$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft File: AF2070B1260531FBF069F7AE728D1824E0197266.mft (raw, json) Hash identifier: ZkjFwMRMi8bEzTb2m71vEtT5Ah+YwKlK8Al1m4O8dW0= Subject key identifier: 33:86:42:1D:09:78:FB:D7:1D:92:04:22:E1:F5:CD:82:65:E0:81:0F Authority key identifier: AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 Certificate issuer: /CN=AF2070B1260531FBF069F7AE728D1824E0197266 Certificate serial: 6CB305CF9EC7B0D5566B4FD3B5DF12867719A4E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 23:26:05 +0000 Manifest this update: Wed 17 Jun 2026 23:21:05 +0000 Manifest next update: Fri 19 Jun 2026 01:14:05 +0000 Files and hashes: 1: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (hash: Cn5QDaDrkWjZkYo9i7Qsji3m8C/nPclaYaM3+4eiEFI=) 2: AF2070B1260531FBF069F7AE728D1824E0197266.crl (hash: jGCIv53bBrvalJo7d1rZwCg0asMbTRt2R4ASePzfSXs=) 3: 3135372e32302e3232322e302f32342d3234203d3e20313532343337.roa (hash: EKUa1vnxpRzh4ZDuHDfZ4gRqG//+vsL4hxhqb+zan3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 01:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b3:05:cf:9e:c7:b0:d5:56:6b:4f:d3:b5:df:12:86:77:19:a4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF2070B1260531FBF069F7AE728D1824E0197266 Validity Not Before: Jun 17 23:21:05 2026 GMT Not After : Jun 19 01:14:05 2026 GMT Subject: CN=3386421D0978FBD71D920422E1F5CD8265E0810F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:23:ac:2c:0a:93:b2:c2:20:e7:64:ad:fa: 82:a2:ea:54:40:47:b0:78:3e:de:94:05:49:27:7a: 74:4e:6f:c4:ab:1e:86:57:7a:bb:6d:40:55:cd:cd: 95:15:7c:28:13:da:2c:50:93:57:61:93:de:e8:ac: a9:e2:78:04:a6:f9:bd:09:84:0c:a5:de:27:9a:00: e9:80:64:84:85:35:c0:c0:b4:52:19:8b:87:f6:f2: 9f:9e:68:9b:ab:31:da:d6:4e:10:fc:ad:f5:c7:5d: dc:5a:2d:bf:7d:65:bb:08:4c:2f:33:99:c7:4e:4f: 3e:a7:ce:7c:be:7e:a2:27:9b:62:97:63:bf:65:6b: d3:7d:29:f3:fc:94:6d:72:2a:7f:b3:cc:cb:58:73: 35:1e:41:6d:5e:cd:83:1c:95:46:4f:23:10:7e:ac: 64:5c:38:4b:bb:c9:46:d6:50:5a:3f:67:8f:7c:c2: fe:42:27:9d:22:72:6d:01:03:10:3e:4d:0f:82:88: a2:4b:dd:bd:5a:bc:4c:5c:3c:5a:5e:6f:cb:b6:78: 7c:b2:66:bf:f0:4a:7d:d0:3a:eb:6d:61:c5:ff:91: e6:9b:4f:86:93:1d:12:8f:4d:43:f2:78:b3:2c:93: 9b:0b:50:88:81:e7:7a:44:f2:96:5e:61:3b:d2:32: ac:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:86:42:1D:09:78:FB:D7:1D:92:04:22:E1:F5:CD:82:65:E0:81:0F X509v3 Authority Key Identifier: keyid:AF:20:70:B1:26:05:31:FB:F0:69:F7:AE:72:8D:18:24:E0:19:72:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF2070B1260531FBF069F7AE728D1824E0197266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/AF2070B1260531FBF069F7AE728D1824E0197266.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6c:db:3c:c6:f3:5d:b4:dd:57:ad:24:ee:1e:d7:38:b7:af: 42:1a:29:d1:f4:48:5b:3f:0d:0c:0b:47:7a:81:e0:1f:fa:38: 18:15:95:74:c5:f3:75:32:78:67:23:06:7c:a4:ae:89:12:b4: f6:e9:2c:ae:bc:e0:c5:e1:59:1b:12:23:16:ca:a4:94:51:a3: 90:b5:5f:f3:cf:73:36:ba:bf:2e:3a:f2:05:1f:6c:6c:c7:31: 44:cf:31:bc:af:e9:55:91:69:63:6d:7d:a0:af:c3:67:ac:5c: 53:7b:3b:96:f5:34:4e:f9:59:dd:aa:c1:75:42:54:1e:a2:44: 48:fb:42:40:51:78:89:97:4a:fa:28:40:ef:f9:b7:00:1d:09: 64:49:0d:83:67:53:ab:99:6f:54:29:eb:99:63:f3:12:69:e2: be:af:29:34:6f:37:34:a4:59:05:b1:12:ac:8d:05:e8:9c:43: 21:6a:94:bb:be:80:d6:39:f2:b9:47:af:43:20:4d:52:b0:9c: d7:49:07:36:ad:9d:83:89:78:53:24:5e:c3:ff:e5:69:c5:bb: da:43:7c:6d:5f:e0:68:0c:00:55:b2:e5:56:3d:c3:3c:60:be: 72:d8:96:39:9e:ef:1f:9b:83:cf:63:91:79:c8:9f:67:c4:05: d5:aa:37:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLMFz57HsNVWa0/Ttd8ShncZpOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRF MDE5NzI2NjAeFw0yNjA2MTcyMzIxMDVaFw0yNjA2MTkwMTE0MDVaMDMxMTAvBgNV BAMTKDMzODY0MjFEMDk3OEZCRDcxRDkyMDQyMkUxRjVDRDgyNjVFMDgxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYCOsLAqTssIg52St+oKi6lRA R7B4Pt6UBUknenROb8SrHoZXerttQFXNzZUVfCgT2ixQk1dhk97orKnieASm+b0J hAyl3ieaAOmAZISFNcDAtFIZi4f28p+eaJurMdrWThD8rfXHXdxaLb99ZbsITC8z mcdOTz6nzny+fqInm2KXY79la9N9KfP8lG1yKn+zzMtYczUeQW1ezYMclUZPIxB+ rGRcOEu7yUbWUFo/Z498wv5CJ50icm0BAxA+TQ+CiKJL3b1avExcPFpeb8u2eHyy Zr/wSn3QOuttYcX/keabT4aTHRKPTUPyeLMsk5sLUIiB53pE8pZeYTvSMqyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4ZCHQl4+9cdkgQi4fXNgmXggQ8wHwYDVR0j BBgwFoAUryBwsSYFMfvwafeuco0YJOAZcmYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFmMTVhMWQtNWRhYy00Y2M5LTgxMWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEy NjA1MzFGQkYwNjlGN0FFNzI4RDE4MjRFMDE5NzI2Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjIwNzBCMTI2MDUzMUZCRjA2OUY3QUU3MjhEMTgyNEUwMTk3 MjY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFmMTVhMWQtNWRhYy00Y2M5LTgx MWEtZTQ5Y2I0ZTdiY2UxLzAvQUYyMDcwQjEyNjA1MzFGQkYwNjlGN0FFNzI4RDE4 MjRFMDE5NzI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9s2zzG81203VetJO4e1zi3r0IaKdH0SFs/ DQwLR3qB4B/6OBgVlXTF83UyeGcjBnykrokStPbpLK684MXhWRsSIxbKpJRRo5C1 X/PPcza6vy468gUfbGzHMUTPMbyv6VWRaWNtfaCvw2esXFN7O5b1NE75Wd2qwXVC VB6iREj7QkBReImXSvooQO/5twAdCWRJDYNnU6uZb1Qp65lj8xJp4r6vKTRvNzSk WQWxEqyNBeicQyFqlLu+gNY58rlHr0MgTVKwnNdJBzatnYOJeFMkXsP/5WnFu9pD fG1f4GgMAFWy5VY9wzxgvnLYljme7x+bg89jkXnIn2fEBdWqN/A= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:17 2026 by rpki-client