$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft File: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft (raw, json) Hash identifier: WxxIJ19+G5kZFvgKT7oOR9l/SLuHc6rJg80LaUjFrmA= Subject key identifier: 7C:AC:38:66:E2:03:F7:1C:DB:18:84:AB:CF:43:EB:C2:C0:E9:1C:7F Authority key identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 Certificate issuer: /CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Certificate serial: 20EC0360F255ED5675E82CDBCEBE8962EC5C193A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:13:35 +0000 Manifest this update: Wed 23 Sep 2026 18:08:35 +0000 Manifest next update: Thu 24 Sep 2026 18:47:35 +0000 Files and hashes: 1: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl (hash: ezbfku03OOIwVIJjHqJtBoMZiyOz1x2RYEUs4uUL08I=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: xkIsUOsvhzcBh2sD2rCI6s5EqakfkJ/T7bTiJ7H33iA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ec:03:60:f2:55:ed:56:75:e8:2c:db:ce:be:89:62:ec:5c:19:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Validity Not Before: Sep 23 18:08:35 2026 GMT Not After : Sep 24 18:47:35 2026 GMT Subject: CN=7CAC3866E203F71CDB1884ABCF43EBC2C0E91C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:f3:2e:a6:f2:2c:21:f3:6f:43:50:3a:50: 49:2f:ae:e3:79:c6:8c:80:18:31:83:df:21:cf:70: e1:c7:86:57:1e:4b:82:de:7b:f6:ad:9a:2a:88:5f: e1:4b:71:42:11:24:5c:de:50:e5:9a:91:c2:65:db: 92:94:aa:a2:84:16:7c:12:04:54:96:8b:41:d5:02: 32:9f:dc:c3:80:6f:00:f5:3e:56:9e:00:de:60:23: 2c:b6:40:9f:69:41:f0:8c:a7:1a:5f:be:98:ea:b9: aa:f0:a8:b3:cf:e6:0f:3c:32:b3:bf:91:cd:8b:cd: 8a:14:5d:91:c0:e9:89:d9:e8:94:9e:37:01:3a:e2: 58:31:c6:06:fd:2d:89:26:6f:ce:bb:33:c5:ea:2f: c3:a3:38:52:22:15:48:68:82:7b:92:6a:00:01:f0: 88:11:a0:83:83:88:d6:80:ff:1f:5a:c8:23:20:8d: 68:c7:05:08:9a:4c:f2:8c:48:88:6d:e6:32:b8:74: 1d:bb:09:0e:0f:73:91:7b:15:1f:2a:c1:1c:90:56: 6a:61:02:4a:da:c7:dc:ff:4e:ed:9d:11:f2:5c:5a: c9:1c:4d:85:60:e0:c0:07:4a:51:be:62:8a:44:ef: 67:f7:db:10:6d:eb:09:31:e0:cb:30:2d:6f:47:7f: 36:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AC:38:66:E2:03:F7:1C:DB:18:84:AB:CF:43:EB:C2:C0:E9:1C:7F X509v3 Authority Key Identifier: keyid:70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:63:b5:99:a3:7c:38:03:f7:5e:ce:c2:97:6a:bc:90:8b:8c: f9:3a:e7:5f:59:bf:ec:1a:39:e4:3b:d2:46:42:da:be:f3:8c: 97:ce:6a:b4:b7:c4:b6:c5:bb:cf:45:3d:d8:76:97:f0:71:8a: ad:38:5e:4e:c1:81:85:2f:b5:de:57:8d:ab:31:84:63:43:f4: 97:06:56:0c:e9:a2:d6:68:51:c0:ba:c4:c1:64:c2:5a:e3:0b: 33:61:57:61:e7:0d:2f:ec:4a:d8:72:c2:13:82:e5:14:44:d7: b3:29:53:e0:4e:fd:1f:b2:b8:5a:b0:e7:dc:7c:76:80:21:54: f3:c6:5b:9e:d6:b4:f5:85:b9:1c:41:3d:18:ea:b6:57:4e:01: e4:60:d1:e4:29:80:0c:5d:d2:9f:ab:85:92:07:fc:dc:f3:97: 91:61:3b:10:fe:a9:00:43:b4:d5:fe:ac:67:90:c4:9f:cb:78: ef:93:db:72:6e:a3:68:7b:6e:f4:74:1e:2f:9f:3f:66:a2:fb: f3:c7:5e:97:c5:3a:a7:dc:c9:7e:73:6c:15:d9:48:65:8a:cf: e9:bd:26:2b:62:15:ef:a1:6f:2a:2a:70:8b:3c:da:ed:9b:ab: 8a:9d:65:5d:3f:28:00:db:01:9b:ac:b7:ad:39:40:ba:d3:bb: ca:37:4a:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOwDYPJV7VZ16Czbzr6JYuxcGTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0 QjQxMTc4MTAeFw0yNjA5MjMxODA4MzVaFw0yNjA5MjQxODQ3MzVaMDMxMTAvBgNV BAMTKDdDQUMzODY2RTIwM0Y3MUNEQjE4ODRBQkNGNDNFQkMyQzBFOTFDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+/MupvIsIfNvQ1A6UEkvruN5 xoyAGDGD3yHPcOHHhlceS4Lee/atmiqIX+FLcUIRJFzeUOWakcJl25KUqqKEFnwS BFSWi0HVAjKf3MOAbwD1PlaeAN5gIyy2QJ9pQfCMpxpfvpjquarwqLPP5g88MrO/ kc2LzYoUXZHA6YnZ6JSeNwE64lgxxgb9LYkmb867M8XqL8OjOFIiFUhognuSagAB 8IgRoIODiNaA/x9ayCMgjWjHBQiaTPKMSIht5jK4dB27CQ4Pc5F7FR8qwRyQVmph Akrax9z/Tu2dEfJcWskcTYVg4MAHSlG+YopE72f32xBt6wkx4MswLW9Hfzb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfKw4ZuID9xzbGISrz0PrwsDpHH8wHwYDVR0j BBgwFoAUcPeqTttsRXtdAtZnYt3Y7ktBF4EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZjNWExY2MtY2M1ZS00ZTU4LThkZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVE QjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0QjQxMTc4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY3QUE0RURCNkM0NTdCNUQwMkQ2Njc2MkRERDhFRTRCNDEx NzgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4 RUU0QjQxMTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANjtZmjfDgD917OwpdqvJCLjPk6519Zv+wa OeQ70kZC2r7zjJfOarS3xLbFu89FPdh2l/Bxiq04Xk7BgYUvtd5XjasxhGND9JcG VgzpotZoUcC6xMFkwlrjCzNhV2HnDS/sSthywhOC5RRE17MpU+BO/R+yuFqw59x8 doAhVPPGW57WtPWFuRxBPRjqtldOAeRg0eQpgAxd0p+rhZIH/Nzzl5FhOxD+qQBD tNX+rGeQxJ/LeO+T23Juo2h7bvR0Hi+fP2ai+/PHXpfFOqfcyX5zbBXZSGWKz+m9 JitiFe+hbyoqcIs82u2bq4qdZV0/KADbAZust605QLrTu8o3SkI= -----END CERTIFICATE-----Generated at Thu Sep 24 07:07:44 2026 by rpki-client