$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft File: AF2070B1260531FBF069F7AE728D1824E0197266.mft (raw, json) Hash identifier: VI6ZRUTXvuhAMDhBqutV4b+VUgyyV2XVl69hToHGUFI= Subject key identifier: B8:96:31:C6:89:06:5F:54:1F:2E:E5:04:1C:7A:48:E3:75:85:CC:6E Authority key identifier: AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 Certificate issuer: /CN=AF2070B1260531FBF069F7AE728D1824E0197266 Certificate serial: 18D04EE815F9C6D452EFE7BB34EE9FBB706DFA01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:43:17 +0000 Manifest this update: Wed 16 Sep 2026 23:38:17 +0000 Manifest next update: Thu 17 Sep 2026 23:56:17 +0000 Files and hashes: 1: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: EKUa1vnxpRzh4ZDuHDfZ4gRqG//+vsL4hxhqb+zan3U=) 2: AF2070B1260531FBF069F7AE728D1824E0197266.crl (hash: qyDbtecP0Xr7yRmlPyUKDBp4MisfmsnTPsSNWjyR0UA=) 3: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: Cn5QDaDrkWjZkYo9i7Qsji3m8C/nPclaYaM3+4eiEFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d0:4e:e8:15:f9:c6:d4:52:ef:e7:bb:34:ee:9f:bb:70:6d:fa:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2070B1260531FBF069F7AE728D1824E0197266 Validity Not Before: Sep 16 23:38:17 2026 GMT Not After : Sep 17 23:56:17 2026 GMT Subject: CN=B89631C689065F541F2EE5041C7A48E37585CC6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:f0:a8:e6:e2:2c:04:50:8e:92:2e:ae:3c: 53:1d:9e:6d:f3:8b:a6:2b:d4:b5:b8:73:64:65:b1: dc:bc:55:4d:1e:67:46:ac:e7:4b:32:84:48:e9:e0: 9f:81:41:1e:0a:89:f7:89:03:92:12:f7:f0:06:91: 84:91:44:c2:e3:fc:06:f4:b7:9b:1b:52:0a:9c:f8: 0c:a0:bd:c4:65:9e:b0:23:fb:5c:ad:42:89:0c:19: b7:f9:28:1d:59:e9:0d:2d:b8:1c:af:17:72:cc:d2: 00:cc:04:5a:ef:6f:0e:bc:11:7b:a2:92:31:dc:98: 26:9f:81:48:34:59:49:43:e2:82:03:70:f3:9b:42: aa:57:19:16:61:8e:e4:cd:c1:0b:cf:e0:07:32:ad: 86:7d:bb:60:1a:6e:2d:c4:ae:b9:a6:1f:da:c4:7a: b7:3f:0e:d7:ef:2a:cb:45:d1:0d:0f:de:73:75:79: ab:1a:d3:92:b2:8d:4d:e4:59:18:7a:d9:e6:fa:0d: e6:52:c0:b3:34:4c:eb:67:57:25:03:03:08:52:b0: e1:e7:97:75:50:cb:c3:4d:1f:54:7c:0c:6f:b2:7e: 5a:15:78:9f:ba:d9:d0:f4:18:13:1b:97:26:86:11: 8d:39:02:8c:f7:1c:91:81:a3:6e:ab:71:25:eb:54: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:96:31:C6:89:06:5F:54:1F:2E:E5:04:1C:7A:48:E3:75:85:CC:6E X509v3 Authority Key Identifier: keyid:AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c2:ae:25:d2:9d:e5:fd:3d:d4:ed:94:31:28:05:25:e1:21: b2:a4:5a:7c:f2:b7:93:f6:db:00:6e:41:bd:ff:b8:9a:5a:66: 47:95:2c:3f:59:77:dd:1c:b8:63:c1:82:ec:05:f0:89:2f:5d: 8f:6f:3b:bc:fc:6c:b3:66:ed:6a:55:15:bc:2c:3c:68:6b:de: 1c:38:35:6a:a4:ae:e3:34:6d:6b:66:0c:fa:08:5b:28:7c:ce: ff:6d:69:97:8d:26:f4:d0:6b:37:18:71:4d:55:27:a3:cb:e7: e4:cb:14:81:23:51:e1:95:18:16:c4:e2:0d:90:78:2b:50:1a: 2e:91:67:0f:12:32:ef:c8:7a:c6:1a:dd:5a:cd:65:3b:64:75: 15:8d:35:ba:15:17:cd:93:2f:0d:cc:86:42:e8:2f:a1:e4:cb: 93:0b:2d:b5:a0:60:b3:05:f5:57:68:86:ad:71:eb:39:09:a9: 99:6d:de:24:4f:79:d2:03:03:60:50:af:03:00:95:0d:32:a9: 2d:f1:88:3d:e6:c4:72:90:16:1f:66:34:cb:4f:42:58:e4:e4: 79:b0:02:27:ad:56:9e:df:78:b0:b9:df:34:19:51:c1:94:23: d7:77:95:d0:52:1c:13:f3:1a:0d:7d:b1:be:0a:92:fc:79:49: 2a:69:b2:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNBO6BX5xtRS7+e7NO6fu3Bt+gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRF MDE5NzI2NjAeFw0yNjA5MTYyMzM4MTdaFw0yNjA5MTcyMzU2MTdaMDMxMTAvBgNV BAMTKEI4OTYzMUM2ODkwNjVGNTQxRjJFRTUwNDFDN0E0OEUzNzU4NUNDNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+/Co5uIsBFCOki6uPFMdnm3z i6Yr1LW4c2Rlsdy8VU0eZ0as50syhEjp4J+BQR4KifeJA5IS9/AGkYSRRMLj/Ab0 t5sbUgqc+AygvcRlnrAj+1ytQokMGbf5KB1Z6Q0tuByvF3LM0gDMBFrvbw68EXui kjHcmCafgUg0WUlD4oIDcPObQqpXGRZhjuTNwQvP4AcyrYZ9u2Aabi3ErrmmH9rE erc/DtfvKstF0Q0P3nN1easa05KyjU3kWRh62eb6DeZSwLM0TOtnVyUDAwhSsOHn l3VQy8NNH1R8DG+yfloVeJ+62dD0GBMblyaGEY05Aoz3HJGBo26rcSXrVAqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuJYxxokGX1QfLuUEHHpI43WFzG4wHwYDVR0j BBgwFoAUryBwsSYFMfvwafeuco0YJOAZcmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFmMTVhMWQtNWRhYy00Y2M5LTgxMWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEy NjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRFMDE5NzI2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjIwNzBCMTI2MDUzMUZCRjA2OUY3QUU3MjhEMTgyNEUwMTk3 MjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4 MjRFMDE5NzI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3CriXSneX9PdTtlDEoBSXhIbKkWnzyt5P2 2wBuQb3/uJpaZkeVLD9Zd90cuGPBguwF8IkvXY9vO7z8bLNm7WpVFbwsPGhr3hw4 NWqkruM0bWtmDPoIWyh8zv9taZeNJvTQazcYcU1VJ6PL5+TLFIEjUeGVGBbE4g2Q eCtQGi6RZw8SMu/IesYa3VrNZTtkdRWNNboVF82TLw3MhkLoL6Hky5MLLbWgYLMF 9Vdohq1x6zkJqZlt3iRPedIDA2BQrwMAlQ0yqS3xiD3mxHKQFh9mNMtPQljk5Hmw AietVp7feLC53zQZUcGUI9d3ldBSHBPzGg19sb4Kkvx5SSppssk= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:55 2026 by rpki-client