$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft File: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft (raw, json) Hash identifier: 4Tsa8TD0qz6TW+LHsNSni/byFa+dmvINerDqHONRjTg= Subject key identifier: E2:E6:57:8E:A1:1E:47:3B:E2:8E:EC:1C:30:0D:A7:C9:0E:B0:04:17 Authority key identifier: 70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E Certificate issuer: /CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Certificate serial: 5E69CAE7E539C8432E22A5B1223CD1CBD06ACCB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft Manifest number: EC Signing time: Mon 26 Oct 2026 01:49:05 +0000 Manifest this update: Mon 26 Oct 2026 01:44:05 +0000 Manifest next update: Tue 27 Oct 2026 04:01:05 +0000 Files and hashes: 1: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: hBvRTYXcnJk6N7ngUO2oUV6tmwOrz7l2Poiy/ABHqPM=) 2: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl (hash: usNWktR2aVhMKtvdYm6mgYe1QYmP9qmGcGUHzZ092RU=) 3: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: X9vWw5/8oy+SYlKkHILaaaMhFfsqtUesHOd+majUa+4=) 4: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: PDVvmstV3iaWyvXstEgcHTvDFJJ9Dg2QcyyOCEhL1rA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:69:ca:e7:e5:39:c8:43:2e:22:a5:b1:22:3c:d1:cb:d0:6a:cc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Validity Not Before: Oct 26 01:44:05 2026 GMT Not After : Oct 27 04:01:05 2026 GMT Subject: CN=E2E6578EA11E473BE28EEC1C300DA7C90EB00417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:84:b3:0e:ec:72:83:f4:cf:5f:b9:7f:34: f6:f9:3b:46:8b:9b:34:6c:51:09:f0:18:74:11:c7: ae:b6:dd:e8:a3:b8:8f:c4:f7:6b:d2:f5:32:a3:f3: e8:5d:af:c6:77:99:ad:55:be:2f:ba:1f:f5:04:1f: f5:88:bd:19:fa:a4:d0:40:c0:86:b4:fa:1b:6e:30: 0a:bc:f2:c4:b9:80:2d:65:d8:4d:a4:c2:f1:3d:e1: 3c:50:2a:98:60:ce:ec:1a:e1:2c:4f:44:32:9a:16: d5:61:19:56:4c:a0:eb:4e:5b:b0:ad:59:95:f7:f6: 80:54:15:ba:56:cc:d7:8d:27:11:db:67:87:8a:fa: 06:4a:d0:08:2b:22:29:3d:fc:57:d8:10:a2:2a:78: 25:4a:cf:ad:56:38:e0:f8:66:ef:cb:a3:cc:03:90: 4d:9f:d5:3d:c2:3a:ec:44:26:9b:58:26:76:f1:ad: e4:8e:fe:04:65:4f:da:ca:84:69:bf:63:21:c8:7d: e0:9e:7d:28:e2:19:ca:6a:75:29:53:24:3d:4f:70: 12:a4:c3:2f:6c:60:12:99:5c:01:b8:ce:06:df:79: 1d:5e:7f:bc:be:8b:0e:b8:26:ba:81:23:02:bb:d1: 76:aa:d4:3d:0a:28:2e:67:0a:4b:31:24:32:cb:1c: 72:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E6:57:8E:A1:1E:47:3B:E2:8E:EC:1C:30:0D:A7:C9:0E:B0:04:17 X509v3 Authority Key Identifier: keyid:70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:9d:77:46:32:ae:97:95:fd:c7:b2:87:51:c9:8f:74:64:00: 31:66:09:eb:f9:35:37:25:6d:5f:ae:9b:c1:29:0e:7b:25:04: ab:b3:b0:7e:6b:9f:0c:89:df:a2:d6:a0:f0:8e:66:52:a1:50: 00:a4:77:03:f9:ad:dd:30:f9:c6:e1:3c:2b:64:b5:79:d9:fd: e1:26:07:8d:e8:79:23:62:9e:8a:9e:64:3b:54:b6:ce:45:b5: 58:8f:c6:35:47:39:a9:93:72:83:d1:95:4f:8c:b1:a8:b7:a0: 18:9b:af:a3:1f:b0:40:11:0b:5f:1a:86:94:ff:51:ef:7f:5a: 8c:42:73:b3:03:81:18:6c:38:ea:4f:eb:59:35:08:db:8f:90: 59:0f:72:26:a6:38:bd:2a:c1:26:b1:90:e3:31:23:8f:cb:ca: 8e:f2:fe:85:e2:6e:f7:fd:1c:58:53:eb:09:c0:ca:fe:a6:01: 8d:b9:7a:db:5c:db:f9:a5:2a:18:3e:bb:61:14:0b:99:5a:ed: fb:50:2b:e0:ba:7d:1c:fb:04:60:82:d4:48:dc:b8:b5:bd:9f: 88:d1:03:a1:5f:1d:8f:95:4d:d5:83:29:67:18:de:00:81:b5: f1:f4:34:0c:aa:aa:fa:5b:11:0b:96:9a:f6:9d:85:b7:6b:33: 5c:27:ad:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmnK5+U5yEMuIqWxIjzRy9BqzLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2REQz NDU4OUI0RTAeFw0yNjEwMjYwMTQ0MDVaFw0yNjEwMjcwNDAxMDVaMDMxMTAvBgNV BAMTKEUyRTY1NzhFQTExRTQ3M0JFMjhFRUMxQzMwMERBN0M5MEVCMDA0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1oSzDuxyg/TPX7l/NPb5O0aL mzRsUQnwGHQRx6623eijuI/E92vS9TKj8+hdr8Z3ma1Vvi+6H/UEH/WIvRn6pNBA wIa0+htuMAq88sS5gC1l2E2kwvE94TxQKphgzuwa4SxPRDKaFtVhGVZMoOtOW7Ct WZX39oBUFbpWzNeNJxHbZ4eK+gZK0AgrIik9/FfYEKIqeCVKz61WOOD4Zu/Lo8wD kE2f1T3COuxEJptYJnbxreSO/gRlT9rKhGm/YyHIfeCefSjiGcpqdSlTJD1PcBKk wy9sYBKZXAG4zgbfeR1ef7y+iw64JrqBIwK70Xaq1D0KKC5nCksxJDLLHHK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4uZXjqEeRzvijuwcMA2nyQ6wBBcwHwYDVR0j BBgwFoAUcMzgMfEETe5sr1ZbE3X23TRYm04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZjZjdjOWUtZjhjMy00MDE1LTg4MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFG MTA0NERFRTZDQUY1NjVCMTM3NUY2REQzNDU4OUI0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MENDRTAzMUYxMDQ0REVFNkNBRjU2NUIxMzc1RjZERDM0NTg5 QjRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2 REQzNDU4OUI0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABudd0YyrpeV/ceyh1HJj3RkADFmCev5NTcl bV+um8EpDnslBKuzsH5rnwyJ36LWoPCOZlKhUACkdwP5rd0w+cbhPCtktXnZ/eEm B43oeSNinoqeZDtUts5FtViPxjVHOamTcoPRlU+Msai3oBibr6MfsEARC18ahpT/ Ue9/WoxCc7MDgRhsOOpP61k1CNuPkFkPciamOL0qwSaxkOMxI4/Lyo7y/oXibvf9 HFhT6wnAyv6mAY25ettc2/mlKhg+u2EUC5la7ftQK+C6fRz7BGCC1EjcuLW9n4jR A6FfHY+VTdWDKWcY3gCBtfH0NAyqqvpbEQuWmvadhbdrM1wnrRk= -----END CERTIFICATE-----Generated at Mon Oct 26 21:17:29 2026 by rpki-client