$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft File: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft (raw, json) Hash identifier: DREs1iNWrvwjZnQAmRd6WxPXRk0exT05RpQQEn7sIfo= Subject key identifier: E1:66:15:DC:22:CB:48:92:B0:B3:91:00:9C:11:92:2D:39:55:56:00 Authority key identifier: 70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 Certificate issuer: /CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Certificate serial: 0E60C654FF2CF0DCF38891373DC78FC864902D6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft Manifest number: BE Signing time: Mon 21 Sep 2026 18:44:36 +0000 Manifest this update: Mon 21 Sep 2026 18:39:36 +0000 Manifest next update: Tue 22 Sep 2026 20:19:36 +0000 Files and hashes: 1: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: keOPkaU9xFvf9rbttWbatnRuZitbsiWuBrO+qREpte8=) 2: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: hpiL6+O2y1i6nQTaaXJTYqIKZW0DPxyBBggb24eEX0o=) 3: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl (hash: yQ9w9iLWnGtA5cvfYMup/+nTb6fdpmgpvTHbvYKHEFQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:60:c6:54:ff:2c:f0:dc:f3:88:91:37:3d:c7:8f:c8:64:90:2d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Validity Not Before: Sep 21 18:39:36 2026 GMT Not After : Sep 22 20:19:36 2026 GMT Subject: CN=E16615DC22CB4892B0B391009C11922D39555600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:3d:49:d1:eb:71:fd:d8:00:e9:cc:ae:8d: 44:cd:d2:53:bf:8c:79:62:bf:2c:86:f1:3a:4f:6d: bd:04:c2:fb:83:7d:d8:8d:14:03:30:14:74:15:8c: b3:05:75:a5:82:05:f8:b9:48:2c:87:f0:24:ea:7e: 9d:2d:6a:65:a0:42:6a:77:eb:e6:e6:29:fe:e7:77: fd:b8:dc:82:ab:a6:5c:01:29:34:45:5f:08:25:43: 5f:37:a6:51:1a:ff:a2:d9:a1:b5:80:18:8d:b2:18: 0f:ca:a3:5b:91:37:c9:b8:f0:ad:41:74:c5:24:be: 2c:db:83:37:06:52:31:f9:ff:9e:c9:fa:f4:4c:40: 5c:4e:1d:73:92:9d:d5:7a:04:a6:d3:fa:49:3b:9a: 4c:b1:55:45:5a:8c:98:56:d7:9d:d3:79:58:b5:fe: 32:b7:23:e5:6d:ed:c3:89:fe:bf:0e:53:a0:2f:2f: 9c:1a:5a:71:db:2c:d1:92:17:8b:4f:dc:46:b0:c9: c1:d6:92:3f:2e:04:4f:39:e3:6a:d4:53:e6:90:5e: 98:82:d9:e0:2f:61:a0:90:de:9b:f6:e9:22:f3:e0: f5:46:ca:1f:0e:49:c1:a5:9a:fd:2e:be:aa:36:07: 0a:b6:db:88:81:6f:51:ca:4b:ef:ba:fc:c4:db:06: f8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:66:15:DC:22:CB:48:92:B0:B3:91:00:9C:11:92:2D:39:55:56:00 X509v3 Authority Key Identifier: keyid:70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6e:bf:3d:94:8f:dc:c6:07:dc:51:67:49:aa:22:a8:4c:d3: 50:20:b5:fd:39:2d:3d:76:a1:2c:25:f7:41:04:39:69:b8:a5: cd:a2:27:6e:68:13:48:cd:66:1f:58:9c:26:b5:15:9b:4a:4c: 73:5a:16:86:d5:89:51:98:c6:b5:33:41:9b:48:88:2d:74:48: af:eb:28:e2:74:77:2e:c9:37:d6:44:52:22:4f:99:67:aa:32: 85:de:ab:49:9e:8d:0a:e6:86:49:10:c0:43:1f:e5:d2:34:e6: 17:54:8d:5e:be:63:cb:c1:cf:7d:61:45:88:43:9a:07:9b:9e: e8:2a:c8:22:ae:81:80:cd:d2:d5:0a:65:7f:bd:df:6b:b4:88: c2:c6:e4:ba:b4:fb:7f:23:9a:73:0c:3b:21:c4:9a:e9:49:1c: 8a:09:0a:d9:e0:6a:1f:69:cd:b9:ec:db:d3:8c:97:6f:ff:af: ee:5a:96:9b:24:5a:45:e9:0d:05:34:97:e0:99:0b:bf:68:2a: 04:d7:40:92:d3:30:2d:04:33:cf:98:6f:91:b2:9d:fe:42:12: 53:0c:44:3f:68:d4:26:2d:1b:15:94:a1:1b:aa:bb:d7:6e:0e: d4:11:28:d8:08:bb:b3:87:b1:0a:f5:0a:3f:3b:66:1f:e5:ef: 94:1b:f6:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDmDGVP8s8NzziJE3PcePyGSQLW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4 QjIzNjRBODAeFw0yNjA5MjExODM5MzZaFw0yNjA5MjIyMDE5MzZaMDMxMTAvBgNV BAMTKEUxNjYxNURDMjJDQjQ4OTJCMEIzOTEwMDlDMTE5MjJEMzk1NTU2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6WD1J0etx/dgA6cyujUTN0lO/ jHlivyyG8TpPbb0EwvuDfdiNFAMwFHQVjLMFdaWCBfi5SCyH8CTqfp0tamWgQmp3 6+bmKf7nd/243IKrplwBKTRFXwglQ183plEa/6LZobWAGI2yGA/Ko1uRN8m48K1B dMUkvizbgzcGUjH5/57J+vRMQFxOHXOSndV6BKbT+kk7mkyxVUVajJhW153TeVi1 /jK3I+Vt7cOJ/r8OU6AvL5waWnHbLNGSF4tP3EawycHWkj8uBE8542rUU+aQXpiC 2eAvYaCQ3pv26SLz4PVGyh8OScGlmv0uvqo2Bwq224iBb1HKS++6/MTbBvhpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4WYV3CLLSJKws5EAnBGSLTlVVgAwHwYDVR0j BBgwFoAUcLVONNzwcBKQt5Lm6grpAIsjZKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYxNmMwNGQtZDllMC00YzFmLThhMTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzRE Q0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4QjIzNjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MEI1NEUzNERDRjA3MDEyOTBCNzkyRTZFQTBBRTkwMDhCMjM2 NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5 MDA4QjIzNjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxuvz2Uj9zGB9xRZ0mqIqhM01Agtf05LT12 oSwl90EEOWm4pc2iJ25oE0jNZh9YnCa1FZtKTHNaFobViVGYxrUzQZtIiC10SK/r KOJ0dy7JN9ZEUiJPmWeqMoXeq0mejQrmhkkQwEMf5dI05hdUjV6+Y8vBz31hRYhD mgebnugqyCKugYDN0tUKZX+932u0iMLG5Lq0+38jmnMMOyHEmulJHIoJCtngah9p zbns29OMl2//r+5alpskWkXpDQU0l+CZC79oKgTXQJLTMC0EM8+Yb5Gynf5CElMM RD9o1CYtGxWUoRuqu9duDtQRKNgIu7OHsQr1Cj87Zh/l75Qb9uE= -----END CERTIFICATE-----Generated at Tue Sep 22 13:32:08 2026 by rpki-client