$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft File: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft (raw, json) Hash identifier: MOqSpTXKm8HuFOH7q2w/pbbdHDukfESFRIGy6xoyiPk= Subject key identifier: D9:81:B0:4A:75:85:D1:DD:EA:8B:05:91:49:E3:29:2B:A5:C7:AB:94 Authority key identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 Certificate issuer: /CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Certificate serial: 11008FE859FC82C0FA739D017A09F4ABC5AB03F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 18:10:34 +0000 Manifest this update: Mon 02 Nov 2026 18:05:34 +0000 Manifest next update: Tue 03 Nov 2026 21:29:34 +0000 Files and hashes: 1: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: xkIsUOsvhzcBh2sD2rCI6s5EqakfkJ/T7bTiJ7H33iA=) 2: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl (hash: Sth+WAykh1BnKkoeX2WdVceag5hX6L0FlbnweA8Mdlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:00:8f:e8:59:fc:82:c0:fa:73:9d:01:7a:09:f4:ab:c5:ab:03:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Validity Not Before: Nov 2 18:05:34 2026 GMT Not After : Nov 3 21:29:34 2026 GMT Subject: CN=D981B04A7585D1DDEA8B059149E3292BA5C7AB94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:47:cf:a4:33:be:d8:6b:ab:90:98:86:59:70: 14:ca:ef:d8:32:eb:2b:5a:4a:d9:b5:41:5a:e8:88: 1b:fe:91:20:8f:5d:1c:36:f4:33:e4:ab:78:f3:ed: fd:f6:03:6b:31:4f:0b:05:bc:d2:00:97:11:f8:11: 58:97:a8:86:d4:4f:73:9a:3d:79:c6:7d:ab:9f:6e: 0c:dd:ef:5f:60:4c:92:55:c4:c4:78:e5:f9:98:c0: 84:2e:4d:19:13:0c:e1:be:ae:f3:54:b4:3b:20:67: 82:c0:d7:55:b2:80:b8:8c:e6:54:99:43:94:8c:52: b5:b7:76:a4:27:7a:53:f9:77:9a:c0:c9:92:76:8e: 83:8b:3f:12:0d:2f:8f:7c:9f:fa:ff:f4:77:d8:2f: 3a:b6:52:07:43:6c:ca:65:85:a0:62:0c:48:10:f6: 1c:f6:b3:c2:42:c8:69:54:14:38:4e:57:30:bd:31: 95:29:7f:06:74:6a:7c:bc:37:35:ae:40:d7:a6:24: 03:79:45:92:db:29:6d:f1:6d:d3:d9:a8:b0:72:cb: 38:e3:39:4b:2e:6a:2b:78:d7:b4:c6:2c:0e:ce:b0: ea:73:93:b4:2f:bf:a6:ec:2d:3e:ac:34:8e:f4:f6: 91:96:4c:7f:28:3c:fd:18:85:af:be:02:04:3c:c3: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:81:B0:4A:75:85:D1:DD:EA:8B:05:91:49:E3:29:2B:A5:C7:AB:94 X509v3 Authority Key Identifier: keyid:70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:73:54:2f:ab:12:98:4b:e0:4c:aa:cf:bb:81:7c:81:cc:f6: af:f3:e1:33:69:6e:83:4d:88:61:f3:f7:15:07:1b:0c:42:58: 01:bf:37:67:39:0e:0b:3d:aa:d4:3b:8e:21:f0:9e:90:0c:ba: d3:e3:70:99:ca:e0:65:10:e2:20:9d:f9:fe:cc:d3:2b:58:f1: e3:2c:5b:63:67:5c:7b:f3:a5:5e:a2:63:e2:cb:ae:19:5c:e8: 55:e3:0a:de:76:6b:75:5a:84:63:c6:08:34:a9:a5:ae:4e:34: 8a:50:b3:81:f3:fd:e4:4f:4f:95:d5:2c:c2:3a:6b:f8:cf:61: 59:1c:30:d1:17:64:1d:dd:66:2f:d8:74:c7:29:01:7e:63:f9: 6e:56:80:24:38:37:93:3a:65:b1:45:f1:b1:1e:d8:ba:52:c9: 75:31:4d:f2:86:e8:89:4b:41:04:2e:11:3a:ad:a3:3b:4b:38: 8b:98:3d:08:0b:59:41:43:0d:15:9f:22:b9:4a:2c:68:72:f9: e6:2b:67:0d:5b:31:10:6f:11:25:9b:36:f1:c3:7d:72:3b:40: 69:2b:44:64:97:03:26:20:ca:3f:65:b2:80:cc:e1:ef:04:6a: aa:d0:7e:3d:16:ee:4a:44:5f:5f:1a:05:f9:25:57:95:ab:8c: 98:dd:40:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEQCP6Fn8gsD6c50Begn0q8WrA/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0 QjQxMTc4MTAeFw0yNjExMDIxODA1MzRaFw0yNjExMDMyMTI5MzRaMDMxMTAvBgNV BAMTKEQ5ODFCMDRBNzU4NUQxRERFQThCMDU5MTQ5RTMyOTJCQTVDN0FCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKR8+kM77Ya6uQmIZZcBTK79gy 6ytaStm1QVroiBv+kSCPXRw29DPkq3jz7f32A2sxTwsFvNIAlxH4EViXqIbUT3Oa PXnGfaufbgzd719gTJJVxMR45fmYwIQuTRkTDOG+rvNUtDsgZ4LA11WygLiM5lSZ Q5SMUrW3dqQnelP5d5rAyZJ2joOLPxINL498n/r/9HfYLzq2UgdDbMplhaBiDEgQ 9hz2s8JCyGlUFDhOVzC9MZUpfwZ0any8NzWuQNemJAN5RZLbKW3xbdPZqLByyzjj OUsuait417TGLA7OsOpzk7Qvv6bsLT6sNI709pGWTH8oPP0Yha++AgQ8w2CRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2YGwSnWF0d3qiwWRSeMpK6XHq5QwHwYDVR0j BBgwFoAUcPeqTttsRXtdAtZnYt3Y7ktBF4EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZjNWExY2MtY2M1ZS00ZTU4LThkZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVE QjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0QjQxMTc4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY3QUE0RURCNkM0NTdCNUQwMkQ2Njc2MkRERDhFRTRCNDEx NzgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4 RUU0QjQxMTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZzVC+rEphL4Eyqz7uBfIHM9q/z4TNpboNN iGHz9xUHGwxCWAG/N2c5Dgs9qtQ7jiHwnpAMutPjcJnK4GUQ4iCd+f7M0ytY8eMs W2NnXHvzpV6iY+LLrhlc6FXjCt52a3VahGPGCDSppa5ONIpQs4Hz/eRPT5XVLMI6 a/jPYVkcMNEXZB3dZi/YdMcpAX5j+W5WgCQ4N5M6ZbFF8bEe2LpSyXUxTfKG6IlL QQQuETqtoztLOIuYPQgLWUFDDRWfIrlKLGhy+eYrZw1bMRBvESWbNvHDfXI7QGkr RGSXAyYgyj9lsoDM4e8EaqrQfj0W7kpEX18aBfklV5WrjJjdQAs= -----END CERTIFICATE-----Generated at Mon Nov 2 22:31:36 2026 by rpki-client