$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft File: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft (raw, json) Hash identifier: KTAuSXfb0PN1qQY1OeZuU5Grepr0hG1mtxn7yGRoRLQ= Subject key identifier: 61:3C:29:C0:8A:11:8C:8A:A4:C0:AE:3A:D0:52:6D:1C:83:57:8F:2E Authority key identifier: 70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19 Certificate issuer: /CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619 Certificate serial: 7CADDE1EB66204E1320897E9F56A1915C1A845CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft Manifest number: E1 Signing time: Sun 18 Oct 2026 17:05:32 +0000 Manifest this update: Sun 18 Oct 2026 17:00:32 +0000 Manifest next update: Mon 19 Oct 2026 19:55:32 +0000 Files and hashes: 1: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: EtnUTjZ94OuTXPQ8oodtLlh2y5zeN5ozbISTk51v5C4=) 2: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl (hash: ZuwTUSEpXWp9NFIpKz3lhGUmNUEpenonN7zaftI86bM=) 3: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: 4MzusLkn8wvWUBvFiEkops16kBYmlHHlayjI7RCIrok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 18:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ad:de:1e:b6:62:04:e1:32:08:97:e9:f5:6a:19:15:c1:a8:45:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619 Validity Not Before: Oct 18 17:00:32 2026 GMT Not After : Oct 19 19:55:32 2026 GMT Subject: CN=613C29C08A118C8AA4C0AE3AD0526D1C83578F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:f7:4d:7b:e4:89:f6:87:99:c9:99:8e:04: 89:1c:4f:ac:ea:85:79:e0:ee:24:a4:ca:62:52:e3: f7:50:62:6e:09:74:6c:95:fb:dc:f0:e5:04:9d:1f: 68:5c:4a:e1:2c:3b:dc:09:5a:bc:68:6b:f5:5f:03: c2:12:f5:d9:be:39:30:9c:53:9c:55:a0:eb:a8:6c: 5e:8d:df:72:ec:c7:35:33:d9:f6:47:c0:f4:73:4b: 9b:7b:d5:04:5c:4f:fb:ca:51:5e:be:a3:0b:2f:5e: a4:aa:45:ef:4c:53:a1:b2:b8:da:38:35:04:88:68: 29:55:5d:e0:7a:68:2e:26:22:2d:ff:3c:d0:f7:b2: 01:ca:8a:f2:30:56:7a:74:b3:50:a1:cc:bc:49:9e: 8e:53:71:18:05:3d:7a:60:39:5d:8d:cf:0e:b0:32: b3:9c:db:97:c6:8b:27:0a:39:1f:1f:4c:cd:f0:5e: 2f:d7:78:7d:f4:15:f9:07:6c:9c:2e:3f:3c:87:ae: 08:f6:8e:b5:37:15:64:de:6d:90:82:e9:87:8a:30: f5:43:96:ee:bc:d0:03:fe:ad:8f:df:cf:bc:fd:c5: 08:43:70:14:00:2a:5d:48:34:e9:53:74:5a:66:e9: 31:49:9f:b3:ef:f5:4f:ce:f6:03:73:70:6e:cb:cd: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3C:29:C0:8A:11:8C:8A:A4:C0:AE:3A:D0:52:6D:1C:83:57:8F:2E X509v3 Authority Key Identifier: keyid:70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ad:a9:28:42:01:ff:22:85:6a:04:9b:b7:a0:23:a2:ab:51: 94:f9:f4:89:96:8e:65:5c:e7:84:38:01:9e:e5:4e:f0:b3:91: dc:d8:09:d1:1e:5d:52:f2:26:cc:56:45:6b:86:85:c9:2f:87: 3e:72:ef:a2:4b:3f:3e:d1:b2:d5:c2:09:e1:c1:26:4f:f8:ed: ee:5f:ae:08:9a:29:4b:84:45:f7:48:72:54:3e:f7:1d:7a:92: 79:66:78:79:de:ca:a3:bd:21:b0:2d:c5:9d:a0:4e:dc:63:b9: 84:2a:8f:1b:f3:ec:f4:c0:29:3b:1c:ed:a8:4a:b8:33:82:93: e3:5e:67:6c:37:62:08:cc:91:bc:b3:d7:62:69:9a:84:1f:2f: 2d:26:ba:eb:78:38:c3:e9:c2:90:94:44:ad:53:c1:4d:bc:3e: c5:0d:27:ec:e5:1c:e7:97:1f:30:50:ec:ba:fe:31:6e:f6:ae: 94:18:5d:4c:5d:84:d9:17:76:dd:f8:78:2a:87:69:66:63:56: 9e:60:b4:81:84:fc:a2:74:fc:b6:e4:9f:c5:d1:2e:91:5a:f4: 98:30:34:6e:12:be:7c:2b:35:f7:ff:13:b2:d0:dd:f5:16:c6: b5:67:22:38:c9:b6:d1:e9:4c:32:ff:b9:de:d5:f7:1e:d9:42: 5b:17:ff:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfK3eHrZiBOEyCJfp9WoZFcGoRcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQw NEVBODYxOTAeFw0yNjEwMTgxNzAwMzJaFw0yNjEwMTkxOTU1MzJaMDMxMTAvBgNV BAMTKDYxM0MyOUMwOEExMThDOEFBNEMwQUUzQUQwNTI2RDFDODM1NzhGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5HfdNe+SJ9oeZyZmOBIkcT6zq hXng7iSkymJS4/dQYm4JdGyV+9zw5QSdH2hcSuEsO9wJWrxoa/VfA8IS9dm+OTCc U5xVoOuobF6N33LsxzUz2fZHwPRzS5t71QRcT/vKUV6+owsvXqSqRe9MU6GyuNo4 NQSIaClVXeB6aC4mIi3/PND3sgHKivIwVnp0s1ChzLxJno5TcRgFPXpgOV2Nzw6w MrOc25fGiycKOR8fTM3wXi/XeH30FfkHbJwuPzyHrgj2jrU3FWTebZCC6YeKMPVD lu680AP+rY/fz7z9xQhDcBQAKl1INOlTdFpm6TFJn7Pv9U/O9gNzcG7Lzfg1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYTwpwIoRjIqkwK460FJtHINXjy4wHwYDVR0j BBgwFoAUcNO1hUnvLKSrD5G8ADPLTQTqhhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA4Y2MwYjMtMjUwOC00NzdmLTlmMjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0 OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQwNEVBODYxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MEQzQjU4NTQ5RUYyQ0E0QUIwRjkxQkMwMDMzQ0I0RDA0RUE4 NjE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA4Y2MwYjMtMjUwOC00NzdmLTlm MjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NC NEQwNEVBODYxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABytqShCAf8ihWoEm7egI6KrUZT59ImWjmVc 54Q4AZ7lTvCzkdzYCdEeXVLyJsxWRWuGhckvhz5y76JLPz7RstXCCeHBJk/47e5f rgiaKUuERfdIclQ+9x16knlmeHneyqO9IbAtxZ2gTtxjuYQqjxvz7PTAKTsc7ahK uDOCk+NeZ2w3YgjMkbyz12JpmoQfLy0muut4OMPpwpCURK1TwU28PsUNJ+zlHOeX HzBQ7Lr+MW72rpQYXUxdhNkXdt34eCqHaWZjVp5gtIGE/KJ0/Lbkn8XRLpFa9Jgw NG4SvnwrNff/E7LQ3fUWxrVnIjjJttHpTDL/ud7V9x7ZQlsX/7M= -----END CERTIFICATE-----Generated at Mon Oct 19 01:26:08 2026 by rpki-client