$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft File: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft (raw, json) Hash identifier: y1uVM5cxRlBG8x9i02BIdWnXC8oBe/KaylVe3y+IBtE= Subject key identifier: B4:B0:25:B6:35:E1:65:2A:B3:2B:60:AE:05:F8:A3:0F:05:01:33:60 Authority key identifier: C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 Certificate issuer: /CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Certificate serial: 7DD3E34A5700C9B8DBA347E83A87E7057C875458 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 12:31:19 +0000 Manifest this update: Thu 24 Sep 2026 12:26:19 +0000 Manifest next update: Fri 25 Sep 2026 12:49:19 +0000 Files and hashes: 1: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: IG22wGAeafPyZiCHJfimAg7HtJoJBGXUaInRtJgtJX8=) 2: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl (hash: VpE120FoLf4qllMkemr+3T0k16nh1DSq0NwVjB0KB78=) 3: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: RMvUFQrKL018cFixmOMzozWh6kTAtIwXuWq18nozxuA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d3:e3:4a:57:00:c9:b8:db:a3:47:e8:3a:87:e7:05:7c:87:54:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Validity Not Before: Sep 24 12:26:19 2026 GMT Not After : Sep 25 12:49:19 2026 GMT Subject: CN=B4B025B635E1652AB32B60AE05F8A30F05013360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:fc:0d:da:73:05:39:96:91:5d:06:75:74: 50:8b:b0:ed:9f:be:9b:79:8a:65:f2:f3:7c:f3:7a: 85:67:1d:ee:72:83:3b:b7:96:da:9d:8f:02:a4:52: 52:1c:0d:54:ed:f5:f1:ab:63:db:3c:75:14:9c:4e: b2:36:e5:4e:e2:07:48:64:67:c0:ee:73:fe:c4:28: 96:e9:c0:6e:46:c4:f6:d4:f1:91:12:9a:14:5d:c1: 0a:56:6f:5e:13:62:a5:c8:3f:5b:2d:c7:10:9b:79: ef:df:dd:9d:9c:46:93:71:dd:5a:3b:a6:5d:47:95: b7:f7:f7:6f:a6:2a:eb:65:9e:ec:0b:52:88:95:89: e2:4e:61:2f:5b:de:10:6a:82:54:4d:56:21:43:f5: 4d:9c:02:6b:3a:4c:3a:46:aa:a4:67:ce:ff:15:e9: 34:f8:93:1b:27:b1:03:dc:3d:1d:a3:86:ba:92:49: bc:2d:cc:09:d5:49:15:e8:3a:17:8a:65:70:f5:a9: b2:62:4a:c7:3f:64:e6:5d:8b:3d:13:fb:68:a1:f0: b0:96:54:91:79:fb:04:95:64:10:df:36:e0:38:ca: 9b:f1:20:70:45:28:58:9b:72:1b:57:4d:dd:43:b0: 5e:e5:f1:ae:4a:28:9b:79:b5:ad:e2:a5:a5:38:34: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B0:25:B6:35:E1:65:2A:B3:2B:60:AE:05:F8:A3:0F:05:01:33:60 X509v3 Authority Key Identifier: keyid:C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:6d:fa:94:d5:f9:38:e0:f5:18:80:d7:c5:65:cc:18:cc:5b: cf:f1:96:52:bc:08:9a:f7:c7:38:68:e0:d7:c2:1d:12:6f:05: ee:68:ea:2d:c3:0e:e3:0c:df:a2:59:f2:25:2b:31:58:00:48: da:af:06:99:22:b0:fe:9c:e9:49:1a:ea:de:f4:7e:c5:ef:c1: d2:2d:55:b4:0e:76:0e:dc:38:5c:7f:1e:f8:83:fa:9b:2c:36: 29:7e:70:fe:1e:ad:37:b3:0a:31:46:ef:cc:b5:8a:54:cd:b4: c9:89:42:e3:3b:75:8b:a0:df:77:1a:74:3b:74:ea:cf:af:79: 4e:37:a5:62:85:c9:be:12:ae:78:81:e4:8f:54:8c:7e:23:d8: f0:0f:81:cc:9c:76:e3:54:d2:79:d1:cd:27:9b:5a:03:87:0a: a4:ba:09:2c:4a:31:9d:f3:22:ce:17:e2:6b:e7:7f:ac:9a:8b: dd:b5:3b:da:a6:b0:3a:40:dd:72:ce:b0:06:dc:f0:71:b8:ec: df:9a:f1:ec:47:f0:d9:97:b5:8e:a4:b2:bb:35:f1:45:f6:ed: a0:7d:b1:28:9b:14:13:98:3b:7d:7f:8a:be:96:f0:29:68:28: f6:0c:8c:ef:d0:7d:dc:ef:d8:df:b8:b7:e4:20:ff:5f:04:86: 36:5c:06:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdPjSlcAybjbo0foOofnBXyHVFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlD MDQ3MkI1MDAeFw0yNjA5MjQxMjI2MTlaFw0yNjA5MjUxMjQ5MTlaMDMxMTAvBgNV BAMTKEI0QjAyNUI2MzVFMTY1MkFCMzJCNjBBRTA1RjhBMzBGMDUwMTMzNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykfwN2nMFOZaRXQZ1dFCLsO2f vpt5imXy83zzeoVnHe5ygzu3ltqdjwKkUlIcDVTt9fGrY9s8dRScTrI25U7iB0hk Z8Duc/7EKJbpwG5GxPbU8ZESmhRdwQpWb14TYqXIP1stxxCbee/f3Z2cRpNx3Vo7 pl1Hlbf392+mKutlnuwLUoiVieJOYS9b3hBqglRNViFD9U2cAms6TDpGqqRnzv8V 6TT4kxsnsQPcPR2jhrqSSbwtzAnVSRXoOheKZXD1qbJiSsc/ZOZdiz0T+2ih8LCW VJF5+wSVZBDfNuA4ypvxIHBFKFibchtXTd1DsF7l8a5KKJt5ta3ipaU4NL+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtLAltjXhZSqzK2CuBfijDwUBM2AwHwYDVR0j BBgwFoAUxwqifmAZfQLw3M2OeST/+cBHK1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlODM2NzMtMDk2YS00NDBjLWIyN2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2 MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlDMDQ3MkI1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzBBQTI3RTYwMTk3RDAyRjBEQ0NEOEU3OTI0RkZGOUMwNDcy QjUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZG RjlDMDQ3MkI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNt+pTV+Tjg9RiA18VlzBjMW8/xllK8CJr3 xzho4NfCHRJvBe5o6i3DDuMM36JZ8iUrMVgASNqvBpkisP6c6Uka6t70fsXvwdIt VbQOdg7cOFx/HviD+pssNil+cP4erTezCjFG78y1ilTNtMmJQuM7dYug33cadDt0 6s+veU43pWKFyb4SrniB5I9UjH4j2PAPgcycduNU0nnRzSebWgOHCqS6CSxKMZ3z Is4X4mvnf6yai921O9qmsDpA3XLOsAbc8HG47N+a8exH8NmXtY6ksrs18UX27aB9 sSibFBOYO31/ir6W8CloKPYMjO/Qfdzv2N+4t+Qg/18EhjZcBp4= -----END CERTIFICATE-----Generated at Thu Sep 24 18:41:39 2026 by rpki-client