$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft File: AF2070B1260531FBF069F7AE728D1824E0197266.mft (raw, json) Hash identifier: r7tNSSl/YFIBFwQ+uCNhFCi77foJk44l0Qai9vFtaJg= Subject key identifier: 96:04:C5:0B:8B:CB:BA:64:0E:F6:F5:13:DD:38:49:DD:15:08:30:7F Authority key identifier: AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 Certificate issuer: /CN=AF2070B1260531FBF069F7AE728D1824E0197266 Certificate serial: 295B1EFC896E41186119F370C8A41A2F88E888C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 13:02:17 +0000 Manifest this update: Wed 23 Sep 2026 12:57:17 +0000 Manifest next update: Thu 24 Sep 2026 15:41:17 +0000 Files and hashes: 1: AF2070B1260531FBF069F7AE728D1824E0197266.crl (hash: x4oHXVJhzyRUxVdtd/Ep0AO81+I9zmr3T6VNp0AvTeY=) 2: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: Cn5QDaDrkWjZkYo9i7Qsji3m8C/nPclaYaM3+4eiEFI=) 3: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: EKUa1vnxpRzh4ZDuHDfZ4gRqG//+vsL4hxhqb+zan3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5b:1e:fc:89:6e:41:18:61:19:f3:70:c8:a4:1a:2f:88:e8:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2070B1260531FBF069F7AE728D1824E0197266 Validity Not Before: Sep 23 12:57:17 2026 GMT Not After : Sep 24 15:41:17 2026 GMT Subject: CN=9604C50B8BCBBA640EF6F513DD3849DD1508307F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:34:3d:d5:3e:7c:38:cb:f0:42:b8:5b:41:7a: 1d:3d:67:3d:19:d1:c7:41:4b:ca:a8:f1:45:08:ff: cb:e8:cc:b7:e9:bf:c3:5b:89:90:17:6a:54:9f:87: fa:aa:5a:21:65:f8:73:99:84:bd:a4:3e:54:f4:a6: 41:ea:a9:b3:d4:75:19:ee:7a:66:08:59:0c:76:69: bd:d4:7b:c2:04:c8:7d:ee:6d:6e:df:95:fd:80:8b: 7f:1a:de:5c:5a:c0:9c:d6:9b:c5:1a:1f:0e:3b:b4: 8c:46:99:a7:7c:28:9a:7e:c3:28:f8:01:d0:b8:5e: 18:7f:46:2f:29:8c:b7:c1:c8:cd:81:ad:af:47:e2: e8:93:c8:b6:ae:72:8e:78:3a:ad:d1:bc:54:4c:51: 5f:83:35:e0:e6:23:bf:3a:b0:e3:2b:65:80:a0:99: 51:a6:9a:d0:f1:b1:ee:2a:0a:f9:b7:b2:89:80:e0: 59:f1:97:aa:d8:95:57:5c:48:65:40:02:f5:37:10: 00:01:5d:31:ec:21:43:63:cc:9c:7d:ec:af:c0:60: 05:38:11:d9:38:60:83:0e:a5:db:97:aa:30:48:96: e2:25:2f:53:68:2c:c2:bd:ce:b3:d0:99:54:d6:e8: 92:2a:32:47:d7:ca:82:5e:a2:a3:d4:33:a7:49:37: 03:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:C5:0B:8B:CB:BA:64:0E:F6:F5:13:DD:38:49:DD:15:08:30:7F X509v3 Authority Key Identifier: keyid:AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3c:e8:94:64:9d:bc:ee:a5:6e:7e:ce:92:91:3f:0a:ce:da: 5b:a7:2f:59:f6:66:92:38:ed:d1:a5:53:ab:74:c2:69:cd:fd: 40:dc:1a:6e:19:2f:8c:70:d3:a2:d4:7d:39:61:d6:26:47:3e: 95:da:35:5c:c0:de:18:b5:26:20:d1:95:45:38:e8:c8:5c:b0: 20:40:a1:df:16:53:fb:56:f6:45:eb:9a:d7:99:3e:39:07:5b: 31:4b:17:7b:c9:b2:ff:cc:9d:12:0d:9b:01:57:b3:67:03:24: 08:0d:2f:9a:14:c5:1d:64:8e:15:e2:30:53:47:5a:39:9f:90: a9:93:b1:82:5a:11:d2:e4:04:81:fe:87:be:95:8e:b0:00:13: 68:f0:08:29:06:69:1b:47:32:4c:ed:34:0a:a9:90:f4:25:00: ca:42:9d:65:1e:f9:6c:54:8d:2e:98:3f:02:21:5d:c4:7e:60: 0b:a3:90:92:a1:9f:ad:11:bc:5d:72:97:a6:89:e6:ee:8d:eb: 5a:95:bc:9a:12:e7:29:e3:fb:f0:0a:f9:a3:9b:78:c3:1b:99: 30:a9:99:c3:77:52:0f:4c:17:fe:35:ef:a0:6c:39:77:ac:83: 3d:03:74:c0:70:3d:a2:90:67:23:aa:42:7a:50:29:f1:f4:38: 9c:8e:dc:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKVse/IluQRhhGfNwyKQaL4joiMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRF MDE5NzI2NjAeFw0yNjA5MjMxMjU3MTdaFw0yNjA5MjQxNTQxMTdaMDMxMTAvBgNV BAMTKDk2MDRDNTBCOEJDQkJBNjQwRUY2RjUxM0REMzg0OUREMTUwODMwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYND3VPnw4y/BCuFtBeh09Zz0Z 0cdBS8qo8UUI/8vozLfpv8NbiZAXalSfh/qqWiFl+HOZhL2kPlT0pkHqqbPUdRnu emYIWQx2ab3Ue8IEyH3ubW7flf2Ai38a3lxawJzWm8UaHw47tIxGmad8KJp+wyj4 AdC4Xhh/Ri8pjLfByM2Bra9H4uiTyLauco54Oq3RvFRMUV+DNeDmI786sOMrZYCg mVGmmtDxse4qCvm3somA4Fnxl6rYlVdcSGVAAvU3EAABXTHsIUNjzJx97K/AYAU4 Edk4YIMOpduXqjBIluIlL1NoLMK9zrPQmVTW6JIqMkfXyoJeoqPUM6dJNwNFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgTFC4vLumQO9vUT3ThJ3RUIMH8wHwYDVR0j BBgwFoAUryBwsSYFMfvwafeuco0YJOAZcmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFmMTVhMWQtNWRhYy00Y2M5LTgxMWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEy NjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRFMDE5NzI2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjIwNzBCMTI2MDUzMUZCRjA2OUY3QUU3MjhEMTgyNEUwMTk3 MjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4 MjRFMDE5NzI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACs86JRknbzupW5+zpKRPwrO2lunL1n2ZpI4 7dGlU6t0wmnN/UDcGm4ZL4xw06LUfTlh1iZHPpXaNVzA3hi1JiDRlUU46MhcsCBA od8WU/tW9kXrmteZPjkHWzFLF3vJsv/MnRINmwFXs2cDJAgNL5oUxR1kjhXiMFNH WjmfkKmTsYJaEdLkBIH+h76VjrAAE2jwCCkGaRtHMkztNAqpkPQlAMpCnWUe+WxU jS6YPwIhXcR+YAujkJKhn60RvF1yl6aJ5u6N61qVvJoS5ynj+/AK+aObeMMbmTCp mcN3Ug9MF/4176BsOXesgz0DdMBwPaKQZyOqQnpQKfH0OJyO3LE= -----END CERTIFICATE-----Generated at Wed Sep 23 23:49:19 2026 by rpki-client