$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft File: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft (raw, json) Hash identifier: WB9aawwoUavCqp5huJoHus4hx82IYixt1ZzTEkO2KPs= Subject key identifier: 54:75:58:2C:46:B5:B4:7D:1E:68:C1:65:59:08:D6:CF:FE:2B:C1:C3 Authority key identifier: 70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E Certificate issuer: /CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Certificate serial: 43B8968A3AB9C69815259DBB0F757CD20D472863 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 20:56:57 +0000 Manifest this update: Wed 23 Sep 2026 20:51:57 +0000 Manifest next update: Fri 25 Sep 2026 00:16:57 +0000 Files and hashes: 1: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: hBvRTYXcnJk6N7ngUO2oUV6tmwOrz7l2Poiy/ABHqPM=) 2: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: PDVvmstV3iaWyvXstEgcHTvDFJJ9Dg2QcyyOCEhL1rA=) 3: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl (hash: GtcsYiyDViyYmeB2jyNFYNTW9BBXZq0BhgGaBHqwheU=) 4: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: X9vWw5/8oy+SYlKkHILaaaMhFfsqtUesHOd+majUa+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b8:96:8a:3a:b9:c6:98:15:25:9d:bb:0f:75:7c:d2:0d:47:28:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Validity Not Before: Sep 23 20:51:57 2026 GMT Not After : Sep 25 00:16:57 2026 GMT Subject: CN=5475582C46B5B47D1E68C1655908D6CFFE2BC1C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:13:d4:1f:a0:34:1f:25:5f:85:fe:80:e7: cb:ac:fd:95:ae:b4:30:72:f4:26:4f:8a:c5:e2:34: 4d:f7:84:04:75:38:02:21:20:04:30:56:6d:20:3f: 0b:8d:d5:39:b0:8b:37:c5:f5:58:37:99:51:4b:4c: 06:23:2f:61:4a:78:0f:9f:57:70:d0:c4:7b:e0:35: 8d:39:f3:8e:e8:14:36:fb:89:78:5b:6e:70:41:36: 8e:50:ae:9a:0b:80:17:67:e9:52:37:78:39:fc:d0: 20:4f:33:11:c5:ab:5d:8e:9d:ad:c1:d6:8e:1a:ee: 14:b6:13:97:4e:7e:eb:4c:00:bb:29:b8:d3:74:02: 68:1b:9c:f3:ec:a0:b3:19:20:1d:59:0d:48:1e:e8: f6:72:ad:27:ea:16:85:3c:ba:42:c5:1a:08:2e:80: 86:3c:76:2b:8d:54:31:94:8d:e3:1e:2c:34:8e:a8: c7:5f:a1:30:c3:31:91:ea:ec:91:93:de:70:b8:ec: 3c:36:73:bf:78:c4:1c:7c:cd:74:cb:74:ab:0d:ae: d4:c8:5a:19:6c:fb:27:db:45:d0:57:49:84:c2:a0: 0f:fc:3d:c5:40:c4:6a:86:08:da:a6:bf:18:fc:33: 07:eb:54:f8:4f:61:65:f1:e4:70:fc:06:e9:86:b3: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:75:58:2C:46:B5:B4:7D:1E:68:C1:65:59:08:D6:CF:FE:2B:C1:C3 X509v3 Authority Key Identifier: keyid:70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:04:6b:9f:ae:3e:4d:de:7b:a4:32:4d:d1:2e:82:09:42:86: 43:5a:af:39:c1:a6:fc:84:28:a6:1d:7e:29:f8:32:07:e9:f7: 1e:1a:1b:45:23:e7:05:3c:1c:ba:a5:b7:11:1b:9e:bb:d0:5b: fa:03:a1:5c:e9:31:d7:f6:af:a3:03:0e:0d:1f:e3:d0:5e:10: f3:6d:93:35:fe:78:77:18:7e:d6:6d:e2:99:cb:64:55:be:e9: f1:66:ba:8c:02:84:d0:3c:1d:9c:72:cd:bd:3f:f5:13:44:62: 14:53:b1:63:12:59:af:6c:43:fc:6a:c2:8a:fe:db:85:e0:d5: 60:27:cd:c8:67:8e:5e:b1:8c:b5:5a:69:d7:a0:00:82:58:2f: 6a:5e:df:0e:7f:7d:63:3d:49:15:b2:8e:13:2c:c8:64:e2:36: 6c:46:c6:01:f5:06:4d:50:13:e2:29:be:8a:62:0a:0b:4c:8b: f2:34:92:ee:ea:b8:66:cf:fd:1e:30:f5:5c:78:4c:a0:3a:41: db:04:83:31:51:31:51:a9:0d:c1:f5:f3:5d:34:37:93:46:f6: 5f:22:89:15:28:f6:af:52:6b:09:6a:1c:77:8a:2a:37:4b:e7: 8d:a7:b8:54:d8:f8:aa:7b:48:24:8b:98:8a:6a:24:a0:bb:24: 31:67:2d:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7iWijq5xpgVJZ27D3V80g1HKGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2REQz NDU4OUI0RTAeFw0yNjA5MjMyMDUxNTdaFw0yNjA5MjUwMDE2NTdaMDMxMTAvBgNV BAMTKDU0NzU1ODJDNDZCNUI0N0QxRTY4QzE2NTU5MDhENkNGRkUyQkMxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7AhPUH6A0HyVfhf6A58us/ZWu tDBy9CZPisXiNE33hAR1OAIhIAQwVm0gPwuN1TmwizfF9Vg3mVFLTAYjL2FKeA+f V3DQxHvgNY05847oFDb7iXhbbnBBNo5QrpoLgBdn6VI3eDn80CBPMxHFq12Ona3B 1o4a7hS2E5dOfutMALspuNN0AmgbnPPsoLMZIB1ZDUge6PZyrSfqFoU8ukLFGggu gIY8diuNVDGUjeMeLDSOqMdfoTDDMZHq7JGT3nC47Dw2c794xBx8zXTLdKsNrtTI Whls+yfbRdBXSYTCoA/8PcVAxGqGCNqmvxj8MwfrVPhPYWXx5HD8BumGs+VbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVHVYLEa1tH0eaMFlWQjWz/4rwcMwHwYDVR0j BBgwFoAUcMzgMfEETe5sr1ZbE3X23TRYm04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZjZjdjOWUtZjhjMy00MDE1LTg4MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFG MTA0NERFRTZDQUY1NjVCMTM3NUY2REQzNDU4OUI0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MENDRTAzMUYxMDQ0REVFNkNBRjU2NUIxMzc1RjZERDM0NTg5 QjRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2 REQzNDU4OUI0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQEa5+uPk3ee6QyTdEugglChkNarznBpvyE KKYdfin4Mgfp9x4aG0Uj5wU8HLqltxEbnrvQW/oDoVzpMdf2r6MDDg0f49BeEPNt kzX+eHcYftZt4pnLZFW+6fFmuowChNA8HZxyzb0/9RNEYhRTsWMSWa9sQ/xqwor+ 24Xg1WAnzchnjl6xjLVaadegAIJYL2pe3w5/fWM9SRWyjhMsyGTiNmxGxgH1Bk1Q E+IpvopiCgtMi/I0ku7quGbP/R4w9Vx4TKA6QdsEgzFRMVGpDcH18100N5NG9l8i iRUo9q9SawlqHHeKKjdL542nuFTY+Kp7SCSLmIpqJKC7JDFnLek= -----END CERTIFICATE-----Generated at Thu Sep 24 05:30:42 2026 by rpki-client