$ rpki-client -vvvf rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft File: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft (raw, json) Hash identifier: URsrOQmACl/mUfsCo0+95uzYSSJeGuyHZ7ZE46UZCcg= Subject key identifier: B1:DC:FB:F9:91:D7:5E:CD:1D:BB:54:C9:56:5B:7F:88:C4:B2:AA:44 Authority key identifier: 05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C Certificate issuer: /CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C Certificate serial: 31DE7EF070F305F9BF838BB42E14F359BDA6567D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft Manifest number: C7 Signing time: Mon 28 Sep 2026 14:37:42 +0000 Manifest this update: Mon 28 Sep 2026 14:32:42 +0000 Manifest next update: Tue 29 Sep 2026 14:57:42 +0000 Files and hashes: 1: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl (hash: m/A9QhP5MLzFvwO6j/i79F2u8BvJbn0Du0/v5EiQoeU=) 2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: puG9tEvlwR1Rqa0nAJ5US5V0FBLntY3L8sj4Hpd3IlU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:de:7e:f0:70:f3:05:f9:bf:83:8b:b4:2e:14:f3:59:bd:a6:56:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C Validity Not Before: Sep 28 14:32:42 2026 GMT Not After : Sep 29 14:57:42 2026 GMT Subject: CN=B1DCFBF991D75ECD1DBB54C9565B7F88C4B2AA44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:9e:7d:20:ad:f5:5d:d0:98:dc:eb:84:d2: 72:a9:73:ce:3b:53:12:e5:78:63:a5:77:b3:ee:22: b5:31:c8:50:d5:1b:78:95:1a:47:fa:d8:d6:6e:0d: d6:22:40:03:bb:41:83:03:0c:89:1a:d5:98:a1:e8: 65:ff:41:0f:5f:ae:c9:98:60:db:ff:0f:21:29:ea: 2f:26:a5:f0:1d:9c:2d:08:d0:36:c4:8f:73:5e:be: 36:1f:c9:ba:c5:bf:ee:60:ca:11:8d:6a:33:4c:79: 86:2b:74:f7:05:d7:76:65:1e:13:78:7a:13:b0:04: e7:9a:9d:76:b8:7b:86:6c:df:b5:97:23:17:b5:ea: 94:15:6e:38:7f:a9:23:67:99:88:a4:c7:1a:4e:71: 99:46:53:3c:80:07:33:eb:3e:15:0b:fd:3c:02:51: 92:bb:dd:68:06:12:0a:6f:d8:88:ce:47:74:48:71: b3:25:0d:e8:c2:21:21:20:00:c4:5f:09:e7:f8:5e: f9:19:92:6c:1e:c2:09:93:c2:ca:d6:c9:84:18:90: e7:a7:91:84:e2:82:29:24:28:b8:86:16:23:f0:40: 59:21:ee:ab:42:56:af:d4:f9:dd:5b:14:6f:a8:1e: 4e:a3:38:da:d6:cc:3d:8f:b9:66:b1:e6:8b:58:dd: ed:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DC:FB:F9:91:D7:5E:CD:1D:BB:54:C9:56:5B:7F:88:C4:B2:AA:44 X509v3 Authority Key Identifier: keyid:05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:69:53:ba:17:35:df:09:b5:fe:5d:8e:78:3f:6a:e7:da:02: 71:20:da:db:d6:53:30:9c:8e:83:ca:92:c1:a1:11:79:af:b3: e5:93:5b:ef:fc:df:6d:c7:16:0b:85:03:9e:e6:e0:fc:0f:14: f8:7c:6d:81:60:2c:03:6a:a0:52:b9:d3:6c:5e:30:29:4d:fd: 5e:3c:79:45:f1:a0:69:b9:56:43:e9:0e:b7:41:a9:88:d9:5d: 84:d7:c0:f1:17:85:fd:60:ef:7a:52:68:e3:c2:98:e4:4c:98: cc:59:1b:0f:86:74:22:94:0e:3e:c7:2c:4f:28:96:2c:b0:ab: 21:d4:10:72:35:30:56:d6:39:6f:d7:27:3b:6d:f9:2b:a1:50: c2:83:aa:6e:f9:11:6a:a9:c8:23:2e:56:6f:57:6c:7e:68:74: 42:9c:3c:08:53:75:5b:a0:bf:93:15:54:69:31:f1:0b:ef:00: 7f:00:ae:1b:63:a7:4f:ec:56:3c:b7:8f:c8:a9:18:da:28:ad: ae:7c:1c:2a:0b:31:14:90:a6:57:69:5f:47:d7:34:bc:82:a2: 95:d5:f9:ac:f5:73:dd:86:56:66:4b:c8:3f:5e:f3:64:f0:28: 7b:95:ce:73:27:c6:ba:ed:82:c4:79:13:79:7e:2f:55:b4:29: 47:01:23:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMd5+8HDzBfm/g4u0LhTzWb2mVn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU3MDg4OTkyM0MzRUY3MDIxRDYxOUIyNEYzQTNDQzZF MDY5QUY2QzAeFw0yNjA5MjgxNDMyNDJaFw0yNjA5MjkxNDU3NDJaMDMxMTAvBgNV BAMTKEIxRENGQkY5OTFENzVFQ0QxREJCNTRDOTU2NUI3Rjg4QzRCMkFBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNp59IK31XdCY3OuE0nKpc847 UxLleGOld7PuIrUxyFDVG3iVGkf62NZuDdYiQAO7QYMDDIka1Zih6GX/QQ9frsmY YNv/DyEp6i8mpfAdnC0I0DbEj3NevjYfybrFv+5gyhGNajNMeYYrdPcF13ZlHhN4 ehOwBOeanXa4e4Zs37WXIxe16pQVbjh/qSNnmYikxxpOcZlGUzyABzPrPhUL/TwC UZK73WgGEgpv2IjOR3RIcbMlDejCISEgAMRfCef4XvkZkmwewgmTwsrWyYQYkOen kYTigikkKLiGFiPwQFkh7qtCVq/U+d1bFG+oHk6jONrWzD2PuWax5otY3e1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsdz7+ZHXXs0du1TJVlt/iMSyqkQwHwYDVR0j BBgwFoAUBXCImSPD73Ah1hmyTzo8xuBpr2wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEwYmUzNTMtNGFiOC00Yjc3LTk4OGQtNzM5ZjgyYjlmNjQxLzAvMDU3MDg4OTky M0MzRUY3MDIxRDYxOUIyNEYzQTNDQzZFMDY5QUY2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNTcwODg5OTIzQzNFRjcwMjFENjE5QjI0RjNBM0NDNkUwNjlB RjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvMDU3MDg4OTkyM0MzRUY3MDIxRDYxOUIyNEYzQTND QzZFMDY5QUY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1pU7oXNd8Jtf5djng/aufaAnEg2tvWUzCc joPKksGhEXmvs+WTW+/8323HFguFA57m4PwPFPh8bYFgLANqoFK502xeMClN/V48 eUXxoGm5VkPpDrdBqYjZXYTXwPEXhf1g73pSaOPCmORMmMxZGw+GdCKUDj7HLE8o liywqyHUEHI1MFbWOW/XJztt+SuhUMKDqm75EWqpyCMuVm9XbH5odEKcPAhTdVug v5MVVGkx8QvvAH8Arhtjp0/sVjy3j8ipGNoora58HCoLMRSQpldpX0fXNLyCopXV +az1c92GVmZLyD9e82TwKHuVznMnxrrtgsR5E3l+L1W0KUcBI6Y= -----END CERTIFICATE-----Generated at Mon Sep 28 18:13:50 2026 by rpki-client