$ rpki-client -vvvf rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft File: B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft (raw, json) Hash identifier: d7/U67ZneTApKZlD6XMeRG33otQZfnW2eF8qSG18H2o= Subject key identifier: F2:40:9E:48:98:17:0E:E9:51:5D:6A:24:6F:23:FA:3B:0C:49:22:19 Authority key identifier: B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 Certificate issuer: /CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Certificate serial: 10DC6F5E2BA9DBDA9670E5405CF0F742E7AAA54F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft Manifest number: BA Signing time: Thu 17 Sep 2026 00:59:50 +0000 Manifest this update: Thu 17 Sep 2026 00:54:50 +0000 Manifest next update: Fri 18 Sep 2026 04:27:50 +0000 Files and hashes: 1: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: ZLVGrLGxQp2e5Y2IzOOoMpl4wxPvjrD5ZWNyIr1u5Ho=) 2: B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl (hash: lEobE1MWjYBqSnIIIG9OiefXCpYzcnE5cNNqQgkf8Ck=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:dc:6f:5e:2b:a9:db:da:96:70:e5:40:5c:f0:f7:42:e7:aa:a5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Validity Not Before: Sep 17 00:54:50 2026 GMT Not After : Sep 18 04:27:50 2026 GMT Subject: CN=F2409E4898170EE9515D6A246F23FA3B0C492219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:95:c9:5f:a9:2a:52:1e:72:27:d8:15:96:56: ae:fa:07:a4:f9:8d:85:ad:d0:c7:53:3b:df:99:2f: fd:84:40:0c:3e:53:7d:ec:98:d5:62:50:c0:bf:3f: 70:41:6b:05:db:ae:85:86:f9:c1:77:91:9f:82:c7: 17:15:6b:b7:b5:71:b1:3f:fc:8b:79:c0:f4:fa:21: 90:d9:da:ee:b3:e1:ee:14:af:d5:df:21:70:78:7d: fc:a6:03:1f:61:36:05:fb:c9:31:d3:6e:9f:58:26: e1:a4:bb:ad:cf:49:a3:14:49:6b:a7:4d:d5:35:ed: 09:6d:76:08:91:5a:a3:44:c8:cf:46:65:22:52:1a: a0:bf:51:42:43:68:56:bb:39:00:d0:f3:8c:73:5a: 29:47:10:35:2c:90:72:bd:fb:bd:fd:50:79:e6:c0: bf:9c:e1:72:2d:9c:e8:42:f6:8e:53:c7:c7:fc:ab: 89:c0:2d:3d:08:97:ef:57:59:92:6a:b8:28:70:c2: e7:76:b1:07:ef:db:ce:bf:b0:e2:81:93:b3:de:f1: 6d:b8:05:da:1c:6b:03:5c:30:43:94:36:61:a3:f3: e2:69:8e:d5:da:12:eb:8a:08:c2:0a:05:b3:19:8c: 07:74:f4:5e:98:aa:4c:4e:11:4d:b1:8d:04:af:96: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:40:9E:48:98:17:0E:E9:51:5D:6A:24:6F:23:FA:3B:0C:49:22:19 X509v3 Authority Key Identifier: keyid:B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:31:bb:b8:66:e1:64:52:ec:bf:2f:82:bb:ae:51:6d:aa:ff: 99:5c:dc:ac:eb:43:81:65:21:fe:75:c8:66:63:65:21:f2:36: e6:6a:ad:7f:47:f0:3e:89:f7:ae:8c:75:b8:7b:6c:4c:49:77: a7:20:34:24:b9:13:9a:2b:76:5d:46:6d:ed:ef:6d:32:eb:27: ee:63:f5:09:10:e9:eb:9c:db:9f:3b:64:be:3e:18:52:ee:4c: 9a:f5:65:2b:ce:2e:a8:b0:3a:f3:df:f2:e5:a0:0c:87:fa:e0: 61:22:91:ff:9a:6a:c0:bf:c8:53:8b:ef:a0:7e:47:ac:a2:06: 4b:87:11:90:5f:b2:9e:e2:d4:6f:80:8a:c8:1a:2a:b3:db:f3: 5c:67:5f:d5:01:bf:65:55:37:48:2c:f4:48:e6:5d:33:40:f1: 24:d8:40:6c:11:80:51:76:f5:e2:e2:6a:ad:e3:11:3b:94:40: ab:d6:7f:8b:78:c6:b7:67:ec:1b:af:aa:d5:7f:bc:26:31:3d: 2c:33:97:28:48:1a:80:2a:a3:b0:b5:3b:6b:2c:fc:6d:28:2d: 18:93:f3:db:c5:d6:00:f9:40:3b:fe:73:ae:9c:e3:60:ee:fb: 66:c2:97:78:49:d9:c9:31:ca:e5:60:4b:e7:5f:cc:fb:95:ea: d9:80:a9:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENxvXiup29qWcOVAXPD3QueqpU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhF MDZBOTcyODAeFw0yNjA5MTcwMDU0NTBaFw0yNjA5MTgwNDI3NTBaMDMxMTAvBgNV BAMTKEYyNDA5RTQ4OTgxNzBFRTk1MTVENkEyNDZGMjNGQTNCMEM0OTIyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDslclfqSpSHnIn2BWWVq76B6T5 jYWt0MdTO9+ZL/2EQAw+U33smNViUMC/P3BBawXbroWG+cF3kZ+CxxcVa7e1cbE/ /It5wPT6IZDZ2u6z4e4Ur9XfIXB4ffymAx9hNgX7yTHTbp9YJuGku63PSaMUSWun TdU17QltdgiRWqNEyM9GZSJSGqC/UUJDaFa7OQDQ84xzWilHEDUskHK9+739UHnm wL+c4XItnOhC9o5Tx8f8q4nALT0Il+9XWZJquChwwud2sQfv286/sOKBk7Pe8W24 BdocawNcMEOUNmGj8+JpjtXaEuuKCMIKBbMZjAd09F6YqkxOEU2xjQSvlgLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8kCeSJgXDulRXWokbyP6OwxJIhkwHwYDVR0j BBgwFoAUtw+ECty5+FFxsHO5UdqquOBqlygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIxZjNmYWUtZDBjYi00YTE3LWE1NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFE Q0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhFMDZBOTcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzBGODQwQURDQjlGODUxNzFCMDczQjk1MURBQUFCOEUwNkE5 NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFB QjhFMDZBOTcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsxu7hm4WRS7L8vgruuUW2q/5lc3KzrQ4Fl If51yGZjZSHyNuZqrX9H8D6J966Mdbh7bExJd6cgNCS5E5ordl1Gbe3vbTLrJ+5j 9QkQ6euc2587ZL4+GFLuTJr1ZSvOLqiwOvPf8uWgDIf64GEikf+aasC/yFOL76B+ R6yiBkuHEZBfsp7i1G+AisgaKrPb81xnX9UBv2VVN0gs9EjmXTNA8STYQGwRgFF2 9eLiaq3jETuUQKvWf4t4xrdn7BuvqtV/vCYxPSwzlyhIGoAqo7C1O2ss/G0oLRiT 89vF1gD5QDv+c66c42Du+2bCl3hJ2ckxyuVgS+dfzPuV6tmAqXI= -----END CERTIFICATE-----Generated at Thu Sep 17 09:22:03 2026 by rpki-client