$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft File: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft (raw, json) Hash identifier: jsUEQ5gN0JKeCyeXPq+0YBKC8ovEEZ7iAZM84YGTzl0= Subject key identifier: D2:3E:61:76:26:B2:E1:C3:9F:84:41:07:56:1E:79:D5:08:5B:AE:3C Authority key identifier: C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 Certificate issuer: /CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Certificate serial: 1D1D16C8019AF36AA67C465DDCFEFE46D2B5FBCA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft Manifest number: FA Signing time: Wed 04 Nov 2026 14:41:36 +0000 Manifest this update: Wed 04 Nov 2026 14:36:36 +0000 Manifest next update: Thu 05 Nov 2026 15:02:36 +0000 Files and hashes: 1: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: RMvUFQrKL018cFixmOMzozWh6kTAtIwXuWq18nozxuA=) 2: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl (hash: ezgDX6ADzvzU4kKVJ6quVT28ekR+vH47x4dzPvlPltI=) 3: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: IG22wGAeafPyZiCHJfimAg7HtJoJBGXUaInRtJgtJX8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1d:16:c8:01:9a:f3:6a:a6:7c:46:5d:dc:fe:fe:46:d2:b5:fb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Validity Not Before: Nov 4 14:36:36 2026 GMT Not After : Nov 5 15:02:36 2026 GMT Subject: CN=D23E617626B2E1C39F844107561E79D5085BAE3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:9e:72:48:d8:2a:1f:94:f4:ac:b7:29:34: e6:fe:f6:8d:fb:83:de:7d:04:ea:fc:c9:11:45:af: fe:bc:6f:0f:ab:6f:aa:1c:40:5b:b0:cf:c6:07:02: ca:54:04:7c:9a:32:3c:36:1b:38:76:c2:ab:ef:29: cc:dd:33:21:dd:37:18:de:32:27:e1:a2:5e:51:18: cd:a6:7c:fc:74:2d:56:ed:d5:85:d0:ae:0f:9a:cf: 6c:b5:14:42:eb:73:87:3c:e9:3e:f1:af:5a:93:32: 9d:9d:fe:ee:75:3d:57:3c:6d:10:28:89:c9:33:bf: ea:fb:19:13:2f:f3:e0:aa:9c:f1:61:3f:fa:42:cc: 33:bb:d5:78:f0:64:2c:f0:ae:ac:d1:09:69:bb:56: 5c:6e:74:bc:6f:c7:aa:11:2a:b5:d3:bd:aa:ba:df: cc:5e:b5:76:55:b5:bf:20:39:68:f4:1e:84:01:fd: ee:c6:58:ff:5b:38:e3:8e:a2:74:87:73:c8:5b:8f: 96:e0:1d:ed:9e:bf:69:86:d3:71:54:d7:35:1e:82: 10:35:74:6e:8c:9e:5b:9d:bc:68:80:f9:ea:a5:6c: 15:1a:a3:1d:2d:22:68:21:05:f2:71:67:8b:d4:15: cc:d5:54:94:21:92:a3:76:79:4f:39:f1:41:55:b0: 2c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3E:61:76:26:B2:E1:C3:9F:84:41:07:56:1E:79:D5:08:5B:AE:3C X509v3 Authority Key Identifier: keyid:C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:87:69:4b:ed:c2:07:01:5c:91:a1:d2:60:22:29:01:cd:07: 03:a9:06:21:f0:3d:98:d6:f6:8f:c1:29:5c:b0:f7:83:2a:d0: a0:45:79:d8:a1:65:4d:a5:f8:18:42:f7:d1:aa:83:d1:3b:0a: 35:eb:6e:d0:99:e9:58:2f:9e:2a:eb:9b:0f:a0:56:ec:26:1d: ba:e7:a3:bd:fd:12:a1:b0:11:ee:d6:85:24:68:cb:b7:a0:7e: b1:26:45:f6:1c:10:54:1f:9d:81:9c:3b:47:33:6f:da:e8:45: 66:2c:a8:a6:ce:3d:74:08:0d:e3:7f:7c:d0:e7:eb:b9:1d:86: 3b:82:8c:67:4d:62:8b:68:d0:b3:57:1e:0b:1c:c5:56:70:ed: 6d:ee:00:7c:31:8f:26:d3:fb:db:20:c7:2d:db:40:f7:2d:5c: fd:74:8f:31:b5:9f:37:b9:b6:30:dc:38:69:1d:b1:67:b0:30: 2e:f4:52:cd:dc:6b:92:d3:05:b2:04:7a:5a:e4:b8:66:d7:3e: d8:d4:ec:7a:5e:ba:03:e8:58:89:fb:5d:85:7f:b3:24:24:25: 91:0a:90:14:bf:06:a6:b3:b6:58:04:98:a1:a0:5f:35:36:7f: 57:fe:8c:1e:e9:7d:64:90:9f:70:19:01:44:00:22:32:11:53: 03:bb:11:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHR0WyAGa82qmfEZd3P7+RtK1+8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlD MDQ3MkI1MDAeFw0yNjExMDQxNDM2MzZaFw0yNjExMDUxNTAyMzZaMDMxMTAvBgNV BAMTKEQyM0U2MTc2MjZCMkUxQzM5Rjg0NDEwNzU2MUU3OUQ1MDg1QkFFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/VZ5ySNgqH5T0rLcpNOb+9o37 g959BOr8yRFFr/68bw+rb6ocQFuwz8YHAspUBHyaMjw2Gzh2wqvvKczdMyHdNxje Mifhol5RGM2mfPx0LVbt1YXQrg+az2y1FELrc4c86T7xr1qTMp2d/u51PVc8bRAo ickzv+r7GRMv8+CqnPFhP/pCzDO71XjwZCzwrqzRCWm7VlxudLxvx6oRKrXTvaq6 38xetXZVtb8gOWj0HoQB/e7GWP9bOOOOonSHc8hbj5bgHe2ev2mG03FU1zUeghA1 dG6MnludvGiA+eqlbBUaox0tImghBfJxZ4vUFczVVJQhkqN2eU858UFVsCwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0j5hdiay4cOfhEEHVh551QhbrjwwHwYDVR0j BBgwFoAUxwqifmAZfQLw3M2OeST/+cBHK1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlODM2NzMtMDk2YS00NDBjLWIyN2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2 MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlDMDQ3MkI1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzBBQTI3RTYwMTk3RDAyRjBEQ0NEOEU3OTI0RkZGOUMwNDcy QjUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZG RjlDMDQ3MkI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKHaUvtwgcBXJGh0mAiKQHNBwOpBiHwPZjW 9o/BKVyw94Mq0KBFedihZU2l+BhC99Gqg9E7CjXrbtCZ6Vgvnirrmw+gVuwmHbrn o739EqGwEe7WhSRoy7egfrEmRfYcEFQfnYGcO0czb9roRWYsqKbOPXQIDeN/fNDn 67kdhjuCjGdNYoto0LNXHgscxVZw7W3uAHwxjybT+9sgxy3bQPctXP10jzG1nze5 tjDcOGkdsWewMC70Us3ca5LTBbIEelrkuGbXPtjU7HpeugPoWIn7XYV/syQkJZEK kBS/BqaztlgEmKGgXzU2f1f+jB7pfWSQn3AZAUQAIjIRUwO7EWE= -----END CERTIFICATE-----Generated at Wed Nov 4 19:11:57 2026 by rpki-client