$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft File: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft (raw, json) Hash identifier: DfRqf6Ht0leG0HqPjNb5OzzpZVI949sFq54Hdhd8IVg= Subject key identifier: 10:6B:5C:68:AE:50:ED:5A:DD:C1:28:EB:DC:53:86:C2:73:C0:A2:35 Authority key identifier: 70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E Certificate issuer: /CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Certificate serial: 57DA41DB97BC287FDF5682BFC5AABD9F3FD25564 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:34:04 +0000 Manifest this update: Thu 23 Jul 2026 19:29:04 +0000 Manifest next update: Fri 24 Jul 2026 23:07:04 +0000 Files and hashes: 1: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl (hash: d4Fv7wn56rqSBn6i+gBLTDy9uVEVBVsWrIyaJN2m8Zs=) 2: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: X9vWw5/8oy+SYlKkHILaaaMhFfsqtUesHOd+majUa+4=) 3: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: PDVvmstV3iaWyvXstEgcHTvDFJJ9Dg2QcyyOCEhL1rA=) 4: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: hBvRTYXcnJk6N7ngUO2oUV6tmwOrz7l2Poiy/ABHqPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:da:41:db:97:bc:28:7f:df:56:82:bf:c5:aa:bd:9f:3f:d2:55:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Validity Not Before: Jul 23 19:29:04 2026 GMT Not After : Jul 24 23:07:04 2026 GMT Subject: CN=106B5C68AE50ED5ADDC128EBDC5386C273C0A235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1b:07:8b:35:1a:60:ce:e6:7a:b0:36:a8:dd: fc:79:40:f3:18:66:e6:7c:e9:b0:0e:52:dd:9b:90: 0f:28:01:c6:26:b8:69:c3:02:af:b2:2d:3a:94:85: 5d:e7:a4:68:b2:c7:ec:87:be:e6:b1:82:c6:5d:71: dc:2e:be:20:ff:4b:81:b2:a0:7f:52:74:87:61:d7: be:c1:20:99:fa:86:96:b6:0f:af:f6:c5:80:7e:8c: 58:25:c7:24:73:11:5a:92:71:b4:8a:3e:e8:1a:d5: 83:26:43:60:4e:37:31:8e:61:ef:2c:d4:9f:72:38: b8:cf:cc:f5:71:aa:2e:33:bb:60:90:36:62:cf:ac: 13:fd:ea:96:f5:ac:42:9e:97:9c:3c:7d:c7:33:af: bc:1c:a2:a6:de:7a:47:85:e8:39:03:9e:dd:ca:64: 58:97:e9:17:7d:34:cd:0d:77:1f:9e:c6:a1:3a:ff: 11:d8:27:96:d2:64:4c:f6:72:63:9a:5a:ed:9d:50: 80:d5:a3:77:1a:c1:e3:6b:d9:78:a1:bd:e6:36:15: 5d:ea:65:67:03:36:35:0e:59:cb:6f:be:17:90:94: 65:e3:53:e3:7f:bf:d7:34:14:cb:fb:4c:01:0e:4d: 42:99:8a:ec:6e:d5:c2:a8:46:8e:d2:50:50:cf:08: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6B:5C:68:AE:50:ED:5A:DD:C1:28:EB:DC:53:86:C2:73:C0:A2:35 X509v3 Authority Key Identifier: keyid:70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b7:03:f5:20:ae:0b:4a:9d:2c:f4:3e:ae:34:12:7a:e1:e5: 03:57:d7:a8:42:14:2f:ce:4c:c5:6e:0b:36:dd:fa:c0:e9:4a: d1:5a:0c:d7:5b:72:d4:15:2f:10:e7:b6:c6:e0:0a:bc:24:20: 96:0a:70:a9:34:6b:dd:df:d6:8f:e0:d7:c9:4c:37:50:72:6a: ef:e7:3f:25:38:8d:69:81:32:79:ef:d1:3d:93:1f:e1:93:3d: b4:91:ce:a6:2b:87:df:3b:cb:34:ee:ac:b0:09:0c:f9:11:2b: 75:e5:d8:b9:45:b4:a6:dc:4b:c0:51:3b:43:70:63:82:ae:51: 14:aa:55:a6:90:3f:96:e3:9f:bb:ec:1f:c4:1e:c4:ac:ca:b2: 20:c5:af:16:37:37:f8:95:db:16:fa:ba:70:ac:7e:20:fb:03: 86:06:80:87:9a:99:2c:3b:1c:e2:bf:37:8e:e9:20:37:46:e3: 36:10:f2:e5:79:cb:ce:d8:57:7a:62:d7:f6:5a:e9:c8:eb:11: 7a:41:bc:70:dc:6c:38:f5:66:9a:36:2a:e1:ab:7d:80:e0:f3: 89:cf:54:48:41:f2:bb:58:15:67:01:c1:65:f6:60:3a:59:d4: b1:da:92:e1:76:b6:cf:28:07:02:d2:ec:21:4a:83:ea:40:a9: f7:90:5c:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9pB25e8KH/fVoK/xaq9nz/SVWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2REQz NDU4OUI0RTAeFw0yNjA3MjMxOTI5MDRaFw0yNjA3MjQyMzA3MDRaMDMxMTAvBgNV BAMTKDEwNkI1QzY4QUU1MEVENUFEREMxMjhFQkRDNTM4NkMyNzNDMEEyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGweLNRpgzuZ6sDao3fx5QPMY ZuZ86bAOUt2bkA8oAcYmuGnDAq+yLTqUhV3npGiyx+yHvuaxgsZdcdwuviD/S4Gy oH9SdIdh177BIJn6hpa2D6/2xYB+jFglxyRzEVqScbSKPuga1YMmQ2BONzGOYe8s 1J9yOLjPzPVxqi4zu2CQNmLPrBP96pb1rEKel5w8fcczr7wcoqbeekeF6DkDnt3K ZFiX6Rd9NM0Ndx+exqE6/xHYJ5bSZEz2cmOaWu2dUIDVo3caweNr2XihveY2FV3q ZWcDNjUOWctvvheQlGXjU+N/v9c0FMv7TAEOTUKZiuxu1cKoRo7SUFDPCJ63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGtcaK5Q7VrdwSjr3FOGwnPAojUwHwYDVR0j BBgwFoAUcMzgMfEETe5sr1ZbE3X23TRYm04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZjZjdjOWUtZjhjMy00MDE1LTg4MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFG MTA0NERFRTZDQUY1NjVCMTM3NUY2REQzNDU4OUI0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MENDRTAzMUYxMDQ0REVFNkNBRjU2NUIxMzc1RjZERDM0NTg5 QjRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2 REQzNDU4OUI0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADC3A/UgrgtKnSz0Pq40Enrh5QNX16hCFC/O TMVuCzbd+sDpStFaDNdbctQVLxDntsbgCrwkIJYKcKk0a93f1o/g18lMN1Byau/n PyU4jWmBMnnv0T2TH+GTPbSRzqYrh987yzTurLAJDPkRK3Xl2LlFtKbcS8BRO0Nw Y4KuURSqVaaQP5bjn7vsH8QexKzKsiDFrxY3N/iV2xb6unCsfiD7A4YGgIeamSw7 HOK/N47pIDdG4zYQ8uV5y87YV3pi1/Za6cjrEXpBvHDcbDj1Zpo2KuGrfYDg84nP VEhB8rtYFWcBwWX2YDpZ1LHakuF2ts8oBwLS7CFKg+pAqfeQXIA= -----END CERTIFICATE-----Generated at Fri Jul 24 06:34:27 2026 by rpki-client