$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft File: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft (raw, json) Hash identifier: gr6jtPGUets8o0T2xTfJlomut9p+xq2dtxsIc7gKsjI= Subject key identifier: 3F:86:13:72:16:3E:B3:CD:13:49:0E:0F:6D:13:23:69:81:C1:0A:21 Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E Certificate issuer: /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Certificate serial: 3DA05980D28CC11BC150866DF624390A2719D7A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:31:27 +0000 Manifest this update: Wed 23 Sep 2026 16:26:27 +0000 Manifest next update: Thu 24 Sep 2026 17:45:27 +0000 Files and hashes: 1: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl (hash: FOAgbcglwnx7/imfrBexgz02SOdYPsnYALQDIcJNch8=) 2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: Nx3fcumdsqRiUqwqQ3R1jk6NstvkzNg1p4gYbPnIgK4=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a0:59:80:d2:8c:c1:1b:c1:50:86:6d:f6:24:39:0a:27:19:d7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Validity Not Before: Sep 23 16:26:27 2026 GMT Not After : Sep 24 17:45:27 2026 GMT Subject: CN=3F861372163EB3CD13490E0F6D13236981C10A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:c5:b8:94:e9:b2:5b:0a:91:7a:4c:ea:06: 1e:5b:91:d0:f3:94:aa:20:a3:69:77:d3:33:61:28: c0:d5:c5:99:63:22:24:0a:a5:05:37:fa:23:ef:9f: b7:3b:3b:fd:6e:56:5c:00:ad:f8:6d:50:9c:d3:2c: 3f:6a:b6:0a:cd:f3:2e:99:90:ae:a8:21:b8:e3:00: ed:8b:1b:68:a0:5b:dd:6b:29:48:36:d8:e1:b2:f5: 9d:88:9b:34:d7:2e:66:3b:12:62:c2:22:ed:ad:e2: 9b:ae:31:72:33:91:8c:18:62:5a:b7:c8:2c:84:7f: 90:62:7b:7e:15:bc:00:c5:68:4b:de:bb:2e:6c:85: 83:09:d0:90:74:5f:02:73:9a:b9:23:1e:69:e1:28: a5:0c:02:ce:65:6a:74:24:d1:af:d0:11:42:a9:70: 36:95:b4:90:f9:09:c9:56:f3:f4:6c:1f:ad:00:5d: 33:f6:09:dd:76:bd:72:35:b2:b9:5f:0b:88:df:7a: b2:5f:6e:cc:42:d7:1b:c9:52:b9:72:1c:bb:4a:67: 11:0c:9c:e2:26:1d:90:cf:f2:5b:0a:e9:de:3b:f7: 20:0f:c4:6c:ff:39:df:20:ad:ad:d9:e4:4a:d2:6d: b8:e8:d4:fa:b6:a4:53:b8:42:3a:9a:49:13:86:69: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:86:13:72:16:3E:B3:CD:13:49:0E:0F:6D:13:23:69:81:C1:0A:21 X509v3 Authority Key Identifier: keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c7:e1:09:4e:64:7e:af:4c:49:63:d0:db:90:73:1e:be:0d: de:b0:1b:58:ed:89:b6:b0:fe:33:19:21:26:35:05:12:43:fe: 1e:fc:79:8b:fc:af:65:d5:a9:7b:a9:30:fc:02:0d:6d:f8:7a: 1d:a1:7b:31:c1:64:50:c6:0f:0c:5a:99:90:ce:6a:1e:1c:a1: a3:a8:64:4f:2d:24:47:bb:73:df:b8:7a:bb:19:ca:97:57:e7: 68:91:79:ff:cc:e0:d4:a9:d7:1c:ed:35:07:a0:ca:fb:0a:16: fd:cb:fb:2b:3a:59:1b:97:a5:c6:d6:7a:a5:8b:e1:c4:8a:9c: 2a:8b:da:db:2a:11:65:d6:ae:e2:85:2d:80:bc:c9:d2:c1:3f: 2c:94:f5:02:94:cd:0c:4e:b9:49:05:09:84:6a:d2:a2:c4:a5: d6:6b:56:9e:47:59:1c:2b:2d:57:aa:a2:16:b9:2c:fd:2c:11: 9a:31:ab:66:1a:75:7a:4f:c1:ed:9f:6f:d1:e4:4d:a6:5e:7f: c5:94:f5:c5:a9:9a:a2:bf:a8:fd:3a:88:57:6c:65:14:b5:0c: 6f:44:4f:0a:3a:21:24:6d:d1:d4:c3:62:36:98:d9:be:98:f8: 43:ab:85:cf:5a:08:12:7e:7e:44:21:69:c8:f8:3c:f1:92:de: f8:b1:db:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPaBZgNKMwRvBUIZt9iQ5CicZ16gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VC Qzk5REI4RTAeFw0yNjA5MjMxNjI2MjdaFw0yNjA5MjQxNzQ1MjdaMDMxMTAvBgNV BAMTKDNGODYxMzcyMTYzRUIzQ0QxMzQ5MEUwRjZEMTMyMzY5ODFDMTBBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtScW4lOmyWwqRekzqBh5bkdDz lKogo2l30zNhKMDVxZljIiQKpQU3+iPvn7c7O/1uVlwArfhtUJzTLD9qtgrN8y6Z kK6oIbjjAO2LG2igW91rKUg22OGy9Z2ImzTXLmY7EmLCIu2t4puuMXIzkYwYYlq3 yCyEf5Bie34VvADFaEveuy5shYMJ0JB0XwJzmrkjHmnhKKUMAs5lanQk0a/QEUKp cDaVtJD5CclW8/RsH60AXTP2Cd12vXI1srlfC4jferJfbsxC1xvJUrlyHLtKZxEM nOImHZDP8lsK6d479yAPxGz/Od8gra3Z5ErSbbjo1Pq2pFO4QjqaSROGaduDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP4YTchY+s80TSQ4PbRMjaYHBCiEwHwYDVR0j BBgwFoAUcPbsHnI9be1CS5NFzD32zryZ244wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZkZDE1ZTMtOWVlNS00ZDUyLTllZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3 MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VCQzk5REI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY2RUMxRTcyM0Q2REVENDI0QjkzNDVDQzNERjZDRUJDOTlE QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2 Q0VCQzk5REI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXH4QlOZH6vTElj0NuQcx6+Dd6wG1jtibaw /jMZISY1BRJD/h78eYv8r2XVqXupMPwCDW34eh2hezHBZFDGDwxamZDOah4coaOo ZE8tJEe7c9+4ersZypdX52iRef/M4NSp1xztNQegyvsKFv3L+ys6WRuXpcbWeqWL 4cSKnCqL2tsqEWXWruKFLYC8ydLBPyyU9QKUzQxOuUkFCYRq0qLEpdZrVp5HWRwr LVeqoha5LP0sEZoxq2YadXpPwe2fb9HkTaZef8WU9cWpmqK/qP06iFdsZRS1DG9E Two6ISRt0dTDYjaY2b6Y+EOrhc9aCBJ+fkQhacj4PPGS3vix23k= -----END CERTIFICATE-----Generated at Wed Sep 23 22:18:18 2026 by rpki-client