$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.mft File: C70C382573B502FF29482CE28573DCCF10C0C0DE.mft (raw, json) Hash identifier: Se8l5Secnl2+4teKHEWGtD9jT1GLWisr1iijPNPVNlc= Subject key identifier: 66:B1:AB:29:A4:46:77:28:41:E7:5D:0E:3E:70:5A:F6:73:C3:E7:9D Authority key identifier: C7:0C:38:25:73:B5:02:FF:29:48:2C:E2:85:73:DC:CF:10:C0:C0:DE Certificate issuer: /CN=C70C382573B502FF29482CE28573DCCF10C0C0DE Certificate serial: 1B30A6A5669A08D7CDD3DB8CA6BFE5221B4F7B5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70C382573B502FF29482CE28573DCCF10C0C0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.mft Manifest number: 04 Signing time: Fri 25 Sep 2026 02:12:56 +0000 Manifest this update: Fri 25 Sep 2026 02:07:56 +0000 Manifest next update: Sat 26 Sep 2026 04:21:56 +0000 Files and hashes: 1: 34352e3234392e3138302e302f32332d3233203d3e20313331323035.roa (hash: t1hi0fCDvFnRk0himIi/9LHop5ByqrOhA6RjCjW27SI=) 2: C70C382573B502FF29482CE28573DCCF10C0C0DE.crl (hash: AkzLHkd09IyIr+113LOC8P3zPYzQ6H8Tmofz0QwT9CU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.crl rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70C382573B502FF29482CE28573DCCF10C0C0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:30:a6:a5:66:9a:08:d7:cd:d3:db:8c:a6:bf:e5:22:1b:4f:7b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70C382573B502FF29482CE28573DCCF10C0C0DE Validity Not Before: Sep 25 02:07:56 2026 GMT Not After : Sep 26 04:21:56 2026 GMT Subject: CN=66B1AB29A446772841E75D0E3E705AF673C3E79D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:dd:24:3b:9e:fb:c6:37:fe:ae:74:50:2e: 44:1d:39:f8:4a:60:b6:d7:d0:a7:1a:04:d2:90:fb: 44:dc:de:f1:4e:f2:d0:44:6f:95:fc:7e:44:f8:dc: ca:1d:6c:62:b4:cf:bb:d7:51:f0:aa:30:fa:05:89: ba:22:ab:2a:ed:f1:d9:b4:30:40:f2:a6:a6:58:fa: 22:99:40:20:a1:1f:a8:5e:26:72:32:8b:1d:c1:1d: 48:14:2d:df:40:59:b2:f3:b6:96:2d:da:98:d7:b4: b3:32:11:1b:ae:94:4d:67:36:19:c2:53:f0:f4:a5: 0a:fd:27:24:13:c1:72:fb:a8:f3:b1:e9:8f:bf:87: af:c5:a7:94:ae:cf:10:8c:9d:5b:0e:06:4e:3e:01: 36:c7:28:35:4f:ef:79:a7:f7:8d:4a:4f:bb:c0:19: 19:b5:0e:a1:1a:b8:8f:2d:bb:00:18:39:fb:67:51: e7:0f:2a:d5:40:b4:d1:72:bc:1c:6f:b9:0a:32:17: ba:4e:b0:73:00:cc:01:f1:8d:13:08:36:0a:83:bd: 23:44:c1:ae:1a:c8:a3:1e:87:81:31:4b:12:22:e7: 12:35:33:1e:aa:a2:37:8b:b2:05:13:25:a5:c9:2b: 8c:ca:b8:0c:a1:57:b1:6b:b4:2c:ac:99:8b:91:26: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B1:AB:29:A4:46:77:28:41:E7:5D:0E:3E:70:5A:F6:73:C3:E7:9D X509v3 Authority Key Identifier: keyid:C7:0C:38:25:73:B5:02:FF:29:48:2C:E2:85:73:DC:CF:10:C0:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70C382573B502FF29482CE28573DCCF10C0C0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:75:be:a6:2a:83:21:74:e8:85:be:72:df:e2:d6:00:69:89: ec:ca:59:5b:dc:62:f9:a3:aa:46:cb:6b:2d:6f:14:f4:f4:60: 0e:67:50:61:42:a9:d9:5e:22:05:f3:11:ca:c3:69:6b:1e:de: fe:44:c8:f6:a6:00:03:dd:ec:cd:4b:05:5a:46:0e:03:9a:33: 8a:9a:fc:83:f3:61:64:ca:a7:f1:cb:f2:5e:2b:a2:f3:31:a4: 8b:c1:af:d4:87:7b:07:81:0c:1f:0e:0a:1a:c7:c4:be:e2:61: 99:ac:bb:7d:2a:fd:3e:c1:c4:7d:d6:ce:5a:bd:ba:d2:ed:0a: 20:4a:0f:c5:b3:66:ff:0f:09:e9:a2:4d:54:73:be:b1:df:3a: 3b:7b:7b:dc:43:34:1f:fa:4e:46:dd:f4:0b:01:8c:64:24:1e: 6d:57:d1:1d:4d:35:fe:33:e2:ff:a8:62:72:1d:c3:3e:a2:3e: dc:6e:8f:ee:92:6c:28:8e:2f:e6:77:f5:fb:27:61:1f:5c:50: 5e:35:5c:3b:79:ed:1c:9b:82:58:6b:c8:80:50:30:1a:da:9e: 8e:72:5e:4d:90:b7:b4:5e:ba:6c:a4:c8:8f:32:74:84:13:f7: cf:41:61:96:96:ba:a5:45:41:27:ac:73:b5:b7:e3:32:c7:4c: 48:be:8a:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzCmpWaaCNfN09uMpr/lIhtPe14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQzM4MjU3M0I1MDJGRjI5NDgyQ0UyODU3M0RDQ0Yx MEMwQzBERTAeFw0yNjA5MjUwMjA3NTZaFw0yNjA5MjYwNDIxNTZaMDMxMTAvBgNV BAMTKDY2QjFBQjI5QTQ0Njc3Mjg0MUU3NUQwRTNFNzA1QUY2NzNDM0U3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTGd0kO577xjf+rnRQLkQdOfhK YLbX0KcaBNKQ+0Tc3vFO8tBEb5X8fkT43ModbGK0z7vXUfCqMPoFiboiqyrt8dm0 MEDypqZY+iKZQCChH6heJnIyix3BHUgULd9AWbLztpYt2pjXtLMyERuulE1nNhnC U/D0pQr9JyQTwXL7qPOx6Y+/h6/Fp5SuzxCMnVsOBk4+ATbHKDVP73mn941KT7vA GRm1DqEauI8tuwAYOftnUecPKtVAtNFyvBxvuQoyF7pOsHMAzAHxjRMINgqDvSNE wa4ayKMeh4ExSxIi5xI1Mx6qojeLsgUTJaXJK4zKuAyhV7FrtCysmYuRJm47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZrGrKaRGdyhB510OPnBa9nPD550wHwYDVR0j BBgwFoAUxww4JXO1Av8pSCzihXPczxDAwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE2NTkyMTctY2FhMi00NWVkLTg3YjQtZGEwZGFkY2ZhMDg3LzAvQzcwQzM4MjU3 M0I1MDJGRjI5NDgyQ0UyODU3M0RDQ0YxMEMwQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzBDMzgyNTczQjUwMkZGMjk0ODJDRTI4NTczRENDRjEwQzBD MERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE2NTkyMTctY2FhMi00NWVkLTg3 YjQtZGEwZGFkY2ZhMDg3LzAvQzcwQzM4MjU3M0I1MDJGRjI5NDgyQ0UyODU3M0RD Q0YxMEMwQzBERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACF1vqYqgyF06IW+ct/i1gBpiezKWVvcYvmj qkbLay1vFPT0YA5nUGFCqdleIgXzEcrDaWse3v5EyPamAAPd7M1LBVpGDgOaM4qa /IPzYWTKp/HL8l4rovMxpIvBr9SHeweBDB8OChrHxL7iYZmsu30q/T7BxH3Wzlq9 utLtCiBKD8WzZv8PCemiTVRzvrHfOjt7e9xDNB/6Tkbd9AsBjGQkHm1X0R1NNf4z 4v+oYnIdwz6iPtxuj+6SbCiOL+Z39fsnYR9cUF41XDt57RybglhryIBQMBrano5y Xk2Qt7ReumykyI8ydIQT989BYZaWuqVFQSesc7W34zLHTEi+iq8= -----END CERTIFICATE-----Generated at Fri Sep 25 18:01:51 2026 by rpki-client