$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft File: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft (raw, json) Hash identifier: v8y66fKvsDDkcv0OMdcO79gS1LCoPhV/h9VEP/6egwU= Subject key identifier: D8:34:1B:23:4A:DD:36:69:29:40:9D:50:37:34:27:60:4A:CD:85:BF Authority key identifier: 70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA Certificate issuer: /CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Certificate serial: 3A2FA3412B1B5ED2567BEE9384BB9C9B0300025A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 13:07:37 +0000 Manifest this update: Tue 22 Sep 2026 13:02:37 +0000 Manifest next update: Wed 23 Sep 2026 17:02:37 +0000 Files and hashes: 1: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl (hash: QuM9xkgaLEwgc5/xpYaTzSFhBk7h119u0WzpoyXAjJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 17:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2f:a3:41:2b:1b:5e:d2:56:7b:ee:93:84:bb:9c:9b:03:00:02:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Validity Not Before: Sep 22 13:02:37 2026 GMT Not After : Sep 23 17:02:37 2026 GMT Subject: CN=D8341B234ADD366929409D50373427604ACD85BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:59:fd:d5:44:f4:e1:35:b6:d1:dc:f7:ff: c4:a2:39:a3:e7:7f:07:c5:7a:60:28:77:3d:77:25: 26:9d:72:e2:25:66:6c:f1:70:55:f6:e1:0d:06:94: 58:22:78:c3:d8:22:ba:e6:ae:ac:9e:45:dd:34:c4: 9e:44:50:bf:57:bb:b2:17:3f:d3:63:9c:6a:f2:7d: 0a:bf:20:9e:b5:80:09:5e:29:ba:cb:74:be:54:8d: b0:ac:f1:0c:14:41:76:6a:25:28:2e:6e:e8:bf:d8: f4:48:1a:3a:40:e9:97:62:25:5a:bf:25:d4:29:ca: ad:b3:60:29:f0:65:0e:e4:9b:c9:50:ce:fc:43:9a: 07:81:69:ee:2d:6b:73:88:21:1a:2f:ac:8e:f9:fb: 28:2a:e9:91:98:00:5c:8c:52:cf:1e:af:b3:34:95: d5:15:b0:40:80:51:51:53:31:88:9f:6c:ad:a6:12: 52:a9:22:01:08:d9:41:1e:4d:b5:89:f3:69:7b:37: 05:2f:d9:f8:17:93:0f:3d:04:cf:bb:d0:a7:c6:35: 26:64:51:8b:9b:e6:5c:d0:ed:bc:85:4d:66:9e:9c: 3c:1a:f1:a3:73:c6:cf:85:e7:af:e8:8c:bc:dd:ea: cc:d6:6a:87:f0:0e:16:84:f6:6b:e0:cb:82:13:09: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:34:1B:23:4A:DD:36:69:29:40:9D:50:37:34:27:60:4A:CD:85:BF X509v3 Authority Key Identifier: keyid:70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b8:80:8c:a5:27:d5:8b:6b:67:25:99:bd:67:c6:58:76:77: 8c:67:1d:e7:a8:9e:ea:ec:82:10:69:97:5b:99:2b:c6:1a:8f: 22:32:fa:7b:9c:02:a7:69:c7:4f:6a:80:43:4c:3e:56:fb:a8: 10:4e:01:8e:f6:f9:66:ff:83:d7:cd:3f:1c:f8:94:49:19:8b: 0b:1f:01:07:e3:88:1e:70:35:40:93:0c:24:8b:10:db:27:14: 3a:43:8b:90:49:08:26:83:b8:56:f7:6b:3f:6f:fb:47:2d:73: d8:b3:d0:7c:51:bd:ee:5e:8f:f0:a3:68:b8:b9:49:1a:c7:77: d5:c8:06:cb:e6:36:83:c7:28:c1:2b:d4:b0:b2:c8:a9:91:6f: ae:e9:d6:89:c4:23:28:22:aa:3b:8c:e5:dd:6a:a5:63:27:32: 83:42:b9:82:18:c4:89:e6:2e:b8:d5:23:2f:51:2c:6b:be:25: 30:e2:94:fd:3b:f9:22:f9:0b:34:bc:4c:bf:15:0e:de:ea:5c: 79:fb:d6:7f:ac:03:23:01:a3:3e:0a:e3:ab:32:74:4c:2d:61: fa:17:16:51:1b:dc:89:47:6a:8d:e7:b1:f4:ec:ae:07:68:cc: ef:d9:c4:d4:02:bf:d6:96:a0:ad:04:34:f5:58:2d:c3:3f:1b: fa:dd:98:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOi+jQSsbXtJWe+6ThLucmwMAAlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3 QjMxMzVBQTAeFw0yNjA5MjIxMzAyMzdaFw0yNjA5MjMxNzAyMzdaMDMxMTAvBgNV BAMTKEQ4MzQxQjIzNEFERDM2NjkyOTQwOUQ1MDM3MzQyNzYwNEFDRDg1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWcFn91UT04TW20dz3/8SiOaPn fwfFemAodz13JSadcuIlZmzxcFX24Q0GlFgieMPYIrrmrqyeRd00xJ5EUL9Xu7IX P9NjnGryfQq/IJ61gAleKbrLdL5UjbCs8QwUQXZqJSgubui/2PRIGjpA6ZdiJVq/ JdQpyq2zYCnwZQ7km8lQzvxDmgeBae4ta3OIIRovrI75+ygq6ZGYAFyMUs8er7M0 ldUVsECAUVFTMYifbK2mElKpIgEI2UEeTbWJ82l7NwUv2fgXkw89BM+70KfGNSZk UYub5lzQ7byFTWaenDwa8aNzxs+F56/ojLzd6szWaofwDhaE9mvgy4ITCfDVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2DQbI0rdNmkpQJ1QNzQnYErNhb8wHwYDVR0j BBgwFoAUcPTL1fR6U1jnf63tud1GOXsxNaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NDllZjUtYzQ4NC00ZjQxLWEwNTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVG NDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3QjMxMzVBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy83MEY0Q0JENUY0N0E1MzU4RTc3RkFERURCOURENDYzOTdCMzEz NUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2 Mzk3QjMxMzVBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKW4gIylJ9WLa2clmb1nxlh2d4xnHeeonurs ghBpl1uZK8YajyIy+nucAqdpx09qgENMPlb7qBBOAY72+Wb/g9fNPxz4lEkZiwsf AQfjiB5wNUCTDCSLENsnFDpDi5BJCCaDuFb3az9v+0ctc9iz0HxRve5ej/CjaLi5 SRrHd9XIBsvmNoPHKMEr1LCyyKmRb67p1onEIygiqjuM5d1qpWMnMoNCuYIYxInm LrjVIy9RLGu+JTDilP07+SL5CzS8TL8VDt7qXHn71n+sAyMBoz4K46sydEwtYfoX FlEb3IlHao3nsfTsrgdozO/ZxNQCv9aWoK0ENPVYLcM/G/rdmH4= -----END CERTIFICATE-----Generated at Tue Sep 22 17:25:53 2026 by rpki-client