$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft File: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft (raw, json) Hash identifier: IIu9kDcrOZYA7STXID6ppsz4GXVbIylhau+T4JKgOWs= Subject key identifier: 2C:7A:AE:9F:E1:E3:C5:1D:EB:8C:D6:32:58:E4:79:7F:E3:3F:9D:11 Authority key identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 Certificate issuer: /CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Certificate serial: 2BA93545B6B8DDC25736C25D102FDEE0384E736B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft Manifest number: F9 Signing time: Thu 05 Nov 2026 01:25:53 +0000 Manifest this update: Thu 05 Nov 2026 01:20:53 +0000 Manifest next update: Fri 06 Nov 2026 03:20:53 +0000 Files and hashes: 1: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl (hash: aaPQKzGbAS230Vbg5fFN3PEEnzOnUt4E28yP9hE57Ns=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: xkIsUOsvhzcBh2sD2rCI6s5EqakfkJ/T7bTiJ7H33iA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 03:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a9:35:45:b6:b8:dd:c2:57:36:c2:5d:10:2f:de:e0:38:4e:73:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Validity Not Before: Nov 5 01:20:53 2026 GMT Not After : Nov 6 03:20:53 2026 GMT Subject: CN=2C7AAE9FE1E3C51DEB8CD63258E4797FE33F9D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:6d:28:7a:0d:34:c4:4e:02:20:92:85:06: 12:29:35:61:47:1e:4a:d2:7a:99:f9:4e:f4:b9:7d: 55:98:0d:ce:96:c9:f5:60:bb:57:ca:25:8d:5b:35: 7a:d0:54:c0:1b:3e:d2:92:bf:14:95:c7:07:d6:7e: 60:52:5f:48:eb:7e:a4:4f:af:68:c1:7a:47:04:fb: 43:d8:1e:a1:d1:af:39:f1:8c:6a:e0:19:2f:23:75: dc:ab:dc:06:a4:c3:40:21:54:a7:5b:b5:6f:f6:2a: f9:e8:a1:95:52:35:13:de:66:74:91:d8:84:6e:f1: 48:20:f3:64:47:1f:da:98:bc:c6:19:50:92:ba:c2: 67:bd:74:8e:5d:40:02:64:bc:81:d3:3a:92:6f:7d: c2:db:98:05:f2:06:09:d9:08:aa:71:d0:fe:cb:7b: 58:5e:cd:01:48:9c:20:4d:f5:96:63:4b:15:05:61: b4:0c:f2:3e:6d:84:53:61:ae:52:39:9d:c6:ea:b9: 06:ac:b9:50:11:d1:4f:89:77:ae:29:4c:7f:46:1d: 1c:5d:2a:49:a6:71:a0:c6:b0:c8:09:10:c3:a0:85: 03:1a:48:3a:89:ea:4c:a4:77:c0:96:1f:5e:fb:a5: 4d:4c:34:6b:26:29:be:90:26:0e:a2:5b:71:07:2d: 58:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7A:AE:9F:E1:E3:C5:1D:EB:8C:D6:32:58:E4:79:7F:E3:3F:9D:11 X509v3 Authority Key Identifier: keyid:70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fa:7f:c9:e3:71:48:43:ba:a9:ae:f5:2b:a7:8c:db:b6:d2: 20:77:87:96:94:83:4a:ad:93:ed:bb:b8:f0:b8:6d:bb:14:c2: b4:74:36:f1:42:30:f2:60:29:24:9f:60:b6:b1:19:d5:2e:24: c0:59:2b:8c:1e:dd:cd:e0:58:ef:a6:19:1b:3e:cb:a4:56:87: ce:76:bf:fc:1e:c4:b5:94:aa:b8:da:46:e5:95:e2:81:59:4b: ba:09:69:ca:8f:f9:27:3e:54:48:f3:91:48:85:df:0c:a6:52: 66:e7:42:2c:f0:d4:b9:1e:e9:79:1d:3f:13:93:56:83:cd:b6: 10:fa:10:9d:95:28:5c:05:31:a5:f3:3c:79:5a:d0:07:b5:07: 46:cf:25:0a:89:d7:4f:c2:51:51:fc:2a:1e:11:94:61:14:96: d5:a3:ae:b6:d9:f2:9f:4e:fb:21:42:6a:d1:41:b7:59:27:60: d0:2f:25:2f:cc:f0:6f:d1:5c:54:e9:16:75:bc:ba:f5:e7:4b: da:25:26:f4:09:be:89:4d:67:1d:31:de:5d:ca:ca:f7:63:32: 82:be:56:07:bb:e8:4f:e6:b2:b8:94:66:1b:27:7b:23:79:6f: c8:ae:9b:24:d5:0a:a3:00:30:9e:ba:66:01:46:da:8c:7a:b6: b3:42:d2:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK6k1Rba43cJXNsJdEC/e4DhOc2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0 QjQxMTc4MTAeFw0yNjExMDUwMTIwNTNaFw0yNjExMDYwMzIwNTNaMDMxMTAvBgNV BAMTKDJDN0FBRTlGRTFFM0M1MURFQjhDRDYzMjU4RTQ3OTdGRTMzRjlEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqbG0oeg00xE4CIJKFBhIpNWFH HkrSepn5TvS5fVWYDc6WyfVgu1fKJY1bNXrQVMAbPtKSvxSVxwfWfmBSX0jrfqRP r2jBekcE+0PYHqHRrznxjGrgGS8jddyr3Aakw0AhVKdbtW/2KvnooZVSNRPeZnSR 2IRu8Ugg82RHH9qYvMYZUJK6wme9dI5dQAJkvIHTOpJvfcLbmAXyBgnZCKpx0P7L e1hezQFInCBN9ZZjSxUFYbQM8j5thFNhrlI5ncbquQasuVAR0U+Jd64pTH9GHRxd KkmmcaDGsMgJEMOghQMaSDqJ6kykd8CWH177pU1MNGsmKb6QJg6iW3EHLVgBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULHqun+HjxR3rjNYyWOR5f+M/nREwHwYDVR0j BBgwFoAUcPeqTttsRXtdAtZnYt3Y7ktBF4EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZjNWExY2MtY2M1ZS00ZTU4LThkZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVE QjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0QjQxMTc4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY3QUE0RURCNkM0NTdCNUQwMkQ2Njc2MkRERDhFRTRCNDEx NzgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4 RUU0QjQxMTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ76f8njcUhDuqmu9SunjNu20iB3h5aUg0qt k+27uPC4bbsUwrR0NvFCMPJgKSSfYLaxGdUuJMBZK4we3c3gWO+mGRs+y6RWh852 v/wexLWUqrjaRuWV4oFZS7oJacqP+Sc+VEjzkUiF3wymUmbnQizw1Lke6XkdPxOT VoPNthD6EJ2VKFwFMaXzPHla0Ae1B0bPJQqJ10/CUVH8Kh4RlGEUltWjrrbZ8p9O +yFCatFBt1knYNAvJS/M8G/RXFTpFnW8uvXnS9olJvQJvolNZx0x3l3KyvdjMoK+ Vge76E/msriUZhsneyN5b8iumyTVCqMAMJ66ZgFG2ox6trNC0tQ= -----END CERTIFICATE-----Generated at Thu Nov 5 18:58:41 2026 by rpki-client