$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft File: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft (raw, json) Hash identifier: Oa5REcOKPksVbS9b0oR8UARQ6iiR1NUjQbxs0HQiZt0= Subject key identifier: 73:F4:39:22:25:A7:09:2C:25:A6:ED:1B:9A:07:5F:AB:47:EC:C0:9C Authority key identifier: 2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 Certificate issuer: /CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Certificate serial: 2D15C004DCC003FC39B35F8C727DB5E4FFE47474 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 20:56:27 +0000 Manifest this update: Thu 24 Sep 2026 20:51:27 +0000 Manifest next update: Fri 25 Sep 2026 23:58:27 +0000 Files and hashes: 1: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl (hash: Rq57w801aw/P0j4WXVMdJctkrWpsLjZJHThaFe5dA4Y=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: 6hdyf5UyF+Tqhlq/rEWrqEwjd98p7rc0NoOyzHNtasM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 23:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:15:c0:04:dc:c0:03:fc:39:b3:5f:8c:72:7d:b5:e4:ff:e4:74:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Validity Not Before: Sep 24 20:51:27 2026 GMT Not After : Sep 25 23:58:27 2026 GMT Subject: CN=73F4392225A7092C25A6ED1B9A075FAB47ECC09C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1e:ea:c9:69:76:cb:17:6b:4e:cc:07:73:90: ac:80:ae:11:32:cd:fe:32:23:c5:3e:1f:29:7a:81: 23:f0:82:1f:30:7c:30:5d:9c:90:1f:3a:3d:68:13: 4f:5f:57:ba:8e:69:03:ab:fe:d8:01:d2:cc:b5:fe: 74:2d:03:c9:de:62:8b:d3:88:48:17:10:2a:04:d5: 67:65:9e:8d:f3:fb:c7:99:a9:4a:58:4d:65:c5:b2: 8d:8f:e1:5e:8e:e0:9b:a9:5c:cc:3e:d6:bf:76:8d: da:24:44:33:7d:ae:5c:fd:b9:ed:05:99:5b:e7:90: 77:05:62:46:f3:cc:83:84:b1:75:8b:f6:e9:34:13: d4:ad:d5:33:3d:59:38:b9:4b:a6:15:f1:9e:22:d4: 1f:45:a0:9c:23:17:1c:08:12:d8:70:6d:e0:02:fd: 6c:54:ba:ef:19:1f:52:54:d7:11:4a:0f:d3:fc:ee: e7:b8:7a:a0:2a:f7:bf:8a:f3:0f:cb:7b:ab:b1:98: 11:85:f1:13:c3:be:e7:e2:33:ab:9c:49:7b:d1:6e: d1:4f:f7:9f:7a:e1:c7:04:6d:88:9e:e4:77:6a:75: 9a:a7:55:c1:a7:da:98:a4:51:c8:16:c9:9e:99:f3: 2d:ef:79:82:ed:12:03:5a:5b:fe:e2:33:72:a6:97: fc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F4:39:22:25:A7:09:2C:25:A6:ED:1B:9A:07:5F:AB:47:EC:C0:9C X509v3 Authority Key Identifier: keyid:2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fb:5e:60:b9:88:d6:1e:4b:62:72:d9:1e:e4:b4:6a:48:1a: 35:87:ee:52:d2:8a:df:1f:e3:49:d0:3c:96:51:83:ee:61:b4: 6e:71:13:e5:56:3c:60:b2:98:f7:4d:18:13:25:88:fd:9c:a9: fd:8f:b8:0a:16:68:98:65:dd:91:fe:ff:d4:35:bf:ec:b2:f3: 3a:59:87:72:ae:5b:2d:56:37:62:7e:bb:1b:8f:5d:bf:98:48: 10:60:74:c6:48:24:3d:96:97:24:8e:e3:8a:1f:73:8e:8d:ec: 3a:a9:5d:50:eb:b0:34:27:56:25:aa:4e:6c:72:4e:b5:76:e3: 86:32:16:44:35:ec:34:30:7d:04:82:b9:8a:74:b4:82:29:a9: d5:89:a4:37:8b:28:22:06:70:25:d6:f2:65:91:6a:a5:20:d2: 20:58:be:d7:a8:fd:7d:fe:64:a6:42:1a:1c:96:2e:1c:03:c1: b7:07:7f:8c:ee:9d:f8:3c:ef:8f:eb:8b:52:66:dc:ae:c0:fa: 4d:0d:50:fb:d4:da:49:c7:6f:df:b2:9c:ba:fc:e4:d6:17:ea: 72:e6:b3:da:3a:58:9a:57:ef:65:41:9c:4a:7c:61:81:3a:b8: 09:23:fe:52:1c:0c:e2:a0:2d:3a:7f:d5:56:eb:3c:29:ab:5a: 51:14:13:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRXABNzAA/w5s1+Mcn215P/kdHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFB MjRBNUY3NzAeFw0yNjA5MjQyMDUxMjdaFw0yNjA5MjUyMzU4MjdaMDMxMTAvBgNV BAMTKDczRjQzOTIyMjVBNzA5MkMyNUE2RUQxQjlBMDc1RkFCNDdFQ0MwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmHurJaXbLF2tOzAdzkKyArhEy zf4yI8U+Hyl6gSPwgh8wfDBdnJAfOj1oE09fV7qOaQOr/tgB0sy1/nQtA8neYovT iEgXECoE1Wdlno3z+8eZqUpYTWXFso2P4V6O4JupXMw+1r92jdokRDN9rlz9ue0F mVvnkHcFYkbzzIOEsXWL9uk0E9St1TM9WTi5S6YV8Z4i1B9FoJwjFxwIEthwbeAC /WxUuu8ZH1JU1xFKD9P87ue4eqAq97+K8w/Le6uxmBGF8RPDvufiM6ucSXvRbtFP 95964ccEbYie5HdqdZqnVcGn2pikUcgWyZ6Z8y3veYLtEgNaW/7iM3Kml/wpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc/Q5IiWnCSwlpu0bmgdfq0fswJwwHwYDVR0j BBgwFoAUL3CrNfGqii4Yq+Or8Y5G4aJKX3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0OGJiODgtYTc1OC00NDNmLWI3MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVG MUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFBMjRBNUY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjcwQUIzNUYxQUE4QTJFMThBQkUzQUJGMThFNDZFMUEyNEE1 Rjc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2 RTFBMjRBNUY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAP7XmC5iNYeS2Jy2R7ktGpIGjWH7lLSit8f 40nQPJZRg+5htG5xE+VWPGCymPdNGBMliP2cqf2PuAoWaJhl3ZH+/9Q1v+yy8zpZ h3KuWy1WN2J+uxuPXb+YSBBgdMZIJD2WlySO44ofc46N7DqpXVDrsDQnViWqTmxy TrV244YyFkQ17DQwfQSCuYp0tIIpqdWJpDeLKCIGcCXW8mWRaqUg0iBYvteo/X3+ ZKZCGhyWLhwDwbcHf4zunfg874/ri1Jm3K7A+k0NUPvU2knHb9+ynLr85NYX6nLm s9o6WJpX72VBnEp8YYE6uAkj/lIcDOKgLTp/1VbrPCmrWlEUE6E= -----END CERTIFICATE-----Generated at Fri Sep 25 14:56:21 2026 by rpki-client