$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft File: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft (raw, json) Hash identifier: zrULb2KGwaQBdatPEEOYLbgs8OVLAxS+09GGqF95s+4= Subject key identifier: 90:C3:A3:24:F8:3C:68:55:C7:94:BB:A5:8F:21:8F:D7:41:05:59:4B Authority key identifier: F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 Certificate issuer: /CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Certificate serial: 5277EB6398E7CD0FC999ED9F0DC0A624CD84A214 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft Manifest number: BB Signing time: Sun 20 Sep 2026 12:12:17 +0000 Manifest this update: Sun 20 Sep 2026 12:07:17 +0000 Manifest next update: Mon 21 Sep 2026 12:41:17 +0000 Files and hashes: 1: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl (hash: OF/+HVgy81bdpHuhEgoM9gHVPPkVxAPWI/aB6p+aDWo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 12:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:77:eb:63:98:e7:cd:0f:c9:99:ed:9f:0d:c0:a6:24:cd:84:a2:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Validity Not Before: Sep 20 12:07:17 2026 GMT Not After : Sep 21 12:41:17 2026 GMT Subject: CN=90C3A324F83C6855C794BBA58F218FD74105594B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:23:7f:dd:ae:bf:2e:e5:db:01:18:b3:a9:0d: 23:6f:93:7b:4d:f3:f2:7d:7e:8d:c7:f7:79:a4:dd: 6d:1d:2f:e7:0a:a2:74:19:79:97:a2:50:ce:98:c8: aa:40:fc:93:a2:72:58:65:b1:ec:b7:44:b6:ac:29: 41:dc:02:5b:54:26:3a:46:ac:49:73:35:dd:82:f2: 5c:be:c8:40:fa:8c:53:ff:b9:63:93:7e:e7:05:32: 10:23:f5:48:a7:52:a1:93:43:dc:72:cc:79:bf:e4: cf:4a:2e:d7:25:8c:a1:03:b2:9f:35:c2:71:82:41: fe:37:46:68:7a:0e:e6:e8:13:32:eb:00:51:b9:d4: 6c:5c:6a:78:38:5c:3d:ac:b5:49:4c:c6:43:63:3c: ae:40:88:dc:1e:1b:b0:f8:f9:ce:19:f3:b8:9b:a2: aa:c0:27:52:f3:b3:a3:3e:bb:0d:e9:a5:6e:bd:d3: 2a:31:a7:1a:01:43:60:68:cf:98:fe:16:05:50:59: 7c:a1:b8:69:94:3d:bd:da:37:e9:d6:08:29:86:36: 4d:19:a0:4b:e6:ea:08:e0:b0:29:a2:b2:3d:97:d4: f0:ec:b4:b9:68:b3:c9:4a:eb:be:04:d0:c0:59:b1: 29:a5:22:db:fd:2f:70:bc:24:c9:d1:3a:cc:57:01: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C3:A3:24:F8:3C:68:55:C7:94:BB:A5:8F:21:8F:D7:41:05:59:4B X509v3 Authority Key Identifier: keyid:F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e2:02:4c:63:f7:7b:c2:63:a3:e4:b9:ad:63:bc:02:2c:4d: e4:88:3c:99:79:71:04:bb:54:e6:17:0a:0e:0e:73:0b:90:d9: 18:e8:fa:db:78:6e:e3:fc:29:20:d8:5f:0d:0e:06:f8:55:28: 42:89:b3:d0:22:2b:d2:5d:51:57:1a:05:be:57:66:c0:4f:4b: 0d:9b:9d:20:d9:7b:8e:22:89:04:60:c3:7e:c8:14:52:7d:e0: 38:27:72:c3:49:25:e1:7f:1a:f9:df:9c:e0:6e:6b:07:11:45: 15:7b:a4:58:04:d5:5e:fd:22:cc:bf:ea:49:80:2a:4f:c5:14: 22:03:83:20:c6:c6:97:99:5a:98:19:e6:d4:70:bc:42:d4:7e: e9:40:0b:44:22:40:79:f5:75:0c:e2:1f:1a:e6:66:47:79:1e: 0d:80:69:35:c6:13:33:08:49:18:2f:e5:00:08:bc:a9:20:a3: 52:0a:2c:e7:6c:05:0c:5b:ff:e7:30:e7:c4:1c:c5:3e:ca:f7: 16:7d:79:c1:8a:63:6d:15:9c:d1:08:0e:4f:4e:3d:33:3f:8e: 43:3f:a5:5d:ee:5e:1f:a6:23:ab:8c:28:ba:55:dd:98:6f:cb: 85:af:ae:d4:94:9c:15:72:60:91:d6:46:08:54:60:df:2a:1a: d3:6e:b0:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnfrY5jnzQ/Jme2fDcCmJM2EohQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0 OThDNUNEMzAeFw0yNjA5MjAxMjA3MTdaFw0yNjA5MjExMjQxMTdaMDMxMTAvBgNV BAMTKDkwQzNBMzI0RjgzQzY4NTVDNzk0QkJBNThGMjE4RkQ3NDEwNTU5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpI3/drr8u5dsBGLOpDSNvk3tN 8/J9fo3H93mk3W0dL+cKonQZeZeiUM6YyKpA/JOiclhlsey3RLasKUHcAltUJjpG rElzNd2C8ly+yED6jFP/uWOTfucFMhAj9UinUqGTQ9xyzHm/5M9KLtcljKEDsp81 wnGCQf43Rmh6DuboEzLrAFG51Gxcang4XD2stUlMxkNjPK5AiNweG7D4+c4Z87ib oqrAJ1Lzs6M+uw3ppW690yoxpxoBQ2Boz5j+FgVQWXyhuGmUPb3aN+nWCCmGNk0Z oEvm6gjgsCmisj2X1PDstLlos8lK674E0MBZsSmlItv9L3C8JMnROsxXARhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkMOjJPg8aFXHlLuljyGP10EFWUswHwYDVR0j BBgwFoAU9w12AOASQmk8oOtcq5Ie4EmMXNMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBF MDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0OThDNUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzBENzYwMEUwMTI0MjY5M0NBMEVCNUNBQjkyMUVFMDQ5OEM1 Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFF RTA0OThDNUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPiAkxj93vCY6Pkua1jvAIsTeSIPJl5cQS7 VOYXCg4OcwuQ2Rjo+tt4buP8KSDYXw0OBvhVKEKJs9AiK9JdUVcaBb5XZsBPSw2b nSDZe44iiQRgw37IFFJ94DgncsNJJeF/GvnfnOBuawcRRRV7pFgE1V79Isy/6kmA Kk/FFCIDgyDGxpeZWpgZ5tRwvELUfulAC0QiQHn1dQziHxrmZkd5Hg2AaTXGEzMI SRgv5QAIvKkgo1IKLOdsBQxb/+cw58QcxT7K9xZ9ecGKY20VnNEIDk9OPTM/jkM/ pV3uXh+mI6uMKLpV3Zhvy4WvrtSUnBVyYJHWRghUYN8qGtNusA0= -----END CERTIFICATE-----Generated at Mon Sep 21 01:14:07 2026 by rpki-client