$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft File: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft (raw, json) Hash identifier: 6FAUUV7/0f2dgjdzcZhsLU6+dN8pOshJo7jSGcslNEo= Subject key identifier: F4:65:51:A9:53:5E:F6:BF:23:EA:33:64:68:ED:5F:52:A7:D6:CA:A5 Authority key identifier: 2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 Certificate issuer: /CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Certificate serial: 30548E4C66D85C463A086D95054F7ED034FBFB67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft Manifest number: EB Signing time: Sun 25 Oct 2026 21:03:05 +0000 Manifest this update: Sun 25 Oct 2026 20:58:05 +0000 Manifest next update: Mon 26 Oct 2026 23:39:05 +0000 Files and hashes: 1: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl (hash: pPvoJ6iNiVOIgpDWWq1MwaIL9Q849AwLLlDINJ5cLXo=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: 6hdyf5UyF+Tqhlq/rEWrqEwjd98p7rc0NoOyzHNtasM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 23:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:54:8e:4c:66:d8:5c:46:3a:08:6d:95:05:4f:7e:d0:34:fb:fb:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Validity Not Before: Oct 25 20:58:05 2026 GMT Not After : Oct 26 23:39:05 2026 GMT Subject: CN=F46551A9535EF6BF23EA336468ED5F52A7D6CAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:f9:bc:ef:5d:76:0b:a8:78:0b:a2:fa:dd: a9:89:02:bb:bb:ba:1e:36:ba:f0:85:28:a2:f9:85: 86:ce:54:6d:08:28:d7:7e:83:b4:b2:83:2e:4c:e8: c8:68:bc:3e:6d:1a:8c:19:f4:16:36:57:e6:58:c1: 99:c3:6d:43:19:43:31:01:eb:7a:84:ea:2f:2a:4a: 08:cd:b1:d1:1f:6b:2f:fb:51:52:a4:81:e5:3b:94: c9:01:18:e0:a5:37:81:0d:9b:da:07:2b:3c:ff:17: 1b:50:c1:89:dd:a6:e1:0c:4a:9c:1b:5f:8e:8e:a9: 56:18:a5:19:23:47:eb:7b:c0:b4:a2:d8:99:0e:d2: 94:6a:ec:de:35:61:9c:93:d7:2b:a0:6b:84:cc:3c: d6:02:dd:9e:e3:22:a8:86:d4:11:df:b3:21:81:ea: de:c3:f2:3e:7c:c7:99:be:12:a0:b7:b1:3b:c2:7b: b3:89:fb:24:e1:42:15:55:51:1a:19:21:ca:5b:84: 53:44:dc:6b:c8:93:d4:da:26:71:0c:cf:25:07:b7: 80:41:51:1a:47:10:a7:33:c6:f6:40:d2:9c:c8:ba: 2d:6f:78:d7:20:bc:7d:8d:dd:d5:c3:d7:73:d5:9d: dd:08:22:28:ec:23:43:64:5b:9e:a9:26:fc:d1:63: cd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:65:51:A9:53:5E:F6:BF:23:EA:33:64:68:ED:5F:52:A7:D6:CA:A5 X509v3 Authority Key Identifier: keyid:2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2a:0d:e0:dc:01:71:1d:76:8c:ad:c3:17:e6:e2:0e:40:aa: 67:39:7c:3d:00:05:74:94:b6:48:1c:79:48:5b:a3:f1:ba:42: ab:29:0d:d5:4a:7a:a2:0a:d2:6b:7d:04:9e:eb:bd:d4:59:a4: d7:ee:70:e2:3c:37:6d:0b:90:1e:e7:fa:96:d1:50:e8:cb:88: b8:eb:ce:65:fc:aa:30:a8:1f:ff:e1:2f:0c:e6:28:a4:5d:80: a7:c9:dd:fb:48:69:44:e2:3c:ef:ae:a8:2d:77:cc:92:9f:16: 6d:e4:64:ee:59:41:0f:7a:cf:fa:bb:7f:3d:ed:d9:c4:2b:8f: d7:64:95:c9:1e:26:fa:40:cb:68:4a:22:10:2d:ab:ca:66:61: 15:8a:ca:e8:f7:57:2a:f6:a6:3e:7a:b1:4e:58:3b:a0:43:c5: 1c:d5:7a:a7:f8:0b:7d:da:94:7e:3e:95:43:61:e3:47:db:04: 64:25:f7:4b:1d:2e:14:82:56:8a:30:53:d1:47:97:61:cc:1e: f2:0d:74:12:3e:a5:46:07:72:40:cc:0b:b3:0d:e0:63:f0:71: b5:9a:85:b1:84:0d:45:a7:f8:ee:da:0d:14:35:7e:0a:1b:e9: 0a:ed:a8:2a:31:77:f3:e9:85:e3:d1:a5:9a:a6:51:aa:d6:48: f8:fa:66:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMFSOTGbYXEY6CG2VBU9+0DT7+2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFB MjRBNUY3NzAeFw0yNjEwMjUyMDU4MDVaFw0yNjEwMjYyMzM5MDVaMDMxMTAvBgNV BAMTKEY0NjU1MUE5NTM1RUY2QkYyM0VBMzM2NDY4RUQ1RjUyQTdENkNBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeX/m87112C6h4C6L63amJAru7 uh42uvCFKKL5hYbOVG0IKNd+g7Sygy5M6MhovD5tGowZ9BY2V+ZYwZnDbUMZQzEB 63qE6i8qSgjNsdEfay/7UVKkgeU7lMkBGOClN4ENm9oHKzz/FxtQwYndpuEMSpwb X46OqVYYpRkjR+t7wLSi2JkO0pRq7N41YZyT1yuga4TMPNYC3Z7jIqiG1BHfsyGB 6t7D8j58x5m+EqC3sTvCe7OJ+yThQhVVURoZIcpbhFNE3GvIk9TaJnEMzyUHt4BB URpHEKczxvZA0pzIui1veNcgvH2N3dXD13PVnd0IIijsI0NkW56pJvzRY809AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9GVRqVNe9r8j6jNkaO1fUqfWyqUwHwYDVR0j BBgwFoAUL3CrNfGqii4Yq+Or8Y5G4aJKX3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0OGJiODgtYTc1OC00NDNmLWI3MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVG MUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFBMjRBNUY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjcwQUIzNUYxQUE4QTJFMThBQkUzQUJGMThFNDZFMUEyNEE1 Rjc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2 RTFBMjRBNUY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAqDeDcAXEddoytwxfm4g5Aqmc5fD0ABXSU tkgceUhbo/G6QqspDdVKeqIK0mt9BJ7rvdRZpNfucOI8N20LkB7n+pbRUOjLiLjr zmX8qjCoH//hLwzmKKRdgKfJ3ftIaUTiPO+uqC13zJKfFm3kZO5ZQQ96z/q7fz3t 2cQrj9dklckeJvpAy2hKIhAtq8pmYRWKyuj3Vyr2pj56sU5YO6BDxRzVeqf4C33a lH4+lUNh40fbBGQl90sdLhSCVoowU9FHl2HMHvINdBI+pUYHckDMC7MN4GPwcbWa hbGEDUWn+O7aDRQ1fgob6QrtqCoxd/PphePRpZqmUarWSPj6ZuI= -----END CERTIFICATE-----Generated at Mon Oct 26 08:57:59 2026 by rpki-client