$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft File: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft (raw, json) Hash identifier: jEY7SNTP6oYKpUdAMg4pPt8gHf+0U9SZVk933eYR6QQ= Subject key identifier: 13:C6:CC:81:F8:D6:E4:F5:D4:5D:C2:94:42:C2:CA:0B:1E:A1:42:68 Authority key identifier: 70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 Certificate issuer: /CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Certificate serial: 26FF373E243AAE16DF07AB322BB2A7B07DA19A87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:58:22 +0000 Manifest this update: Thu 17 Sep 2026 03:53:22 +0000 Manifest next update: Fri 18 Sep 2026 06:58:22 +0000 Files and hashes: 1: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: hpiL6+O2y1i6nQTaaXJTYqIKZW0DPxyBBggb24eEX0o=) 2: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl (hash: Q2MLL1yALF4aw7peKjOTEqftXTWqcR2gy64gbXfXiUI=) 3: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: keOPkaU9xFvf9rbttWbatnRuZitbsiWuBrO+qREpte8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ff:37:3e:24:3a:ae:16:df:07:ab:32:2b:b2:a7:b0:7d:a1:9a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Validity Not Before: Sep 17 03:53:22 2026 GMT Not After : Sep 18 06:58:22 2026 GMT Subject: CN=13C6CC81F8D6E4F5D45DC29442C2CA0B1EA14268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:f2:5c:b5:7b:b7:6d:00:92:c8:4d:f4:d2: 39:fa:a4:3b:7c:c2:8d:60:6b:d8:72:04:3f:a0:a7: c7:ce:2d:d7:f3:b4:62:71:d6:4c:cd:ad:ce:dd:b0: 9c:32:f5:c0:96:07:0f:68:6b:19:e6:04:08:71:22: 17:1c:bb:46:ab:c0:f4:1d:3b:ed:db:27:bd:4b:d6: 81:dd:a0:e5:7f:fa:15:88:ef:85:aa:36:cc:ac:f5: 6f:3e:1b:3e:8b:ab:84:03:97:ff:94:96:2d:3e:63: ca:cc:03:67:f6:4f:32:a3:28:93:ff:92:50:3b:b0: 5e:6a:47:6d:22:5d:f4:9f:99:d8:0e:af:95:de:63: 2b:aa:42:d9:42:24:2c:0a:13:0e:ac:44:d8:01:9d: 16:05:15:ca:e9:25:0e:ae:c0:a9:bb:35:9c:1c:6d: 59:11:26:ed:79:a3:9f:1a:4e:86:8a:cf:78:d4:b6: ed:1f:03:6b:f5:78:cb:1a:57:cd:12:5a:d8:7f:59: 5e:d1:44:41:78:2c:4b:1a:81:36:8f:b0:e6:d0:98: fc:f8:54:d3:40:f6:06:3b:5b:57:b3:79:d0:fb:ec: f0:32:f7:f2:fc:f5:66:3a:2e:ea:37:26:f8:31:65: bd:59:5a:18:0a:97:1c:5a:50:01:9e:d5:96:b2:6d: ca:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C6:CC:81:F8:D6:E4:F5:D4:5D:C2:94:42:C2:CA:0B:1E:A1:42:68 X509v3 Authority Key Identifier: keyid:70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:8d:b2:ae:79:48:35:e2:20:ae:4a:13:c5:60:f5:2a:78:62: 1d:4d:84:88:0a:7e:5b:fd:e2:26:a6:3e:04:98:a0:8f:5f:9e: 07:ba:f2:b4:2a:a6:06:ad:bc:5e:70:79:d9:f3:b3:46:f4:2b: c7:71:34:6b:59:1a:d4:e1:1c:92:4e:9c:c5:90:7d:36:dc:47: 1b:07:f0:8c:63:e3:b7:34:76:00:0e:1e:25:2c:a1:a9:52:94: a5:41:0e:0e:15:9b:b5:b6:c9:9c:7a:8a:a4:ed:29:22:cb:80: 48:39:c3:a4:b2:8c:f8:f9:3f:0d:77:d5:77:13:19:f1:63:09: f7:d7:ca:7b:b6:f0:8d:6e:e8:2e:b7:97:3b:e5:ac:0f:38:0a: ac:b3:61:e9:30:c3:30:6d:c3:c3:4b:91:d5:c8:95:1d:c3:06: 0d:d8:07:ce:86:1d:cb:e2:24:44:88:6f:05:06:33:60:8c:03: b7:53:4e:97:f9:6b:93:97:6b:90:c4:a0:18:55:44:3a:2b:9c: a2:3c:0e:45:26:25:be:6b:15:af:74:9a:22:ae:69:e7:ff:bd: 4c:03:d5:29:64:6d:fe:94:02:37:17:96:30:63:8a:dd:33:b9: 27:ad:93:f7:8d:e1:b2:a6:74:44:0e:6a:29:af:c7:68:03:9f: b5:c7:17:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJv83PiQ6rhbfB6syK7KnsH2hmocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4 QjIzNjRBODAeFw0yNjA5MTcwMzUzMjJaFw0yNjA5MTgwNjU4MjJaMDMxMTAvBgNV BAMTKDEzQzZDQzgxRjhENkU0RjVENDVEQzI5NDQyQzJDQTBCMUVBMTQyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFvJctXu3bQCSyE300jn6pDt8 wo1ga9hyBD+gp8fOLdfztGJx1kzNrc7dsJwy9cCWBw9oaxnmBAhxIhccu0arwPQd O+3bJ71L1oHdoOV/+hWI74WqNsys9W8+Gz6Lq4QDl/+Uli0+Y8rMA2f2TzKjKJP/ klA7sF5qR20iXfSfmdgOr5XeYyuqQtlCJCwKEw6sRNgBnRYFFcrpJQ6uwKm7NZwc bVkRJu15o58aToaKz3jUtu0fA2v1eMsaV80SWth/WV7RREF4LEsagTaPsObQmPz4 VNNA9gY7W1ezedD77PAy9/L89WY6Luo3JvgxZb1ZWhgKlxxaUAGe1ZaybcrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8bMgfjW5PXUXcKUQsLKCx6hQmgwHwYDVR0j BBgwFoAUcLVONNzwcBKQt5Lm6grpAIsjZKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYxNmMwNGQtZDllMC00YzFmLThhMTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzRE Q0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4QjIzNjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MEI1NEUzNERDRjA3MDEyOTBCNzkyRTZFQTBBRTkwMDhCMjM2 NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5 MDA4QjIzNjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2Nsq55SDXiIK5KE8Vg9Sp4Yh1NhIgKflv9 4iamPgSYoI9fnge68rQqpgatvF5wednzs0b0K8dxNGtZGtThHJJOnMWQfTbcRxsH 8Ixj47c0dgAOHiUsoalSlKVBDg4Vm7W2yZx6iqTtKSLLgEg5w6SyjPj5Pw131XcT GfFjCffXynu28I1u6C63lzvlrA84CqyzYekwwzBtw8NLkdXIlR3DBg3YB86GHcvi JESIbwUGM2CMA7dTTpf5a5OXa5DEoBhVRDornKI8DkUmJb5rFa90miKuaef/vUwD 1Slkbf6UAjcXljBjit0zuSetk/eN4bKmdEQOaimvx2gDn7XHF/s= -----END CERTIFICATE-----Generated at Thu Sep 17 09:25:47 2026 by rpki-client