$ rpki-client -vvvf rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft File: B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft (raw, json) Hash identifier: PrfF8xNDusMLP2GFZYm8VPtQYMsDcm3+SckLQOQArdo= Subject key identifier: A9:5D:97:A2:3B:92:EB:53:A1:A1:EA:BD:2F:70:C4:5C:61:CE:B2:5D Authority key identifier: B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 Certificate issuer: /CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Certificate serial: 3B924F08A5CCEDC7879F1670390BD4739FF226AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft Manifest number: BF Signing time: Sun 20 Sep 2026 21:03:03 +0000 Manifest this update: Sun 20 Sep 2026 20:58:03 +0000 Manifest next update: Mon 21 Sep 2026 22:53:03 +0000 Files and hashes: 1: B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl (hash: G6IW8QCQwrO0B7B/xrFfrDOBj4CgwMrOz6qyI7BcHts=) 2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: ZLVGrLGxQp2e5Y2IzOOoMpl4wxPvjrD5ZWNyIr1u5Ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:92:4f:08:a5:cc:ed:c7:87:9f:16:70:39:0b:d4:73:9f:f2:26:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Validity Not Before: Sep 20 20:58:03 2026 GMT Not After : Sep 21 22:53:03 2026 GMT Subject: CN=A95D97A23B92EB53A1A1EABD2F70C45C61CEB25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:56:c9:84:6b:96:ad:d3:8e:bc:9a:6b:b9: b0:c6:6f:54:48:ae:ba:2f:db:39:e0:4f:a4:f3:b4: bb:e3:09:4d:9b:57:ed:bc:99:74:76:08:da:23:db: 9c:de:4e:ff:78:b3:80:7a:8d:1b:0e:c4:da:50:20: 6e:6e:66:03:11:6e:8e:af:b7:81:f3:fd:2a:85:38: 30:a0:3e:4f:4c:d1:62:1b:c0:a1:76:11:87:a7:73: 08:1a:da:99:30:ed:df:35:7a:ee:56:c0:1e:4f:09: 75:3c:75:d1:05:3a:5d:38:76:56:9f:b1:a7:a1:52: 98:9c:d9:61:c5:2e:cf:06:62:0f:7c:8f:93:53:f6: f6:0f:e4:52:07:37:d9:a6:2f:c7:fe:c6:10:be:e8: b7:b8:d2:7c:5a:87:a0:92:7e:c1:00:63:66:ce:44: 2b:ad:36:63:8a:f0:9b:7f:cb:80:6a:b2:84:1e:36: 3a:ae:9f:fe:24:cd:0c:71:80:f0:14:2d:76:4f:b9: c6:0e:ea:b5:8d:71:1d:ee:39:34:73:c0:4f:3f:c5: ec:af:65:5a:5b:77:15:f0:c8:90:61:ad:7c:9d:c1: 8e:39:19:11:c3:16:94:bd:c5:a2:81:71:ba:4c:72: a3:45:3d:25:eb:8f:e9:3e:a2:9b:11:22:9c:93:fc: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5D:97:A2:3B:92:EB:53:A1:A1:EA:BD:2F:70:C4:5C:61:CE:B2:5D X509v3 Authority Key Identifier: keyid:B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:82:62:82:41:ed:96:57:d8:a8:5e:19:50:eb:fd:0a:40:5b: d3:97:26:d3:ac:a3:25:97:b0:66:08:5f:ab:79:2f:a8:f9:58: 6b:42:f6:c0:89:d1:94:c3:97:19:f1:6b:88:e6:23:c8:7b:05: 0c:10:c6:d4:51:e9:97:c0:8e:33:07:9c:3f:f1:a9:3c:8a:2c: dc:49:6a:bd:f5:3a:45:4f:ce:04:aa:32:0d:a7:25:f9:5e:27: e1:ce:bd:6b:dc:78:e7:e5:ac:d2:85:95:43:06:1a:41:c1:1f: c3:0b:fb:2b:12:cf:c9:82:3a:1e:64:b4:88:18:a5:aa:b5:b7: 10:bd:0c:39:09:cb:b3:24:0a:2e:4c:d6:18:0c:35:10:3a:9e: 1f:7b:23:d7:69:d6:d0:1e:27:3f:69:fe:ef:a9:ea:62:62:3c: 53:3f:ad:a2:74:81:3b:8e:40:09:5d:4d:92:ec:54:82:d0:bf: f4:39:59:d5:bf:9a:28:30:6c:bf:b6:47:c2:6e:ef:f2:de:c3: 85:1d:91:bb:03:cd:3a:54:17:34:db:4c:0f:1a:d4:4c:d6:d3: d9:81:e9:ed:e3:aa:98:e8:4e:92:ab:f5:26:35:71:59:0a:36: 52:4c:ae:a7:d2:ae:57:4e:1e:b3:08:ca:2c:2d:b3:b2:9a:44: c4:57:8a:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5JPCKXM7ceHnxZwOQvUc5/yJqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhF MDZBOTcyODAeFw0yNjA5MjAyMDU4MDNaFw0yNjA5MjEyMjUzMDNaMDMxMTAvBgNV BAMTKEE5NUQ5N0EyM0I5MkVCNTNBMUExRUFCRDJGNzBDNDVDNjFDRUIyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+P1bJhGuWrdOOvJprubDGb1RI rrov2zngT6TztLvjCU2bV+28mXR2CNoj25zeTv94s4B6jRsOxNpQIG5uZgMRbo6v t4Hz/SqFODCgPk9M0WIbwKF2EYencwga2pkw7d81eu5WwB5PCXU8ddEFOl04dlaf saehUpic2WHFLs8GYg98j5NT9vYP5FIHN9mmL8f+xhC+6Le40nxah6CSfsEAY2bO RCutNmOK8Jt/y4BqsoQeNjqun/4kzQxxgPAULXZPucYO6rWNcR3uOTRzwE8/xeyv ZVpbdxXwyJBhrXydwY45GRHDFpS9xaKBcbpMcqNFPSXrj+k+opsRIpyT/J9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqV2XojuS61Ohoeq9L3DEXGHOsl0wHwYDVR0j BBgwFoAUtw+ECty5+FFxsHO5UdqquOBqlygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIxZjNmYWUtZDBjYi00YTE3LWE1NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFE Q0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhFMDZBOTcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzBGODQwQURDQjlGODUxNzFCMDczQjk1MURBQUFCOEUwNkE5 NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFB QjhFMDZBOTcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaCYoJB7ZZX2KheGVDr/QpAW9OXJtOsoyWX sGYIX6t5L6j5WGtC9sCJ0ZTDlxnxa4jmI8h7BQwQxtRR6ZfAjjMHnD/xqTyKLNxJ ar31OkVPzgSqMg2nJfleJ+HOvWvceOflrNKFlUMGGkHBH8ML+ysSz8mCOh5ktIgY paq1txC9DDkJy7MkCi5M1hgMNRA6nh97I9dp1tAeJz9p/u+p6mJiPFM/raJ0gTuO QAldTZLsVILQv/Q5WdW/migwbL+2R8Ju7/Lew4UdkbsDzTpUFzTbTA8a1EzW09mB 6e3jqpjoTpKr9SY1cVkKNlJMrqfSrldOHrMIyiwts7KaRMRXioY= -----END CERTIFICATE-----Generated at Mon Sep 21 07:56:58 2026 by rpki-client