$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft File: AF2070B1260531FBF069F7AE728D1824E0197266.mft (raw, json) Hash identifier: 1MFBTOvisqu9vl8I8HitMP38KqUN7JiZj36W7x04wkA= Subject key identifier: 03:85:D4:96:B1:A4:29:E3:D5:CC:41:32:9D:0B:11:50:52:35:92:DC Authority key identifier: AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 Certificate issuer: /CN=AF2070B1260531FBF069F7AE728D1824E0197266 Certificate serial: 61DBC458A8DF02592B482961559A80C535A1C97C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:54:26 +0000 Manifest this update: Thu 23 Jul 2026 15:49:26 +0000 Manifest next update: Fri 24 Jul 2026 19:30:26 +0000 Files and hashes: 1: AF2070B1260531FBF069F7AE728D1824E0197266.crl (hash: Padkgjm0APD6qRu5WUh4BwFj6J1U9DqjBTF07RjEQa8=) 2: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: Cn5QDaDrkWjZkYo9i7Qsji3m8C/nPclaYaM3+4eiEFI=) 3: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: EKUa1vnxpRzh4ZDuHDfZ4gRqG//+vsL4hxhqb+zan3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:db:c4:58:a8:df:02:59:2b:48:29:61:55:9a:80:c5:35:a1:c9:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2070B1260531FBF069F7AE728D1824E0197266 Validity Not Before: Jul 23 15:49:26 2026 GMT Not After : Jul 24 19:30:26 2026 GMT Subject: CN=0385D496B1A429E3D5CC41329D0B1150523592DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:81:6b:b2:6d:9d:4d:94:15:48:65:02:41:43: b0:b1:c2:66:8a:8c:52:c8:38:90:0f:95:7f:6a:62: d9:11:71:c8:b0:ec:b6:06:a9:1c:50:e8:91:54:a2: 0a:2a:61:86:69:d6:bf:50:db:1b:be:0d:60:0d:c4: 09:4e:11:3c:1f:ff:4d:5f:2b:a4:e7:75:5b:59:59: 23:9c:09:4b:20:3b:0f:ff:0a:58:52:92:ff:c3:43: 13:30:ad:bc:34:01:5c:f7:d0:56:ec:38:fa:b7:f9: a4:5c:8d:8e:95:fc:b0:f3:74:7c:06:fb:6f:2a:bd: 86:7a:ad:c9:25:ca:65:5b:b9:35:b1:2f:32:c8:91: d1:18:81:82:3b:97:f0:cc:84:83:56:00:28:2f:63: 06:7c:a0:33:12:2a:5f:01:a2:1e:3b:6c:2e:6d:04: d6:d9:d8:38:08:e0:e6:e1:cb:e3:7a:39:20:82:08: 05:e7:3f:92:2b:16:19:ab:a2:8e:ba:de:eb:28:7b: a3:a6:58:44:cc:8a:d4:43:8a:4c:ca:4c:0d:fd:55: a0:d4:3e:21:30:38:2c:d0:40:a3:0e:c8:89:4a:96: b0:e4:e2:d2:d8:79:ee:b6:1b:2b:d3:e6:b4:b9:5e: e1:0b:27:71:8f:cc:12:95:e1:c1:8f:22:c2:77:68: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:85:D4:96:B1:A4:29:E3:D5:CC:41:32:9D:0B:11:50:52:35:92:DC X509v3 Authority Key Identifier: keyid:AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f3:1f:24:44:64:cd:24:af:9f:47:91:80:6b:5e:67:6b:a3: 9f:a5:6e:2b:52:c7:9a:72:96:6c:34:90:7b:cb:2e:ca:7a:30: 3c:2f:a7:9d:76:8b:cf:41:4f:84:70:7b:02:47:88:4e:3c:ba: d3:b0:2e:d9:55:a4:ff:5a:b3:b3:3c:d3:c2:9e:31:48:b2:15: c6:a5:2e:13:ec:96:f5:34:5d:95:a5:cd:d6:94:2e:c9:7f:3e: 3b:04:50:ef:86:02:bb:80:75:6f:5d:7f:e6:06:15:40:90:a7: 88:01:08:d6:08:d6:b4:3a:f3:af:0b:7b:e1:af:9b:51:88:9d: 50:d1:a7:28:42:72:68:81:51:0b:7b:51:0c:a2:26:a9:8a:d3: 16:3b:d5:54:46:a6:d1:39:f9:ad:b4:83:e3:9f:0d:50:97:3c: 00:f5:9a:a9:d1:43:99:4d:20:6d:12:25:42:97:18:2a:b3:2c: e2:60:46:b7:71:58:e0:f7:68:90:64:b6:48:38:b6:08:b4:42: 88:bf:c8:a3:92:9b:17:c9:dd:fb:2a:70:f4:7d:35:83:6a:ab: c0:5f:a4:30:39:9f:2a:85:cf:23:44:fb:b2:c6:68:92:b6:72: 49:0c:b4:41:1d:d5:ba:d1:2e:fe:e3:d3:e8:30:c2:32:c0:de: bf:62:de:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdvEWKjfAlkrSClhVZqAxTWhyXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRF MDE5NzI2NjAeFw0yNjA3MjMxNTQ5MjZaFw0yNjA3MjQxOTMwMjZaMDMxMTAvBgNV BAMTKDAzODVENDk2QjFBNDI5RTNENUNDNDEzMjlEMEIxMTUwNTIzNTkyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbgWuybZ1NlBVIZQJBQ7CxwmaK jFLIOJAPlX9qYtkRcciw7LYGqRxQ6JFUogoqYYZp1r9Q2xu+DWANxAlOETwf/01f K6TndVtZWSOcCUsgOw//ClhSkv/DQxMwrbw0AVz30FbsOPq3+aRcjY6V/LDzdHwG +28qvYZ6rcklymVbuTWxLzLIkdEYgYI7l/DMhINWACgvYwZ8oDMSKl8Boh47bC5t BNbZ2DgI4Obhy+N6OSCCCAXnP5IrFhmroo663usoe6OmWETMitRDikzKTA39VaDU PiEwOCzQQKMOyIlKlrDk4tLYee62GyvT5rS5XuELJ3GPzBKV4cGPIsJ3aGITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA4XUlrGkKePVzEEynQsRUFI1ktwwHwYDVR0j BBgwFoAUryBwsSYFMfvwafeuco0YJOAZcmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFmMTVhMWQtNWRhYy00Y2M5LTgxMWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEy NjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRFMDE5NzI2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjIwNzBCMTI2MDUzMUZCRjA2OUY3QUU3MjhEMTgyNEUwMTk3 MjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4 MjRFMDE5NzI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3zHyREZM0kr59HkYBrXmdro5+lbitSx5py lmw0kHvLLsp6MDwvp512i89BT4RwewJHiE48utOwLtlVpP9as7M808KeMUiyFcal LhPslvU0XZWlzdaULsl/PjsEUO+GAruAdW9df+YGFUCQp4gBCNYI1rQ6868Le+Gv m1GInVDRpyhCcmiBUQt7UQyiJqmK0xY71VRGptE5+a20g+OfDVCXPAD1mqnRQ5lN IG0SJUKXGCqzLOJgRrdxWOD3aJBktkg4tgi0Qoi/yKOSmxfJ3fsqcPR9NYNqq8Bf pDA5nyqFzyNE+7LGaJK2ckkMtEEd1brRLv7j0+gwwjLA3r9i3qc= -----END CERTIFICATE-----Generated at Fri Jul 24 02:40:44 2026 by rpki-client