$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft File: AF2070B1260531FBF069F7AE728D1824E0197266.mft (raw, json) Hash identifier: 65XDVvnQDJDa3cFRWXNSwPa0va+0ajVV703irJg7rzM= Subject key identifier: B8:39:99:39:96:F4:58:2B:C3:DF:2C:BD:CA:53:00:39:71:03:5F:F8 Authority key identifier: AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 Certificate issuer: /CN=AF2070B1260531FBF069F7AE728D1824E0197266 Certificate serial: 65A70934C126918BF643AB767293877EB8C357A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 12:38:52 +0000 Manifest this update: Mon 02 Nov 2026 12:33:52 +0000 Manifest next update: Tue 03 Nov 2026 12:45:52 +0000 Files and hashes: 1: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: Cn5QDaDrkWjZkYo9i7Qsji3m8C/nPclaYaM3+4eiEFI=) 2: AF2070B1260531FBF069F7AE728D1824E0197266.crl (hash: CM9JkBiyKHGpmS5qalPWdvpInfvK9duuUGgi4Xo5BvI=) 3: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: EKUa1vnxpRzh4ZDuHDfZ4gRqG//+vsL4hxhqb+zan3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a7:09:34:c1:26:91:8b:f6:43:ab:76:72:93:87:7e:b8:c3:57:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2070B1260531FBF069F7AE728D1824E0197266 Validity Not Before: Nov 2 12:33:52 2026 GMT Not After : Nov 3 12:45:52 2026 GMT Subject: CN=B839993996F4582BC3DF2CBDCA53003971035FF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:10:6b:46:f0:97:d2:04:2b:a3:5c:31:13:4f: af:01:ff:3a:4a:09:38:4c:7f:6a:13:c3:f9:32:13: 26:65:92:36:96:18:eb:5f:57:43:ff:f1:ed:5e:1f: 43:d2:af:1e:33:ce:d1:04:fc:c6:ef:93:0b:a7:f0: 5d:6c:06:2f:b1:a8:5d:ea:6d:65:23:88:5f:5d:b7: d0:ee:24:6b:ce:7b:95:56:84:d7:a8:91:a3:26:17: 91:c1:81:9e:5a:95:12:41:22:8c:d4:7b:26:f9:50: 84:5d:1c:27:e9:5e:41:38:b5:6a:10:7d:16:e1:14: ad:25:02:38:cb:ba:47:76:1d:60:59:a6:36:93:60: ed:4c:8c:46:ad:6b:cf:4d:9f:e3:9b:d5:e1:31:cf: ae:23:32:26:87:25:1d:8c:ee:52:94:6c:ed:06:a2: 53:72:4e:f2:2f:83:f3:18:9b:ec:60:45:9f:30:9d: 9b:04:58:33:5e:e0:46:2f:27:0c:7b:06:95:18:95: 4c:82:50:f2:e5:8e:b7:45:8d:f4:a8:ad:66:b1:56: d5:01:90:6c:48:f0:38:13:4d:be:f8:0a:95:1f:31: 70:ac:4c:6d:75:6f:c9:0e:55:6d:a4:6d:d1:15:8c: 27:57:9f:f5:a6:82:06:45:a9:48:d2:08:59:8d:df: b8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:39:99:39:96:F4:58:2B:C3:DF:2C:BD:CA:53:00:39:71:03:5F:F8 X509v3 Authority Key Identifier: keyid:AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9f:a1:37:ce:51:0f:d9:8c:28:38:1e:24:e7:20:59:14:17: be:38:27:e2:ab:10:e9:23:2e:f1:a0:2c:79:ab:4f:f4:a8:7a: 40:f4:69:d5:33:14:2e:05:9f:d2:a6:bb:fd:3d:6a:0f:35:b9: 36:79:eb:c6:ec:11:5f:fc:a6:50:4c:9c:ac:f6:8b:8c:af:4b: 51:f9:35:4d:e5:9c:c0:ef:61:9b:d5:a8:0f:2e:b9:ce:b5:01: 6c:ed:2e:04:86:96:b0:44:d3:35:b0:86:02:ba:c8:24:28:67: e2:14:11:1e:77:31:a4:02:45:9d:da:c3:ba:5a:93:1c:8c:b4: 5f:72:4c:7d:93:76:3f:f0:bb:9a:03:e6:e7:5b:2d:4f:a7:35: 2c:84:3b:b4:76:41:6b:72:57:1f:40:8c:12:dd:3d:50:9b:40: 07:93:b6:d6:a8:40:6e:18:98:8a:1f:e7:d8:20:99:48:43:6b: ec:b7:5d:97:f1:91:61:a2:51:7d:52:b0:71:1c:eb:4d:6f:a9: a3:b3:34:cc:8e:41:97:43:1c:63:f7:43:92:6a:0a:b6:55:82: e6:39:0e:57:44:78:a2:65:bf:a3:7d:8d:66:de:82:e4:3d:8e: 5c:75:c7:18:6c:8f:c7:be:b1:9e:49:1b:17:8a:2f:d8:84:04: cb:38:e2:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZacJNMEmkYv2Q6t2cpOHfrjDV6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRF MDE5NzI2NjAeFw0yNjExMDIxMjMzNTJaFw0yNjExMDMxMjQ1NTJaMDMxMTAvBgNV BAMTKEI4Mzk5OTM5OTZGNDU4MkJDM0RGMkNCRENBNTMwMDM5NzEwMzVGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1EGtG8JfSBCujXDETT68B/zpK CThMf2oTw/kyEyZlkjaWGOtfV0P/8e1eH0PSrx4zztEE/Mbvkwun8F1sBi+xqF3q bWUjiF9dt9DuJGvOe5VWhNeokaMmF5HBgZ5alRJBIozUeyb5UIRdHCfpXkE4tWoQ fRbhFK0lAjjLukd2HWBZpjaTYO1MjEata89Nn+Ob1eExz64jMiaHJR2M7lKUbO0G olNyTvIvg/MYm+xgRZ8wnZsEWDNe4EYvJwx7BpUYlUyCUPLljrdFjfSorWaxVtUB kGxI8DgTTb74CpUfMXCsTG11b8kOVW2kbdEVjCdXn/WmggZFqUjSCFmN37hfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuDmZOZb0WCvD3yy9ylMAOXEDX/gwHwYDVR0j BBgwFoAUryBwsSYFMfvwafeuco0YJOAZcmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFmMTVhMWQtNWRhYy00Y2M5LTgxMWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEy NjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRFMDE5NzI2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjIwNzBCMTI2MDUzMUZCRjA2OUY3QUU3MjhEMTgyNEUwMTk3 MjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4 MjRFMDE5NzI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWfoTfOUQ/ZjCg4HiTnIFkUF744J+KrEOkj LvGgLHmrT/SoekD0adUzFC4Fn9Kmu/09ag81uTZ568bsEV/8plBMnKz2i4yvS1H5 NU3lnMDvYZvVqA8uuc61AWztLgSGlrBE0zWwhgK6yCQoZ+IUER53MaQCRZ3aw7pa kxyMtF9yTH2Tdj/wu5oD5udbLU+nNSyEO7R2QWtyVx9AjBLdPVCbQAeTttaoQG4Y mIof59ggmUhDa+y3XZfxkWGiUX1SsHEc601vqaOzNMyOQZdDHGP3Q5JqCrZVguY5 DldEeKJlv6N9jWbeguQ9jlx1xxhsj8e+sZ5JGxeKL9iEBMs44nQ= -----END CERTIFICATE-----Generated at Tue Nov 3 03:53:09 2026 by rpki-client