$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft File: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft (raw, json) Hash identifier: VwMIDmSUEtiEC/QsdiL28grywDA/bh1Uz0j10zsWwhs= Subject key identifier: A4:7A:48:D1:EA:C8:60:2E:52:34:45:CC:78:AB:45:2D:B7:4A:46:5B Authority key identifier: C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 Certificate issuer: /CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Certificate serial: 0C9BD10D2D0E597B74DBA1C8FB06C591EE8088D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 01:33:07 +0000 Manifest this update: Wed 23 Sep 2026 01:28:07 +0000 Manifest next update: Thu 24 Sep 2026 03:28:07 +0000 Files and hashes: 1: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: IG22wGAeafPyZiCHJfimAg7HtJoJBGXUaInRtJgtJX8=) 2: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl (hash: uqC361WsddP/EELOs1HQ//tnafduw/TqdmGJvdXNKLM=) 3: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: RMvUFQrKL018cFixmOMzozWh6kTAtIwXuWq18nozxuA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9b:d1:0d:2d:0e:59:7b:74:db:a1:c8:fb:06:c5:91:ee:80:88:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Validity Not Before: Sep 23 01:28:07 2026 GMT Not After : Sep 24 03:28:07 2026 GMT Subject: CN=A47A48D1EAC8602E523445CC78AB452DB74A465B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:0f:35:36:cf:e6:eb:f7:2a:fe:31:ee:09: ec:50:30:92:b0:a6:cf:b6:41:17:eb:12:ad:5a:c9: 6b:d1:a9:4e:c2:c4:b3:16:68:11:ce:fe:c8:60:a0: f1:6e:7f:72:bb:05:45:14:c0:b9:7c:6d:f0:9e:9c: 9e:e5:3e:42:29:52:09:73:d9:e8:f3:4d:65:61:77: 6c:93:13:98:10:54:0b:95:b8:63:91:ce:25:84:f1: d3:56:98:04:c3:bf:4c:62:0c:7c:b1:f5:e5:35:fa: 90:91:93:48:e5:21:b1:3e:f6:da:ae:2e:31:0c:a9: f6:3e:d1:58:a7:84:d5:5b:76:5d:26:87:16:44:8f: aa:2b:67:fa:11:cc:36:4a:7e:da:70:df:08:79:13: 9a:13:ed:2e:0a:a0:8a:95:a6:53:b9:1c:e3:a6:a8: 05:11:d4:81:4a:32:15:42:41:8e:04:1d:97:f1:89: 8c:79:b0:28:33:b5:ed:fd:bb:51:db:ec:b2:f7:32: 13:11:cf:de:c0:33:38:5b:d2:c3:ec:ed:d6:a8:b5: 0c:b9:18:93:ac:ad:9b:ae:fb:97:74:06:f0:0b:1e: 6f:9a:a9:3c:d1:64:72:33:15:8c:ac:79:b8:8b:07: d9:c9:f7:46:f0:8d:8b:2c:8d:c1:bc:2a:b3:8d:45: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7A:48:D1:EA:C8:60:2E:52:34:45:CC:78:AB:45:2D:B7:4A:46:5B X509v3 Authority Key Identifier: keyid:C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:e8:05:65:2d:73:de:9b:e1:ce:95:06:a2:6e:cf:24:8a:43: 7c:aa:8d:9e:fb:7a:7a:5b:86:7f:86:eb:59:2c:3c:23:f2:5a: de:ba:85:7c:f2:cb:a9:b4:8c:b3:ae:c5:30:14:67:c7:64:48: ca:fb:63:0d:e9:cc:26:b3:be:8a:2e:b5:d6:69:90:2e:43:6e: 84:f3:1a:74:b7:a1:ac:c8:32:9d:5e:b9:8d:a6:e6:cb:67:60: 71:90:35:d7:82:58:f6:6c:07:89:7f:18:34:b8:76:42:0c:15: f2:11:6b:91:bb:36:31:ac:ad:cc:b4:3b:55:95:9c:7f:df:b8: 38:5d:2d:72:c3:5e:03:b8:fc:c8:a8:0e:88:d5:5b:85:9b:b2: 87:2b:e2:dd:53:88:b8:90:e1:b6:6d:59:78:0f:25:3c:b2:ab: 9d:bc:54:8c:a6:48:fc:ba:da:fa:14:33:1d:56:53:a5:72:31: 11:de:94:f9:90:1d:aa:2d:dd:2d:12:bd:be:a6:65:a1:35:93: c6:bd:39:4a:06:8e:d5:73:dc:42:30:b5:8a:d5:59:df:6a:d1: 7e:39:2e:be:63:7c:a9:2a:70:47:2b:76:52:12:4b:68:e6:70: 26:4f:2d:4f:37:02:53:de:50:35:11:82:76:e3:fe:a6:54:e5: 9b:87:c1:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJvRDS0OWXt026HI+wbFke6AiNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlD MDQ3MkI1MDAeFw0yNjA5MjMwMTI4MDdaFw0yNjA5MjQwMzI4MDdaMDMxMTAvBgNV BAMTKEE0N0E0OEQxRUFDODYwMkU1MjM0NDVDQzc4QUI0NTJEQjc0QTQ2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TQ81Ns/m6/cq/jHuCexQMJKw ps+2QRfrEq1ayWvRqU7CxLMWaBHO/shgoPFuf3K7BUUUwLl8bfCenJ7lPkIpUglz 2ejzTWVhd2yTE5gQVAuVuGORziWE8dNWmATDv0xiDHyx9eU1+pCRk0jlIbE+9tqu LjEMqfY+0VinhNVbdl0mhxZEj6orZ/oRzDZKftpw3wh5E5oT7S4KoIqVplO5HOOm qAUR1IFKMhVCQY4EHZfxiYx5sCgzte39u1Hb7LL3MhMRz97AMzhb0sPs7daotQy5 GJOsrZuu+5d0BvALHm+aqTzRZHIzFYysebiLB9nJ90bwjYssjcG8KrONRa4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHpI0erIYC5SNEXMeKtFLbdKRlswHwYDVR0j BBgwFoAUxwqifmAZfQLw3M2OeST/+cBHK1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlODM2NzMtMDk2YS00NDBjLWIyN2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2 MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlDMDQ3MkI1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzBBQTI3RTYwMTk3RDAyRjBEQ0NEOEU3OTI0RkZGOUMwNDcy QjUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZG RjlDMDQ3MkI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/oBWUtc96b4c6VBqJuzySKQ3yqjZ77enpb hn+G61ksPCPyWt66hXzyy6m0jLOuxTAUZ8dkSMr7Yw3pzCazvooutdZpkC5DboTz GnS3oazIMp1euY2m5stnYHGQNdeCWPZsB4l/GDS4dkIMFfIRa5G7NjGsrcy0O1WV nH/fuDhdLXLDXgO4/MioDojVW4Wbsocr4t1TiLiQ4bZtWXgPJTyyq528VIymSPy6 2voUMx1WU6VyMRHelPmQHaot3S0Svb6mZaE1k8a9OUoGjtVz3EIwtYrVWd9q0X45 Lr5jfKkqcEcrdlISS2jmcCZPLU83AlPeUDURgnbj/qZU5ZuHwYw= -----END CERTIFICATE-----Generated at Wed Sep 23 05:57:58 2026 by rpki-client