$ rpki-client -vvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft File: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft (raw, json) Hash identifier: CIzc0FAXQB5SMlv+ALZnlUnQXFYcBeiy8CtSgLROv0s= Subject key identifier: 52:D8:69:39:B2:11:60:32:54:1A:3F:F3:1C:C5:BE:EA:92:F1:F0:AE Authority key identifier: F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 Certificate issuer: /CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Certificate serial: 695040F1393C39D31C0AFF5F8D0DFEF7CBD6C3E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft Manifest number: 0E Signing time: Tue 12 May 2026 12:58:11 +0000 Manifest this update: Tue 12 May 2026 12:53:11 +0000 Manifest next update: Wed 13 May 2026 16:07:11 +0000 Files and hashes: 1: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl (hash: BngJqN810rKLhOCBtEdOoxBQe2M/quMnXjxPH9evQwA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:50:40:f1:39:3c:39:d3:1c:0a:ff:5f:8d:0d:fe:f7:cb:d6:c3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Validity Not Before: May 12 12:53:11 2026 GMT Not After : May 13 16:07:11 2026 GMT Subject: CN=52D86939B2116032541A3FF31CC5BEEA92F1F0AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:ea:33:9b:3b:84:92:a2:7b:18:12:31:e7: 19:e0:de:6d:16:da:c7:af:7f:49:63:4a:29:c2:1e: 6f:74:54:e9:9a:41:49:e3:3e:97:07:3d:f4:aa:63: 2a:47:96:c2:f8:cb:af:b6:cb:f8:e2:c5:5c:d2:0c: 15:9b:fd:6f:0b:ea:9b:96:2e:e1:56:bc:56:2c:ff: 72:34:3c:ec:70:f6:30:91:61:19:5c:6c:1c:18:e8: 8c:1e:17:fb:d5:c1:e9:e3:36:e3:2e:05:d0:b4:e0: 77:b0:b6:26:aa:87:f3:e9:9e:da:eb:91:ae:b0:99: 93:ed:1f:60:13:41:89:f7:2a:c1:ae:38:4e:e8:fd: 34:23:21:3c:85:80:e6:02:d3:6f:d4:ac:80:62:9d: 52:11:5d:07:62:28:43:43:a9:29:27:4d:1e:eb:34: aa:e3:7c:5f:aa:64:66:78:a3:59:d7:2d:e3:3a:bc: d5:4c:45:c4:83:ff:34:6c:bf:08:79:dd:a9:2b:0a: 4a:50:32:01:fe:94:83:26:76:9a:bc:25:0c:95:c1: f5:33:8d:d4:d7:a2:e0:ec:93:d1:22:da:9f:02:e5: 6e:af:91:25:e0:e2:39:87:04:28:fa:4f:02:de:38: 34:3b:52:4d:7b:1b:d3:b4:fb:76:2a:34:ce:e7:b4: cf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:69:39:B2:11:60:32:54:1A:3F:F3:1C:C5:BE:EA:92:F1:F0:AE X509v3 Authority Key Identifier: keyid:F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:65:4c:ac:a8:da:0b:75:68:9f:41:7e:eb:54:cd:16:c9:ed: 23:04:78:1d:a4:9e:80:b4:01:90:c7:24:da:fd:b8:bb:6b:50: f3:97:78:00:3d:cf:72:a8:d1:d6:5e:5d:ca:d1:22:59:27:32: e6:b1:d0:0e:65:34:10:4e:87:03:c7:8e:1f:38:71:6f:e2:8b: 35:a2:37:29:fb:9d:8c:0b:ca:a6:20:ef:45:74:91:07:71:17: 7e:cb:ae:26:3f:54:9a:19:03:81:71:8b:b9:05:44:a3:e1:89: aa:ed:a4:9d:58:0b:43:c2:da:e5:94:b1:ff:1d:e8:80:d2:d9: c2:ef:11:9f:2d:02:b4:9b:ce:1a:47:bb:a1:91:be:db:aa:48: 3d:5e:af:81:e8:19:1c:a5:30:8c:f9:d3:65:0e:58:a5:e2:48: 8b:9b:58:8d:89:d2:2b:c6:f5:e0:77:34:de:1d:9d:8e:d1:f4: 63:2b:ce:43:b8:ae:48:2f:c2:2f:07:57:6e:73:f7:68:da:16: fa:61:7e:b7:8c:e9:92:8a:62:5e:3d:70:22:00:53:75:64:c6: bf:a1:11:26:8b:cf:41:a0:69:2b:11:a2:0a:88:ee:12:aa:67: 06:d1:b0:8f:bf:46:4a:ff:b0:53:d3:7f:6c:8a:70:3b:8a:9e: 92:9f:d7:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVBA8Tk8OdMcCv9fjQ3+98vWw+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0 OThDNUNEMzAeFw0yNjA1MTIxMjUzMTFaFw0yNjA1MTMxNjA3MTFaMDMxMTAvBgNV BAMTKDUyRDg2OTM5QjIxMTYwMzI1NDFBM0ZGMzFDQzVCRUVBOTJGMUYwQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5HuozmzuEkqJ7GBIx5xng3m0W 2sevf0ljSinCHm90VOmaQUnjPpcHPfSqYypHlsL4y6+2y/jixVzSDBWb/W8L6puW LuFWvFYs/3I0POxw9jCRYRlcbBwY6IweF/vVwenjNuMuBdC04Hewtiaqh/Ppntrr ka6wmZPtH2ATQYn3KsGuOE7o/TQjITyFgOYC02/UrIBinVIRXQdiKENDqSknTR7r NKrjfF+qZGZ4o1nXLeM6vNVMRcSD/zRsvwh53akrCkpQMgH+lIMmdpq8JQyVwfUz jdTXouDsk9Ei2p8C5W6vkSXg4jmHBCj6TwLeODQ7Uk17G9O0+3YqNM7ntM/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUthpObIRYDJUGj/zHMW+6pLx8K4wHwYDVR0j BBgwFoAU9w12AOASQmk8oOtcq5Ie4EmMXNMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBF MDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0OThDNUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzBENzYwMEUwMTI0MjY5M0NBMEVCNUNBQjkyMUVFMDQ5OEM1 Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFF RTA0OThDNUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9lTKyo2gt1aJ9BfutUzRbJ7SMEeB2knoC0 AZDHJNr9uLtrUPOXeAA9z3Ko0dZeXcrRIlknMuax0A5lNBBOhwPHjh84cW/iizWi Nyn7nYwLyqYg70V0kQdxF37LriY/VJoZA4Fxi7kFRKPhiartpJ1YC0PC2uWUsf8d 6IDS2cLvEZ8tArSbzhpHu6GRvtuqSD1er4HoGRylMIz502UOWKXiSIubWI2J0ivG 9eB3NN4dnY7R9GMrzkO4rkgvwi8HV25z92jaFvphfreM6ZKKYl49cCIAU3Vkxr+h ESaLz0GgaSsRogqI7hKqZwbRsI+/Rkr/sFPTf2yKcDuKnpKf110= -----END CERTIFICATE-----Generated at Tue May 12 22:47:26 2026 by rpki-client