$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft File: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft (raw, json) Hash identifier: xvWNVHolW2hlA4ZY7cR1IwaQt+IWGxL9Wxcc4i56dyk= Subject key identifier: C2:F0:09:CF:98:6B:97:26:23:21:2C:B2:59:78:40:F8:7A:9B:6F:07 Authority key identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 Certificate issuer: /CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Certificate serial: 4CD8C36A94FB2A01DD4F4C7739595B9CCB680018 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 05:51:28 +0000 Manifest this update: Sun 15 Nov 2026 05:46:28 +0000 Manifest next update: Mon 16 Nov 2026 06:48:28 +0000 Files and hashes: 1: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl (hash: NED2cng5gFJTRk57nPAgNukXKWOQHHcWVTb2c5bGF+Q=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: xkIsUOsvhzcBh2sD2rCI6s5EqakfkJ/T7bTiJ7H33iA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d8:c3:6a:94:fb:2a:01:dd:4f:4c:77:39:59:5b:9c:cb:68:00:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Validity Not Before: Nov 15 05:46:28 2026 GMT Not After : Nov 16 06:48:28 2026 GMT Subject: CN=C2F009CF986B972623212CB2597840F87A9B6F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:2d:24:ae:a0:54:61:7c:ec:6b:f1:67:f1: 9d:5c:0a:b9:3a:a3:79:49:a0:45:12:4a:21:89:3a: ee:57:4c:c4:bd:9d:75:c6:6c:ea:1f:af:d2:c0:4a: 75:fc:32:6c:fa:4c:a9:82:10:41:13:f2:9b:f1:5c: 3f:95:00:21:79:a7:d7:c0:0b:76:24:ad:76:a5:9a: d4:9a:34:bf:ee:16:7a:7d:ec:a2:b4:a4:35:87:af: c8:6c:7c:55:fa:72:e2:4e:66:ab:f0:dc:ed:13:fd: 5a:04:6d:e3:d4:76:01:03:e2:c9:c4:32:0d:aa:fe: e7:70:bf:a9:bf:2a:1e:d6:0c:55:4a:b8:ee:bc:56: 5d:91:85:04:ac:58:15:4a:a3:24:ea:f5:31:6d:08: c2:c0:1b:2c:d4:b5:e3:c2:03:a6:b4:53:75:aa:3b: c3:cf:9c:be:d5:40:a0:31:2a:bf:5f:08:ea:88:da: 5f:7e:9f:93:ad:57:fe:e8:77:9d:30:f5:26:c1:c4: f8:99:90:2e:62:3c:24:57:2e:6c:3c:06:e7:8d:01: 7e:26:ba:82:6e:f4:8f:3d:e4:16:cf:4c:5a:34:e4: b4:98:92:7d:97:88:52:d9:45:f4:55:53:65:d5:67: 3f:a1:4f:f9:8f:4f:08:eb:f7:cf:a0:a4:1d:e9:a8: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F0:09:CF:98:6B:97:26:23:21:2C:B2:59:78:40:F8:7A:9B:6F:07 X509v3 Authority Key Identifier: keyid:70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:5f:77:c8:3f:1b:65:d7:48:1a:61:fc:04:41:31:20:9c:fe: 9f:24:cf:64:7d:e4:5c:43:2f:2f:8f:c6:bb:e4:99:c0:58:c2: be:4e:75:2d:e6:2a:6a:f1:24:7c:80:bb:03:01:27:23:0a:c2: 9a:8f:01:fc:4a:4b:7d:9a:4c:9a:b7:c6:13:ca:8a:c3:8c:82: 25:11:a3:24:79:3e:05:b1:8d:bb:c5:53:f4:dd:55:cf:15:3f: c5:52:9f:bc:2e:bf:37:db:91:e6:e7:1e:bc:03:44:4d:3f:eb: 49:16:59:fb:3b:ce:38:93:b3:41:64:cf:9e:d1:fa:5d:45:6f: 0d:0c:1a:bd:47:41:48:30:58:72:80:8d:35:db:5e:d8:4d:74: b0:d0:a4:65:56:5b:af:6a:d8:fb:72:88:46:86:bf:40:ac:dc: a7:bb:00:db:1f:d6:67:d3:14:6f:7b:1d:4a:c3:39:c5:db:c9: d1:0c:7a:dc:40:a5:45:c1:6f:70:39:51:ba:07:97:4a:85:31: 4d:93:41:c2:c4:04:f5:b5:64:08:2f:cf:1d:6c:e7:3c:0e:b9: 92:88:40:39:98:3c:fb:26:c2:0f:a5:f8:d6:00:10:69:33:ae: 2f:3b:49:87:34:0a:4f:85:d0:d7:a6:44:38:06:6d:9c:00:f3: 5e:52:66:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNjDapT7KgHdT0x3OVlbnMtoABgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0 QjQxMTc4MTAeFw0yNjExMTUwNTQ2MjhaFw0yNjExMTYwNjQ4MjhaMDMxMTAvBgNV BAMTKEMyRjAwOUNGOTg2Qjk3MjYyMzIxMkNCMjU5Nzg0MEY4N0E5QjZGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1y0krqBUYXzsa/Fn8Z1cCrk6 o3lJoEUSSiGJOu5XTMS9nXXGbOofr9LASnX8Mmz6TKmCEEET8pvxXD+VACF5p9fA C3YkrXalmtSaNL/uFnp97KK0pDWHr8hsfFX6cuJOZqvw3O0T/VoEbePUdgED4snE Mg2q/udwv6m/Kh7WDFVKuO68Vl2RhQSsWBVKoyTq9TFtCMLAGyzUtePCA6a0U3Wq O8PPnL7VQKAxKr9fCOqI2l9+n5OtV/7od50w9SbBxPiZkC5iPCRXLmw8BueNAX4m uoJu9I895BbPTFo05LSYkn2XiFLZRfRVU2XVZz+hT/mPTwjr98+gpB3pqKYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwvAJz5hrlyYjISyyWXhA+HqbbwcwHwYDVR0j BBgwFoAUcPeqTttsRXtdAtZnYt3Y7ktBF4EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZjNWExY2MtY2M1ZS00ZTU4LThkZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVE QjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0QjQxMTc4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY3QUE0RURCNkM0NTdCNUQwMkQ2Njc2MkRERDhFRTRCNDEx NzgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4 RUU0QjQxMTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhfd8g/G2XXSBph/ARBMSCc/p8kz2R95FxD Ly+PxrvkmcBYwr5OdS3mKmrxJHyAuwMBJyMKwpqPAfxKS32aTJq3xhPKisOMgiUR oyR5PgWxjbvFU/TdVc8VP8VSn7wuvzfbkebnHrwDRE0/60kWWfs7zjiTs0Fkz57R +l1Fbw0MGr1HQUgwWHKAjTXbXthNdLDQpGVWW69q2PtyiEaGv0Cs3Ke7ANsf1mfT FG97HUrDOcXbydEMetxApUXBb3A5UboHl0qFMU2TQcLEBPW1ZAgvzx1s5zwOuZKI QDmYPPsmwg+l+NYAEGkzri87SYc0Ck+F0NemRDgGbZwA815SZqU= -----END CERTIFICATE-----Generated at Sun Nov 15 13:35:45 2026 by rpki-client