$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft File: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft (raw, json) Hash identifier: VAuOr/QxmHoeR32FsO362BQHv+XhJZw/DPlKgKS3rS0= Subject key identifier: B9:68:FE:89:10:84:D1:42:D4:1F:39:2C:A5:57:CB:A1:83:AC:85:4E Authority key identifier: F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 Certificate issuer: /CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Certificate serial: 22B3C14637557A4F7E4E1F5550F41D01A51B2A14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft Manifest number: FE Signing time: Mon 09 Nov 2026 13:58:27 +0000 Manifest this update: Mon 09 Nov 2026 13:53:27 +0000 Manifest next update: Tue 10 Nov 2026 16:10:27 +0000 Files and hashes: 1: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl (hash: 22K6oemArPjfvTTbmS5w/BJwkCkSlywJLwLlgc5CNDM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 16:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b3:c1:46:37:55:7a:4f:7e:4e:1f:55:50:f4:1d:01:a5:1b:2a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Validity Not Before: Nov 9 13:53:27 2026 GMT Not After : Nov 10 16:10:27 2026 GMT Subject: CN=B968FE891084D142D41F392CA557CBA183AC854E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:41:99:e3:2c:17:da:72:87:45:7f:22:a1: e8:82:bc:c7:20:dd:13:a2:5c:91:87:59:ed:67:ca: ce:0b:f5:91:1d:5b:ae:94:fb:69:64:e0:56:44:93: dd:b3:a8:71:60:57:d2:0f:c7:5d:66:5a:ec:b4:32: 17:f3:5e:a6:2a:9f:71:96:df:bd:b9:cc:87:8d:9b: 70:85:5c:68:06:8f:48:d4:f1:8c:d3:2f:63:63:19: f7:36:61:8a:9e:c0:0a:8b:6e:c4:cc:a2:28:4c:0d: d2:72:6c:84:d7:08:15:4e:63:30:77:21:cf:ee:11: ca:09:40:10:d0:63:2c:30:18:88:67:aa:ed:d0:01: df:65:3e:d3:dd:62:94:a1:49:c4:b7:4b:b5:63:39: 53:a4:66:74:72:65:d3:2f:32:1b:51:53:3f:b0:82: 7e:f6:44:76:3b:29:2e:31:30:39:45:e3:d0:99:15: 13:75:08:c1:6e:81:30:06:2d:c2:30:0e:f8:3b:0d: 9b:30:27:d7:4b:d2:a7:ce:d4:21:ec:87:d3:41:cd: 67:e5:ad:3d:3c:2b:f6:bf:bc:75:a4:a2:6e:3d:77: 89:c6:e1:27:76:4f:81:e6:6f:7e:cb:16:83:8c:cb: 92:d9:e6:87:67:25:34:22:85:bc:4a:47:6b:65:99: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:68:FE:89:10:84:D1:42:D4:1F:39:2C:A5:57:CB:A1:83:AC:85:4E X509v3 Authority Key Identifier: keyid:F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:be:09:9b:8b:72:1b:bb:02:8c:00:47:65:3e:bc:60:1d:12: 12:fc:40:9d:49:20:02:c7:ff:00:9a:e4:bc:ce:2d:cd:5a:50: 36:cf:e7:bf:99:22:07:2a:34:f4:1d:83:34:9c:19:d2:86:4e: 35:8c:78:96:d4:cb:e2:56:4f:64:85:2b:9e:08:e3:74:d1:56: 38:09:f6:59:83:61:3f:bf:94:01:6e:3c:0a:cb:5f:c7:2c:12: f4:e9:85:52:8d:30:c1:3d:a4:07:86:8a:2f:8d:6b:3d:42:68: d3:79:aa:b6:ce:b3:03:da:c8:59:9a:17:22:33:44:d6:97:be: 58:36:eb:f9:ab:b7:ff:14:0d:61:13:2b:e8:7b:d3:48:e6:30: 48:ba:98:75:72:fe:c2:fa:8c:9d:5b:30:27:f1:65:8a:9e:9b: 4a:86:95:6a:b5:44:f8:d7:cb:52:1e:24:8e:1a:ba:c6:ae:b3: 7f:9d:46:a6:ea:08:93:21:85:db:9e:1e:af:11:ee:d3:dc:f4: 6d:60:7b:c1:7b:32:7f:ca:82:45:19:9f:cc:9e:a4:fb:da:50: fa:fc:3d:97:ae:79:fc:6f:b6:14:26:83:83:c0:6c:ea:c9:be: 26:43:56:24:57:75:96:17:9c:4d:f6:68:6e:2a:3a:0a:61:b0: 81:12:ef:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIrPBRjdVek9+Th9VUPQdAaUbKhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0 OThDNUNEMzAeFw0yNjExMDkxMzUzMjdaFw0yNjExMTAxNjEwMjdaMDMxMTAvBgNV BAMTKEI5NjhGRTg5MTA4NEQxNDJENDFGMzkyQ0E1NTdDQkExODNBQzg1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaU0GZ4ywX2nKHRX8ioeiCvMcg 3ROiXJGHWe1nys4L9ZEdW66U+2lk4FZEk92zqHFgV9IPx11mWuy0MhfzXqYqn3GW 3725zIeNm3CFXGgGj0jU8YzTL2NjGfc2YYqewAqLbsTMoihMDdJybITXCBVOYzB3 Ic/uEcoJQBDQYywwGIhnqu3QAd9lPtPdYpShScS3S7VjOVOkZnRyZdMvMhtRUz+w gn72RHY7KS4xMDlF49CZFRN1CMFugTAGLcIwDvg7DZswJ9dL0qfO1CHsh9NBzWfl rT08K/a/vHWkom49d4nG4Sd2T4Hmb37LFoOMy5LZ5odnJTQihbxKR2tlmW5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuWj+iRCE0ULUHzkspVfLoYOshU4wHwYDVR0j BBgwFoAU9w12AOASQmk8oOtcq5Ie4EmMXNMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBF MDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0OThDNUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzBENzYwMEUwMTI0MjY5M0NBMEVCNUNBQjkyMUVFMDQ5OEM1 Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFF RTA0OThDNUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEy+CZuLchu7AowAR2U+vGAdEhL8QJ1JIALH /wCa5LzOLc1aUDbP57+ZIgcqNPQdgzScGdKGTjWMeJbUy+JWT2SFK54I43TRVjgJ 9lmDYT+/lAFuPArLX8csEvTphVKNMME9pAeGii+Naz1CaNN5qrbOswPayFmaFyIz RNaXvlg26/mrt/8UDWETK+h700jmMEi6mHVy/sL6jJ1bMCfxZYqem0qGlWq1RPjX y1IeJI4ausaus3+dRqbqCJMhhdueHq8R7tPc9G1ge8F7Mn/KgkUZn8yepPvaUPr8 PZeuefxvthQmg4PAbOrJviZDViRXdZYXnE32aG4qOgphsIES79Q= -----END CERTIFICATE-----Generated at Tue Nov 10 05:31:11 2026 by rpki-client