$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft File: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft (raw, json) Hash identifier: q72Ysxfdx7EobSA/WRULw70YIW9aOkg2DjH2X3Kkr+A= Subject key identifier: 81:43:0E:AE:07:D5:FA:5E:20:2E:53:FA:40:86:0F:F2:43:6B:CE:FD Authority key identifier: 2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 Certificate issuer: /CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Certificate serial: 5833FEB325961FC1C4D0CE7457B105035A677594 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:31:16 +0000 Manifest this update: Thu 24 Sep 2026 04:26:16 +0000 Manifest next update: Fri 25 Sep 2026 04:52:16 +0000 Files and hashes: 1: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl (hash: Zh+1RPg9TUMfAhp9Bp9i5z0W8f8sArBvrVhtP1oq4Tc=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: 6hdyf5UyF+Tqhlq/rEWrqEwjd98p7rc0NoOyzHNtasM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:33:fe:b3:25:96:1f:c1:c4:d0:ce:74:57:b1:05:03:5a:67:75:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Validity Not Before: Sep 24 04:26:16 2026 GMT Not After : Sep 25 04:52:16 2026 GMT Subject: CN=81430EAE07D5FA5E202E53FA40860FF2436BCEFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:c1:52:97:e8:7d:1f:88:b0:bd:9d:f6:26: 4e:70:79:0b:2b:4d:11:4f:80:c3:1a:3a:5e:0c:72: 31:7b:11:a1:17:7a:78:7e:94:19:7f:a9:23:1b:da: fe:79:ed:97:43:5b:9b:c1:06:c9:37:db:99:38:71: e4:e2:a6:65:2f:97:a8:87:43:3c:13:5d:98:2f:99: 2a:3f:25:6e:54:40:73:21:5d:62:0c:1f:df:22:00: 97:ef:64:77:6e:a8:06:ff:ae:0e:ce:eb:e9:3f:e4: 83:97:74:d1:ed:1c:97:82:30:93:9a:f4:2e:ac:ee: c1:27:9e:02:36:6c:ac:d3:5e:ff:ee:d9:af:39:80: 63:14:e1:bc:04:54:41:3b:44:10:fe:bc:0d:7b:61: 6b:eb:a4:a5:fc:33:e5:34:ee:e4:53:03:5a:0e:41: cf:9c:f6:93:da:aa:81:de:cf:82:20:29:de:ac:4f: 68:b8:5b:e8:18:8e:62:f6:5c:93:fa:7a:46:a7:e3: 57:51:27:e3:73:e7:29:a2:20:5c:57:7a:e5:7d:45: f5:55:a6:70:22:75:eb:26:a0:38:27:5f:77:34:df: 19:65:11:0b:12:a7:b9:72:68:0c:ca:05:44:3e:f0: 46:f2:94:17:59:e4:b6:50:fa:f9:3c:e2:90:fe:12: 66:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:43:0E:AE:07:D5:FA:5E:20:2E:53:FA:40:86:0F:F2:43:6B:CE:FD X509v3 Authority Key Identifier: keyid:2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9d:26:68:99:41:ed:98:6d:4a:54:19:e7:1a:9b:fd:2b:09: c0:cc:1a:02:46:89:81:e0:7f:1e:44:a5:71:93:81:f0:5e:31: 24:6f:78:f5:ac:ab:00:80:69:6b:ec:98:98:62:35:8b:94:98: 5a:9c:24:e2:2d:5b:3c:2a:99:e9:d8:90:57:38:55:ae:51:8d: f0:06:c4:49:95:34:5e:f6:7e:5b:be:e4:9e:ce:0e:e7:cb:06: b9:16:88:05:72:fe:46:95:13:22:02:cf:ac:24:9e:1b:b5:06: 21:cd:9d:d3:d1:5b:5c:9a:cf:10:e8:dd:c2:b1:c8:2c:62:9f: ac:ae:d3:c8:3c:49:c6:38:b7:65:83:f6:fa:52:75:be:46:46: 2c:c3:94:30:e1:7e:54:2a:cf:85:a3:1d:c2:4a:ab:16:94:48: 37:e2:e3:12:04:eb:0d:49:a3:c8:e2:73:2d:30:f0:8c:19:96: b5:74:61:ad:d3:82:61:ef:fa:3f:2a:7a:37:05:87:47:14:f6: 8f:4c:82:47:22:4d:33:51:6f:cf:de:fa:f2:2b:8c:2c:65:51: 66:bf:c9:a8:7e:4a:a6:b9:dc:6e:cc:63:78:7d:58:9e:ca:1b: 19:c3:e3:73:74:8b:65:91:3a:de:b0:31:08:67:c3:00:16:3b: 08:e8:42:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDP+syWWH8HE0M50V7EFA1pndZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFB MjRBNUY3NzAeFw0yNjA5MjQwNDI2MTZaFw0yNjA5MjUwNDUyMTZaMDMxMTAvBgNV BAMTKDgxNDMwRUFFMDdENUZBNUUyMDJFNTNGQTQwODYwRkYyNDM2QkNFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIcFSl+h9H4iwvZ32Jk5weQsr TRFPgMMaOl4McjF7EaEXenh+lBl/qSMb2v557ZdDW5vBBsk325k4ceTipmUvl6iH QzwTXZgvmSo/JW5UQHMhXWIMH98iAJfvZHduqAb/rg7O6+k/5IOXdNHtHJeCMJOa 9C6s7sEnngI2bKzTXv/u2a85gGMU4bwEVEE7RBD+vA17YWvrpKX8M+U07uRTA1oO Qc+c9pPaqoHez4IgKd6sT2i4W+gYjmL2XJP6ekan41dRJ+Nz5ymiIFxXeuV9RfVV pnAidesmoDgnX3c03xllEQsSp7lyaAzKBUQ+8EbylBdZ5LZQ+vk84pD+EmZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgUMOrgfV+l4gLlP6QIYP8kNrzv0wHwYDVR0j BBgwFoAUL3CrNfGqii4Yq+Or8Y5G4aJKX3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0OGJiODgtYTc1OC00NDNmLWI3MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVG MUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFBMjRBNUY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjcwQUIzNUYxQUE4QTJFMThBQkUzQUJGMThFNDZFMUEyNEE1 Rjc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2 RTFBMjRBNUY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSdJmiZQe2YbUpUGecam/0rCcDMGgJGiYHg fx5EpXGTgfBeMSRvePWsqwCAaWvsmJhiNYuUmFqcJOItWzwqmenYkFc4Va5RjfAG xEmVNF72flu+5J7ODufLBrkWiAVy/kaVEyICz6wknhu1BiHNndPRW1yazxDo3cKx yCxin6yu08g8ScY4t2WD9vpSdb5GRizDlDDhflQqz4WjHcJKqxaUSDfi4xIE6w1J o8jicy0w8IwZlrV0Ya3TgmHv+j8qejcFh0cU9o9MgkciTTNRb8/e+vIrjCxlUWa/ yah+Sqa53G7MY3h9WJ7KGxnD43N0i2WROt6wMQhnwwAWOwjoQls= -----END CERTIFICATE-----Generated at Thu Sep 24 10:28:13 2026 by rpki-client