$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft File: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft (raw, json) Hash identifier: Jpo/13hRk4Hu1rn0dxGgDYYgJFIMqUH5GZ+VR2cUCSU= Subject key identifier: 20:5C:85:4F:7A:FF:FC:60:C5:A8:CE:9C:85:CC:30:A3:DA:11:A0:CD Authority key identifier: C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 Certificate issuer: /CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Certificate serial: 4D2B8FCA5E1AB9964324ED474375A0328D35CC19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 21:45:52 +0000 Manifest this update: Wed 16 Sep 2026 21:40:52 +0000 Manifest next update: Thu 17 Sep 2026 23:04:52 +0000 Files and hashes: 1: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: RMvUFQrKL018cFixmOMzozWh6kTAtIwXuWq18nozxuA=) 2: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl (hash: OTQ9TRRysNVZFyu1TdTg2871YiP13sZVNYXKJU9b6O8=) 3: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: IG22wGAeafPyZiCHJfimAg7HtJoJBGXUaInRtJgtJX8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2b:8f:ca:5e:1a:b9:96:43:24:ed:47:43:75:a0:32:8d:35:cc:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Validity Not Before: Sep 16 21:40:52 2026 GMT Not After : Sep 17 23:04:52 2026 GMT Subject: CN=205C854F7AFFFC60C5A8CE9C85CC30A3DA11A0CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:78:60:6f:be:5b:d0:8c:a2:88:c3:e9:c6: 1d:2c:d7:1e:e5:db:9e:eb:16:76:7b:52:49:35:23: 3b:5b:04:e3:8c:b2:6f:5c:fd:6e:fd:8f:f0:74:d4: 5d:9b:7f:93:c2:e5:86:dd:61:4c:b9:fa:57:15:e8: c9:74:5a:5d:d2:48:51:71:eb:20:c6:ef:0f:6c:41: 74:de:f6:75:40:ba:fe:41:10:49:44:c7:07:ed:78: 1e:ff:62:b6:78:62:38:24:b8:65:3d:ab:9d:29:cf: e0:7a:a1:c0:f9:3a:d4:89:0b:4e:b9:7e:53:8f:86: 6c:45:0c:3d:7a:0a:27:90:7d:de:4a:99:c3:c9:b8: 1d:30:fc:0d:29:ef:95:7f:9b:18:f6:de:19:6d:9d: 66:b0:a3:15:c6:25:48:ee:74:66:8b:0a:18:be:30: 14:ef:45:75:dc:cf:f7:68:3b:8a:c4:8c:ac:b5:36: c1:83:79:db:90:26:c8:c2:04:ee:fd:6b:95:96:e8: 78:55:e0:14:6f:98:a0:1b:d3:9e:6a:b9:0d:1c:fa: b8:c0:f0:32:f1:a4:e4:bc:27:12:b2:08:fe:20:8f: 8a:8a:81:56:70:61:d7:9c:a3:b1:65:6f:13:ed:54: 75:04:51:4d:e2:32:d9:69:59:43:d5:02:1d:5f:fe: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5C:85:4F:7A:FF:FC:60:C5:A8:CE:9C:85:CC:30:A3:DA:11:A0:CD X509v3 Authority Key Identifier: keyid:C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:8c:cd:2b:d0:7d:1b:75:a5:c4:cf:be:8a:d7:dd:34:b0:f3: 5f:f3:68:b6:61:60:6a:60:d9:b5:ad:5a:f7:e5:58:63:8f:4e: 68:d0:6f:24:1c:0f:bb:22:4e:db:77:c2:18:ca:ba:a7:80:93: 21:c9:ec:f7:78:d6:2d:30:d4:ba:a3:50:f2:ec:28:fd:68:60: ab:bb:7d:f0:fc:f8:7e:2a:c0:0c:95:03:f5:35:30:1c:61:d7: b2:d4:71:57:1b:c1:03:06:39:3c:be:bf:d4:4d:65:1a:8b:67: 4c:f8:e3:ce:a5:a0:06:65:f3:30:ba:62:68:c4:48:f6:f5:8b: 1f:e1:be:49:fa:7c:82:b2:40:53:c3:63:56:0d:a1:6f:85:28: 2c:13:78:8c:be:a8:f8:c7:ed:5b:b9:32:4c:9c:5d:c1:87:69: 61:a7:6c:f8:a8:19:db:17:8e:ca:00:a4:2d:62:37:89:29:b8: fd:93:b8:8b:6f:db:05:bb:d1:1e:bb:e4:9f:2a:c1:65:2b:00: 95:d7:f4:14:db:0a:18:f9:6e:83:36:f9:54:65:3c:03:ef:06: 29:2e:10:90:00:ec:5a:cf:1a:27:a1:68:a0:1e:ac:91:2b:28: bf:9f:a9:91:c6:40:0a:df:81:38:f1:f4:46:11:3e:48:00:28: 90:52:eb:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSuPyl4auZZDJO1HQ3WgMo01zBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlD MDQ3MkI1MDAeFw0yNjA5MTYyMTQwNTJaFw0yNjA5MTcyMzA0NTJaMDMxMTAvBgNV BAMTKDIwNUM4NTRGN0FGRkZDNjBDNUE4Q0U5Qzg1Q0MzMEEzREExMUEwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQ3hgb75b0IyiiMPpxh0s1x7l 257rFnZ7Ukk1IztbBOOMsm9c/W79j/B01F2bf5PC5YbdYUy5+lcV6Ml0Wl3SSFFx 6yDG7w9sQXTe9nVAuv5BEElExwfteB7/YrZ4YjgkuGU9q50pz+B6ocD5OtSJC065 flOPhmxFDD16CieQfd5KmcPJuB0w/A0p75V/mxj23hltnWawoxXGJUjudGaLChi+ MBTvRXXcz/doO4rEjKy1NsGDeduQJsjCBO79a5WW6HhV4BRvmKAb055quQ0c+rjA 8DLxpOS8JxKyCP4gj4qKgVZwYdeco7FlbxPtVHUEUU3iMtlpWUPVAh1f/kD5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIFyFT3r//GDFqM6chcwwo9oRoM0wHwYDVR0j BBgwFoAUxwqifmAZfQLw3M2OeST/+cBHK1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlODM2NzMtMDk2YS00NDBjLWIyN2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2 MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlDMDQ3MkI1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzBBQTI3RTYwMTk3RDAyRjBEQ0NEOEU3OTI0RkZGOUMwNDcy QjUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZG RjlDMDQ3MkI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASMzSvQfRt1pcTPvorX3TSw81/zaLZhYGpg 2bWtWvflWGOPTmjQbyQcD7siTtt3whjKuqeAkyHJ7Pd41i0w1LqjUPLsKP1oYKu7 ffD8+H4qwAyVA/U1MBxh17LUcVcbwQMGOTy+v9RNZRqLZ0z4486loAZl8zC6YmjE SPb1ix/hvkn6fIKyQFPDY1YNoW+FKCwTeIy+qPjH7Vu5MkycXcGHaWGnbPioGdsX jsoApC1iN4kpuP2TuItv2wW70R675J8qwWUrAJXX9BTbChj5boM2+VRlPAPvBiku EJAA7FrPGiehaKAerJErKL+fqZHGQArfgTjx9EYRPkgAKJBS6wM= -----END CERTIFICATE-----Generated at Thu Sep 17 10:57:26 2026 by rpki-client