$ rpki-client -vvf rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft File: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft (raw, json) Hash identifier: l4v5fCCaACJmRy0mSGcGRb1P8Wh//RnTgt8+gc3BAtU= Subject key identifier: 80:BA:08:64:8A:E7:5C:79:1C:D5:1D:45:7E:89:E5:51:D3:FD:20:31 Authority key identifier: 70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA Certificate issuer: /CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Certificate serial: 2AB2886EEB025BA65520DB47F796932933E599D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft Manifest number: 93 Signing time: Wed 19 Aug 2026 22:10:41 +0000 Manifest this update: Wed 19 Aug 2026 22:05:41 +0000 Manifest next update: Fri 21 Aug 2026 00:01:41 +0000 Files and hashes: 1: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl (hash: RgY77J7nTJ4bFGZq0Oh6twcC5n55UZDKsST6Isj9Bj8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b2:88:6e:eb:02:5b:a6:55:20:db:47:f7:96:93:29:33:e5:99:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Validity Not Before: Aug 19 22:05:41 2026 GMT Not After : Aug 21 00:01:41 2026 GMT Subject: CN=80BA08648AE75C791CD51D457E89E551D3FD2031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:42:42:9f:21:36:72:76:00:c5:19:16:8c: 55:97:95:79:78:f0:c8:6b:2d:40:44:7f:a8:b1:4c: c4:72:37:5b:76:44:87:18:16:f9:9c:ea:47:b5:13: f2:25:e9:9f:18:ba:bf:78:0e:a9:7c:57:d7:02:8a: bf:f2:e0:d1:fb:91:76:b1:52:48:99:c5:a7:a0:3b: 9c:ea:0c:36:70:f1:89:8f:b6:6b:f5:d4:59:14:16: ae:78:d0:11:fc:e5:45:dd:9b:90:ee:69:68:9a:a0: d1:a7:20:a0:73:7d:35:e6:e8:c6:1d:2d:30:dd:e4: 79:8c:9e:35:66:87:66:fc:0b:14:f4:c8:ff:2b:07: d4:d2:4c:3a:89:83:20:cb:57:40:72:fb:7d:24:de: 12:07:11:89:16:7a:55:cd:a6:dc:fe:f3:ab:08:dc: 46:03:8f:b7:5f:13:6b:ac:71:3e:0d:f1:50:a0:f7: 63:60:4b:66:de:63:dd:53:07:b2:6c:85:a9:04:89: 93:b4:85:b8:f9:72:26:94:2e:82:29:9a:d1:b7:f6: da:af:07:d0:b7:70:6b:74:27:f3:33:42:9b:21:a6: 60:b7:ea:e1:d0:42:4d:28:4e:dc:a5:d2:91:4e:86: cb:5b:6e:05:5e:be:ee:73:b5:ab:1c:9e:e2:b4:fb: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BA:08:64:8A:E7:5C:79:1C:D5:1D:45:7E:89:E5:51:D3:FD:20:31 X509v3 Authority Key Identifier: keyid:70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:71:29:8c:7f:d2:4d:a6:b9:56:61:6f:7d:01:ac:9e:d7:dc: 4e:ba:db:e4:28:b5:1b:86:d5:05:82:84:ff:95:be:f9:03:57: 1e:24:86:71:d1:cb:1f:b6:4b:30:2a:0e:f6:b4:b8:d6:01:8b: bc:18:52:c0:fa:c6:2e:77:fe:15:1a:27:29:52:11:2e:a9:f2: fe:af:c2:c7:57:86:61:3e:d5:f2:f1:71:e0:e8:a4:f7:b4:eb: 66:eb:9d:5e:87:90:99:37:b4:42:02:06:eb:7b:8f:b5:ae:21: 5a:bf:a5:2c:fd:4c:8f:cb:f5:ad:40:0e:1b:29:0e:f2:e8:c6: 9f:9c:0c:39:b9:26:50:44:6f:80:89:c4:9e:8b:be:19:0f:28: 73:f7:07:88:a9:b9:f6:73:70:15:df:f6:84:5d:0f:c4:52:c4: 9c:49:dc:b7:6c:c7:f3:1d:bc:ca:37:91:d7:56:c3:4a:b1:3f: 15:71:7e:e5:3f:1f:59:00:4c:66:0f:45:2e:cb:db:b8:63:88: 44:51:d7:a3:ea:f2:67:92:e3:2d:e4:38:97:f2:67:43:08:41: c0:ef:48:dc:2a:0a:43:48:a3:e8:f7:e1:a4:f4:8e:0a:8b:65: 49:2b:bf:0c:77:83:a3:96:4c:c9:64:1e:d6:a6:95:a9:0b:34: 1f:f2:ca:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrKIbusCW6ZVINtH95aTKTPlmdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3 QjMxMzVBQTAeFw0yNjA4MTkyMjA1NDFaFw0yNjA4MjEwMDAxNDFaMDMxMTAvBgNV BAMTKDgwQkEwODY0OEFFNzVDNzkxQ0Q1MUQ0NTdFODlFNTUxRDNGRDIwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvb0JCnyE2cnYAxRkWjFWXlXl4 8MhrLUBEf6ixTMRyN1t2RIcYFvmc6ke1E/Il6Z8Yur94Dql8V9cCir/y4NH7kXax UkiZxaegO5zqDDZw8YmPtmv11FkUFq540BH85UXdm5DuaWiaoNGnIKBzfTXm6MYd LTDd5HmMnjVmh2b8CxT0yP8rB9TSTDqJgyDLV0By+30k3hIHEYkWelXNptz+86sI 3EYDj7dfE2uscT4N8VCg92NgS2beY91TB7JshakEiZO0hbj5ciaULoIpmtG39tqv B9C3cGt0J/MzQpshpmC36uHQQk0oTtyl0pFOhstbbgVevu5ztascnuK0+7vFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLoIZIrnXHkc1R1FfonlUdP9IDEwHwYDVR0j BBgwFoAUcPTL1fR6U1jnf63tud1GOXsxNaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NDllZjUtYzQ4NC00ZjQxLWEwNTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVG NDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3QjMxMzVBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy83MEY0Q0JENUY0N0E1MzU4RTc3RkFERURCOURENDYzOTdCMzEz NUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2 Mzk3QjMxMzVBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlxKYx/0k2muVZhb30BrJ7X3E662+QotRuG 1QWChP+VvvkDVx4khnHRyx+2SzAqDva0uNYBi7wYUsD6xi53/hUaJylSES6p8v6v wsdXhmE+1fLxceDopPe062brnV6HkJk3tEICBut7j7WuIVq/pSz9TI/L9a1ADhsp DvLoxp+cDDm5JlBEb4CJxJ6LvhkPKHP3B4ipufZzcBXf9oRdD8RSxJxJ3Ldsx/Md vMo3kddWw0qxPxVxfuU/H1kATGYPRS7L27hjiERR16Pq8meS4y3kOJfyZ0MIQcDv SNwqCkNIo+j34aT0jgqLZUkrvwx3g6OWTMlkHtamlakLNB/yynk= -----END CERTIFICATE-----Generated at Thu Aug 20 05:25:34 2026 by rpki-client