$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft File: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft (raw, json) Hash identifier: W9iMzR5LgqvJurZzxF3omGPdYkIvngrJ8RknhIZTShU= Subject key identifier: 01:BE:9A:21:10:FA:73:AB:BE:C4:5B:C3:FC:3C:71:99:3A:8B:B3:A1 Authority key identifier: 70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19 Certificate issuer: /CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619 Certificate serial: 5E5D9AE4495D1E74FA8D3F08129D92AE696D2503 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft Manifest number: BE Signing time: Tue 22 Sep 2026 02:09:07 +0000 Manifest this update: Tue 22 Sep 2026 02:04:07 +0000 Manifest next update: Wed 23 Sep 2026 06:01:07 +0000 Files and hashes: 1: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl (hash: mgzT1eSvNHwBcqWSoNjOf+pDd6rakhRX9s+24wwkFCU=) 2: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: 4MzusLkn8wvWUBvFiEkops16kBYmlHHlayjI7RCIrok=) 3: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: EtnUTjZ94OuTXPQ8oodtLlh2y5zeN5ozbISTk51v5C4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5d:9a:e4:49:5d:1e:74:fa:8d:3f:08:12:9d:92:ae:69:6d:25:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619 Validity Not Before: Sep 22 02:04:07 2026 GMT Not After : Sep 23 06:01:07 2026 GMT Subject: CN=01BE9A2110FA73ABBEC45BC3FC3C71993A8BB3A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a8:b4:c6:9f:02:ea:e6:4d:eb:43:76:b0:24: e4:e4:41:e8:87:4e:a0:86:72:aa:73:34:e1:68:ef: 86:1c:ff:08:4b:76:a7:b7:8c:1b:45:7c:cb:47:40: 82:5e:a7:c9:cb:18:a5:8b:51:fa:01:a7:32:42:9f: 6f:52:fe:da:7b:47:45:1a:9d:16:df:09:7c:32:6d: 23:a9:2d:86:66:fb:b4:b5:b2:8b:63:1d:f0:72:a3: 99:d9:80:86:0f:57:79:09:cb:99:50:a1:88:33:26: ef:56:17:d0:26:99:10:61:1d:bf:0a:06:84:b5:10: cf:75:d8:ac:34:d3:ed:d9:77:1b:46:bb:9a:bb:e3: b8:f2:99:89:3d:3a:1e:a8:0c:3b:25:17:b9:32:9e: 07:76:9b:58:29:5b:8e:ba:fd:f7:f4:6c:c1:ad:ce: 65:23:58:22:77:3a:c8:15:9a:a2:a8:a5:9f:dd:28: d4:e3:3c:32:6e:c5:c0:a7:e0:e6:a8:bf:28:39:84: 64:e3:8a:7c:c8:c9:d3:c5:e7:ce:fc:b0:9e:e6:b6: 66:8a:e8:89:de:b6:2c:51:df:a4:a6:75:79:e3:90: 63:99:0b:bd:ba:b4:7b:c1:42:a2:bd:16:cc:92:35: d5:4e:73:5c:53:07:1c:94:bd:67:d5:6d:98:9d:c2: db:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BE:9A:21:10:FA:73:AB:BE:C4:5B:C3:FC:3C:71:99:3A:8B:B3:A1 X509v3 Authority Key Identifier: keyid:70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:64:43:f5:73:5f:85:71:18:6e:ec:2e:ff:b7:f0:bf:46:6c: c3:8b:43:7d:a2:12:b6:32:ee:7a:b1:7d:9d:07:02:61:26:76: 1f:5a:2d:a1:3e:06:b6:6d:af:cc:91:ed:e6:bd:5a:72:3c:74: 88:4f:23:98:b2:f8:db:fb:e5:80:4d:71:ab:c9:16:ab:03:5a: a3:67:c5:0c:37:20:7a:4b:cb:cf:c8:bd:10:98:9b:1b:5c:03: 1e:7d:df:58:df:43:cb:ca:dd:1a:21:ac:00:de:50:96:81:c3: 31:23:b1:26:d4:87:d2:0c:28:34:2b:26:7a:82:84:f6:b5:6d: 54:59:31:7e:71:b7:48:b6:3a:9b:d2:3d:6a:05:e0:5d:57:64: 1d:ad:c1:b8:75:1d:81:c7:ba:96:88:2d:8c:37:da:b4:b6:7b: e1:6a:21:f6:8a:08:b8:8f:a6:75:d4:7f:2f:11:a7:70:e2:df: d0:4f:94:5a:81:df:74:b8:d3:11:9f:0f:11:12:6b:96:b9:05: e0:02:7a:ce:5b:76:32:01:a2:5b:0f:d1:48:1a:48:e2:1b:86: 75:79:ca:de:08:16:0b:23:86:32:70:8f:88:25:89:26:65:fe: fb:4d:40:fe:71:eb:5f:c7:dc:93:6c:d1:e0:e9:9b:22:3c:a6: ad:ae:fd:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXl2a5EldHnT6jT8IEp2SrmltJQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQw NEVBODYxOTAeFw0yNjA5MjIwMjA0MDdaFw0yNjA5MjMwNjAxMDdaMDMxMTAvBgNV BAMTKDAxQkU5QTIxMTBGQTczQUJCRUM0NUJDM0ZDM0M3MTk5M0E4QkIzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWqLTGnwLq5k3rQ3awJOTkQeiH TqCGcqpzNOFo74Yc/whLdqe3jBtFfMtHQIJep8nLGKWLUfoBpzJCn29S/tp7R0Ua nRbfCXwybSOpLYZm+7S1sotjHfByo5nZgIYPV3kJy5lQoYgzJu9WF9AmmRBhHb8K BoS1EM912Kw00+3ZdxtGu5q747jymYk9Oh6oDDslF7kyngd2m1gpW466/ff0bMGt zmUjWCJ3OsgVmqKopZ/dKNTjPDJuxcCn4Oaovyg5hGTjinzIydPF5878sJ7mtmaK 6InetixR36SmdXnjkGOZC726tHvBQqK9FsySNdVOc1xTBxyUvWfVbZidwtujAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAb6aIRD6c6u+xFvD/DxxmTqLs6EwHwYDVR0j BBgwFoAUcNO1hUnvLKSrD5G8ADPLTQTqhhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA4Y2MwYjMtMjUwOC00NzdmLTlmMjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0 OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQwNEVBODYxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MEQzQjU4NTQ5RUYyQ0E0QUIwRjkxQkMwMDMzQ0I0RDA0RUE4 NjE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA4Y2MwYjMtMjUwOC00NzdmLTlm MjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NC NEQwNEVBODYxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtkQ/VzX4VxGG7sLv+38L9GbMOLQ32iErYy 7nqxfZ0HAmEmdh9aLaE+BrZtr8yR7ea9WnI8dIhPI5iy+Nv75YBNcavJFqsDWqNn xQw3IHpLy8/IvRCYmxtcAx5931jfQ8vK3RohrADeUJaBwzEjsSbUh9IMKDQrJnqC hPa1bVRZMX5xt0i2OpvSPWoF4F1XZB2twbh1HYHHupaILYw32rS2e+FqIfaKCLiP pnXUfy8Rp3Di39BPlFqB33S40xGfDxESa5a5BeACes5bdjIBolsP0UgaSOIbhnV5 yt4IFgsjhjJwj4gliSZl/vtNQP5x61/H3JNs0eDpmyI8pq2u/fs= -----END CERTIFICATE-----Generated at Tue Sep 22 13:02:50 2026 by rpki-client