$ rpki-client -vvvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft File: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft (raw, json) Hash identifier: S2fq4efM8RoqPhz3PBHWjZe6dUbRmocMZ7GXcG0KDCY= Subject key identifier: B3:89:E4:FB:18:0F:85:49:09:FA:31:BA:3E:BA:24:92:72:D8:D3:4A Authority key identifier: F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 Certificate issuer: /CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Certificate serial: 377D84D1AD627B7C3518F5044B3946A6AD314F0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 17:00:11 +0000 Manifest this update: Wed 16 Sep 2026 16:55:11 +0000 Manifest next update: Thu 17 Sep 2026 20:01:11 +0000 Files and hashes: 1: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl (hash: 9mJQ5n8236AzD+NhYw3kHJOaxfkas5ZPOaPW5HVZv+U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7d:84:d1:ad:62:7b:7c:35:18:f5:04:4b:39:46:a6:ad:31:4f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Validity Not Before: Sep 16 16:55:11 2026 GMT Not After : Sep 17 20:01:11 2026 GMT Subject: CN=B389E4FB180F854909FA31BA3EBA249272D8D34A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:09:51:7f:94:51:7e:bf:b9:5d:cf:52:b0: 32:78:8d:be:c4:6f:45:a1:b8:6d:ad:08:41:14:ff: 5a:88:29:1a:38:4f:c8:e8:32:30:67:f2:b6:c6:99: 71:f0:49:31:36:f6:3a:b4:4a:03:7c:78:a2:13:73: 4a:b4:55:41:9e:6e:df:17:4e:99:c1:12:0a:97:03: be:9e:07:a4:11:af:1d:85:1c:39:ae:8c:24:14:d8: d2:3a:79:33:41:62:5e:98:1a:f3:8a:a3:24:5b:f0: d0:e5:f8:a4:27:42:ff:74:e6:e1:c9:fe:99:a3:16: 36:ff:f7:a5:d6:49:0b:dd:41:e6:76:9d:02:0e:45: 02:c4:11:c4:23:25:b8:ff:9a:d7:14:4d:be:5d:b1: f2:c4:b0:2c:d4:2a:b1:aa:d6:03:23:8a:20:e1:32: 1e:82:19:db:e7:d2:23:bc:5d:9a:6a:75:8a:82:2d: bc:2f:3d:ba:19:c9:ba:9c:36:f6:a3:45:25:85:06: 47:68:ec:9c:73:d8:fa:b1:fe:35:0c:fa:e4:d0:45: 5a:11:be:bb:3b:ab:46:ce:31:e7:10:5a:ad:b1:31: c6:8f:35:bf:69:7d:de:a3:34:0f:95:ea:b5:fb:27: 5e:6d:5d:57:f6:ec:a0:7d:74:2e:13:4b:3f:09:25: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:89:E4:FB:18:0F:85:49:09:FA:31:BA:3E:BA:24:92:72:D8:D3:4A X509v3 Authority Key Identifier: keyid:F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:09:b5:b7:a6:72:b3:19:36:40:4d:23:a2:bd:5e:e3:1d:63: f4:ee:ea:09:c3:d9:b7:f0:17:5d:79:f2:fa:0f:bc:f2:d0:e3: 68:64:ce:32:fa:ad:4f:4a:49:5b:03:7b:90:45:71:a8:6e:f5: 64:fe:d7:09:f3:3e:de:44:a8:89:da:aa:cc:3b:17:00:7e:03: e0:74:e5:cb:21:61:5f:86:df:ab:de:a7:f8:37:d7:3f:b0:40: ef:a2:91:0d:de:9c:45:01:6c:5f:f7:c8:2f:1d:f6:59:42:c7: 0f:6c:b0:60:6c:d7:19:f9:0a:6e:33:cb:0a:e1:f2:26:90:19: a4:96:53:73:b7:12:e3:44:44:9c:b2:8d:7d:c1:40:b5:a1:bb: 21:64:58:34:ed:77:75:bd:f5:fc:ec:33:53:b9:75:e3:45:23: 2e:6b:e4:c7:3a:72:db:66:8e:c6:e4:fd:f3:eb:ae:b2:5a:49: 97:9b:73:66:e0:cb:d8:3a:ea:ee:18:08:44:bc:09:a8:06:5e: d8:49:8f:45:02:aa:9e:37:cc:e3:28:f1:f2:85:5e:fa:02:35: e5:fd:f9:a2:67:3f:c3:7e:ee:e5:b3:c3:f3:73:38:e0:b5:e1: ef:56:9f:ce:bb:10:da:cb:ab:b2:86:2f:9f:92:8f:a5:50:e9: 98:56:f5:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN32E0a1ie3w1GPUESzlGpq0xTwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0 OThDNUNEMzAeFw0yNjA5MTYxNjU1MTFaFw0yNjA5MTcyMDAxMTFaMDMxMTAvBgNV BAMTKEIzODlFNEZCMTgwRjg1NDkwOUZBMzFCQTNFQkEyNDkyNzJEOEQzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JQlRf5RRfr+5Xc9SsDJ4jb7E b0WhuG2tCEEU/1qIKRo4T8joMjBn8rbGmXHwSTE29jq0SgN8eKITc0q0VUGebt8X TpnBEgqXA76eB6QRrx2FHDmujCQU2NI6eTNBYl6YGvOKoyRb8NDl+KQnQv905uHJ /pmjFjb/96XWSQvdQeZ2nQIORQLEEcQjJbj/mtcUTb5dsfLEsCzUKrGq1gMjiiDh Mh6CGdvn0iO8XZpqdYqCLbwvPboZybqcNvajRSWFBkdo7Jxz2Pqx/jUM+uTQRVoR vrs7q0bOMecQWq2xMcaPNb9pfd6jNA+V6rX7J15tXVf27KB9dC4TSz8JJQMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs4nk+xgPhUkJ+jG6ProkknLY00owHwYDVR0j BBgwFoAU9w12AOASQmk8oOtcq5Ie4EmMXNMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBF MDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0OThDNUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzBENzYwMEUwMTI0MjY5M0NBMEVCNUNBQjkyMUVFMDQ5OEM1 Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFF RTA0OThDNUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0JtbemcrMZNkBNI6K9XuMdY/Tu6gnD2bfw F1158voPvPLQ42hkzjL6rU9KSVsDe5BFcahu9WT+1wnzPt5EqInaqsw7FwB+A+B0 5cshYV+G36vep/g31z+wQO+ikQ3enEUBbF/3yC8d9llCxw9ssGBs1xn5Cm4zywrh 8iaQGaSWU3O3EuNERJyyjX3BQLWhuyFkWDTtd3W99fzsM1O5deNFIy5r5Mc6cttm jsbk/fPrrrJaSZebc2bgy9g66u4YCES8CagGXthJj0UCqp43zOMo8fKFXvoCNeX9 +aJnP8N+7uWzw/NzOOC14e9Wn867ENrLq7KGL5+Sj6VQ6ZhW9Y4= -----END CERTIFICATE-----Generated at Thu Sep 17 10:44:06 2026 by rpki-client