$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft File: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft (raw, json) Hash identifier: AR4fSzGYsOIPWTXrRKLcVjD7x8hCjARnPC23R2fRm9s= Subject key identifier: B0:CB:94:36:5E:8F:4D:CB:CD:C9:A4:72:B1:28:58:F4:C7:6F:D1:B7 Authority key identifier: 70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E Certificate issuer: /CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Certificate serial: 1215544EC8F014783A3BA4DBBFF2FB9AB1F39EE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft Manifest number: BF Signing time: Tue 22 Sep 2026 11:35:55 +0000 Manifest this update: Tue 22 Sep 2026 11:30:55 +0000 Manifest next update: Wed 23 Sep 2026 12:29:55 +0000 Files and hashes: 1: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: PDVvmstV3iaWyvXstEgcHTvDFJJ9Dg2QcyyOCEhL1rA=) 2: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: hBvRTYXcnJk6N7ngUO2oUV6tmwOrz7l2Poiy/ABHqPM=) 3: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl (hash: TMqYTBEHA8qP5Qt02jsTclGYDPZABqjyQelYTlrUoxE=) 4: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: X9vWw5/8oy+SYlKkHILaaaMhFfsqtUesHOd+majUa+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:15:54:4e:c8:f0:14:78:3a:3b:a4:db:bf:f2:fb:9a:b1:f3:9e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Validity Not Before: Sep 22 11:30:55 2026 GMT Not After : Sep 23 12:29:55 2026 GMT Subject: CN=B0CB94365E8F4DCBCDC9A472B12858F4C76FD1B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:78:b2:ac:fb:27:34:39:a4:4b:0f:8b:a0:fb: c2:1b:aa:0f:88:ec:15:fd:5c:52:f6:0d:a2:dd:d4: 03:c4:a5:b5:83:2b:25:ec:4f:15:ea:e4:90:4c:94: 77:e3:54:7b:1d:c3:51:84:7e:9b:12:85:bd:10:0d: ba:1d:d3:49:a0:36:ee:ca:14:3a:58:c7:43:33:a8: 3b:94:d4:04:08:8b:99:3c:75:1b:d2:97:d3:c4:59: d7:63:d1:f9:2c:cd:a7:e2:9d:55:2b:a1:46:fd:65: d8:ab:64:af:7c:db:9c:93:4b:b1:a1:41:d9:c8:20: 3f:cf:aa:eb:db:ed:e5:b1:2e:f7:bd:c6:f1:e4:3f: 19:aa:ec:07:c0:2c:de:12:c1:85:52:f6:cc:cf:c3: fb:33:96:f1:c7:a2:12:e4:7a:ba:d8:8c:f5:00:b3: 87:a1:fb:52:34:9b:22:b8:6e:bd:2c:d8:33:fd:bf: 2a:af:54:44:e7:8c:93:aa:f7:8b:08:77:94:b9:9c: 79:34:05:f2:32:9c:08:e6:5f:a9:b6:87:40:29:87: 80:4f:db:80:e2:e5:78:70:9b:0e:9e:46:3a:1a:97: 3f:bd:ce:c0:a4:89:29:2c:59:00:99:fd:4c:48:b3: 40:7f:cc:84:eb:1d:b5:7b:25:7c:93:2a:d3:58:fe: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CB:94:36:5E:8F:4D:CB:CD:C9:A4:72:B1:28:58:F4:C7:6F:D1:B7 X509v3 Authority Key Identifier: keyid:70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5a:38:77:c3:3e:e0:e0:f7:18:2e:9d:70:32:74:3a:98:68: f1:74:c1:cb:9b:f2:8c:a9:15:35:92:5a:15:36:cb:37:f9:3d: 0b:68:e1:1a:80:8c:80:e2:9f:f6:b5:b2:e9:28:0f:1f:96:af: aa:4e:56:1e:80:32:35:3d:8a:50:b8:f8:32:f0:14:44:ec:05: 51:bb:80:74:cf:41:b2:4c:5a:60:1d:ff:4a:af:4b:a2:b9:9f: 74:b9:bc:71:33:4f:2b:6d:9f:ed:7d:b0:d5:f2:17:29:44:ee: 98:a2:d2:01:54:b5:c0:dc:9f:d7:3e:0b:7c:c0:ef:03:ee:24: d2:0f:72:3c:58:9b:de:55:c8:b5:d2:49:8b:8f:70:83:2a:5e: 7d:24:9a:9b:45:8f:33:e3:58:1c:0b:12:e4:ac:3e:69:d0:79: 0a:7f:21:9d:5d:10:35:7e:08:bb:19:eb:35:04:90:95:52:a7: 02:78:9a:0f:ad:ae:3e:ac:0f:34:73:7a:9b:72:e4:3d:85:a6: f1:ef:ad:42:c3:69:de:53:d0:31:c6:e8:46:a6:e5:18:21:3a: 17:b8:41:bf:70:4a:b1:ac:40:40:f4:19:f8:cc:94:0c:e2:72: 77:f7:f6:ef:bc:cc:73:3b:5e:58:55:a1:3a:f5:4b:ff:ee:b9: 3e:d9:f3:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhVUTsjwFHg6O6Tbv/L7mrHznukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2REQz NDU4OUI0RTAeFw0yNjA5MjIxMTMwNTVaFw0yNjA5MjMxMjI5NTVaMDMxMTAvBgNV BAMTKEIwQ0I5NDM2NUU4RjREQ0JDREM5QTQ3MkIxMjg1OEY0Qzc2RkQxQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkeLKs+yc0OaRLD4ug+8Ibqg+I 7BX9XFL2DaLd1APEpbWDKyXsTxXq5JBMlHfjVHsdw1GEfpsShb0QDbod00mgNu7K FDpYx0MzqDuU1AQIi5k8dRvSl9PEWddj0fkszafinVUroUb9ZdirZK9825yTS7Gh QdnIID/Pquvb7eWxLve9xvHkPxmq7AfALN4SwYVS9szPw/szlvHHohLkerrYjPUA s4eh+1I0myK4br0s2DP9vyqvVETnjJOq94sId5S5nHk0BfIynAjmX6m2h0Aph4BP 24Di5Xhwmw6eRjoalz+9zsCkiSksWQCZ/UxIs0B/zITrHbV7JXyTKtNY/mjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsMuUNl6PTcvNyaRysShY9Mdv0bcwHwYDVR0j BBgwFoAUcMzgMfEETe5sr1ZbE3X23TRYm04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZjZjdjOWUtZjhjMy00MDE1LTg4MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFG MTA0NERFRTZDQUY1NjVCMTM3NUY2REQzNDU4OUI0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MENDRTAzMUYxMDQ0REVFNkNBRjU2NUIxMzc1RjZERDM0NTg5 QjRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2 REQzNDU4OUI0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9aOHfDPuDg9xgunXAydDqYaPF0wcub8oyp FTWSWhU2yzf5PQto4RqAjIDin/a1sukoDx+Wr6pOVh6AMjU9ilC4+DLwFETsBVG7 gHTPQbJMWmAd/0qvS6K5n3S5vHEzTyttn+19sNXyFylE7pii0gFUtcDcn9c+C3zA 7wPuJNIPcjxYm95VyLXSSYuPcIMqXn0kmptFjzPjWBwLEuSsPmnQeQp/IZ1dEDV+ CLsZ6zUEkJVSpwJ4mg+trj6sDzRzepty5D2FpvHvrULDad5T0DHG6Eam5RghOhe4 Qb9wSrGsQED0GfjMlAzicnf39u+8zHM7XlhVoTr1S//uuT7Z88s= -----END CERTIFICATE-----Generated at Tue Sep 22 22:49:37 2026 by rpki-client