$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft File: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft (raw, json) Hash identifier: P1Dez8C3pRaKk2K04RXE5cpHZRreBa5r0yns4c5egEo= Subject key identifier: 34:D7:E4:26:14:E4:EB:D2:5F:04:CD:8D:DB:A3:83:08:54:70:FF:22 Authority key identifier: F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 Certificate issuer: /CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Certificate serial: 7572E981E45CC7DC55C49882573B6456844A9D7A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft Manifest number: BF Signing time: Wed 23 Sep 2026 11:20:08 +0000 Manifest this update: Wed 23 Sep 2026 11:15:08 +0000 Manifest next update: Thu 24 Sep 2026 13:24:08 +0000 Files and hashes: 1: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl (hash: Rm3jbD58FJZRjL34cQ+to8z+vhHdp/5Gh7A6qfGofYE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:72:e9:81:e4:5c:c7:dc:55:c4:98:82:57:3b:64:56:84:4a:9d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Validity Not Before: Sep 23 11:15:08 2026 GMT Not After : Sep 24 13:24:08 2026 GMT Subject: CN=34D7E42614E4EBD25F04CD8DDBA383085470FF22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:65:d6:0f:6b:2b:ed:6c:12:71:ce:08:1b: 37:64:3b:21:f2:fc:d0:76:75:33:b7:9b:32:c1:37: 72:c3:33:0c:e1:a6:59:31:f1:8b:d4:f3:f8:0a:da: 2e:ce:38:2f:53:f8:0f:7f:3a:83:9e:bc:7c:68:63: 6d:b7:ef:5c:91:93:b9:c4:17:86:58:da:ae:8d:47: af:66:27:18:32:0e:74:10:a5:00:31:21:a9:db:b5: 8b:3d:82:57:a8:62:a8:56:1f:49:a9:4c:90:e8:5f: 62:aa:ce:2c:93:a8:0a:25:68:37:20:09:b5:12:98: 2d:8d:80:69:cc:72:81:81:f5:4d:e2:4b:27:86:b2: a8:8f:66:e9:de:c7:99:65:64:f2:2a:84:d2:eb:79: 95:28:bf:90:66:52:a0:ec:10:86:17:4a:94:c1:7b: a1:ea:18:99:e0:a8:fc:3a:4c:41:35:3a:7a:32:2c: ea:5d:cb:f7:0e:5c:de:a8:e4:8d:e2:0a:49:92:8c: 95:70:c1:a5:a1:e7:88:9a:bc:96:72:e0:94:08:ce: 69:da:1c:31:c9:10:d6:d5:ec:ef:26:8e:79:59:21: c8:5c:5b:94:1d:71:63:6b:d1:72:92:54:71:67:6e: 38:a5:2a:02:6c:bd:7e:ff:bf:ea:9b:ff:5b:0f:37: 16:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D7:E4:26:14:E4:EB:D2:5F:04:CD:8D:DB:A3:83:08:54:70:FF:22 X509v3 Authority Key Identifier: keyid:F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1e:37:e4:76:f0:f6:c1:ce:c6:b5:54:5b:16:99:e4:68:c0: 0b:6b:84:15:ef:b3:7c:56:cf:e0:24:d0:44:38:83:2f:18:f8: ca:be:55:13:d3:60:65:88:e4:b9:bc:50:25:3f:e2:c4:fa:d1: 71:67:0e:b1:f1:17:c8:b2:13:f2:92:fd:3b:f8:9b:50:71:c1: cb:59:52:d5:a9:12:18:7d:a0:d6:c8:31:a7:c3:69:4e:a7:c2: 7c:a3:14:19:aa:b3:f3:38:c6:c4:78:0f:7e:bc:1a:36:dc:d9: dd:57:ed:da:3c:cc:70:44:37:44:e0:c1:19:34:10:29:23:27: e1:71:8d:45:5e:4b:29:47:92:07:cf:4a:30:5e:3a:7e:5c:d3: 64:60:00:d3:dd:37:58:53:f7:d7:91:b3:2a:31:53:15:9e:cf: 57:7a:0c:0b:bd:0b:4c:46:89:f9:cb:5e:5e:b9:77:af:76:d1: 51:db:07:1d:9b:f4:3c:87:d3:82:8b:5c:e5:f1:8c:f7:f1:f9: 46:c7:12:d8:92:bd:fb:7c:ca:ac:0e:79:92:ce:9f:50:b2:77: e1:3c:d9:ec:74:b0:f6:b0:0c:6c:b5:28:63:84:48:15:8b:85: 46:74:0a:9c:35:cf:f9:44:2f:78:2f:4a:9f:0c:4d:0c:18:f2: ad:31:55:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXLpgeRcx9xVxJiCVztkVoRKnXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0 OThDNUNEMzAeFw0yNjA5MjMxMTE1MDhaFw0yNjA5MjQxMzI0MDhaMDMxMTAvBgNV BAMTKDM0RDdFNDI2MTRFNEVCRDI1RjA0Q0Q4RERCQTM4MzA4NTQ3MEZGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QmXWD2sr7WwScc4IGzdkOyHy /NB2dTO3mzLBN3LDMwzhplkx8YvU8/gK2i7OOC9T+A9/OoOevHxoY22371yRk7nE F4ZY2q6NR69mJxgyDnQQpQAxIanbtYs9gleoYqhWH0mpTJDoX2KqziyTqAolaDcg CbUSmC2NgGnMcoGB9U3iSyeGsqiPZunex5llZPIqhNLreZUov5BmUqDsEIYXSpTB e6HqGJngqPw6TEE1OnoyLOpdy/cOXN6o5I3iCkmSjJVwwaWh54iavJZy4JQIzmna HDHJENbV7O8mjnlZIchcW5QdcWNr0XKSVHFnbjilKgJsvX7/v+qb/1sPNxaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNNfkJhTk69JfBM2N26ODCFRw/yIwHwYDVR0j BBgwFoAU9w12AOASQmk8oOtcq5Ie4EmMXNMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBF MDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0OThDNUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzBENzYwMEUwMTI0MjY5M0NBMEVCNUNBQjkyMUVFMDQ5OEM1 Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFF RTA0OThDNUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEweN+R28PbBzsa1VFsWmeRowAtrhBXvs3xW z+Ak0EQ4gy8Y+Mq+VRPTYGWI5Lm8UCU/4sT60XFnDrHxF8iyE/KS/Tv4m1BxwctZ UtWpEhh9oNbIMafDaU6nwnyjFBmqs/M4xsR4D368Gjbc2d1X7do8zHBEN0TgwRk0 ECkjJ+FxjUVeSylHkgfPSjBeOn5c02RgANPdN1hT99eRsyoxUxWez1d6DAu9C0xG ifnLXl65d6920VHbBx2b9DyH04KLXOXxjPfx+UbHEtiSvft8yqwOeZLOn1Cyd+E8 2ex0sPawDGy1KGOESBWLhUZ0Cpw1z/lEL3gvSp8MTQwY8q0xVXk= -----END CERTIFICATE-----Generated at Wed Sep 23 22:18:17 2026 by rpki-client