysMjX/6UoFiAyCw91acaw IfR1QT0F+kGly/WpfX4quT2v7Lh8rXeDb5A6lZxSTfk6hUQtCtLl3hbiK87pcCff LPC0aAZVHavy9gUrscM8soWArIOAhJ9vPpS1MpnNjYrjB6IVXDKeLeRVtbOimtMu zvn9EZRAyIZwQ1VEm7r3Esh0qhW3XnJr6N7cgVwMcB2aM0GXDbNFFeiu2LhzN6UA 12PhyTLQGc4sEaO2//u7E4dqS6XGcCEfATxknuAiw/0rhhkD4lg1E3O+EVzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxsJjD0t8EE2hjaiT7LHZ7k38JzEwHwYDVR0j BBgwFoAUryBwsSYFMfvwafeuco0YJOAZcmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFmMTVhMWQtNWRhYy00Y2M5LTgxMWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEy NjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRFMDE5NzI2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjIwNzBCMTI2MDUzMUZCRjA2OUY3QUU3MjhEMTgyNEUwMTk3 MjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4 MjRFMDE5NzI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfzTbzPLhYw+o2Jnq1kKmYeEM/nT0TS0NiT +S0EoTHP63MGxGFOEaSVDN7RibHE5uG9zC5mUAOLpHUXjesIfKFbECmf1n9j6Ur0 3VZLaMh12cSuu5PctNzfiPvepY/9+1h3k6RSdBsbYzu4/EiaVav+wa46bfoJjiIZ 2Q49viGWnz2rlRjfxrhQkNDgHrXrdqYEbuduALK3GZlJs4VCMMpMpTY+kD/zwCBT 9dbNuF9xP/Lm9cuWL5AEv84w7Ud8N6BcNt8VLOuXtCoxbVNwS+6al56BWcOsSg6M KLoHyQqbc8O1CeI42EoXaeNWhl7GQHWZBck11y6FZdB/x34Lq/g= -----END CERTIFICATE-----Generated at Mon Sep 21 06:54:00 2026 by rpki-client