$ rpki-client -vvvf rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft File: B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft (raw, json) Hash identifier: AFNJ24GWEiIP/5qvqcN3yjPw2uvQFViR2M+Wadc/MvY= Subject key identifier: 63:44:D2:D7:76:47:74:94:E5:3D:4B:9D:59:91:21:EE:01:E0:94:EA Authority key identifier: B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 Certificate issuer: /CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Certificate serial: 70BA10ED338924F31D3F8D1FB03FC84E929751DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 08:00:43 +0000 Manifest this update: Fri 25 Sep 2026 07:55:43 +0000 Manifest next update: Sat 26 Sep 2026 09:56:43 +0000 Files and hashes: 1: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: ZLVGrLGxQp2e5Y2IzOOoMpl4wxPvjrD5ZWNyIr1u5Ho=) 2: B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl (hash: j3pm+C6pvvTIJMV/xUHa+QAoyUY3KIeLEVcmJJ2ZcfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 09:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ba:10:ed:33:89:24:f3:1d:3f:8d:1f:b0:3f:c8:4e:92:97:51:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Validity Not Before: Sep 25 07:55:43 2026 GMT Not After : Sep 26 09:56:43 2026 GMT Subject: CN=6344D2D776477494E53D4B9D599121EE01E094EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f8:27:36:0c:b6:5f:a5:e3:b9:5a:e4:f4:dc: 33:d3:0f:82:76:0c:20:59:4f:ee:96:98:12:21:68: 59:68:39:b7:a2:23:2f:6e:3a:7b:b3:f9:a6:e5:24: f2:15:21:7a:49:2e:00:a7:6f:2d:78:1b:c1:81:43: 4c:b9:13:2c:0f:a1:89:f1:c6:44:23:93:22:44:c3: 00:78:b4:79:a2:d5:d6:08:a1:61:07:2f:af:10:14: d0:4f:e1:cc:f1:6b:51:b8:ef:b0:c0:c8:61:7c:24: 42:1f:a5:b1:02:d8:de:fa:67:63:13:fe:10:03:fc: ba:46:88:3a:de:be:01:a2:62:8c:dc:c5:9b:3c:c2: fa:1b:90:57:70:27:53:1a:e4:f3:2d:4c:bb:4a:2e: d2:af:6a:b4:24:73:ab:d4:bf:ef:41:a6:51:49:e0: f0:07:a0:83:0a:1e:56:97:6f:c8:86:8a:5d:c7:85: 2f:f4:54:ee:d6:84:58:ec:40:ad:24:64:01:1f:be: b8:30:f2:c7:85:01:30:3d:07:ec:51:31:d3:9e:fc: 28:3d:74:88:c0:73:07:13:6b:b4:e0:3f:5f:25:3d: c0:67:cc:5a:cf:ec:e7:7c:f5:4d:b2:ad:23:eb:19: cb:fd:c8:0e:ab:44:b0:55:b3:7c:4b:34:5f:f9:60: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:44:D2:D7:76:47:74:94:E5:3D:4B:9D:59:91:21:EE:01:E0:94:EA X509v3 Authority Key Identifier: keyid:B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e1:fa:30:a3:e8:e3:7e:e2:2f:c9:07:69:ad:4c:64:5e:19: e2:6f:2a:c0:27:28:03:1a:42:52:42:5f:33:de:32:01:c0:9a: a7:cf:1a:48:97:13:81:81:e8:25:0a:c3:f4:88:d5:ee:74:25: f3:e2:42:82:b7:b3:77:e0:fb:2d:f2:ba:6a:e2:cd:ed:98:63: fe:90:90:85:ff:b7:57:1b:04:de:b3:a4:3d:51:f3:77:3d:30: 11:10:0f:4c:94:1a:cb:1c:ad:81:80:78:55:46:d5:8f:9a:8c: 9e:bc:a0:51:36:1f:7a:12:cc:74:89:be:ed:6b:10:c7:4c:0a: e5:0d:da:49:f8:ac:05:b9:e3:ea:2a:47:b1:e9:ca:85:1c:fc: cd:92:eb:48:1e:35:f9:d6:9a:d0:91:29:dc:f7:1b:57:d7:8d: 83:e4:27:e7:2e:3d:2e:0b:29:79:56:6a:9b:a0:c3:5a:ae:63: d0:d0:2c:7e:ee:08:d5:db:c8:5f:cc:6c:65:d5:31:50:9f:14: a2:a3:5f:73:55:51:7a:05:9e:12:fb:59:41:52:6f:d1:8a:5b: 87:f2:7a:eb:3e:23:00:32:0d:1f:25:9e:ef:32:b0:06:d0:1f: 9e:f4:eb:e5:f6:d3:7d:38:96:d8:ae:ee:0b:79:d4:da:3f:15: 5f:e6:73:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLoQ7TOJJPMdP40fsD/ITpKXUd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhF MDZBOTcyODAeFw0yNjA5MjUwNzU1NDNaFw0yNjA5MjYwOTU2NDNaMDMxMTAvBgNV BAMTKDYzNDREMkQ3NzY0Nzc0OTRFNTNENEI5RDU5OTEyMUVFMDFFMDk0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ+Cc2DLZfpeO5WuT03DPTD4J2 DCBZT+6WmBIhaFloObeiIy9uOnuz+ablJPIVIXpJLgCnby14G8GBQ0y5EywPoYnx xkQjkyJEwwB4tHmi1dYIoWEHL68QFNBP4czxa1G477DAyGF8JEIfpbEC2N76Z2MT /hAD/LpGiDrevgGiYozcxZs8wvobkFdwJ1Ma5PMtTLtKLtKvarQkc6vUv+9BplFJ 4PAHoIMKHlaXb8iGil3HhS/0VO7WhFjsQK0kZAEfvrgw8seFATA9B+xRMdOe/Cg9 dIjAcwcTa7TgP18lPcBnzFrP7Od89U2yrSPrGcv9yA6rRLBVs3xLNF/5YGjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY0TS13ZHdJTlPUudWZEh7gHglOowHwYDVR0j BBgwFoAUtw+ECty5+FFxsHO5UdqquOBqlygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIxZjNmYWUtZDBjYi00YTE3LWE1NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFE Q0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhFMDZBOTcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzBGODQwQURDQjlGODUxNzFCMDczQjk1MURBQUFCOEUwNkE5 NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFB QjhFMDZBOTcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/h+jCj6ON+4i/JB2mtTGReGeJvKsAnKAMa QlJCXzPeMgHAmqfPGkiXE4GB6CUKw/SI1e50JfPiQoK3s3fg+y3yumrize2YY/6Q kIX/t1cbBN6zpD1R83c9MBEQD0yUGsscrYGAeFVG1Y+ajJ68oFE2H3oSzHSJvu1r EMdMCuUN2kn4rAW54+oqR7HpyoUc/M2S60geNfnWmtCRKdz3G1fXjYPkJ+cuPS4L KXlWapugw1quY9DQLH7uCNXbyF/MbGXVMVCfFKKjX3NVUXoFnhL7WUFSb9GKW4fy eus+IwAyDR8lnu8ysAbQH5706+X20304ltiu7gt51No/FV/mc1E= -----END CERTIFICATE-----Generated at Fri Sep 25 20:05:17 2026 by rpki-client