$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft File: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft (raw, json) Hash identifier: khJGqEcdHEo1ze3q4jcrenKmjjPfv2PFCs2XppqvWJk= Subject key identifier: AF:C7:3F:A2:A4:2D:23:D3:69:E4:24:35:37:81:F6:7C:3F:55:07:11 Authority key identifier: 70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 Certificate issuer: /CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Certificate serial: 7C4CD92F072B70CF0F20E93FE150C14D7180EB97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:45:12 +0000 Manifest this update: Thu 24 Sep 2026 15:40:12 +0000 Manifest next update: Fri 25 Sep 2026 17:05:12 +0000 Files and hashes: 1: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl (hash: nq+BKwYtS3p5y6EY+NpWTog/v0yxmJ8olvKSU7kvN3o=) 2: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: hpiL6+O2y1i6nQTaaXJTYqIKZW0DPxyBBggb24eEX0o=) 3: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: keOPkaU9xFvf9rbttWbatnRuZitbsiWuBrO+qREpte8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4c:d9:2f:07:2b:70:cf:0f:20:e9:3f:e1:50:c1:4d:71:80:eb:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Validity Not Before: Sep 24 15:40:12 2026 GMT Not After : Sep 25 17:05:12 2026 GMT Subject: CN=AFC73FA2A42D23D369E424353781F67C3F550711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:15:0b:7f:f6:10:02:6a:ff:59:95:74:5b: 13:92:1f:47:32:ee:76:73:b0:c9:93:4c:37:15:ab: 58:be:36:9a:2f:65:d9:b6:ab:f8:c7:74:9e:1b:9e: 60:68:d1:b0:2c:3d:73:88:d9:71:3b:bf:c7:83:27: f3:98:bc:00:d9:f1:e2:89:8f:0e:a3:a5:7d:64:83: 97:b6:28:0a:2b:53:56:f5:5c:fc:15:37:ea:55:34: c2:05:d7:4d:4a:1a:2c:27:43:d9:54:61:f5:b5:81: c6:52:15:23:4d:9d:db:56:10:1d:8c:b5:5d:b6:ec: 5a:ce:6b:1b:52:9e:d8:b5:55:10:41:b0:ec:25:fe: 10:db:29:c7:b1:76:26:ca:6a:01:7a:8c:0d:32:7b: 20:d0:54:28:e8:fe:34:57:25:08:02:28:e8:07:9f: e5:7e:38:3b:0c:6f:52:f7:a8:63:b2:a5:cd:a3:b2: 25:3a:33:5c:6d:88:a5:4b:63:97:0f:4e:4e:65:a5: cf:94:a8:92:79:ad:fb:5e:04:43:61:44:88:5c:a0: ac:ba:29:3d:8f:dd:1d:69:fd:02:77:9d:60:fe:71: 8f:7e:26:b9:ce:01:15:75:ac:b8:78:19:39:41:ac: d9:b1:45:89:7d:85:f4:4d:e8:3c:22:1d:a1:95:5d: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C7:3F:A2:A4:2D:23:D3:69:E4:24:35:37:81:F6:7C:3F:55:07:11 X509v3 Authority Key Identifier: keyid:70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:6a:f2:a3:4f:76:63:b5:ab:ee:2d:07:61:92:8f:be:3d:ec: 44:29:a8:c3:44:ab:60:52:07:ed:42:ae:e5:63:be:4a:6b:99: 27:5c:4c:7e:64:64:c5:00:a3:e5:fd:f1:99:a8:b8:5d:37:c8: 75:1d:1e:9f:74:a1:6f:dc:58:f5:72:ee:e3:8b:61:28:cf:4d: e3:b7:4f:b7:02:cb:f6:0f:87:1a:54:18:89:d1:17:d4:c1:83: 1f:03:77:58:a2:70:eb:26:7e:e6:c7:b8:74:67:ee:23:91:e8: 19:d6:ea:4d:ba:2f:4e:27:fd:4a:94:1b:84:8e:8a:98:8d:b9: 48:1f:1d:f1:d4:ed:58:b9:74:f2:cd:45:e7:a5:fb:4a:e4:2f: 85:0f:fb:f9:1a:8e:55:60:93:95:9c:c4:a6:f9:5f:6f:b9:cb: 06:76:71:07:7e:73:04:42:bb:6a:8e:73:ec:15:a1:fd:ff:4f: 5b:1e:41:96:54:9e:12:43:9c:01:cd:e7:ce:0f:b0:d8:37:9f: 5d:21:f7:06:31:3c:ba:c9:24:95:cd:3b:34:36:52:6a:af:e2: bd:c7:ef:91:ef:5a:3f:5c:1b:81:aa:9a:74:27:44:f1:1c:6b: 87:ca:ff:22:ff:00:c6:a5:fb:50:21:70:ed:f9:ca:a4:f2:99: 21:3a:57:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEzZLwcrcM8PIOk/4VDBTXGA65cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4 QjIzNjRBODAeFw0yNjA5MjQxNTQwMTJaFw0yNjA5MjUxNzA1MTJaMDMxMTAvBgNV BAMTKEFGQzczRkEyQTQyRDIzRDM2OUU0MjQzNTM3ODFGNjdDM0Y1NTA3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUMRULf/YQAmr/WZV0WxOSH0cy 7nZzsMmTTDcVq1i+NpovZdm2q/jHdJ4bnmBo0bAsPXOI2XE7v8eDJ/OYvADZ8eKJ jw6jpX1kg5e2KAorU1b1XPwVN+pVNMIF101KGiwnQ9lUYfW1gcZSFSNNndtWEB2M tV227FrOaxtSnti1VRBBsOwl/hDbKcexdibKagF6jA0yeyDQVCjo/jRXJQgCKOgH n+V+ODsMb1L3qGOypc2jsiU6M1xtiKVLY5cPTk5lpc+UqJJ5rfteBENhRIhcoKy6 KT2P3R1p/QJ3nWD+cY9+JrnOARV1rLh4GTlBrNmxRYl9hfRN6DwiHaGVXV+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr8c/oqQtI9Np5CQ1N4H2fD9VBxEwHwYDVR0j BBgwFoAUcLVONNzwcBKQt5Lm6grpAIsjZKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYxNmMwNGQtZDllMC00YzFmLThhMTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzRE Q0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4QjIzNjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MEI1NEUzNERDRjA3MDEyOTBCNzkyRTZFQTBBRTkwMDhCMjM2 NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5 MDA4QjIzNjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVq8qNPdmO1q+4tB2GSj7497EQpqMNEq2BS B+1CruVjvkprmSdcTH5kZMUAo+X98ZmouF03yHUdHp90oW/cWPVy7uOLYSjPTeO3 T7cCy/YPhxpUGInRF9TBgx8Dd1iicOsmfubHuHRn7iOR6BnW6k26L04n/UqUG4SO ipiNuUgfHfHU7Vi5dPLNReel+0rkL4UP+/kajlVgk5WcxKb5X2+5ywZ2cQd+cwRC u2qOc+wVof3/T1seQZZUnhJDnAHN584PsNg3n10h9wYxPLrJJJXNOzQ2Umqv4r3H 75HvWj9cG4GqmnQnRPEca4fK/yL/AMal+1AhcO35yqTymSE6V0c= -----END CERTIFICATE-----Generated at Fri Sep 25 04:49:34 2026 by rpki-client