$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft File: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft (raw, json) Hash identifier: U7ViKqa84n8S3tD2Xo3UvWxdnLu4PKTg7dDnLkmTMsc= Subject key identifier: 6A:64:44:FA:90:2A:DE:8D:51:05:D3:76:31:93:2F:E2:EB:CE:93:4F Authority key identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 Certificate issuer: /CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Certificate serial: 7AE48A7577128DD61FD63FE33CDD75F11A0A8D55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft Manifest number: BD Signing time: Sun 20 Sep 2026 18:45:02 +0000 Manifest this update: Sun 20 Sep 2026 18:40:02 +0000 Manifest next update: Mon 21 Sep 2026 22:18:02 +0000 Files and hashes: 1: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl (hash: KrPZBcXm8VvvwEByMaTg586CxPDB6A/kxtuyf8V3ktk=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: xkIsUOsvhzcBh2sD2rCI6s5EqakfkJ/T7bTiJ7H33iA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e4:8a:75:77:12:8d:d6:1f:d6:3f:e3:3c:dd:75:f1:1a:0a:8d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Validity Not Before: Sep 20 18:40:02 2026 GMT Not After : Sep 21 22:18:02 2026 GMT Subject: CN=6A6444FA902ADE8D5105D37631932FE2EBCE934F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:0c:94:ec:0c:9d:39:d1:6d:00:b7:e8:c1: 87:ce:c5:fb:fc:fa:b2:0e:3d:ca:79:07:0c:d6:c6: f7:e3:fc:86:ed:01:5a:ab:27:94:04:dc:c1:0e:8b: 77:bf:4a:9e:8c:0d:27:60:ef:18:15:24:f9:6f:78: 12:ad:10:f5:be:25:df:1c:33:fc:64:7e:72:52:87: c3:3c:08:ee:08:d7:8f:a0:68:59:d0:ae:11:d2:a4: 25:db:1f:a7:93:1b:8f:12:03:27:34:e0:31:a1:d2: 5a:1d:64:4c:0c:e9:2b:0f:05:59:06:c2:5d:e8:33: 5d:4f:19:29:23:9c:ba:82:e0:40:0c:74:9b:d9:10: 45:35:28:23:86:eb:b0:a3:bf:76:f1:55:a7:6f:f9: d3:48:ca:55:93:25:ad:95:1b:ec:0a:39:25:76:57: 4d:25:2a:0c:d3:c0:3c:91:e1:1a:c9:69:9c:4b:a1: 8f:11:9a:5e:92:70:ab:97:ef:24:61:20:9a:a2:4a: ab:8b:09:70:26:0b:08:84:49:61:5a:bd:a7:a6:98: 88:a8:8b:00:1d:b2:22:44:9e:80:6b:c8:40:7b:e0: 31:f2:fd:18:44:f2:23:5a:94:b0:0b:15:9d:39:84: c7:2f:4a:c1:23:db:a4:c4:08:f3:48:ef:60:f2:2a: da:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:64:44:FA:90:2A:DE:8D:51:05:D3:76:31:93:2F:E2:EB:CE:93:4F X509v3 Authority Key Identifier: keyid:70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:72:5b:ad:f3:72:10:35:42:77:27:85:67:18:e0:9c:2f:e1: 71:42:d2:9b:30:a1:76:cd:55:ce:84:63:5d:b8:f6:aa:38:1e: 61:10:3d:89:cc:7c:ec:f9:8b:04:57:80:cb:f0:65:58:b1:fd: 35:32:b4:26:7c:7f:06:28:fb:dc:51:92:d7:47:78:cf:7f:b1: 7a:90:8a:77:45:2c:d5:e1:db:fc:36:08:68:f5:6e:76:56:a4: 6f:b3:48:d2:89:26:3c:6a:89:0b:66:03:d6:a6:d5:fe:9d:8c: 23:5d:f6:b2:38:d9:6b:87:7e:92:a2:f4:e6:06:44:a1:a9:98: 00:d2:88:36:79:20:30:d5:85:ed:22:b6:bd:a0:d5:d4:db:57: 75:7e:d2:18:11:9f:8f:30:39:f4:e7:55:06:f3:de:8d:98:d6: 1e:23:37:69:9b:49:be:d8:31:06:6b:c9:bf:0a:b0:7e:fa:83: 6a:26:d9:b5:0c:bc:d5:33:4b:2e:2f:e2:b1:34:6a:7c:1b:11: 1c:da:05:00:1c:85:53:29:11:36:e0:0b:7e:d1:50:a5:e0:7b: e0:5f:e3:8f:8d:93:38:57:09:32:2a:09:36:88:d9:e7:61:5a: 99:cc:74:79:b4:ec:b6:06:73:01:db:01:ae:02:26:ee:2c:e8: 93:5b:49:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeuSKdXcSjdYf1j/jPN118RoKjVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0 QjQxMTc4MTAeFw0yNjA5MjAxODQwMDJaFw0yNjA5MjEyMjE4MDJaMDMxMTAvBgNV BAMTKDZBNjQ0NEZBOTAyQURFOEQ1MTA1RDM3NjMxOTMyRkUyRUJDRTkzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2wyU7AydOdFtALfowYfOxfv8 +rIOPcp5BwzWxvfj/IbtAVqrJ5QE3MEOi3e/Sp6MDSdg7xgVJPlveBKtEPW+Jd8c M/xkfnJSh8M8CO4I14+gaFnQrhHSpCXbH6eTG48SAyc04DGh0lodZEwM6SsPBVkG wl3oM11PGSkjnLqC4EAMdJvZEEU1KCOG67Cjv3bxVadv+dNIylWTJa2VG+wKOSV2 V00lKgzTwDyR4RrJaZxLoY8Rml6ScKuX7yRhIJqiSquLCXAmCwiESWFavaemmIio iwAdsiJEnoBryEB74DHy/RhE8iNalLALFZ05hMcvSsEj26TECPNI72DyKtqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUamRE+pAq3o1RBdN2MZMv4uvOk08wHwYDVR0j BBgwFoAUcPeqTttsRXtdAtZnYt3Y7ktBF4EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZjNWExY2MtY2M1ZS00ZTU4LThkZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVE QjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0QjQxMTc4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY3QUE0RURCNkM0NTdCNUQwMkQ2Njc2MkRERDhFRTRCNDEx NzgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4 RUU0QjQxMTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIByW63zchA1QncnhWcY4Jwv4XFC0pswoXbN Vc6EY1249qo4HmEQPYnMfOz5iwRXgMvwZVix/TUytCZ8fwYo+9xRktdHeM9/sXqQ indFLNXh2/w2CGj1bnZWpG+zSNKJJjxqiQtmA9am1f6djCNd9rI42WuHfpKi9OYG RKGpmADSiDZ5IDDVhe0itr2g1dTbV3V+0hgRn48wOfTnVQbz3o2Y1h4jN2mbSb7Y MQZryb8KsH76g2om2bUMvNUzSy4v4rE0anwbERzaBQAchVMpETbgC37RUKXge+Bf 44+NkzhXCTIqCTaI2edhWpnMdHm07LYGcwHbAa4CJu4s6JNbSQc= -----END CERTIFICATE-----Generated at Mon Sep 21 13:35:53 2026 by rpki-client