$ rpki-client -vvvf rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft File: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft (raw, json) Hash identifier: aoFLrUjARcV/Pb3qI28p2Z3fXzKXkc+q87X3G2Uc6es= Subject key identifier: 22:57:D8:39:B5:35:E7:51:2B:26:24:B9:19:43:A2:04:3C:6E:AE:29 Authority key identifier: 05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C Certificate issuer: /CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C Certificate serial: 60E22BC364CE8B6D7627364D79B77C753FDED989 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft Manifest number: D3 Signing time: Thu 08 Oct 2026 02:50:22 +0000 Manifest this update: Thu 08 Oct 2026 02:45:22 +0000 Manifest next update: Fri 09 Oct 2026 06:12:22 +0000 Files and hashes: 1: 0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl (hash: 8ZXhr8QKmUqVgF7RzglHMrA+WEHr3Bc/2yGEtqh7w4g=) 2: 3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (hash: puG9tEvlwR1Rqa0nAJ5US5V0FBLntY3L8sj4Hpd3IlU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 03:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e2:2b:c3:64:ce:8b:6d:76:27:36:4d:79:b7:7c:75:3f:de:d9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0570889923C3EF7021D619B24F3A3CC6E069AF6C Validity Not Before: Oct 8 02:45:22 2026 GMT Not After : Oct 9 06:12:22 2026 GMT Subject: CN=2257D839B535E7512B2624B91943A2043C6EAE29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:6d:a5:c3:da:0e:95:16:6d:48:44:0d:14: 34:41:42:59:3d:72:1d:17:02:6a:43:b2:37:ef:31: 74:8c:b8:5c:29:c0:9b:8d:24:65:df:d0:6e:73:45: 98:4a:fa:c1:94:07:1b:9c:aa:4c:3e:9a:ed:1b:77: a3:5d:00:e5:de:2b:b1:b9:ca:f3:e4:30:40:37:7c: 6a:30:0c:0f:90:03:a0:24:a0:0c:2a:6d:e3:77:00: 55:e4:0a:76:c0:78:b0:f7:28:66:be:19:f7:f0:5a: c7:0c:40:86:71:94:b6:3f:22:78:ac:5f:6b:43:81: fc:ad:e1:bb:e9:32:07:5e:64:26:e6:cc:08:fc:53: 85:8a:35:38:6d:54:e9:4d:dd:29:a0:09:55:40:76: e4:ac:59:ec:ee:cf:ac:51:d2:23:3d:20:40:9d:b1: f2:cc:f2:fd:af:1c:38:73:2e:d1:a8:07:8d:62:b9: b0:bc:b9:e8:8d:d7:6e:68:59:0c:97:09:94:7c:45: a2:e8:ca:5e:e4:40:63:8e:ef:b8:0c:c3:2e:ce:54: b9:e2:c2:1f:7e:99:15:b6:e8:54:36:3f:4e:00:42: 37:fb:3a:a3:b7:e2:d6:2b:09:11:5e:72:9e:03:64: 85:dd:a0:0e:f9:32:ad:44:b9:03:c3:a0:b1:fc:36: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:57:D8:39:B5:35:E7:51:2B:26:24:B9:19:43:A2:04:3C:6E:AE:29 X509v3 Authority Key Identifier: keyid:05:70:88:99:23:C3:EF:70:21:D6:19:B2:4F:3A:3C:C6:E0:69:AF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0570889923C3EF7021D619B24F3A3CC6E069AF6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/0570889923C3EF7021D619B24F3A3CC6E069AF6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a6:52:97:14:33:c2:d2:a7:35:22:4b:08:0b:73:b2:36:08: c3:a1:f8:ec:b5:f0:28:70:98:35:46:3d:f5:29:16:88:a8:e4: e6:05:c5:51:86:43:fe:e5:16:0f:74:1d:d1:86:85:fe:b9:94: 9d:69:f5:d0:2c:b4:5b:5c:75:78:3f:3d:91:9e:3f:ec:e4:ab: c3:68:86:3f:74:5d:3a:c5:8c:bb:22:0c:c7:b4:79:9c:f4:e7: 66:1b:01:0c:11:54:85:c7:8e:4c:2a:0c:97:7e:9d:d4:e8:00: 5c:5c:2d:ff:1a:08:17:6f:26:ae:b2:fd:b0:02:e1:32:62:36: 9f:a8:40:0c:62:92:15:a5:fc:be:22:0d:71:f0:97:df:b7:fd: 11:f1:1a:ee:c5:6c:f5:53:bf:ba:73:a5:c1:51:43:1b:98:78: 82:7d:24:8e:9d:37:6b:4a:33:f1:23:04:fc:f9:81:b2:5b:f6: e3:1a:bf:e6:6f:fa:0e:2b:5b:bf:3d:8e:ca:c9:a5:cf:40:d9: 85:1b:5d:f7:a8:74:59:de:cc:8f:83:e1:67:ff:bf:1f:73:04: 0a:01:e3:50:bc:70:69:ea:17:11:45:e9:7b:8f:99:cb:14:f2: 5e:e8:41:bf:6a:bf:75:d7:75:0b:59:ca:1e:fc:7b:b5:d9:a6: 68:9e:8b:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOIrw2TOi212JzZNebd8dT/e2YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU3MDg4OTkyM0MzRUY3MDIxRDYxOUIyNEYzQTNDQzZF MDY5QUY2QzAeFw0yNjEwMDgwMjQ1MjJaFw0yNjEwMDkwNjEyMjJaMDMxMTAvBgNV BAMTKDIyNTdEODM5QjUzNUU3NTEyQjI2MjRCOTE5NDNBMjA0M0M2RUFFMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Nm2lw9oOlRZtSEQNFDRBQlk9 ch0XAmpDsjfvMXSMuFwpwJuNJGXf0G5zRZhK+sGUBxucqkw+mu0bd6NdAOXeK7G5 yvPkMEA3fGowDA+QA6AkoAwqbeN3AFXkCnbAeLD3KGa+GffwWscMQIZxlLY/Inis X2tDgfyt4bvpMgdeZCbmzAj8U4WKNThtVOlN3SmgCVVAduSsWezuz6xR0iM9IECd sfLM8v2vHDhzLtGoB41iubC8ueiN125oWQyXCZR8RaLoyl7kQGOO77gMwy7OVLni wh9+mRW26FQ2P04AQjf7OqO34tYrCRFecp4DZIXdoA75Mq1EuQPDoLH8NghHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIlfYObU151ErJiS5GUOiBDxurikwHwYDVR0j BBgwFoAUBXCImSPD73Ah1hmyTzo8xuBpr2wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEwYmUzNTMtNGFiOC00Yjc3LTk4OGQtNzM5ZjgyYjlmNjQxLzAvMDU3MDg4OTky M0MzRUY3MDIxRDYxOUIyNEYzQTNDQzZFMDY5QUY2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNTcwODg5OTIzQzNFRjcwMjFENjE5QjI0RjNBM0NDNkUwNjlB RjZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEwYmUzNTMtNGFiOC00Yjc3LTk4 OGQtNzM5ZjgyYjlmNjQxLzAvMDU3MDg4OTkyM0MzRUY3MDIxRDYxOUIyNEYzQTND QzZFMDY5QUY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKmUpcUM8LSpzUiSwgLc7I2CMOh+Oy18Chw mDVGPfUpFoio5OYFxVGGQ/7lFg90HdGGhf65lJ1p9dAstFtcdXg/PZGeP+zkq8No hj90XTrFjLsiDMe0eZz052YbAQwRVIXHjkwqDJd+ndToAFxcLf8aCBdvJq6y/bAC 4TJiNp+oQAxikhWl/L4iDXHwl9+3/RHxGu7FbPVTv7pzpcFRQxuYeIJ9JI6dN2tK M/EjBPz5gbJb9uMav+Zv+g4rW789jsrJpc9A2YUbXfeodFnezI+D4Wf/vx9zBAoB 41C8cGnqFxFF6XuPmcsU8l7oQb9qv3XXdQtZyh78e7XZpmiei20= -----END CERTIFICATE-----Generated at Thu Oct 8 08:45:35 2026 by rpki-client