$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft File: AF2070B1260531FBF069F7AE728D1824E0197266.mft (raw, json) Hash identifier: H0Q5mfeV3JG79KFdhgEfn5sjHms1+IZNGCtBWMlrFT8= Subject key identifier: 62:B3:65:C8:69:C4:23:9C:2A:00:44:35:55:2A:79:62:C5:B7:BD:59 Authority key identifier: AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 Certificate issuer: /CN=AF2070B1260531FBF069F7AE728D1824E0197266 Certificate serial: 2CC70A58494DE10E2FD365CCA60CCBBC7743EF59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 19:54:31 +0000 Manifest this update: Sat 14 Nov 2026 19:49:31 +0000 Manifest next update: Sun 15 Nov 2026 21:22:31 +0000 Files and hashes: 1: AF2070B1260531FBF069F7AE728D1824E0197266.crl (hash: X0CD38bgggghEr7seI9NZeGzVB1/7k/E5ZS4S2zQVwg=) 2: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: EKUa1vnxpRzh4ZDuHDfZ4gRqG//+vsL4hxhqb+zan3U=) 3: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: Cn5QDaDrkWjZkYo9i7Qsji3m8C/nPclaYaM3+4eiEFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c7:0a:58:49:4d:e1:0e:2f:d3:65:cc:a6:0c:cb:bc:77:43:ef:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2070B1260531FBF069F7AE728D1824E0197266 Validity Not Before: Nov 14 19:49:31 2026 GMT Not After : Nov 15 21:22:31 2026 GMT Subject: CN=62B365C869C4239C2A004435552A7962C5B7BD59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:51:69:3d:68:3b:b4:34:fb:1c:ab:e3:36: db:dc:b8:92:e0:85:3c:b2:24:09:36:26:05:c1:e0: 97:49:95:39:ab:c5:b2:78:11:4d:71:eb:04:be:3a: 18:7f:0c:04:b0:c3:ee:38:ce:05:b2:dc:11:42:8d: df:0a:a6:00:2c:e6:ee:ab:0f:29:86:73:74:08:0c: a2:dd:51:e4:0f:95:bc:fa:0b:6b:8e:0c:15:a0:eb: 65:52:bc:62:ba:a3:4a:6b:3f:6c:79:9c:57:bc:90: 7a:e7:ff:96:9c:43:05:e7:ee:98:11:15:64:e7:4d: 1f:0d:64:06:d6:e6:bf:58:38:83:6f:d6:ff:02:72: 83:0f:e7:04:d5:3d:23:3a:df:98:ef:7c:fc:8a:7d: 55:01:fb:e5:75:7e:a6:58:d3:80:ee:ff:32:f3:7c: d2:17:b6:bd:9d:e4:25:a3:19:a2:2d:1d:bf:13:66: d1:f0:6a:c5:9f:80:62:c8:66:c1:e9:cf:d4:7f:1e: e9:ae:22:35:03:54:de:eb:d8:c7:dd:d7:63:12:a7: b7:fd:a5:d4:47:ed:b0:d0:ac:d1:fc:08:a1:dc:58: 28:86:57:2c:69:f0:21:54:29:3f:40:42:a1:1f:55: 5f:32:2e:94:fe:7a:f7:a8:67:bf:87:b1:51:17:7c: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B3:65:C8:69:C4:23:9C:2A:00:44:35:55:2A:79:62:C5:B7:BD:59 X509v3 Authority Key Identifier: keyid:AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3b:af:43:71:58:33:7e:57:cc:bd:62:42:23:55:b9:d1:69: 4a:e5:b1:a4:1c:d0:83:88:36:cf:d4:30:0c:51:cd:72:8f:d6: a2:53:6f:84:60:92:c1:ab:2f:a2:39:a1:c0:42:58:48:d1:7f: e1:0e:e8:21:ae:4e:6e:f8:bf:ca:d7:31:42:5a:72:25:62:de: f0:70:9e:89:e3:08:3a:6c:0a:eb:9a:94:a8:e9:1a:dd:a7:c5: 0d:7b:52:0b:3b:bf:28:ea:08:b9:02:80:35:1a:d7:14:1f:4d: 6f:aa:b1:d3:ca:bf:47:72:da:e5:c0:ef:4d:7c:e2:d6:9c:31: 77:5d:b4:aa:93:31:b9:5c:8c:6d:b7:40:88:fc:fd:0d:99:93: aa:2d:b0:0b:41:7a:61:87:54:d0:a2:1d:98:14:ca:4c:1c:b5: 5a:14:89:42:d5:41:2e:26:4e:3e:8c:ae:8f:85:52:cb:cd:15: 63:6f:1f:15:e0:a3:57:c1:e6:1f:3b:46:f0:ef:e4:a6:10:b6: 5b:24:0f:a7:5b:76:c7:ff:d4:ac:41:8c:c3:6d:10:b8:e2:41: 48:03:a3:be:b1:8f:0b:9d:36:c7:77:88:e0:0c:c0:77:23:2b: c6:a9:1e:00:29:52:d5:c4:f1:a9:97:77:0c:ea:79:0c:ab:f3: 83:82:25:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMcKWElN4Q4v02XMpgzLvHdD71kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRF MDE5NzI2NjAeFw0yNjExMTQxOTQ5MzFaFw0yNjExMTUyMTIyMzFaMDMxMTAvBgNV BAMTKDYyQjM2NUM4NjlDNDIzOUMyQTAwNDQzNTU1MkE3OTYyQzVCN0JENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0VFpPWg7tDT7HKvjNtvcuJLg hTyyJAk2JgXB4JdJlTmrxbJ4EU1x6wS+Ohh/DASww+44zgWy3BFCjd8KpgAs5u6r DymGc3QIDKLdUeQPlbz6C2uODBWg62VSvGK6o0prP2x5nFe8kHrn/5acQwXn7pgR FWTnTR8NZAbW5r9YOINv1v8CcoMP5wTVPSM635jvfPyKfVUB++V1fqZY04Du/zLz fNIXtr2d5CWjGaItHb8TZtHwasWfgGLIZsHpz9R/HumuIjUDVN7r2Mfd12MSp7f9 pdRH7bDQrNH8CKHcWCiGVyxp8CFUKT9AQqEfVV8yLpT+eveoZ7+HsVEXfEs1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYrNlyGnEI5wqAEQ1VSp5YsW3vVkwHwYDVR0j BBgwFoAUryBwsSYFMfvwafeuco0YJOAZcmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFmMTVhMWQtNWRhYy00Y2M5LTgxMWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEy NjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRFMDE5NzI2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjIwNzBCMTI2MDUzMUZCRjA2OUY3QUU3MjhEMTgyNEUwMTk3 MjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4 MjRFMDE5NzI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACc7r0NxWDN+V8y9YkIjVbnRaUrlsaQc0IOI Ns/UMAxRzXKP1qJTb4RgksGrL6I5ocBCWEjRf+EO6CGuTm74v8rXMUJaciVi3vBw nonjCDpsCuualKjpGt2nxQ17Ugs7vyjqCLkCgDUa1xQfTW+qsdPKv0dy2uXA7018 4tacMXddtKqTMblcjG23QIj8/Q2Zk6otsAtBemGHVNCiHZgUykwctVoUiULVQS4m Tj6Mro+FUsvNFWNvHxXgo1fB5h87RvDv5KYQtlskD6dbdsf/1KxBjMNtELjiQUgD o76xjwudNsd3iOAMwHcjK8apHgApUtXE8amXdwzqeQyr84OCJa4= -----END CERTIFICATE-----Generated at Sat Nov 14 23:37:32 2026 by rpki-client