$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft File: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft (raw, json) Hash identifier: GfNI/q6wck2MTvBJlQ/o3SJNfLVoXX1F659y6mOlTZw= Subject key identifier: D7:78:BB:E9:C1:60:80:C2:FE:0A:2A:10:DA:D0:8A:11:0A:38:94:7D Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Certificate serial: 57B6EC2DDA6A1D01C53808198143E7D375FB2D20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 16:01:31 +0000 Manifest this update: Thu 03 Sep 2026 15:56:31 +0000 Manifest next update: Fri 04 Sep 2026 19:47:31 +0000 Files and hashes: 1: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: CRQfQvukFddl9vchPsTgKBPY7+BHd3EPebDgJxEISnw=) 2: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: pEjlBEcf4SMwhsnq2l8vEuSNRarcFG9m4tfJC8/w2lc=) 3: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: 7JThFy92/VpEXEDJA9kwrgcgGhSHAfaM/+d1+Zp5aK8=) 4: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 1pB/Nqd7vJqSwm7DTejyzXpeJQSOjzzPkrlOSeZoqb4=) 5: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: lCknCbn1e4JowaioeH82UQR3fwZeR46CsNwrligI+W0=) 6: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl (hash: 8oRqm69KwvMares2+snoDmuENgCBDRSOlEe8SdDeL/k=) 7: 3131302e35302e38322e302f32342d3234203d3e20313431383932.roa (hash: 38Va62FPSyr8Ygtpz8ja6Vo7jaIjqhcu6Gg/Q1NLZ1M=) 8: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: uVaL+tfCNM5zPaOPcfVzgSdj2M5cAqybg0t35qHDKfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b6:ec:2d:da:6a:1d:01:c5:38:08:19:81:43:e7:d3:75:fb:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Validity Not Before: Sep 3 15:56:31 2026 GMT Not After : Sep 4 19:47:31 2026 GMT Subject: CN=D778BBE9C16080C2FE0A2A10DAD08A110A38947D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:ea:d1:24:6c:7d:42:86:f9:f1:29:6e:d7: d8:28:1d:06:0b:19:89:fb:ca:74:5d:bc:66:08:aa: ef:b2:a1:9d:11:9e:2b:b0:a4:07:32:07:71:e4:cd: e2:94:2f:b6:39:13:a7:8b:76:16:f8:df:73:46:eb: 0e:a8:1b:f1:3f:94:79:e1:47:d8:d0:68:a9:f8:e6: 56:7f:a9:f5:e7:32:ca:d9:cd:ae:ab:58:32:67:49: 6f:5e:93:48:d9:6c:eb:86:f5:6f:9a:6c:f3:be:52: b1:e1:00:41:ce:d5:3b:b8:f2:5f:c7:f9:46:b7:69: 3a:18:09:b1:af:47:d7:ac:e2:a1:c9:c9:5c:10:ac: 56:cd:56:88:a8:4e:73:a1:4d:cc:82:7a:e0:62:77: 88:b5:c4:c8:cb:da:21:13:4c:d4:54:11:d7:56:c5: b7:d3:b3:11:0a:2d:30:38:94:c9:24:60:ed:19:fb: 4e:53:37:cf:6d:1e:5f:00:7b:2e:e8:f8:fb:1c:76: 87:90:53:8f:e7:1f:b3:f8:bc:38:3b:7a:cf:57:47: 91:75:4a:dd:02:b9:04:4c:fe:2c:f3:d7:e9:f5:4a: a5:3e:67:0b:b3:71:7f:0d:7d:5e:10:4f:2e:a3:39: 60:0d:8a:e2:9f:ac:f8:13:e3:36:5b:1f:3b:52:71: 57:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:78:BB:E9:C1:60:80:C2:FE:0A:2A:10:DA:D0:8A:11:0A:38:94:7D X509v3 Authority Key Identifier: keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4d:a1:53:a3:0d:28:5b:a3:32:36:b4:cf:1c:5f:91:57:d4: 93:27:22:1f:1c:ef:67:b7:15:e6:de:e1:c2:ac:a9:20:2b:6b: f4:e7:ae:18:b8:d1:57:db:99:00:19:5f:48:3c:12:f5:6c:ec: 0f:be:c5:aa:5a:d5:75:2b:2d:79:d3:a8:2c:58:80:49:d6:79: 6b:b8:58:28:7f:ea:82:37:fb:e9:33:c9:41:61:a9:4c:22:60: b5:b6:d3:24:95:57:7b:6e:74:d2:50:3d:79:ae:f8:c9:3b:b3: 30:3f:38:35:e8:0e:4c:b6:9b:43:04:02:59:ff:ef:7a:cc:69: 02:fd:43:54:27:9c:f8:23:f9:4a:3d:6a:ff:25:14:90:86:84: ca:9e:4b:7b:14:fb:1f:2f:b9:93:25:b7:f9:b2:f5:ce:e9:16: c1:b7:14:4e:aa:08:46:e4:aa:6c:00:3f:43:65:42:6d:30:54: 27:6f:fa:78:df:59:92:02:a3:80:2c:dd:96:ec:e8:0f:73:7d: c0:f7:0f:19:bb:dc:a4:13:c1:f3:6f:7f:c6:9d:c7:9f:ac:83: ee:f0:47:b9:2e:86:62:83:29:51:46:af:6e:6d:67:41:99:6e: 3e:21:82:a6:8e:29:aa:a3:02:aa:09:3b:31:10:a8:6e:be:1b: ed:32:97:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV7bsLdpqHQHFOAgZgUPn03X7LSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2 N0ZGRUZBQTAeFw0yNjA5MDMxNTU2MzFaFw0yNjA5MDQxOTQ3MzFaMDMxMTAvBgNV BAMTKEQ3NzhCQkU5QzE2MDgwQzJGRTBBMkExMERBRDA4QTExMEEzODk0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2erRJGx9Qob58Slu19goHQYL GYn7ynRdvGYIqu+yoZ0RniuwpAcyB3HkzeKUL7Y5E6eLdhb433NG6w6oG/E/lHnh R9jQaKn45lZ/qfXnMsrZza6rWDJnSW9ek0jZbOuG9W+abPO+UrHhAEHO1Tu48l/H +Ua3aToYCbGvR9es4qHJyVwQrFbNVoioTnOhTcyCeuBid4i1xMjL2iETTNRUEddW xbfTsxEKLTA4lMkkYO0Z+05TN89tHl8Aey7o+PscdoeQU4/nH7P4vDg7es9XR5F1 St0CuQRM/izz1+n1SqU+ZwuzcX8NfV4QTy6jOWANiuKfrPgT4zZbHztScVfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13i76cFggML+CioQ2tCKEQo4lH0wHwYDVR0j BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF RkFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1 M0E2N0ZGRUZBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElNoVOjDShbozI2tM8cX5FX1JMnIh8c72e3 Febe4cKsqSAra/Tnrhi40VfbmQAZX0g8EvVs7A++xapa1XUrLXnTqCxYgEnWeWu4 WCh/6oI3++kzyUFhqUwiYLW20ySVV3tudNJQPXmu+Mk7szA/ODXoDky2m0MEAln/ 73rMaQL9Q1QnnPgj+Uo9av8lFJCGhMqeS3sU+x8vuZMlt/my9c7pFsG3FE6qCEbk qmwAP0NlQm0wVCdv+njfWZICo4As3Zbs6A9zfcD3Dxm73KQTwfNvf8adx5+sg+7w R7kuhmKDKVFGr25tZ0GZbj4hgqaOKaqjAqoJOzEQqG6+G+0yl6A= -----END CERTIFICATE-----Generated at Thu Sep 3 17:46:46 2026 by rpki-client