$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft File: AF2070B1260531FBF069F7AE728D1824E0197266.mft (raw, json) Hash identifier: rjn9b0Yerc1e6szNJrDa1i4TuNGScF641qj0oPPeqmw= Subject key identifier: B6:0D:B5:8D:BB:F0:0C:07:CB:51:9A:FD:97:96:F7:F7:ED:8B:7D:DE Authority key identifier: AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 Certificate issuer: /CN=AF2070B1260531FBF069F7AE728D1824E0197266 Certificate serial: 2FE27905D96A1972F310DE1FDC1AAE3C2E4D899F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 06:55:35 +0000 Manifest this update: Tue 28 Jul 2026 06:50:35 +0000 Manifest next update: Wed 29 Jul 2026 08:26:35 +0000 Files and hashes: 1: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: Cn5QDaDrkWjZkYo9i7Qsji3m8C/nPclaYaM3+4eiEFI=) 2: AF2070B1260531FBF069F7AE728D1824E0197266.crl (hash: +UJ3Ng/pRA6TrK+gQBjy08Ic5riTJa+G9GsAy/+SlPI=) 3: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: EKUa1vnxpRzh4ZDuHDfZ4gRqG//+vsL4hxhqb+zan3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 08:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e2:79:05:d9:6a:19:72:f3:10:de:1f:dc:1a:ae:3c:2e:4d:89:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2070B1260531FBF069F7AE728D1824E0197266 Validity Not Before: Jul 28 06:50:35 2026 GMT Not After : Jul 29 08:26:35 2026 GMT Subject: CN=B60DB58DBBF00C07CB519AFD9796F7F7ED8B7DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2a:33:8c:a6:e8:eb:e4:4c:bb:e8:72:f8:e8: 26:35:c2:f8:99:2a:7d:ad:87:98:0c:0a:b7:0c:14: 59:e4:29:68:f3:93:5c:73:02:72:ee:14:85:8d:3c: ad:72:cc:34:d1:b2:18:63:97:3a:0b:b8:7a:db:90: 29:41:8a:26:a9:04:9b:3e:54:63:4f:af:93:ec:ca: 83:fc:ee:e8:57:4f:c1:d3:d3:88:cb:42:6f:88:4e: 09:a9:59:c1:e3:f5:93:8e:d2:c7:06:04:b4:54:66: 9c:08:c2:25:96:55:5e:b1:55:01:aa:52:70:36:31: 1d:fe:fd:75:3d:b1:a4:58:e4:09:5c:f4:a2:82:7a: 8d:36:e1:8e:8a:12:4b:13:6b:cb:87:83:9a:91:b7: 18:b7:4b:d2:1e:dc:66:33:cb:be:cf:2f:c2:33:6d: de:c1:2f:98:0f:cd:d6:75:81:a8:e3:d1:6e:59:c9: b4:58:0f:00:02:78:08:3e:7a:f9:e1:f7:af:21:01: b1:5b:39:b5:7b:e5:58:25:87:5b:f7:ab:11:1b:b5: 64:6a:0f:5e:29:e8:e0:d6:81:45:18:bb:60:ea:dc: 57:d5:42:6c:54:c4:57:fe:cb:75:bc:f3:bf:a6:0b: 38:1d:b3:3e:bd:43:95:41:6d:de:14:64:a9:e5:5c: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0D:B5:8D:BB:F0:0C:07:CB:51:9A:FD:97:96:F7:F7:ED:8B:7D:DE X509v3 Authority Key Identifier: keyid:AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:12:83:d8:f9:3d:e2:65:5f:95:62:33:9e:ea:d3:34:ee:76: b1:dd:a2:c9:36:19:72:3c:28:e5:75:df:fc:33:27:44:5e:f1: 49:a8:61:9e:93:44:0e:a8:e8:2e:c9:78:e9:c6:2c:02:42:d1: 9c:fe:a1:0d:41:8c:76:c9:9b:58:db:98:0c:86:ff:b3:55:49: 97:5e:28:61:d8:57:b0:41:5f:e2:d0:da:d6:b3:ad:f8:67:a9: da:ae:bc:a5:9e:17:82:1d:f5:69:c8:60:a9:bd:3f:3c:65:af: 1a:ad:7d:bd:f4:74:66:12:64:12:50:5b:45:1d:dd:3e:a1:71: 8e:22:19:13:47:61:cf:a0:a2:a2:6b:da:07:4e:2e:85:5a:ef: 2d:7f:dc:e1:e2:3e:cd:95:25:e1:52:72:b2:57:01:d7:f3:82: 5c:b1:27:e0:ab:66:d8:2d:6e:36:78:28:ac:e0:06:f9:62:28: c9:17:6a:2e:03:28:56:a9:fd:88:f2:41:3f:77:1d:98:64:c4: bd:59:ab:e9:c2:89:a1:d4:b9:7a:76:08:e1:87:cd:57:98:f7: e5:b1:24:66:c3:ce:e9:6f:6d:1d:05:1b:b7:8d:ba:38:18:1b: 31:45:95:db:ec:a7:68:15:fa:43:a6:93:6e:d8:49:ff:2c:11: 53:99:84:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+J5BdlqGXLzEN4f3BquPC5NiZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRF MDE5NzI2NjAeFw0yNjA3MjgwNjUwMzVaFw0yNjA3MjkwODI2MzVaMDMxMTAvBgNV BAMTKEI2MERCNThEQkJGMDBDMDdDQjUxOUFGRDk3OTZGN0Y3RUQ4QjdEREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQKjOMpujr5Ey76HL46CY1wviZ Kn2th5gMCrcMFFnkKWjzk1xzAnLuFIWNPK1yzDTRshhjlzoLuHrbkClBiiapBJs+ VGNPr5PsyoP87uhXT8HT04jLQm+ITgmpWcHj9ZOO0scGBLRUZpwIwiWWVV6xVQGq UnA2MR3+/XU9saRY5Alc9KKCeo024Y6KEksTa8uHg5qRtxi3S9Ie3GYzy77PL8Iz bd7BL5gPzdZ1gajj0W5ZybRYDwACeAg+evnh968hAbFbObV75Vglh1v3qxEbtWRq D14p6ODWgUUYu2Dq3FfVQmxUxFf+y3W887+mCzgdsz69Q5VBbd4UZKnlXI1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtg21jbvwDAfLUZr9l5b39+2Lfd4wHwYDVR0j BBgwFoAUryBwsSYFMfvwafeuco0YJOAZcmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFmMTVhMWQtNWRhYy00Y2M5LTgxMWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEy NjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRFMDE5NzI2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjIwNzBCMTI2MDUzMUZCRjA2OUY3QUU3MjhEMTgyNEUwMTk3 MjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4 MjRFMDE5NzI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGASg9j5PeJlX5ViM57q0zTudrHdosk2GXI8 KOV13/wzJ0Re8UmoYZ6TRA6o6C7JeOnGLAJC0Zz+oQ1BjHbJm1jbmAyG/7NVSZde KGHYV7BBX+LQ2tazrfhnqdquvKWeF4Id9WnIYKm9Pzxlrxqtfb30dGYSZBJQW0Ud 3T6hcY4iGRNHYc+goqJr2gdOLoVa7y1/3OHiPs2VJeFScrJXAdfzglyxJ+CrZtgt bjZ4KKzgBvliKMkXai4DKFap/YjyQT93HZhkxL1Zq+nCiaHUuXp2COGHzVeY9+Wx JGbDzulvbR0FG7eNujgYGzFFldvsp2gV+kOmk27YSf8sEVOZhLc= -----END CERTIFICATE-----Generated at Tue Jul 28 21:49:32 2026 by rpki-client