$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft File: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft (raw, json) Hash identifier: TY9Fwjgg+bmVGtQO2AaBiIz3jcihxC1Bo4G/uRCdktI= Subject key identifier: 9F:92:77:20:7F:AE:79:14:DA:07:B3:4A:BC:A5:B7:8A:F3:7D:D8:FB Authority key identifier: 70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19 Certificate issuer: /CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619 Certificate serial: 381F3DC95677451B56BA4E4C81DAD3BF4F3290EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 23:24:35 +0000 Manifest this update: Fri 25 Sep 2026 23:19:35 +0000 Manifest next update: Sat 26 Sep 2026 23:44:35 +0000 Files and hashes: 1: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: EtnUTjZ94OuTXPQ8oodtLlh2y5zeN5ozbISTk51v5C4=) 2: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl (hash: +X/IeHWyRUXfucUhsNq1UIvBN2g8P6t/eEpwXN8QOeg=) 3: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: 4MzusLkn8wvWUBvFiEkops16kBYmlHHlayjI7RCIrok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1f:3d:c9:56:77:45:1b:56:ba:4e:4c:81:da:d3:bf:4f:32:90:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619 Validity Not Before: Sep 25 23:19:35 2026 GMT Not After : Sep 26 23:44:35 2026 GMT Subject: CN=9F9277207FAE7914DA07B34ABCA5B78AF37DD8FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:69:a6:35:85:85:1d:cb:f2:bd:6d:d6:ef:1b: a0:cd:04:b3:5c:be:f8:80:93:85:aa:9d:87:82:21: b6:cd:dd:ef:5e:29:53:26:76:3a:5d:7b:1b:3f:e7: aa:de:ad:0b:e9:69:7b:32:ca:b8:4a:6f:0e:eb:b1: 73:e8:28:b8:1a:99:c8:f8:d5:68:ed:b5:33:95:c2: 1e:9a:38:52:99:3e:fa:f3:3b:be:9f:5f:3f:39:3c: 69:11:80:0f:2e:bb:e2:ca:6b:b0:69:23:42:5f:18: 04:e6:5e:00:33:e2:ed:87:80:21:80:07:23:5d:63: 5c:2b:ed:d2:7f:1d:4d:38:5f:48:6d:53:39:3e:47: ea:ef:f4:60:93:56:cd:08:b5:78:68:46:cb:06:87: 1a:64:7a:3e:5e:93:fd:81:b6:1d:7f:9f:1b:19:5b: a3:d6:0d:b7:13:dd:da:30:63:2c:71:8f:ba:86:a5: 8a:dd:c8:c7:41:4c:64:6c:eb:03:0a:77:8b:79:31: 79:b7:da:f3:c5:db:5a:6d:0f:52:03:e0:f3:aa:23: 2b:c2:e8:a6:9a:52:76:07:68:cd:b2:90:b5:d4:32: 5e:5b:95:1e:97:20:03:76:75:a4:41:af:97:d5:bc: 70:84:61:12:d0:e8:79:76:1f:c0:cd:49:1c:56:69: 4d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:92:77:20:7F:AE:79:14:DA:07:B3:4A:BC:A5:B7:8A:F3:7D:D8:FB X509v3 Authority Key Identifier: keyid:70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:32:61:c5:d2:56:b7:ef:5c:44:e2:15:ba:d7:a1:32:ce:f6: a1:53:73:dc:86:59:a0:09:ee:93:f5:bd:53:54:fb:f6:fa:3f: e5:15:4f:f8:a0:e2:20:08:b1:a8:07:f1:90:6b:07:c5:6b:32: da:40:d1:5d:b2:f7:1b:01:70:42:91:35:a7:37:20:0f:21:1f: 98:11:07:b1:89:e7:1f:90:52:00:d7:72:3b:2a:27:76:14:df: e5:7f:ed:bd:b7:48:4a:fe:67:e5:60:b2:c1:fc:b7:0b:fa:38: cc:09:04:27:65:3b:32:c2:38:bc:be:ea:ac:22:36:bd:2d:22: 08:6f:82:a1:40:7b:10:51:a1:33:ff:e5:76:d0:12:40:57:66: 4d:e9:b1:24:46:36:6d:a9:30:b6:ce:d5:20:86:c6:5e:9d:37: 4a:b9:22:94:14:f9:84:fe:e0:87:67:4b:52:8b:84:69:23:ec: 39:d2:45:23:a2:b6:e3:e4:b9:7c:65:c4:0e:08:7c:2e:3b:0c: 9e:1d:42:61:ba:fc:b5:81:e0:29:ff:b1:51:69:08:89:dd:7d: f6:8d:7b:83:59:d8:9e:77:51:0b:3a:87:22:88:34:f9:60:e6: a7:4f:66:73:46:94:73:b5:21:73:8f:70:5a:3f:c0:ee:de:16: fa:bd:a6:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOB89yVZ3RRtWuk5MgdrTv08ykOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQw NEVBODYxOTAeFw0yNjA5MjUyMzE5MzVaFw0yNjA5MjYyMzQ0MzVaMDMxMTAvBgNV BAMTKDlGOTI3NzIwN0ZBRTc5MTREQTA3QjM0QUJDQTVCNzhBRjM3REQ4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzaaY1hYUdy/K9bdbvG6DNBLNc vviAk4WqnYeCIbbN3e9eKVMmdjpdexs/56rerQvpaXsyyrhKbw7rsXPoKLgamcj4 1WjttTOVwh6aOFKZPvrzO76fXz85PGkRgA8uu+LKa7BpI0JfGATmXgAz4u2HgCGA ByNdY1wr7dJ/HU04X0htUzk+R+rv9GCTVs0ItXhoRssGhxpkej5ek/2Bth1/nxsZ W6PWDbcT3dowYyxxj7qGpYrdyMdBTGRs6wMKd4t5MXm32vPF21ptD1ID4POqIyvC 6KaaUnYHaM2ykLXUMl5blR6XIAN2daRBr5fVvHCEYRLQ6Hl2H8DNSRxWaU3HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn5J3IH+ueRTaB7NKvKW3ivN92PswHwYDVR0j BBgwFoAUcNO1hUnvLKSrD5G8ADPLTQTqhhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA4Y2MwYjMtMjUwOC00NzdmLTlmMjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0 OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQwNEVBODYxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MEQzQjU4NTQ5RUYyQ0E0QUIwRjkxQkMwMDMzQ0I0RDA0RUE4 NjE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA4Y2MwYjMtMjUwOC00NzdmLTlm MjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NC NEQwNEVBODYxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0yYcXSVrfvXETiFbrXoTLO9qFTc9yGWaAJ 7pP1vVNU+/b6P+UVT/ig4iAIsagH8ZBrB8VrMtpA0V2y9xsBcEKRNac3IA8hH5gR B7GJ5x+QUgDXcjsqJ3YU3+V/7b23SEr+Z+VgssH8twv6OMwJBCdlOzLCOLy+6qwi Nr0tIghvgqFAexBRoTP/5XbQEkBXZk3psSRGNm2pMLbO1SCGxl6dN0q5IpQU+YT+ 4IdnS1KLhGkj7DnSRSOituPkuXxlxA4IfC47DJ4dQmG6/LWB4Cn/sVFpCIndffaN e4NZ2J53UQs6hyKINPlg5qdPZnNGlHO1IXOPcFo/wO7eFvq9ppc= -----END CERTIFICATE-----Generated at Sat Sep 26 11:08:20 2026 by rpki-client