$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft File: AF2070B1260531FBF069F7AE728D1824E0197266.mft (raw, json) Hash identifier: ilCmxBFzLZpfH62agHwBtbPoW0DTt8EW3GRaInRw8P0= Subject key identifier: 40:82:35:77:38:C8:29:36:B8:71:24:6A:6C:13:B6:97:63:E4:09:83 Authority key identifier: AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 Certificate issuer: /CN=AF2070B1260531FBF069F7AE728D1824E0197266 Certificate serial: 1EEDEDF1547FC0E1FF925C9C641AE8462E68AAFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 15:41:26 +0000 Manifest this update: Sun 02 Aug 2026 15:36:26 +0000 Manifest next update: Mon 03 Aug 2026 18:11:26 +0000 Files and hashes: 1: AF2070B1260531FBF069F7AE728D1824E0197266.crl (hash: UhRFY80LI5gQSvQRjPMi+bvp72RBuTPuAOvvGOUHNRw=) 2: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: EKUa1vnxpRzh4ZDuHDfZ4gRqG//+vsL4hxhqb+zan3U=) 3: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: Cn5QDaDrkWjZkYo9i7Qsji3m8C/nPclaYaM3+4eiEFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ed:ed:f1:54:7f:c0:e1:ff:92:5c:9c:64:1a:e8:46:2e:68:aa:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2070B1260531FBF069F7AE728D1824E0197266 Validity Not Before: Aug 2 15:36:26 2026 GMT Not After : Aug 3 18:11:26 2026 GMT Subject: CN=4082357738C82936B871246A6C13B69763E40983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:53:18:cd:4e:10:d2:5d:f7:db:66:a0:ea:9a: 3e:eb:9a:1f:b7:80:bb:a4:e6:72:26:fe:ad:5a:44: a7:d6:c6:33:c4:92:53:6c:ed:52:5d:27:e4:f0:85: 5a:19:9a:f2:f3:aa:61:c9:91:f3:96:74:63:e8:ab: 89:5d:c7:01:39:67:c6:5d:dc:9c:98:d9:39:a1:2a: d4:89:5b:2a:e9:45:8c:af:59:87:52:25:08:42:a3: 34:11:fb:62:f6:c1:dd:ac:0a:46:42:33:5a:65:00: 40:0d:db:b8:a1:34:4f:40:dc:6a:e8:81:79:dc:28: 37:f5:20:05:d5:50:ee:48:23:bd:4a:a3:3f:04:b1: 0e:5a:11:9b:78:f4:0d:60:d3:30:0b:07:75:c9:2f: 7d:9e:82:41:0d:5e:92:f1:fc:61:d8:82:42:72:fc: dd:9e:fa:3e:bf:59:89:50:b1:9d:30:40:ea:aa:12: 8c:7a:c6:c4:11:8f:06:fa:52:fc:ad:3e:0d:1b:8f: 11:d9:10:f1:6e:5e:51:b8:10:17:ee:54:5f:6d:41: 21:8a:14:d8:31:1f:70:cf:fc:36:b3:7c:ce:62:ee: 87:35:b3:3c:81:25:8d:05:dc:31:03:86:4e:5c:65: de:cd:ee:e7:6e:fc:d6:9d:9b:08:25:af:ad:6c:64: 5f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:82:35:77:38:C8:29:36:B8:71:24:6A:6C:13:B6:97:63:E4:09:83 X509v3 Authority Key Identifier: keyid:AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:53:3e:bc:38:53:66:41:e1:fa:6b:38:17:d6:b6:63:34:ab: 3c:9e:e3:1c:ae:28:8e:c0:da:24:11:77:9b:3f:6c:54:b8:e3: 5c:b8:ae:a4:d0:c7:b5:30:64:28:89:a3:5e:bf:e1:27:29:87: e0:51:55:1e:99:db:0c:e7:8d:63:82:6a:c2:14:94:f4:72:d8: 5f:46:db:18:d7:d9:ce:11:b9:ee:38:fc:7e:0d:5e:8b:75:b1: b2:8f:35:f1:bb:0f:0a:d5:7e:64:9e:57:86:a9:46:13:e7:af: 7c:a4:23:6c:8d:d6:24:51:94:7d:9e:f0:98:1c:8d:c8:5e:f4: 2c:a5:d1:41:27:f8:58:5d:e3:97:1f:55:9b:7a:e6:c0:78:48: c6:4c:e3:2a:53:8c:2d:81:59:9d:12:61:44:08:69:c8:05:82: 79:e7:6d:8d:cd:df:55:b8:ff:13:d6:6b:9c:62:53:86:23:d0: 3f:b7:b5:7d:4d:eb:00:3c:8b:50:b4:93:f1:4f:65:aa:06:c0: 4b:d6:1b:68:f1:f0:83:b0:20:18:d0:71:f2:44:2a:10:55:cc: 8d:d1:a6:fb:40:46:07:49:f4:29:1d:9c:2d:9a:b5:81:ca:91: aa:24:de:1c:a9:07:72:81:fa:9a:f0:00:e1:d5:eb:15:7e:ae: 9e:f9:a1:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHu3t8VR/wOH/klycZBroRi5oqv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRF MDE5NzI2NjAeFw0yNjA4MDIxNTM2MjZaFw0yNjA4MDMxODExMjZaMDMxMTAvBgNV BAMTKDQwODIzNTc3MzhDODI5MzZCODcxMjQ2QTZDMTNCNjk3NjNFNDA5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUxjNThDSXffbZqDqmj7rmh+3 gLuk5nIm/q1aRKfWxjPEklNs7VJdJ+TwhVoZmvLzqmHJkfOWdGPoq4ldxwE5Z8Zd 3JyY2TmhKtSJWyrpRYyvWYdSJQhCozQR+2L2wd2sCkZCM1plAEAN27ihNE9A3Gro gXncKDf1IAXVUO5II71Koz8EsQ5aEZt49A1g0zALB3XJL32egkENXpLx/GHYgkJy /N2e+j6/WYlQsZ0wQOqqEox6xsQRjwb6UvytPg0bjxHZEPFuXlG4EBfuVF9tQSGK FNgxH3DP/DazfM5i7oc1szyBJY0F3DEDhk5cZd7N7udu/Nadmwglr61sZF8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQII1dzjIKTa4cSRqbBO2l2PkCYMwHwYDVR0j BBgwFoAUryBwsSYFMfvwafeuco0YJOAZcmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFmMTVhMWQtNWRhYy00Y2M5LTgxMWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEy NjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRFMDE5NzI2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjIwNzBCMTI2MDUzMUZCRjA2OUY3QUU3MjhEMTgyNEUwMTk3 MjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4 MjRFMDE5NzI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNTPrw4U2ZB4fprOBfWtmM0qzye4xyuKI7A 2iQRd5s/bFS441y4rqTQx7UwZCiJo16/4Scph+BRVR6Z2wznjWOCasIUlPRy2F9G 2xjX2c4Rue44/H4NXot1sbKPNfG7DwrVfmSeV4apRhPnr3ykI2yN1iRRlH2e8Jgc jche9Cyl0UEn+Fhd45cfVZt65sB4SMZM4ypTjC2BWZ0SYUQIacgFgnnnbY3N31W4 /xPWa5xiU4Yj0D+3tX1N6wA8i1C0k/FPZaoGwEvWG2jx8IOwIBjQcfJEKhBVzI3R pvtARgdJ9CkdnC2atYHKkaok3hypB3KB+prwAOHV6xV+rp75oQg= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:35 2026 by rpki-client