$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft File: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft (raw, json) Hash identifier: shvp4cUKW6z8AQOr1s6YaE/0SbyfFjHzeQDY6OqbHvY= Subject key identifier: 84:BD:0A:C4:24:A2:D9:FE:50:E0:80:B4:E5:26:93:68:76:AC:D1:1C Authority key identifier: 70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA Certificate issuer: /CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Certificate serial: 191BB01F1CC24E5E84A36B1A0E4D6353211CADE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 03:29:58 +0000 Manifest this update: Thu 24 Sep 2026 03:24:58 +0000 Manifest next update: Fri 25 Sep 2026 04:16:58 +0000 Files and hashes: 1: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl (hash: KOitkoYuYFjxNxDGduOY0rT+JS8TEFcfmj+Qwj66huU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1b:b0:1f:1c:c2:4e:5e:84:a3:6b:1a:0e:4d:63:53:21:1c:ad:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Validity Not Before: Sep 24 03:24:58 2026 GMT Not After : Sep 25 04:16:58 2026 GMT Subject: CN=84BD0AC424A2D9FE50E080B4E526936876ACD11C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4d:48:ad:77:bb:c1:92:1b:ed:3a:01:c2:4f: 20:de:5d:7f:e5:ff:3d:82:57:3f:9a:dd:38:08:56: d4:72:17:8a:ec:b5:cd:18:de:ee:e6:3e:3e:58:e1: e3:e4:30:40:f8:61:46:c4:8d:73:9f:8b:44:71:c0: 90:17:aa:8c:4a:1e:3c:89:a3:b5:b2:ea:03:39:11: 71:08:d8:05:f3:ae:3a:cf:6f:45:ef:a3:8a:de:36: 08:02:61:b7:5c:cd:59:14:40:5c:84:1b:4e:67:51: 23:e2:07:e1:e7:d2:73:01:12:d2:04:55:53:91:8e: eb:aa:52:60:e5:e0:20:28:a0:34:7a:54:9e:61:8d: c0:35:f2:0c:ee:f8:74:86:cc:b2:7b:ac:91:2e:79: 9f:94:0d:fc:13:e6:89:92:d6:45:bf:fd:e4:f6:b8: b9:52:80:b4:86:05:2c:5a:2b:2b:bd:92:b6:44:46: c5:1d:8b:73:ef:f7:08:83:da:d9:ca:ec:13:bc:f9: 74:1b:ee:a2:fa:4e:48:83:a4:db:f0:c5:24:82:20: c8:38:9c:9b:b7:d3:0f:7c:0c:ab:b2:ca:51:51:c7: 14:6f:8a:2d:1a:6b:37:68:24:23:8a:8e:c6:98:2a: 4a:93:62:ca:f8:a2:d2:8f:2a:91:34:9e:bc:7c:f6: 5d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BD:0A:C4:24:A2:D9:FE:50:E0:80:B4:E5:26:93:68:76:AC:D1:1C X509v3 Authority Key Identifier: keyid:70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b3:cb:12:42:08:63:02:77:92:f5:ba:6b:d1:96:73:2b:cc: 95:39:9b:82:86:00:85:3a:40:27:5f:a8:b3:fa:2f:3b:8f:b5: 3b:ea:3e:58:e3:b6:f1:63:7e:a2:2a:59:2f:ce:4a:3c:8f:f6: 67:7b:19:93:ea:ab:ac:4e:a0:51:c3:ad:d3:79:b0:a2:16:57: 3f:29:1b:03:75:eb:b9:44:39:e6:ca:61:bf:41:7f:a9:0e:d7: c4:2f:a6:af:f9:56:b3:af:2f:4c:78:a6:21:1e:fe:e4:f3:d2: 3a:64:19:04:14:ed:55:60:58:23:af:79:47:8e:ff:c0:c5:e4: ac:86:6b:32:40:ae:c1:f7:43:b8:86:2f:4d:79:03:1d:73:11: 6d:c7:e0:11:de:c7:3c:3c:50:71:3c:21:86:0e:0c:57:55:e3: db:f8:a8:90:64:9f:48:68:97:ec:af:60:7e:9d:b6:99:95:e9: 1a:fc:45:b3:6a:6d:96:46:11:3b:b7:f4:51:57:e9:1c:9a:73: fa:27:54:9d:20:b5:7c:6d:ce:30:d8:5c:a4:59:63:3c:6f:f0: ff:5c:95:8b:7d:d5:f1:e8:b8:1a:a7:9b:b4:3c:4e:c7:00:f8: 8b:f4:24:e6:a5:bb:00:ab:2b:66:2e:4c:6b:fe:b3:a1:a2:ce: c3:c4:8d:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRuwHxzCTl6Eo2saDk1jUyEcrecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3 QjMxMzVBQTAeFw0yNjA5MjQwMzI0NThaFw0yNjA5MjUwNDE2NThaMDMxMTAvBgNV BAMTKDg0QkQwQUM0MjRBMkQ5RkU1MEUwODBCNEU1MjY5MzY4NzZBQ0QxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTUitd7vBkhvtOgHCTyDeXX/l /z2CVz+a3TgIVtRyF4rstc0Y3u7mPj5Y4ePkMED4YUbEjXOfi0RxwJAXqoxKHjyJ o7Wy6gM5EXEI2AXzrjrPb0Xvo4reNggCYbdczVkUQFyEG05nUSPiB+Hn0nMBEtIE VVORjuuqUmDl4CAooDR6VJ5hjcA18gzu+HSGzLJ7rJEueZ+UDfwT5omS1kW//eT2 uLlSgLSGBSxaKyu9krZERsUdi3Pv9wiD2tnK7BO8+XQb7qL6TkiDpNvwxSSCIMg4 nJu30w98DKuyylFRxxRvii0aazdoJCOKjsaYKkqTYsr4otKPKpE0nrx89l3RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhL0KxCSi2f5Q4IC05SaTaHas0RwwHwYDVR0j BBgwFoAUcPTL1fR6U1jnf63tud1GOXsxNaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NDllZjUtYzQ4NC00ZjQxLWEwNTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVG NDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3QjMxMzVBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy83MEY0Q0JENUY0N0E1MzU4RTc3RkFERURCOURENDYzOTdCMzEz NUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2 Mzk3QjMxMzVBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCzyxJCCGMCd5L1umvRlnMrzJU5m4KGAIU6 QCdfqLP6LzuPtTvqPljjtvFjfqIqWS/OSjyP9md7GZPqq6xOoFHDrdN5sKIWVz8p GwN167lEOebKYb9Bf6kO18Qvpq/5VrOvL0x4piEe/uTz0jpkGQQU7VVgWCOveUeO /8DF5KyGazJArsH3Q7iGL015Ax1zEW3H4BHexzw8UHE8IYYODFdV49v4qJBkn0ho l+yvYH6dtpmV6Rr8RbNqbZZGETu39FFX6Ryac/onVJ0gtXxtzjDYXKRZYzxv8P9c lYt91fHouBqnm7Q8TscA+Iv0JOaluwCrK2YuTGv+s6GizsPEjUk= -----END CERTIFICATE-----Generated at Thu Sep 24 14:26:44 2026 by rpki-client