$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft File: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft (raw, json) Hash identifier: 2Xj5+r9onu/sEuUFiwncukw6Xh65HKPzdmfwGJFosw8= Subject key identifier: AC:79:9A:02:25:30:00:AF:4C:52:11:CD:EC:3D:ED:99:33:4E:40:2D Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E Certificate issuer: /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Certificate serial: 31DCF91E7017986124EABFCE6A965A92C64226B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft Manifest number: FF Signing time: Mon 09 Nov 2026 11:14:43 +0000 Manifest this update: Mon 09 Nov 2026 11:09:43 +0000 Manifest next update: Tue 10 Nov 2026 14:21:43 +0000 Files and hashes: 1: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I=) 2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: Nx3fcumdsqRiUqwqQ3R1jk6NstvkzNg1p4gYbPnIgK4=) 3: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl (hash: 3RsgNFpRWjsGopHNdr4qmJGFxpJDu2JjEE4O69/Z34M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 14:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:dc:f9:1e:70:17:98:61:24:ea:bf:ce:6a:96:5a:92:c6:42:26:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Validity Not Before: Nov 9 11:09:43 2026 GMT Not After : Nov 10 14:21:43 2026 GMT Subject: CN=AC799A02253000AF4C5211CDEC3DED99334E402D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:0a:36:c9:af:60:5d:4b:d7:d9:03:69:2e: 1a:dc:33:46:c6:81:18:19:46:8e:9c:69:30:a0:7d: 53:bf:4a:9d:ae:4e:a5:ee:07:66:f6:98:ed:11:c2: f8:f9:dd:09:14:2c:68:b4:8e:13:15:bb:e0:b4:ed: 06:32:85:0b:54:48:44:15:e3:7e:a8:ee:27:ed:bd: 3d:b9:65:82:36:4f:ff:32:58:37:fb:41:99:11:b6: 6a:01:ef:3d:e3:90:6e:82:3a:67:97:dd:cf:b9:4a: ae:33:c7:f8:35:6b:47:65:61:6e:6c:e9:9a:5b:4c: 13:cb:51:a9:67:f5:63:01:82:4d:84:9d:3a:f5:82: a7:45:39:97:ec:62:4b:dc:d2:32:c4:cc:0d:e2:3c: 5b:af:45:9d:9a:d1:90:4c:35:52:c8:bb:b4:5e:5b: 9b:ad:60:06:c9:93:14:23:ea:6a:43:81:d0:48:84: 5a:36:39:67:09:0d:9d:03:f1:2f:4b:9e:81:b5:2a: b3:4f:09:64:f0:b2:ba:2e:9b:4c:8c:47:74:e7:75: 5f:fa:f4:ac:e1:9b:5d:f9:b2:69:ac:c3:48:3c:6a: 9c:91:c1:15:f0:88:b3:d0:29:04:ba:53:6c:4f:d2: 72:b0:9f:17:f6:10:92:89:48:6c:3f:43:f3:bd:b3: f5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:79:9A:02:25:30:00:AF:4C:52:11:CD:EC:3D:ED:99:33:4E:40:2D X509v3 Authority Key Identifier: keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5a:b9:88:1f:89:aa:b8:a6:77:a6:17:e5:18:ef:b8:e6:39: 88:0c:ee:04:ac:7c:6d:e3:4e:b9:f9:40:5b:57:74:71:1f:f7: da:64:e0:f7:2e:f2:0e:37:30:59:b0:47:2b:82:ec:c9:48:0f: 2c:60:d4:e3:cc:d7:0b:2a:34:0c:77:eb:09:98:48:6e:85:5f: ea:fe:31:a1:0c:f2:39:14:00:81:c5:ea:e9:3f:ea:ee:25:15: 5a:3f:7d:9d:e3:38:61:cc:2f:d8:fd:ca:89:1d:b6:49:51:28: bb:bf:eb:68:db:d7:c2:e2:5b:31:3e:bf:b3:71:3f:9d:e9:5f: 69:8d:9e:9c:04:d1:c7:c6:9f:aa:89:19:4f:d7:62:be:b2:89: 41:c0:55:d1:73:e0:d9:ef:82:52:4b:8c:84:f7:dd:12:26:6e: 40:91:e1:82:ce:1e:31:1a:cb:79:ab:c6:04:7e:36:ac:82:f6: e0:f0:3b:94:6f:29:66:9d:6c:46:41:fd:1e:16:52:8a:f7:f8: bd:8b:85:f1:c1:78:9f:f7:1a:a3:6e:fe:3f:68:17:6a:da:33: 9e:b6:39:9c:db:5c:b6:38:de:fa:30:d4:90:8b:15:f6:27:44: d3:50:3f:e1:b9:b5:6d:6a:48:02:76:0c:ed:38:34:ed:9e:c3: e3:ce:ea:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMdz5HnAXmGEk6r/OapZaksZCJrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VC Qzk5REI4RTAeFw0yNjExMDkxMTA5NDNaFw0yNjExMTAxNDIxNDNaMDMxMTAvBgNV BAMTKEFDNzk5QTAyMjUzMDAwQUY0QzUyMTFDREVDM0RFRDk5MzM0RTQwMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbgo2ya9gXUvX2QNpLhrcM0bG gRgZRo6caTCgfVO/Sp2uTqXuB2b2mO0Rwvj53QkULGi0jhMVu+C07QYyhQtUSEQV 436o7iftvT25ZYI2T/8yWDf7QZkRtmoB7z3jkG6COmeX3c+5Sq4zx/g1a0dlYW5s 6ZpbTBPLUaln9WMBgk2EnTr1gqdFOZfsYkvc0jLEzA3iPFuvRZ2a0ZBMNVLIu7Re W5utYAbJkxQj6mpDgdBIhFo2OWcJDZ0D8S9LnoG1KrNPCWTwsroum0yMR3TndV/6 9Kzhm135smmsw0g8apyRwRXwiLPQKQS6U2xP0nKwnxf2EJKJSGw/Q/O9s/XjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrHmaAiUwAK9MUhHN7D3tmTNOQC0wHwYDVR0j BBgwFoAUcPbsHnI9be1CS5NFzD32zryZ244wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZkZDE1ZTMtOWVlNS00ZDUyLTllZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3 MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VCQzk5REI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY2RUMxRTcyM0Q2REVENDI0QjkzNDVDQzNERjZDRUJDOTlE QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2 Q0VCQzk5REI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJauYgfiaq4pnemF+UY77jmOYgM7gSsfG3j Trn5QFtXdHEf99pk4Pcu8g43MFmwRyuC7MlIDyxg1OPM1wsqNAx36wmYSG6FX+r+ MaEM8jkUAIHF6uk/6u4lFVo/fZ3jOGHML9j9yokdtklRKLu/62jb18LiWzE+v7Nx P53pX2mNnpwE0cfGn6qJGU/XYr6yiUHAVdFz4NnvglJLjIT33RImbkCR4YLOHjEa y3mrxgR+NqyC9uDwO5RvKWadbEZB/R4WUor3+L2LhfHBeJ/3GqNu/j9oF2raM562 OZzbXLY43vow1JCLFfYnRNNQP+G5tW1qSAJ2DO04NO2ew+PO6rU= -----END CERTIFICATE-----Generated at Tue Nov 10 05:24:54 2026 by rpki-client