$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft File: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft (raw, json) Hash identifier: KiW33OECzU2Uy98hnd+EinDhtv/gHdd6Oprp7dR1W8g= Subject key identifier: 3B:83:6B:12:98:51:35:2C:86:F0:24:A7:6F:4C:6F:7D:40:29:1D:6A Authority key identifier: 70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA Certificate issuer: /CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Certificate serial: 5F6BCE4E4E2046ADA0A00DD544D87535A4FA8FCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft Manifest number: DD Signing time: Wed 14 Oct 2026 07:09:27 +0000 Manifest this update: Wed 14 Oct 2026 07:04:27 +0000 Manifest next update: Thu 15 Oct 2026 07:11:27 +0000 Files and hashes: 1: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl (hash: yAX4AqCCPIHk/Eww8djly8qT/lxVf8b/iTQ3qAGhG00=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 06:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:6b:ce:4e:4e:20:46:ad:a0:a0:0d:d5:44:d8:75:35:a4:fa:8f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Validity Not Before: Oct 14 07:04:27 2026 GMT Not After : Oct 15 07:11:27 2026 GMT Subject: CN=3B836B129851352C86F024A76F4C6F7D40291D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:05:ec:1f:67:ba:5b:2c:42:f8:82:4b:e8: 25:76:62:e8:7e:7c:52:9a:82:89:12:e0:8b:b0:0e: 22:6c:d3:14:06:3b:3d:49:5b:48:7c:e3:b8:43:5d: 44:02:1d:ad:97:67:e2:53:f2:79:54:33:5e:d5:e6: 3c:19:29:95:99:2f:d6:34:a5:33:23:5d:f4:7c:e7: 4b:1a:40:01:c4:10:4c:4b:c5:80:84:1a:26:f8:6e: 86:7b:2e:96:ae:c7:62:ab:cc:8d:5b:20:ae:0d:f6: 62:4f:d5:17:a7:26:de:ad:00:d9:c7:4b:47:3e:79: ac:ae:94:bb:8c:fc:20:4d:98:92:07:b9:4d:7f:79: 9c:a0:10:7c:79:70:82:19:69:fa:88:e3:78:4c:29: f4:35:e8:b6:aa:d6:21:47:6a:ae:63:87:be:f5:8f: 57:09:c0:2c:fb:7c:31:80:e4:4b:ff:70:3e:34:fb: 56:fd:42:8e:6c:5c:d2:53:53:63:08:6b:a1:7b:43: 3a:a7:1f:45:56:57:03:75:9e:86:c4:3d:8c:52:a3: 1f:91:70:20:49:c8:83:01:32:01:1e:07:ea:04:8e: 17:ea:b0:39:8c:78:45:e6:03:0d:79:3e:0f:c7:1b: dc:6b:6e:36:78:f7:aa:89:60:8b:f7:06:a6:22:6c: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:83:6B:12:98:51:35:2C:86:F0:24:A7:6F:4C:6F:7D:40:29:1D:6A X509v3 Authority Key Identifier: keyid:70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d6:2e:9f:74:75:ef:7a:30:c7:e7:f0:6c:6b:01:3e:28:ab: 68:e8:98:52:cc:9e:a5:43:d9:d5:58:5d:27:bc:23:38:f9:97: 06:0e:0b:c9:3f:96:74:e5:2b:b8:0b:96:c9:ed:0c:e1:31:47: e3:11:02:df:d7:41:95:0e:34:31:97:b9:09:b8:92:59:f1:d1: a0:73:7c:e4:30:c7:f0:c4:61:ce:dc:28:0c:63:fe:8a:2e:95: 54:b6:38:17:16:26:c3:86:b1:fe:46:6a:39:af:f7:a4:65:86: 76:6c:14:24:61:89:20:05:a9:40:78:24:0e:dc:30:0d:6b:cc: bd:63:7d:88:d5:9e:3c:2e:72:e6:a6:d1:fd:78:13:89:ee:4f: 85:44:37:e9:87:53:af:b6:4e:25:d8:27:64:8e:41:5c:16:1a: b3:d7:38:11:8c:bd:3c:ac:eb:10:f5:91:64:b4:33:01:9a:a0: 5d:3e:be:8a:1d:c6:63:27:0c:ad:34:bc:af:e4:4d:a7:05:8b: 11:1e:5d:17:34:37:5f:57:6c:85:9c:e9:84:fd:af:42:ad:9a: 18:96:1b:9e:cf:bb:9b:15:b4:e0:df:b6:19:c7:48:ae:e8:74: 20:93:90:5d:f5:84:f7:58:41:ee:df:5a:79:14:a2:e8:7f:ae: f2:4d:c0:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2vOTk4gRq2goA3VRNh1NaT6j84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3 QjMxMzVBQTAeFw0yNjEwMTQwNzA0MjdaFw0yNjEwMTUwNzExMjdaMDMxMTAvBgNV BAMTKDNCODM2QjEyOTg1MTM1MkM4NkYwMjRBNzZGNEM2RjdENDAyOTFENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ8QXsH2e6WyxC+IJL6CV2Yuh+ fFKagokS4IuwDiJs0xQGOz1JW0h847hDXUQCHa2XZ+JT8nlUM17V5jwZKZWZL9Y0 pTMjXfR850saQAHEEExLxYCEGib4boZ7Lpaux2KrzI1bIK4N9mJP1RenJt6tANnH S0c+eayulLuM/CBNmJIHuU1/eZygEHx5cIIZafqI43hMKfQ16Laq1iFHaq5jh771 j1cJwCz7fDGA5Ev/cD40+1b9Qo5sXNJTU2MIa6F7QzqnH0VWVwN1nobEPYxSox+R cCBJyIMBMgEeB+oEjhfqsDmMeEXmAw15Pg/HG9xrbjZ496qJYIv3BqYibJb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO4NrEphRNSyG8CSnb0xvfUApHWowHwYDVR0j BBgwFoAUcPTL1fR6U1jnf63tud1GOXsxNaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NDllZjUtYzQ4NC00ZjQxLWEwNTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVG NDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3QjMxMzVBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy83MEY0Q0JENUY0N0E1MzU4RTc3RkFERURCOURENDYzOTdCMzEz NUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2 Mzk3QjMxMzVBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/WLp90de96MMfn8GxrAT4oq2jomFLMnqVD 2dVYXSe8Izj5lwYOC8k/lnTlK7gLlsntDOExR+MRAt/XQZUONDGXuQm4klnx0aBz fOQwx/DEYc7cKAxj/ooulVS2OBcWJsOGsf5Gajmv96RlhnZsFCRhiSAFqUB4JA7c MA1rzL1jfYjVnjwucuam0f14E4nuT4VEN+mHU6+2TiXYJ2SOQVwWGrPXOBGMvTys 6xD1kWS0MwGaoF0+voodxmMnDK00vK/kTacFixEeXRc0N19XbIWc6YT9r0KtmhiW G57Pu5sVtODfthnHSK7odCCTkF31hPdYQe7fWnkUouh/rvJNwIc= -----END CERTIFICATE-----Generated at Wed Oct 14 11:53:14 2026 by rpki-client