$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft File: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft (raw, json) Hash identifier: pfkBbNciV7MDoX6CSDEzCBNrXkAtZAz44ZJ2Qwgdbwc= Subject key identifier: 3F:46:0F:59:05:0B:D0:4C:E9:5A:AB:E6:10:CD:20:F4:54:67:BA:25 Authority key identifier: 70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 Certificate issuer: /CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Certificate serial: 28F653CBF921CA9E2A94395B63FCF9D27B21F0A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 13:39:27 +0000 Manifest this update: Sun 01 Nov 2026 13:34:27 +0000 Manifest next update: Mon 02 Nov 2026 16:56:27 +0000 Files and hashes: 1: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: keOPkaU9xFvf9rbttWbatnRuZitbsiWuBrO+qREpte8=) 2: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: hpiL6+O2y1i6nQTaaXJTYqIKZW0DPxyBBggb24eEX0o=) 3: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl (hash: KVU8jOm7A+Tlkcd1G3Dl1Nx3Iu1HtjfsIlk3XE5J/xo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f6:53:cb:f9:21:ca:9e:2a:94:39:5b:63:fc:f9:d2:7b:21:f0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Validity Not Before: Nov 1 13:34:27 2026 GMT Not After : Nov 2 16:56:27 2026 GMT Subject: CN=3F460F59050BD04CE95AABE610CD20F45467BA25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:2c:89:d3:64:2b:fa:1c:c5:5d:95:7d:1c: 77:62:aa:65:dd:f5:c5:ba:2f:77:b3:e8:93:02:6b: 4e:bf:59:7f:d7:8f:70:7d:aa:63:69:6b:a6:9c:82: 04:22:b3:d9:86:a5:32:ce:e8:9f:8b:f3:21:24:da: 24:8b:36:4a:3d:0e:90:51:ca:67:d3:6c:22:79:c8: a1:48:cb:c6:c7:78:6c:e0:e4:97:fa:af:d9:5c:5e: 26:18:d3:4d:89:ab:d8:d9:a3:bb:80:25:c8:48:bd: 64:6f:e8:b0:48:50:6c:90:7d:05:1f:b4:20:a4:24: c0:a5:93:ef:f6:a5:d7:ea:6d:70:93:b7:dd:09:d1: 9a:c0:a7:c7:5b:31:fc:a1:f7:c6:0c:a8:bf:7a:07: 0d:67:06:27:bd:c1:26:0c:d9:6c:19:ff:df:d4:d6: bf:1f:1c:48:cd:e9:c7:15:26:52:ea:bb:54:79:bf: cb:b7:1f:cf:a7:de:96:34:2b:55:9f:36:09:eb:e8: 2a:3f:d4:12:20:f4:81:83:76:13:d5:18:13:e4:8a: 2b:6f:48:ca:59:62:8e:95:1b:5d:86:d6:d8:df:03: 2e:a1:1a:42:3e:8d:27:bb:ec:a7:8e:8a:a6:ad:5d: f1:48:54:1c:32:62:24:37:ce:b6:a3:89:0e:c6:26: 86:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:46:0F:59:05:0B:D0:4C:E9:5A:AB:E6:10:CD:20:F4:54:67:BA:25 X509v3 Authority Key Identifier: keyid:70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:14:b8:36:f3:6b:0e:8c:93:30:0d:4c:27:1c:2d:3d:ff:1d: 5c:4d:19:16:b7:fa:bc:be:d0:d8:ee:a6:8e:da:21:67:d5:d5: d7:33:da:19:55:e8:d1:15:20:9a:a3:37:21:b7:6a:68:15:f5: f0:c4:77:3c:fc:b6:ae:a6:76:9e:dc:90:4f:43:34:5c:ea:d8: de:d0:1c:60:28:e4:22:a7:88:1c:ce:cd:f4:ff:2d:3c:c7:6f: e1:03:6d:96:45:db:0a:ce:fb:ed:56:44:1a:b5:b2:42:f9:78: fc:c1:d8:73:87:45:d1:86:df:3c:07:9f:54:d4:63:00:2a:b5: a9:29:02:29:f0:36:40:46:3b:c4:52:28:9a:ca:20:1e:81:6f: 0d:c3:d9:66:eb:42:6a:2c:7a:a5:b0:fe:ce:62:1a:6a:20:b8: e5:ac:0e:b6:11:4a:3c:fe:97:10:8c:4e:ce:67:cf:72:72:f5: 81:9e:d2:dc:f6:e8:71:17:3a:9d:3d:4c:90:07:8a:44:d1:7e: 88:b7:d3:98:58:24:f8:be:fe:2c:74:75:db:84:14:49:04:8d: 70:b0:e8:0d:45:22:d9:5b:d0:3d:82:90:63:79:7b:9d:6a:3d: 70:d9:ba:aa:f4:39:cb:ee:04:94:86:cf:7e:e2:c5:dc:28:e3: 79:96:bd:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKPZTy/khyp4qlDlbY/z50nsh8KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4 QjIzNjRBODAeFw0yNjExMDExMzM0MjdaFw0yNjExMDIxNjU2MjdaMDMxMTAvBgNV BAMTKDNGNDYwRjU5MDUwQkQwNENFOTVBQUJFNjEwQ0QyMEY0NTQ2N0JBMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgQiyJ02Qr+hzFXZV9HHdiqmXd 9cW6L3ez6JMCa06/WX/Xj3B9qmNpa6acggQis9mGpTLO6J+L8yEk2iSLNko9DpBR ymfTbCJ5yKFIy8bHeGzg5Jf6r9lcXiYY002Jq9jZo7uAJchIvWRv6LBIUGyQfQUf tCCkJMClk+/2pdfqbXCTt90J0ZrAp8dbMfyh98YMqL96Bw1nBie9wSYM2WwZ/9/U 1r8fHEjN6ccVJlLqu1R5v8u3H8+n3pY0K1WfNgnr6Co/1BIg9IGDdhPVGBPkiitv SMpZYo6VG12G1tjfAy6hGkI+jSe77KeOiqatXfFIVBwyYiQ3zrajiQ7GJobpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP0YPWQUL0EzpWqvmEM0g9FRnuiUwHwYDVR0j BBgwFoAUcLVONNzwcBKQt5Lm6grpAIsjZKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYxNmMwNGQtZDllMC00YzFmLThhMTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzRE Q0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4QjIzNjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MEI1NEUzNERDRjA3MDEyOTBCNzkyRTZFQTBBRTkwMDhCMjM2 NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5 MDA4QjIzNjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8UuDbzaw6MkzANTCccLT3/HVxNGRa3+ry+ 0Njupo7aIWfV1dcz2hlV6NEVIJqjNyG3amgV9fDEdzz8tq6mdp7ckE9DNFzq2N7Q HGAo5CKniBzOzfT/LTzHb+EDbZZF2wrO++1WRBq1skL5ePzB2HOHRdGG3zwHn1TU YwAqtakpAinwNkBGO8RSKJrKIB6Bbw3D2WbrQmoseqWw/s5iGmoguOWsDrYRSjz+ lxCMTs5nz3Jy9YGe0tz26HEXOp09TJAHikTRfoi305hYJPi+/ix0dduEFEkEjXCw 6A1FItlb0D2CkGN5e51qPXDZuqr0OcvuBJSGz37ixdwo43mWvdY= -----END CERTIFICATE-----Generated at Sun Nov 1 21:07:42 2026 by rpki-client