$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft File: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft (raw, json) Hash identifier: mgsV530rAgy1L6dHtD8iu5Pd2l/L08JxANohzX1fJ/w= Subject key identifier: 9B:ED:89:5A:91:58:D4:57:A3:34:AF:5D:AC:09:F5:26:A0:91:B0:3D Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E Certificate issuer: /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Certificate serial: 6AB0364DA9AD9CC99E788B135D39923544C4AB8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 03:52:24 +0000 Manifest this update: Mon 02 Nov 2026 03:47:24 +0000 Manifest next update: Tue 03 Nov 2026 03:59:24 +0000 Files and hashes: 1: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I=) 2: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl (hash: MuOXn9LM2EC+NDaRYyipbnPYXS9BUPdpAsnF5PJEtDk=) 3: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: Nx3fcumdsqRiUqwqQ3R1jk6NstvkzNg1p4gYbPnIgK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 03:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b0:36:4d:a9:ad:9c:c9:9e:78:8b:13:5d:39:92:35:44:c4:ab:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Validity Not Before: Nov 2 03:47:24 2026 GMT Not After : Nov 3 03:59:24 2026 GMT Subject: CN=9BED895A9158D457A334AF5DAC09F526A091B03D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:a2:f7:ac:b8:f6:4c:ac:19:1a:4c:33:75: 6c:86:1e:e3:91:93:46:f1:ba:91:9d:c8:4d:ab:84: 5c:4c:d1:42:11:26:5e:d4:8b:ff:be:7a:72:91:3d: 48:90:40:03:dd:f3:8c:60:80:8e:be:bf:80:9a:61: e4:e2:75:7d:03:d8:e7:9d:ba:e8:54:09:c1:49:94: 84:00:f7:f8:a0:80:41:46:e3:ef:f8:5f:8e:9b:0c: 60:e0:32:d7:8a:06:6d:18:ac:67:24:58:00:f2:5a: 7c:a8:48:30:3c:2a:e0:b2:2c:4f:0d:db:e2:47:78: e8:a0:76:67:56:da:9c:42:fe:3b:5b:7e:91:78:35: b9:ea:c1:6b:d4:31:7d:d6:42:00:cc:53:8f:b1:dc: 72:75:3f:13:ce:d7:bd:9f:56:89:aa:28:a9:ec:2f: 4d:db:16:91:fe:14:04:23:43:bf:d0:e8:4d:79:2c: 15:22:29:e5:7c:d3:8c:fd:77:e5:1b:d3:2a:fe:20: f0:95:3b:65:45:b8:16:21:8d:36:af:3b:0f:4c:08: bd:17:50:eb:22:8d:47:fb:09:5d:32:90:de:43:82: 73:eb:7f:6a:33:76:a4:60:38:3b:77:be:94:ab:5d: ea:00:d2:54:a6:04:b7:6a:55:b7:dc:42:56:ea:0f: 8e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:ED:89:5A:91:58:D4:57:A3:34:AF:5D:AC:09:F5:26:A0:91:B0:3D X509v3 Authority Key Identifier: keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:01:11:48:ee:79:c8:65:7b:a1:16:6c:ea:86:f4:e7:0d:78: 96:db:24:12:5e:fb:c8:72:95:d7:45:78:62:4e:fa:81:d7:91: 01:5f:83:7a:5d:11:43:ea:99:7a:3c:03:d9:cf:7b:ba:7b:f4: 53:41:71:6f:91:5f:9f:fc:24:fd:d3:09:8f:1d:7c:1d:af:a9: b1:55:b6:ff:8b:d4:ed:0c:0e:99:e3:a2:c6:b9:04:21:79:3d: f1:d9:ee:46:6d:4e:fb:b0:21:14:38:45:14:31:03:62:93:70: 17:e7:79:a5:c4:58:54:9e:59:9c:07:39:6d:e7:5d:ba:94:38: 00:9f:d8:6c:ca:01:b4:d6:a8:1b:14:03:8e:ce:1f:bd:18:1b: 55:13:f9:27:ec:24:33:47:db:c9:25:f6:92:7b:44:56:a7:eb: 53:5a:89:cd:18:6d:0a:c5:3f:25:b5:d2:61:fd:2a:68:06:73: c6:c7:0c:a9:df:f0:2a:ac:34:81:a6:62:6b:b8:1f:bb:33:eb: f3:b9:7e:5d:cc:cd:f9:85:b1:d0:be:7d:ee:44:03:96:00:ac: 6f:81:0a:99:47:d3:66:3c:72:1b:8d:c7:06:e7:a4:c0:ca:15: 84:ea:a0:f0:be:51:a4:ff:ea:21:22:3c:5d:9d:9f:a1:ed:c5: 5a:eb:62:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarA2TamtnMmeeIsTXTmSNUTEq40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VC Qzk5REI4RTAeFw0yNjExMDIwMzQ3MjRaFw0yNjExMDMwMzU5MjRaMDMxMTAvBgNV BAMTKDlCRUQ4OTVBOTE1OEQ0NTdBMzM0QUY1REFDMDlGNTI2QTA5MUIwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+aL3rLj2TKwZGkwzdWyGHuOR k0bxupGdyE2rhFxM0UIRJl7Ui/++enKRPUiQQAPd84xggI6+v4CaYeTidX0D2Oed uuhUCcFJlIQA9/iggEFG4+/4X46bDGDgMteKBm0YrGckWADyWnyoSDA8KuCyLE8N 2+JHeOigdmdW2pxC/jtbfpF4NbnqwWvUMX3WQgDMU4+x3HJ1PxPO172fVomqKKns L03bFpH+FAQjQ7/Q6E15LBUiKeV804z9d+Ub0yr+IPCVO2VFuBYhjTavOw9MCL0X UOsijUf7CV0ykN5DgnPrf2ozdqRgODt3vpSrXeoA0lSmBLdqVbfcQlbqD44RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+2JWpFY1FejNK9drAn1JqCRsD0wHwYDVR0j BBgwFoAUcPbsHnI9be1CS5NFzD32zryZ244wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZkZDE1ZTMtOWVlNS00ZDUyLTllZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3 MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VCQzk5REI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY2RUMxRTcyM0Q2REVENDI0QjkzNDVDQzNERjZDRUJDOTlE QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2 Q0VCQzk5REI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOoBEUjuechle6EWbOqG9OcNeJbbJBJe+8hy lddFeGJO+oHXkQFfg3pdEUPqmXo8A9nPe7p79FNBcW+RX5/8JP3TCY8dfB2vqbFV tv+L1O0MDpnjosa5BCF5PfHZ7kZtTvuwIRQ4RRQxA2KTcBfneaXEWFSeWZwHOW3n XbqUOACf2GzKAbTWqBsUA47OH70YG1UT+SfsJDNH28kl9pJ7RFan61Naic0YbQrF PyW10mH9KmgGc8bHDKnf8CqsNIGmYmu4H7sz6/O5fl3MzfmFsdC+fe5EA5YArG+B CplH02Y8chuNxwbnpMDKFYTqoPC+UaT/6iEiPF2dn6HtxVrrYlQ= -----END CERTIFICATE-----Generated at Mon Nov 2 13:54:48 2026 by rpki-client