$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft File: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft (raw, json) Hash identifier: aeEeP0wJ3SkBm6H7VN1lZ+cu52TUsHhEuvGrJa0TB6g= Subject key identifier: 78:FD:72:F6:54:EB:8D:90:A0:E5:E7:34:B1:7F:CA:DC:E4:D5:32:30 Authority key identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 Certificate issuer: /CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Certificate serial: 087B9C90399E379973241429841F030C5D5743D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 19:18:03 +0000 Manifest this update: Wed 16 Sep 2026 19:13:03 +0000 Manifest next update: Thu 17 Sep 2026 22:10:03 +0000 Files and hashes: 1: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl (hash: AwSgapZXhaDD8KaF/mEjiD2DEDF4p7xYPF2Et357p04=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: xkIsUOsvhzcBh2sD2rCI6s5EqakfkJ/T7bTiJ7H33iA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 22:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7b:9c:90:39:9e:37:99:73:24:14:29:84:1f:03:0c:5d:57:43:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Validity Not Before: Sep 16 19:13:03 2026 GMT Not After : Sep 17 22:10:03 2026 GMT Subject: CN=78FD72F654EB8D90A0E5E734B17FCADCE4D53230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:a0:8f:4a:b9:d2:9f:d2:7e:d0:3f:f1:87: 70:31:8a:28:98:94:4b:c1:55:7b:6c:52:ee:72:c9: 5b:9e:21:b3:14:ea:72:f0:c7:91:f4:2d:ce:d4:c3: 38:15:a7:5f:0f:20:c1:92:52:ba:e7:31:71:dc:d8: 14:39:bc:2c:ae:20:90:76:9b:ef:30:db:d9:5d:d0: 0d:ad:16:72:6a:cb:68:f6:6d:d0:c9:e6:80:3b:f3: aa:90:91:fd:3d:c9:cd:ac:42:d4:0c:fd:e4:8c:56: 39:19:99:bb:25:ca:b6:c0:06:55:b0:89:d1:d0:ff: f3:60:8e:d1:42:63:2b:3b:cd:00:1a:f2:ae:a9:0a: b2:76:21:bb:fe:b9:21:5a:0f:4b:ed:47:4e:8c:e6: cc:ae:b1:4a:db:8c:9f:4b:ce:2c:77:dc:60:60:c0: 0f:bb:cb:de:36:cd:8e:62:7b:6a:e1:a8:b2:c8:2b: 4c:8d:ee:2e:f3:36:a1:52:5d:33:e8:2b:0e:fb:86: 5c:ba:78:2c:b5:e4:26:c0:b6:62:33:81:73:a9:48: 6c:ab:b5:35:c5:5d:25:dc:b9:e0:98:f3:4d:eb:51: 0f:ca:57:e5:13:71:f7:63:9f:e9:14:13:4b:eb:25: 04:d0:d5:ee:a5:63:55:d4:86:04:55:2a:82:37:10: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FD:72:F6:54:EB:8D:90:A0:E5:E7:34:B1:7F:CA:DC:E4:D5:32:30 X509v3 Authority Key Identifier: keyid:70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:79:6e:97:7a:4a:e5:bf:9c:4f:59:64:e6:1c:5a:33:74:02: 91:c5:c2:1c:92:ec:93:c2:28:75:d2:e4:69:ca:3e:ee:c7:0a: 55:85:80:67:c0:e3:d8:0b:f4:19:84:35:c5:7f:aa:6d:77:a9: cf:45:bd:7f:16:3f:77:3f:3f:41:0b:26:05:46:c9:f7:44:02: ce:70:0b:3d:2e:d3:36:bd:95:d2:e2:bc:73:18:f8:8f:6b:50: 14:d7:d6:9e:0e:85:98:3f:03:31:c6:44:f0:9e:86:cc:5a:e0: 76:2c:16:46:5f:f1:32:e8:62:1a:5b:5e:59:4f:bf:d9:3b:a9: 96:4f:f4:cb:70:b1:f4:0d:83:f8:c2:06:0f:7a:07:d2:71:fb: 42:9b:71:e1:fd:94:7a:27:62:b2:7f:2f:25:74:2a:48:79:87: 6b:db:f1:80:ed:50:fd:f6:04:96:af:7e:32:eb:4f:8d:57:3d: d3:60:7f:ec:49:14:01:77:1a:ae:61:7f:3f:92:9d:ec:a3:28: 56:b6:ed:c8:f3:46:ec:2d:32:5c:15:c3:93:ad:4e:1f:98:1d: bd:d0:b1:45:05:c8:75:0e:21:0d:4f:90:f6:d1:b6:2e:fb:5f: 4a:0d:69:ff:4d:ed:a0:be:22:30:87:b7:1b:72:4b:05:70:55: 40:e1:53:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHuckDmeN5lzJBQphB8DDF1XQ9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0 QjQxMTc4MTAeFw0yNjA5MTYxOTEzMDNaFw0yNjA5MTcyMjEwMDNaMDMxMTAvBgNV BAMTKDc4RkQ3MkY2NTRFQjhEOTBBMEU1RTczNEIxN0ZDQURDRTRENTMyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/qCPSrnSn9J+0D/xh3AxiiiY lEvBVXtsUu5yyVueIbMU6nLwx5H0Lc7UwzgVp18PIMGSUrrnMXHc2BQ5vCyuIJB2 m+8w29ld0A2tFnJqy2j2bdDJ5oA786qQkf09yc2sQtQM/eSMVjkZmbslyrbABlWw idHQ//NgjtFCYys7zQAa8q6pCrJ2Ibv+uSFaD0vtR06M5syusUrbjJ9Lzix33GBg wA+7y942zY5ie2rhqLLIK0yN7i7zNqFSXTPoKw77hly6eCy15CbAtmIzgXOpSGyr tTXFXSXcueCY803rUQ/KV+UTcfdjn+kUE0vrJQTQ1e6lY1XUhgRVKoI3ENF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeP1y9lTrjZCg5ec0sX/K3OTVMjAwHwYDVR0j BBgwFoAUcPeqTttsRXtdAtZnYt3Y7ktBF4EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZjNWExY2MtY2M1ZS00ZTU4LThkZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVE QjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0QjQxMTc4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY3QUE0RURCNkM0NTdCNUQwMkQ2Njc2MkRERDhFRTRCNDEx NzgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4 RUU0QjQxMTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADx5bpd6SuW/nE9ZZOYcWjN0ApHFwhyS7JPC KHXS5GnKPu7HClWFgGfA49gL9BmENcV/qm13qc9FvX8WP3c/P0ELJgVGyfdEAs5w Cz0u0za9ldLivHMY+I9rUBTX1p4OhZg/AzHGRPCehsxa4HYsFkZf8TLoYhpbXllP v9k7qZZP9MtwsfQNg/jCBg96B9Jx+0KbceH9lHonYrJ/LyV0Kkh5h2vb8YDtUP32 BJavfjLrT41XPdNgf+xJFAF3Gq5hfz+SneyjKFa27cjzRuwtMlwVw5OtTh+YHb3Q sUUFyHUOIQ1PkPbRti77X0oNaf9N7aC+IjCHtxtySwVwVUDhUwQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:34:02 2026 by rpki-client