$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.mft File: C70C382573B502FF29482CE28573DCCF10C0C0DE.mft (raw, json) Hash identifier: B4Tgb/pCni3DKzylAGSU22FytEeFcw3Qa9nEmAKPbPU= Subject key identifier: 79:4C:52:4C:52:AB:8D:DB:EB:93:D8:C0:9D:7A:CE:C9:0F:37:D8:8F Authority key identifier: C7:0C:38:25:73:B5:02:FF:29:48:2C:E2:85:73:DC:CF:10:C0:C0:DE Certificate issuer: /CN=C70C382573B502FF29482CE28573DCCF10C0C0DE Certificate serial: 2A084419338C5D660AFBBBF9FDAC3224A031A8D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70C382573B502FF29482CE28573DCCF10C0C0DE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.mft Manifest number: 2A Signing time: Fri 23 Oct 2026 18:52:39 +0000 Manifest this update: Fri 23 Oct 2026 18:47:39 +0000 Manifest next update: Sat 24 Oct 2026 20:40:39 +0000 Files and hashes: 1: 34352e3234392e3138302e302f32332d3233203d3e20313331323035.roa (hash: t1hi0fCDvFnRk0himIi/9LHop5ByqrOhA6RjCjW27SI=) 2: C70C382573B502FF29482CE28573DCCF10C0C0DE.crl (hash: PIqjkG7yVFzewvwen5eJ4lvJA4d+SvtJAHa0VLrkLZQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.crl rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70C382573B502FF29482CE28573DCCF10C0C0DE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 20:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:08:44:19:33:8c:5d:66:0a:fb:bb:f9:fd:ac:32:24:a0:31:a8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70C382573B502FF29482CE28573DCCF10C0C0DE Validity Not Before: Oct 23 18:47:39 2026 GMT Not After : Oct 24 20:40:39 2026 GMT Subject: CN=794C524C52AB8DDBEB93D8C09D7ACEC90F37D88F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:a9:25:db:25:e7:47:43:af:cc:01:fa:6a: 77:e6:b2:a7:dc:93:af:d5:83:f6:d8:20:74:96:4a: 49:5f:ac:b5:07:a9:9b:8a:a2:61:9a:4b:f8:41:1a: 5e:25:f3:ff:a5:e0:f3:73:7a:76:6f:3c:36:7f:53: e1:5b:57:8a:c8:47:60:5b:8d:74:6c:45:22:3e:0e: 76:b2:0f:71:cc:d9:31:e0:5b:bf:20:29:10:1f:7f: 5b:c4:c8:78:00:26:37:c0:3b:8d:e8:0e:de:c6:68: 2f:15:17:9a:da:d3:c0:5e:2c:3f:ca:aa:82:c5:d8: eb:37:c9:b5:73:17:6e:34:9a:5b:5d:30:c5:58:35: a8:ce:99:79:69:f7:32:80:30:a4:f7:b9:9b:5f:85: fd:b5:bd:ca:14:26:55:22:c1:78:d1:ae:96:3d:c7: fb:70:0a:f3:ca:3c:b4:d4:be:e7:7f:2c:b3:62:4d: 3b:34:a1:05:97:68:a7:58:f2:c4:ef:af:8e:77:b0: 5d:2d:37:79:09:d1:56:fa:90:d3:28:55:b1:7c:48: 39:6c:e1:11:a9:4a:e8:1b:7a:7e:99:21:3f:a0:7a: a7:82:3e:c8:0d:c0:e1:d5:e9:31:33:22:d2:83:77: e0:3c:35:11:6b:17:74:ed:bb:3b:be:cf:bd:ce:89: ad:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4C:52:4C:52:AB:8D:DB:EB:93:D8:C0:9D:7A:CE:C9:0F:37:D8:8F X509v3 Authority Key Identifier: keyid:C7:0C:38:25:73:B5:02:FF:29:48:2C:E2:85:73:DC:CF:10:C0:C0:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70C382573B502FF29482CE28573DCCF10C0C0DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa659217-caa2-45ed-87b4-da0dadcfa087/0/C70C382573B502FF29482CE28573DCCF10C0C0DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1c:68:ac:ab:0a:eb:03:6c:49:24:4a:ba:b3:e7:6f:a8:80: ca:00:af:55:aa:df:68:37:26:64:e2:42:f9:c5:c7:e9:0b:55: f8:a7:39:bc:cc:5d:35:3d:78:c5:5a:c9:9f:f2:ef:a3:8a:8b: ad:8d:5f:9f:ab:e2:90:71:18:11:03:42:f3:78:57:93:02:e3: 09:51:18:10:2e:20:cb:e7:5e:df:54:ab:ef:97:6b:78:45:e6: 1f:4f:ab:58:9b:ad:2d:1b:22:9f:ba:ef:23:06:77:49:c3:94: fe:92:4e:a3:2d:c4:13:f1:f2:2b:2e:7e:62:ef:4c:72:a9:2d: d6:73:7f:f0:4a:05:27:4e:c2:ee:b6:9a:65:05:80:89:32:c7: b8:fe:d2:8e:3b:ad:6e:35:43:d9:4f:35:f5:59:97:11:65:81: 8c:d9:90:6f:06:80:30:ad:fe:68:43:c1:e1:dd:80:ac:78:ba: 82:96:e6:28:0c:df:f8:4f:1e:7a:02:25:06:c7:c5:7a:51:0a: 9b:a6:02:d0:a9:44:f6:3f:c2:66:a0:12:15:f9:b7:51:72:53: d1:e1:4d:f2:1e:2e:50:1b:04:7d:88:45:be:93:b8:41:fb:e8: 8a:a2:be:6b:89:6c:c4:a5:b1:da:ed:8f:5e:64:a6:33:7f:00: 56:c7:10:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKghEGTOMXWYK+7v5/awyJKAxqNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQzM4MjU3M0I1MDJGRjI5NDgyQ0UyODU3M0RDQ0Yx MEMwQzBERTAeFw0yNjEwMjMxODQ3MzlaFw0yNjEwMjQyMDQwMzlaMDMxMTAvBgNV BAMTKDc5NEM1MjRDNTJBQjhEREJFQjkzRDhDMDlEN0FDRUM5MEYzN0Q4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY1akl2yXnR0OvzAH6anfmsqfc k6/Vg/bYIHSWSklfrLUHqZuKomGaS/hBGl4l8/+l4PNzenZvPDZ/U+FbV4rIR2Bb jXRsRSI+DnayD3HM2THgW78gKRAff1vEyHgAJjfAO43oDt7GaC8VF5ra08BeLD/K qoLF2Os3ybVzF240mltdMMVYNajOmXlp9zKAMKT3uZtfhf21vcoUJlUiwXjRrpY9 x/twCvPKPLTUvud/LLNiTTs0oQWXaKdY8sTvr453sF0tN3kJ0Vb6kNMoVbF8SDls 4RGpSugben6ZIT+geqeCPsgNwOHV6TEzItKDd+A8NRFrF3Ttuzu+z73Oia1jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeUxSTFKrjdvrk9jAnXrOyQ832I8wHwYDVR0j BBgwFoAUxww4JXO1Av8pSCzihXPczxDAwN4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE2NTkyMTctY2FhMi00NWVkLTg3YjQtZGEwZGFkY2ZhMDg3LzAvQzcwQzM4MjU3 M0I1MDJGRjI5NDgyQ0UyODU3M0RDQ0YxMEMwQzBERS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzBDMzgyNTczQjUwMkZGMjk0ODJDRTI4NTczRENDRjEwQzBD MERFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE2NTkyMTctY2FhMi00NWVkLTg3 YjQtZGEwZGFkY2ZhMDg3LzAvQzcwQzM4MjU3M0I1MDJGRjI5NDgyQ0UyODU3M0RD Q0YxMEMwQzBERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFocaKyrCusDbEkkSrqz52+ogMoAr1Wq32g3 JmTiQvnFx+kLVfinObzMXTU9eMVayZ/y76OKi62NX5+r4pBxGBEDQvN4V5MC4wlR GBAuIMvnXt9Uq++Xa3hF5h9Pq1ibrS0bIp+67yMGd0nDlP6STqMtxBPx8isufmLv THKpLdZzf/BKBSdOwu62mmUFgIkyx7j+0o47rW41Q9lPNfVZlxFlgYzZkG8GgDCt /mhDweHdgKx4uoKW5igM3/hPHnoCJQbHxXpRCpumAtCpRPY/wmagEhX5t1FyU9Hh TfIeLlAbBH2IRb6TuEH76IqivmuJbMSlsdrtj15kpjN/AFbHECE= -----END CERTIFICATE-----Generated at Sat Oct 24 10:11:04 2026 by rpki-client