$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft File: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft (raw, json) Hash identifier: lkr/Ol6ov0enMsFZIDKPqOGwmKwfX/3b5Rk2DAyw8MU= Subject key identifier: 16:82:88:3C:76:AF:65:A5:91:7F:F6:51:76:27:49:0F:1E:DA:27:19 Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E Certificate issuer: /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Certificate serial: 0D396EA4A588BEDAECF97A46795427D58E3C39A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 19:29:02 +0000 Manifest this update: Sat 14 Nov 2026 19:24:02 +0000 Manifest next update: Sun 15 Nov 2026 23:07:02 +0000 Files and hashes: 1: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I=) 2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: Nx3fcumdsqRiUqwqQ3R1jk6NstvkzNg1p4gYbPnIgK4=) 3: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl (hash: hX5gTaEvCntmAfrAGOThWcjwEzdl0kN0sYKk+mZGawA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:39:6e:a4:a5:88:be:da:ec:f9:7a:46:79:54:27:d5:8e:3c:39:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Validity Not Before: Nov 14 19:24:02 2026 GMT Not After : Nov 15 23:07:02 2026 GMT Subject: CN=1682883C76AF65A5917FF6517627490F1EDA2719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:4b:56:74:da:eb:16:3e:31:40:6b:95:4c:5c: 1a:af:21:3d:ba:c4:d3:54:a9:c0:74:8a:61:55:e5: d8:11:b4:85:f8:d3:25:3d:62:5a:05:63:f3:b8:19: 59:48:67:7a:66:d9:71:90:29:64:c6:7d:58:18:56: c4:67:7e:3b:4f:b9:1d:da:e3:ab:65:6e:e9:bc:7e: 72:39:49:d3:01:07:ce:8d:30:e4:7b:6e:ab:23:fe: d9:da:1c:e6:24:6b:74:80:6d:34:c5:f4:0d:e0:40: e1:1f:56:12:0e:0e:e9:88:fd:33:c2:00:63:ed:cd: 8c:35:28:28:00:8a:d9:2f:ac:8d:15:07:60:66:b7: d5:d5:d2:89:3a:58:92:04:21:5a:bd:f7:19:ff:e6: 38:04:f6:a1:23:26:07:6d:51:db:24:e6:c1:83:74: ab:fa:bc:11:a0:99:1d:79:c6:d1:ef:ad:17:43:6e: 40:9d:41:ce:14:c8:74:63:0e:81:87:51:b4:f1:26: 2e:51:41:a6:87:4c:76:d4:ef:59:b9:5e:20:39:3d: 40:cb:31:84:f6:4f:e3:67:ec:d4:cc:a7:a2:e4:d3: 8a:af:ba:1d:67:c2:98:6a:a1:99:1a:d3:52:e4:6c: 67:60:bc:54:4a:ba:ba:78:f4:6e:6a:c4:1e:ad:14: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:82:88:3C:76:AF:65:A5:91:7F:F6:51:76:27:49:0F:1E:DA:27:19 X509v3 Authority Key Identifier: keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ef:5b:4c:3e:5c:c7:a5:6c:32:1f:59:e4:96:f0:e3:af:a7:7e: ba:d5:2a:ee:a6:e2:d6:d7:cb:da:5d:75:0b:e0:6d:75:aa:2d: 96:fd:cd:c0:0e:cb:4a:6c:93:47:4f:e9:73:39:d8:ff:e1:01: 74:0a:11:6b:86:59:49:75:f5:2b:ed:a2:a6:8e:5f:ef:f6:1a: f3:c8:26:66:7c:07:b1:0c:35:06:77:b4:a4:08:ea:d2:64:dc: 8d:03:4b:50:95:77:47:35:93:71:1b:49:c2:ab:9c:51:fe:c3: b4:b4:1f:01:5b:b5:6c:bc:4f:c8:c4:2d:71:89:54:0d:fb:86: 09:a0:f0:c9:66:ba:1b:80:4d:91:3b:34:bb:29:b5:e3:26:e7: b4:f8:b3:22:25:6a:47:4d:51:45:a9:59:ec:19:66:d5:3f:b1: 9c:ae:a8:9b:36:45:3d:5e:86:43:0a:e5:8c:a9:04:27:ac:22: 54:d5:e4:ee:07:cc:cb:ab:aa:2e:90:4d:50:1e:bd:cd:b5:72: bd:45:13:c9:2e:57:6e:66:2f:97:79:34:13:9e:dc:72:f9:71: 71:6d:c5:26:dc:32:1f:8c:f2:f8:ba:c1:7a:a2:62:21:91:30: 5a:00:d6:4b:19:6b:7d:c1:b3:e2:bd:9b:28:1d:81:80:06:80: 6e:b9:02:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDTlupKWIvtrs+XpGeVQn1Y48OaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VC Qzk5REI4RTAeFw0yNjExMTQxOTI0MDJaFw0yNjExMTUyMzA3MDJaMDMxMTAvBgNV BAMTKDE2ODI4ODNDNzZBRjY1QTU5MTdGRjY1MTc2Mjc0OTBGMUVEQTI3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3S1Z02usWPjFAa5VMXBqvIT26 xNNUqcB0imFV5dgRtIX40yU9YloFY/O4GVlIZ3pm2XGQKWTGfVgYVsRnfjtPuR3a 46tlbum8fnI5SdMBB86NMOR7bqsj/tnaHOYka3SAbTTF9A3gQOEfVhIODumI/TPC AGPtzYw1KCgAitkvrI0VB2Bmt9XV0ok6WJIEIVq99xn/5jgE9qEjJgdtUdsk5sGD dKv6vBGgmR15xtHvrRdDbkCdQc4UyHRjDoGHUbTxJi5RQaaHTHbU71m5XiA5PUDL MYT2T+Nn7NTMp6Lk04qvuh1nwphqoZka01LkbGdgvFRKurp49G5qxB6tFG49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFoKIPHavZaWRf/ZRdidJDx7aJxkwHwYDVR0j BBgwFoAUcPbsHnI9be1CS5NFzD32zryZ244wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZkZDE1ZTMtOWVlNS00ZDUyLTllZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3 MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VCQzk5REI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY2RUMxRTcyM0Q2REVENDI0QjkzNDVDQzNERjZDRUJDOTlE QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2 Q0VCQzk5REI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO9bTD5cx6VsMh9Z5Jbw46+nfrrVKu6m4tbX y9pddQvgbXWqLZb9zcAOy0psk0dP6XM52P/hAXQKEWuGWUl19SvtoqaOX+/2GvPI JmZ8B7EMNQZ3tKQI6tJk3I0DS1CVd0c1k3EbScKrnFH+w7S0HwFbtWy8T8jELXGJ VA37hgmg8MlmuhuATZE7NLspteMm57T4syIlakdNUUWpWewZZtU/sZyuqJs2RT1e hkMK5YypBCesIlTV5O4HzMurqi6QTVAevc21cr1FE8kuV25mL5d5NBOe3HL5cXFt xSbcMh+M8vi6wXqiYiGRMFoA1ksZa33Bs+K9mygdgYAGgG65Avo= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:17 2026 by rpki-client