$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft File: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft (raw, json) Hash identifier: pjbWP2nvv+MpgfS0sKYv6xN6NW9lAqAH9HBuspME9tU= Subject key identifier: A0:6F:99:DF:E9:7B:A0:FB:59:5F:2B:40:EF:B7:98:D8:71:9D:75:D0 Authority key identifier: 70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E Certificate issuer: /CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Certificate serial: 2E1CE296F21F760BB628B070C8A605A3AED0DBA9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 20:33:05 +0000 Manifest this update: Wed 02 Sep 2026 20:28:05 +0000 Manifest next update: Thu 03 Sep 2026 23:31:05 +0000 Files and hashes: 1: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl (hash: RFa47mt0QHt9dn765UkePbQ2aAmPNR4evAaMzEria3Y=) 2: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: PDVvmstV3iaWyvXstEgcHTvDFJJ9Dg2QcyyOCEhL1rA=) 3: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: X9vWw5/8oy+SYlKkHILaaaMhFfsqtUesHOd+majUa+4=) 4: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: hBvRTYXcnJk6N7ngUO2oUV6tmwOrz7l2Poiy/ABHqPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1c:e2:96:f2:1f:76:0b:b6:28:b0:70:c8:a6:05:a3:ae:d0:db:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Validity Not Before: Sep 2 20:28:05 2026 GMT Not After : Sep 3 23:31:05 2026 GMT Subject: CN=A06F99DFE97BA0FB595F2B40EFB798D8719D75D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1a:ba:b0:ba:40:d0:16:b5:88:bd:44:18:1d: 2c:21:c1:b6:3f:78:d0:e7:6d:47:cb:4d:d1:b7:c5: 2a:d6:fa:97:5b:6d:62:b0:23:33:d8:2d:fb:8c:0c: d1:d0:9a:58:c8:80:1a:aa:4c:e5:6b:1e:de:70:5a: f6:a1:d9:5a:fa:ad:b8:9e:13:e0:94:4b:ac:39:8e: b2:7c:94:d2:e9:e1:af:e3:b1:f0:2a:a0:4b:1c:eb: d6:40:99:54:9d:03:b7:74:ca:7b:0a:23:c9:fb:95: 46:da:92:84:67:b1:d1:c7:55:54:4f:31:27:1b:55: 60:db:7d:b4:96:15:ce:bb:a0:8a:c4:a6:aa:ef:30: a4:42:53:8d:62:55:ff:1b:73:36:97:67:b9:1b:b0: db:f3:6a:00:99:ee:0a:b1:b5:16:2c:c0:74:c4:59: 41:0c:8b:34:fe:d3:cc:4e:b2:f6:f6:b4:5d:c3:78: 84:31:83:2a:d0:f1:a5:43:cc:20:5e:d7:68:c3:94: 46:86:b1:39:04:b7:98:17:10:6b:8d:ae:03:70:0b: 73:73:b5:64:1d:8a:49:49:1f:e9:84:6b:38:b5:9d: 54:79:ad:b0:3a:3e:a8:ce:15:90:2d:9e:c9:72:2d: fd:ae:ad:0a:72:25:d7:bc:05:2c:7f:c9:19:23:c3: 05:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6F:99:DF:E9:7B:A0:FB:59:5F:2B:40:EF:B7:98:D8:71:9D:75:D0 X509v3 Authority Key Identifier: keyid:70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fd:40:80:3d:27:3c:6b:87:7a:b2:da:da:c5:81:fd:9b:34: 94:29:1f:e1:d0:38:75:df:6d:d6:2d:1e:c9:52:23:4e:99:ad: c6:72:e1:35:7a:86:3c:d7:46:91:c8:c2:9b:41:a5:2d:f1:96: 4f:b3:8e:34:fd:a0:c3:2a:f6:16:bc:83:75:7a:50:6a:f5:ca: 27:67:ff:16:9a:79:4a:89:f0:08:a6:45:c0:4e:33:6d:86:3c: 10:2e:2c:33:c9:1f:60:bb:68:4b:58:c6:b6:34:37:01:8e:51: d6:6e:20:a1:90:1b:b2:69:25:c8:f9:ee:65:93:97:6c:0c:21: 05:35:1f:59:25:0c:09:6f:9b:87:94:4b:50:85:b5:80:fd:f9: c7:01:98:08:08:67:66:83:5f:98:9e:52:b9:7a:04:34:5c:47: c3:70:57:b5:6d:0b:47:16:e0:28:e6:d5:f2:04:34:15:ae:b0: 15:bf:38:e7:67:2c:66:e6:d8:d3:75:8f:f5:b9:99:18:d6:9e: f8:2e:2b:3f:fa:71:8d:11:f5:7b:85:4f:44:5c:f9:11:c5:df: 14:f6:d2:af:3f:3d:39:a2:6a:af:3c:e4:3d:d1:a3:62:fe:69: 85:1a:26:ab:cc:14:9f:e1:2a:de:a7:1a:ac:b4:8b:89:31:f4: 14:c8:4b:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhzilvIfdgu2KLBwyKYFo67Q26kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2REQz NDU4OUI0RTAeFw0yNjA5MDIyMDI4MDVaFw0yNjA5MDMyMzMxMDVaMDMxMTAvBgNV BAMTKEEwNkY5OURGRTk3QkEwRkI1OTVGMkI0MEVGQjc5OEQ4NzE5RDc1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVGrqwukDQFrWIvUQYHSwhwbY/ eNDnbUfLTdG3xSrW+pdbbWKwIzPYLfuMDNHQmljIgBqqTOVrHt5wWvah2Vr6rbie E+CUS6w5jrJ8lNLp4a/jsfAqoEsc69ZAmVSdA7d0ynsKI8n7lUbakoRnsdHHVVRP MScbVWDbfbSWFc67oIrEpqrvMKRCU41iVf8bczaXZ7kbsNvzagCZ7gqxtRYswHTE WUEMizT+08xOsvb2tF3DeIQxgyrQ8aVDzCBe12jDlEaGsTkEt5gXEGuNrgNwC3Nz tWQdiklJH+mEazi1nVR5rbA6PqjOFZAtnslyLf2urQpyJde8BSx/yRkjwwWtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoG+Z3+l7oPtZXytA77eY2HGdddAwHwYDVR0j BBgwFoAUcMzgMfEETe5sr1ZbE3X23TRYm04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZjZjdjOWUtZjhjMy00MDE1LTg4MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFG MTA0NERFRTZDQUY1NjVCMTM3NUY2REQzNDU4OUI0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MENDRTAzMUYxMDQ0REVFNkNBRjU2NUIxMzc1RjZERDM0NTg5 QjRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2 REQzNDU4OUI0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGz9QIA9Jzxrh3qy2trFgf2bNJQpH+HQOHXf bdYtHslSI06ZrcZy4TV6hjzXRpHIwptBpS3xlk+zjjT9oMMq9ha8g3V6UGr1yidn /xaaeUqJ8AimRcBOM22GPBAuLDPJH2C7aEtYxrY0NwGOUdZuIKGQG7JpJcj57mWT l2wMIQU1H1klDAlvm4eUS1CFtYD9+ccBmAgIZ2aDX5ieUrl6BDRcR8NwV7VtC0cW 4Cjm1fIENBWusBW/OOdnLGbm2NN1j/W5mRjWnvguKz/6cY0R9XuFT0Rc+RHF3xT2 0q8/PTmiaq885D3Ro2L+aYUaJqvMFJ/hKt6nGqy0i4kx9BTIS2U= -----END CERTIFICATE-----Generated at Thu Sep 3 05:20:19 2026 by rpki-client