$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft File: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft (raw, json) Hash identifier: +f5z6/dxc6hNJ4tkNqTUjlZ7p06I9FRgIrXaqk0+NYs= Subject key identifier: D5:9B:CD:A5:0D:B1:07:A7:82:7C:98:BB:44:03:6E:B7:25:FF:BD:40 Authority key identifier: 70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19 Certificate issuer: /CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619 Certificate serial: 411D1E14ECC7401F52B855F0B3C33FE305C902A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft Manifest number: A1 Signing time: Mon 31 Aug 2026 10:12:06 +0000 Manifest this update: Mon 31 Aug 2026 10:07:06 +0000 Manifest next update: Tue 01 Sep 2026 12:54:06 +0000 Files and hashes: 1: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl (hash: mY+j8re0jkAKwTtG5hchRMHCg5c4+euCMdb66Xkcp7U=) 2: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: 4MzusLkn8wvWUBvFiEkops16kBYmlHHlayjI7RCIrok=) 3: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: EtnUTjZ94OuTXPQ8oodtLlh2y5zeN5ozbISTk51v5C4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 12:54:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1d:1e:14:ec:c7:40:1f:52:b8:55:f0:b3:c3:3f:e3:05:c9:02:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619 Validity Not Before: Aug 31 10:07:06 2026 GMT Not After : Sep 1 12:54:06 2026 GMT Subject: CN=D59BCDA50DB107A7827C98BB44036EB725FFBD40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:58:86:d1:c1:fa:76:11:aa:02:ed:41:3b: ef:d4:a9:77:ab:10:fd:84:87:ca:dc:1e:52:5a:85: b9:84:01:cf:d2:4f:45:db:8d:53:a3:ca:bb:64:a0: f1:55:2a:1a:18:5a:fa:6c:84:69:02:88:d5:1d:b3: 6b:af:64:8a:08:cb:47:6b:30:d5:f8:bc:f0:9b:47: 81:8e:84:3f:9d:7d:24:84:11:d5:e7:15:28:cd:9d: 9d:66:bd:78:8c:27:e4:b8:17:6e:55:41:4b:8a:12: 1a:d7:de:2d:74:16:e0:29:b8:b6:a5:8d:08:67:29: 81:6e:1a:a1:8a:74:79:3f:7c:f7:c8:bf:9b:c4:80: f1:ba:80:30:b9:50:7d:a4:89:91:1b:a3:c0:8d:a8: 40:71:ee:f1:42:71:18:11:ac:41:a3:6f:05:0f:40: 3f:45:4b:45:27:a4:57:49:e4:47:68:68:4c:d5:16: 38:49:3d:ee:c3:4b:6e:da:5d:f3:eb:ac:8a:ea:0a: 85:c2:39:bd:8a:46:a2:f0:dc:2b:38:06:07:e0:d4: 1c:81:9c:04:95:a4:a0:06:2c:22:46:ff:da:5c:09: d0:f3:83:cd:a5:c6:70:f8:43:f0:e0:10:cf:28:81: 1e:39:14:01:69:3a:35:ba:62:bd:bd:01:02:94:34: 4f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9B:CD:A5:0D:B1:07:A7:82:7C:98:BB:44:03:6E:B7:25:FF:BD:40 X509v3 Authority Key Identifier: keyid:70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:15:66:44:de:c5:bf:82:35:ee:d5:58:46:f3:61:74:8b:29: fb:ef:07:f0:aa:0b:e0:ae:2f:86:c7:c1:19:d5:a4:8f:11:c0: 83:46:81:29:5c:35:c9:00:44:d4:35:f9:54:b2:c9:17:28:5c: ba:f8:d2:4c:9f:38:eb:cd:a8:77:d8:eb:86:49:03:c4:5f:6f: 66:55:4d:82:79:39:94:58:97:10:b4:c1:0f:c1:b2:6f:12:fe: a0:28:f4:79:0f:25:eb:63:b5:56:57:f4:d7:ba:99:e7:2c:96: 62:90:77:23:d2:2c:be:03:2b:20:3b:ba:75:f1:dc:24:7b:23: c7:31:54:92:38:85:c3:9b:99:13:74:d7:ec:62:4b:75:73:a6: 05:36:c6:77:29:ce:4e:9a:3d:3c:51:4c:82:b7:40:66:5d:0e: fb:77:a2:84:d6:c5:34:6a:68:c7:7e:63:7d:68:25:dd:90:01: 69:89:bf:3e:ce:b0:14:f2:b4:34:eb:de:b3:17:3e:91:7c:67: 05:db:c4:eb:50:ea:18:3c:94:01:ea:c1:dd:d6:ff:5b:a2:ca: e5:b5:13:be:b8:43:dd:e8:0f:3d:89:31:5e:db:b3:e8:9b:ea: dc:1a:1a:49:b4:ba:e1:c1:e6:cf:c4:1d:4f:6f:25:e0:17:a5: bb:21:d1:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQR0eFOzHQB9SuFXws8M/4wXJAqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQw NEVBODYxOTAeFw0yNjA4MzExMDA3MDZaFw0yNjA5MDExMjU0MDZaMDMxMTAvBgNV BAMTKEQ1OUJDREE1MERCMTA3QTc4MjdDOThCQjQ0MDM2RUI3MjVGRkJENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHX1iG0cH6dhGqAu1BO+/UqXer EP2Eh8rcHlJahbmEAc/ST0XbjVOjyrtkoPFVKhoYWvpshGkCiNUds2uvZIoIy0dr MNX4vPCbR4GOhD+dfSSEEdXnFSjNnZ1mvXiMJ+S4F25VQUuKEhrX3i10FuApuLal jQhnKYFuGqGKdHk/fPfIv5vEgPG6gDC5UH2kiZEbo8CNqEBx7vFCcRgRrEGjbwUP QD9FS0UnpFdJ5EdoaEzVFjhJPe7DS27aXfPrrIrqCoXCOb2KRqLw3Cs4Bgfg1ByB nASVpKAGLCJG/9pcCdDzg82lxnD4Q/DgEM8ogR45FAFpOjW6Yr29AQKUNE9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ZvNpQ2xB6eCfJi7RANutyX/vUAwHwYDVR0j BBgwFoAUcNO1hUnvLKSrD5G8ADPLTQTqhhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA4Y2MwYjMtMjUwOC00NzdmLTlmMjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0 OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQwNEVBODYxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MEQzQjU4NTQ5RUYyQ0E0QUIwRjkxQkMwMDMzQ0I0RDA0RUE4 NjE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA4Y2MwYjMtMjUwOC00NzdmLTlm MjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NC NEQwNEVBODYxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYVZkTexb+CNe7VWEbzYXSLKfvvB/CqC+Cu L4bHwRnVpI8RwINGgSlcNckARNQ1+VSyyRcoXLr40kyfOOvNqHfY64ZJA8Rfb2ZV TYJ5OZRYlxC0wQ/Bsm8S/qAo9HkPJetjtVZX9Ne6mecslmKQdyPSLL4DKyA7unXx 3CR7I8cxVJI4hcObmRN01+xiS3VzpgU2xncpzk6aPTxRTIK3QGZdDvt3ooTWxTRq aMd+Y31oJd2QAWmJvz7OsBTytDTr3rMXPpF8ZwXbxOtQ6hg8lAHqwd3W/1uiyuW1 E764Q93oDz2JMV7bs+ib6twaGkm0uuHB5s/EHU9vJeAXpbsh0Yw= -----END CERTIFICATE-----Generated at Tue Sep 1 03:21:32 2026 by rpki-client