$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft File: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft (raw, json) Hash identifier: it5Pop4v2M3ZcXiCSDW5ozEoJCRjgcbgscqm41nhBu8= Subject key identifier: 5D:92:7F:24:20:EB:44:8F:8D:17:84:3D:99:15:D9:41:69:CC:F3:51 Authority key identifier: 2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 Certificate issuer: /CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Certificate serial: 7408B1D1773D74BDC29DB393390A4D96410414BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 07:16:35 +0000 Manifest this update: Thu 03 Sep 2026 07:11:35 +0000 Manifest next update: Fri 04 Sep 2026 08:13:35 +0000 Files and hashes: 1: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl (hash: cO3M1LNedOF76HT63zHUhjycuFkWZdGEezxqLHkG3t4=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: 6hdyf5UyF+Tqhlq/rEWrqEwjd98p7rc0NoOyzHNtasM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 08:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:08:b1:d1:77:3d:74:bd:c2:9d:b3:93:39:0a:4d:96:41:04:14:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Validity Not Before: Sep 3 07:11:35 2026 GMT Not After : Sep 4 08:13:35 2026 GMT Subject: CN=5D927F2420EB448F8D17843D9915D94169CCF351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:27:44:07:64:fc:ae:d7:0a:3b:49:27:39: 30:a5:ce:f1:0a:d7:5b:51:32:f8:6e:a2:ea:13:33: d0:dc:67:8c:f5:e6:60:9a:74:8c:88:44:d4:ab:69: 2b:23:99:09:0e:19:94:c8:5a:22:5a:e8:9f:c8:e7: 06:e3:ff:31:b9:09:90:93:29:cc:ff:00:cf:65:33: 29:be:67:47:df:4f:3b:3e:97:ad:e7:a0:1c:d3:16: 82:ab:11:29:12:81:6c:26:b1:12:7b:d7:81:a7:d3: 75:7a:db:ce:a7:00:98:53:75:24:68:c3:fc:d7:3b: 7e:7e:6b:37:51:83:ea:10:ad:21:e0:e0:89:31:37: ad:dd:74:3a:5f:eb:f1:51:6d:48:28:40:7d:e3:0b: cc:8a:0b:19:38:58:d6:eb:25:1d:c4:e8:75:c3:65: f1:81:40:a8:be:7d:4e:94:fd:57:af:38:a7:fe:a2: 04:c8:f0:6f:3e:e6:b9:a2:8b:6c:ea:b4:e8:c0:8b: 42:3b:d4:cb:5d:a5:7f:f0:63:85:9b:eb:a8:c3:0b: 1e:1e:99:9c:e9:4d:1c:f5:2e:6f:89:cc:da:aa:23: cd:e3:d9:9e:ff:9d:eb:30:ae:ce:45:6c:9d:83:47: 14:a8:f9:3c:bb:1e:12:b3:04:1c:f2:df:3b:f1:6f: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:92:7F:24:20:EB:44:8F:8D:17:84:3D:99:15:D9:41:69:CC:F3:51 X509v3 Authority Key Identifier: keyid:2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:3f:4d:54:44:1d:a2:fe:72:53:a5:70:3f:61:18:68:9c:f9: 0f:60:88:50:02:69:3b:03:da:81:73:de:6f:19:2a:95:5d:d4: 4a:a3:c0:a2:4c:f2:1c:b7:59:b1:3f:96:c9:9a:bd:68:2f:4e: dc:a3:a9:e1:f0:a0:41:f8:83:b5:93:3c:ef:4e:37:ef:b4:94: 26:11:65:b3:78:c4:46:61:53:00:91:1a:c4:b0:b9:91:49:6e: dd:e7:d9:3b:b5:35:d0:5d:58:29:4b:50:b1:33:63:db:56:20: 06:c1:79:f0:8f:92:f8:43:62:9c:46:bc:e9:06:a7:3d:04:f9: 6c:ad:eb:8d:3e:a9:1f:87:19:a8:d4:de:2d:bc:22:26:ba:62: 15:23:90:34:a6:32:dc:72:26:6e:ef:e7:5e:30:aa:5f:2a:2b: 2a:f8:d8:19:67:0a:88:c6:0c:1e:3f:a6:4a:80:0a:22:81:70: f9:e2:3d:73:9c:1f:53:ef:b7:27:93:29:b9:2b:64:68:77:b1: 68:e8:cf:cc:a3:81:17:9b:a8:d9:25:53:a2:14:d2:42:51:9f: 69:41:64:ac:8e:6a:79:71:30:52:43:d5:a1:53:e9:60:da:27: 36:3c:e2:ef:15:3e:4d:3f:9d:6b:69:10:c0:8a:0a:76:d3:07: cf:7b:72:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdAix0Xc9dL3CnbOTOQpNlkEEFLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFB MjRBNUY3NzAeFw0yNjA5MDMwNzExMzVaFw0yNjA5MDQwODEzMzVaMDMxMTAvBgNV BAMTKDVEOTI3RjI0MjBFQjQ0OEY4RDE3ODQzRDk5MTVEOTQxNjlDQ0YzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16ydEB2T8rtcKO0knOTClzvEK 11tRMvhuouoTM9DcZ4z15mCadIyIRNSraSsjmQkOGZTIWiJa6J/I5wbj/zG5CZCT Kcz/AM9lMym+Z0ffTzs+l63noBzTFoKrESkSgWwmsRJ714Gn03V6286nAJhTdSRo w/zXO35+azdRg+oQrSHg4IkxN63ddDpf6/FRbUgoQH3jC8yKCxk4WNbrJR3E6HXD ZfGBQKi+fU6U/VevOKf+ogTI8G8+5rmii2zqtOjAi0I71MtdpX/wY4Wb66jDCx4e mZzpTRz1Lm+JzNqqI83j2Z7/neswrs5FbJ2DRxSo+Ty7HhKzBBzy3zvxb73vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXZJ/JCDrRI+NF4Q9mRXZQWnM81EwHwYDVR0j BBgwFoAUL3CrNfGqii4Yq+Or8Y5G4aJKX3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0OGJiODgtYTc1OC00NDNmLWI3MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVG MUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFBMjRBNUY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjcwQUIzNUYxQUE4QTJFMThBQkUzQUJGMThFNDZFMUEyNEE1 Rjc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2 RTFBMjRBNUY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFM/TVREHaL+clOlcD9hGGic+Q9giFACaTsD 2oFz3m8ZKpVd1EqjwKJM8hy3WbE/lsmavWgvTtyjqeHwoEH4g7WTPO9ON++0lCYR ZbN4xEZhUwCRGsSwuZFJbt3n2Tu1NdBdWClLULEzY9tWIAbBefCPkvhDYpxGvOkG pz0E+Wyt640+qR+HGajU3i28Iia6YhUjkDSmMtxyJm7v514wql8qKyr42BlnCojG DB4/pkqACiKBcPniPXOcH1PvtyeTKbkrZGh3sWjoz8yjgRebqNklU6IU0kJRn2lB ZKyOanlxMFJD1aFT6WDaJzY84u8VPk0/nWtpEMCKCnbTB897cmQ= -----END CERTIFICATE-----Generated at Thu Sep 3 20:51:08 2026 by rpki-client