$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft File: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft (raw, json) Hash identifier: dAElLOoXc8NgqaVLs2gC6QfpiUYQoKPtTvsIUm3uekE= Subject key identifier: 24:98:DD:2B:41:7A:71:EB:5F:4A:56:10:76:EE:B6:C5:0E:66:A2:EC Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E Certificate issuer: /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Certificate serial: 3CAAC48877AB086301B6F84BFEC29AEB4FE173D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft Manifest number: BD Signing time: Sun 20 Sep 2026 12:37:44 +0000 Manifest this update: Sun 20 Sep 2026 12:32:44 +0000 Manifest next update: Mon 21 Sep 2026 13:45:44 +0000 Files and hashes: 1: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: Nx3fcumdsqRiUqwqQ3R1jk6NstvkzNg1p4gYbPnIgK4=) 2: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl (hash: /SdikaAP18VFspIu4OB8krtyzUN1DOHH2gB5VFk670M=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:aa:c4:88:77:ab:08:63:01:b6:f8:4b:fe:c2:9a:eb:4f:e1:73:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Validity Not Before: Sep 20 12:32:44 2026 GMT Not After : Sep 21 13:45:44 2026 GMT Subject: CN=2498DD2B417A71EB5F4A561076EEB6C50E66A2EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:28:f4:f5:9e:dd:14:c3:2e:92:45:56:7b: 73:3b:52:28:4d:53:a6:b3:b9:35:d3:30:47:6b:53: bf:ea:14:ca:5d:7b:5e:30:37:d1:6a:63:3f:d0:c6: 54:c0:39:e2:d9:0a:9a:f9:71:e0:09:e1:d7:5a:33: 6a:a6:a4:27:09:4c:20:ba:fe:d1:16:10:f4:0d:e6: 37:3e:c4:a0:e3:b2:f7:87:8c:6c:b7:94:a0:d4:5d: 8c:08:a8:19:f3:c8:d0:bc:84:f5:5b:9f:c6:8a:35: 53:7a:a4:40:06:30:5f:49:6b:77:f6:91:5d:01:ee: d9:a9:ca:7e:1b:be:af:02:ea:f6:f4:0c:47:67:2f: 1f:fa:6f:38:d3:7c:25:9b:29:04:df:c4:84:28:f9: 3f:38:a0:a1:34:2c:d0:72:30:3a:31:82:f5:05:8e: ee:2e:1c:50:e4:c1:b1:46:04:54:ad:4e:7e:4d:bb: 0f:d7:1c:80:73:47:ce:51:e8:9d:cd:93:7e:1d:79: 1f:92:2a:a1:f8:95:02:d8:33:06:c2:97:08:15:c3: 90:8a:77:93:1a:61:ac:9e:19:af:0b:10:a9:32:46: 3c:25:90:ba:b8:4b:d1:9a:e8:1b:2b:f9:b4:cf:28: 84:e8:52:76:33:ed:10:e5:f1:e1:dd:9d:03:be:64: d8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:98:DD:2B:41:7A:71:EB:5F:4A:56:10:76:EE:B6:C5:0E:66:A2:EC X509v3 Authority Key Identifier: keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:48:96:f1:74:30:33:da:93:23:82:84:60:df:94:de:e0:4e: 98:ef:e4:e8:22:c5:70:69:5c:99:2d:22:2f:99:dd:d2:f1:f9: 93:9a:47:2c:88:a5:82:0d:03:1b:1a:c6:db:70:fe:9b:60:27: 91:e3:b1:77:7a:ab:d5:10:92:6e:dd:34:09:c3:3c:8b:4a:1e: 35:0e:8f:1d:d5:a7:9b:b1:84:72:9e:90:2c:b4:aa:e4:f2:c0: c0:3c:f5:62:25:2f:81:0e:8f:01:b5:64:c3:72:79:6b:9c:9b: 0f:22:53:3a:1e:55:ec:43:d5:ac:50:62:c8:16:6b:2a:9d:23: 7d:11:ef:cf:7e:dd:c3:59:c2:d6:63:ac:e5:9a:94:84:16:b8: 5d:a8:47:d4:79:8d:9d:ec:b9:58:f6:b2:18:d8:8d:0f:ce:5c: 73:b3:8d:a4:7d:25:ed:6b:a6:f2:dc:cb:28:a0:f3:cd:a0:3e: fa:2a:7d:1e:46:26:28:53:8b:42:8a:66:bb:4c:ab:76:08:18: 77:29:bf:cb:18:b9:4f:ac:4b:66:11:96:4f:d7:2a:be:9f:f4: 0d:06:be:b8:85:ac:fc:cf:da:44:f7:6e:79:52:4b:4f:38:23: cf:da:1b:8a:8f:4e:29:eb:9c:b7:77:f4:c5:5b:f2:0d:57:90: 41:98:a6:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKrEiHerCGMBtvhL/sKa60/hc9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VC Qzk5REI4RTAeFw0yNjA5MjAxMjMyNDRaFw0yNjA5MjExMzQ1NDRaMDMxMTAvBgNV BAMTKDI0OThERDJCNDE3QTcxRUI1RjRBNTYxMDc2RUVCNkM1MEU2NkEyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7eyj09Z7dFMMukkVWe3M7UihN U6azuTXTMEdrU7/qFMpde14wN9FqYz/QxlTAOeLZCpr5ceAJ4ddaM2qmpCcJTCC6 /tEWEPQN5jc+xKDjsveHjGy3lKDUXYwIqBnzyNC8hPVbn8aKNVN6pEAGMF9Ja3f2 kV0B7tmpyn4bvq8C6vb0DEdnLx/6bzjTfCWbKQTfxIQo+T84oKE0LNByMDoxgvUF ju4uHFDkwbFGBFStTn5Nuw/XHIBzR85R6J3Nk34deR+SKqH4lQLYMwbClwgVw5CK d5MaYayeGa8LEKkyRjwlkLq4S9Ga6Bsr+bTPKIToUnYz7RDl8eHdnQO+ZNixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJJjdK0F6cetfSlYQdu62xQ5mouwwHwYDVR0j BBgwFoAUcPbsHnI9be1CS5NFzD32zryZ244wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZkZDE1ZTMtOWVlNS00ZDUyLTllZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3 MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VCQzk5REI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY2RUMxRTcyM0Q2REVENDI0QjkzNDVDQzNERjZDRUJDOTlE QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2 Q0VCQzk5REI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFIlvF0MDPakyOChGDflN7gTpjv5OgixXBp XJktIi+Z3dLx+ZOaRyyIpYINAxsaxttw/ptgJ5HjsXd6q9UQkm7dNAnDPItKHjUO jx3Vp5uxhHKekCy0quTywMA89WIlL4EOjwG1ZMNyeWucmw8iUzoeVexD1axQYsgW ayqdI30R789+3cNZwtZjrOWalIQWuF2oR9R5jZ3suVj2shjYjQ/OXHOzjaR9Je1r pvLcyyig882gPvoqfR5GJihTi0KKZrtMq3YIGHcpv8sYuU+sS2YRlk/XKr6f9A0G vriFrPzP2kT3bnlSS084I8/aG4qPTinrnLd39MVb8g1XkEGYpt4= -----END CERTIFICATE-----Generated at Mon Sep 21 05:18:28 2026 by rpki-client