$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft File: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft (raw, json) Hash identifier: zchNxDQDGuuQ/iAGY/jCi1KaXicmgnbqyIhUG8KyyPQ= Subject key identifier: 72:DE:E7:52:83:0C:C2:08:AE:B5:E3:D7:BF:11:3D:4C:A8:59:D5:CD Authority key identifier: 70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E Certificate issuer: /CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Certificate serial: 2CA67557F802C20F943F647BA773AC907F51F524 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:23:54 +0000 Manifest this update: Tue 12 May 2026 21:18:54 +0000 Manifest next update: Wed 13 May 2026 21:50:54 +0000 Files and hashes: 1: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: hBvRTYXcnJk6N7ngUO2oUV6tmwOrz7l2Poiy/ABHqPM=) 2: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl (hash: HuuN1zPLMG0AgtuuTgEiKRPCSwVpVmAWGjBWGkl5ZqY=) 3: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: PDVvmstV3iaWyvXstEgcHTvDFJJ9Dg2QcyyOCEhL1rA=) 4: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: X9vWw5/8oy+SYlKkHILaaaMhFfsqtUesHOd+majUa+4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a6:75:57:f8:02:c2:0f:94:3f:64:7b:a7:73:ac:90:7f:51:f5:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Validity Not Before: May 12 21:18:54 2026 GMT Not After : May 13 21:50:54 2026 GMT Subject: CN=72DEE752830CC208AEB5E3D7BF113D4CA859D5CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:da:39:eb:37:40:c1:43:a5:d1:48:08:a3:e9: b6:05:0d:cb:f1:e0:0c:75:d0:83:9f:5b:3a:be:2e: 05:6b:f0:e6:66:d4:96:2d:4a:0d:2e:5a:d3:c1:7a: c0:eb:77:70:9e:bb:9b:7a:6f:f1:0a:c9:b3:7d:97: 9f:d1:7e:79:ef:f6:df:35:44:96:76:e6:49:97:5c: 50:8b:41:b4:1b:54:f1:9d:46:29:db:07:22:ac:59: b9:43:97:36:e0:99:fc:d4:37:3d:d4:6b:39:d2:7a: 9c:92:00:77:bd:fa:b6:af:f2:3c:38:8d:44:50:2d: f5:a6:1a:6c:c5:f4:03:88:d8:6d:8d:01:e5:dd:33: 6b:89:4c:c4:06:66:99:63:8e:34:87:88:d6:6c:c3: a3:da:dc:27:a2:ba:69:39:2f:11:41:3e:68:29:bc: 85:92:c9:58:bd:fa:14:44:33:0b:7b:a8:f8:c3:f9: 45:e4:c0:43:05:11:41:6a:65:8b:ae:9e:0b:9d:a1: 68:8f:9a:ea:72:cb:93:ea:23:f2:f9:68:e1:f9:08: a1:88:2d:e3:9c:a6:64:c5:41:23:a2:9d:b4:f5:55: c4:88:4b:08:53:75:e7:af:7f:19:99:23:e1:9d:ba: 7a:ec:c2:0d:c1:cc:b1:2c:4c:d3:ca:3a:01:a5:17: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DE:E7:52:83:0C:C2:08:AE:B5:E3:D7:BF:11:3D:4C:A8:59:D5:CD X509v3 Authority Key Identifier: keyid:70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c8:ad:64:a0:02:28:af:df:35:cc:f3:c6:86:cc:87:d8:3a: 19:94:20:60:82:67:69:82:f2:c1:c3:47:26:36:cc:55:0b:2d: 0d:ce:44:7c:94:c4:5f:08:9d:53:51:f3:dc:c4:af:18:00:f2: 29:25:42:91:f5:e9:50:52:0a:e3:3b:b7:9c:c9:96:86:71:c7: 44:31:11:a1:92:f5:25:53:9c:f7:be:45:cc:8e:e9:11:cc:a5: fd:eb:73:71:5f:a2:bd:75:14:5c:fd:e9:69:cc:38:57:e5:5b: 23:24:e2:d0:a5:fd:78:a6:f9:1b:fb:42:88:fc:a2:37:16:c8: 06:c1:8e:c7:d1:55:f1:6b:5a:37:db:b7:bf:33:56:35:85:4c: ac:4a:da:07:4d:0b:31:c6:d9:a8:70:5c:14:8d:47:60:fd:3a: 33:1b:23:eb:00:5b:67:f0:71:26:6e:d2:a2:0a:50:49:d2:00: 17:3a:f8:43:99:58:46:f8:9d:93:14:c6:3e:21:ff:2b:c1:6e: 3b:67:34:35:a0:c8:08:4d:15:96:53:83:71:d5:d5:43:7a:db: 41:5f:e9:4f:2c:81:ce:b8:68:48:aa:40:6e:ff:a0:7b:da:ba: ba:01:d7:1f:87:be:96:ff:97:e7:c7:54:42:0b:55:39:af:ed: e2:1b:90:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKZ1V/gCwg+UP2R7p3OskH9R9SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2REQz NDU4OUI0RTAeFw0yNjA1MTIyMTE4NTRaFw0yNjA1MTMyMTUwNTRaMDMxMTAvBgNV BAMTKDcyREVFNzUyODMwQ0MyMDhBRUI1RTNEN0JGMTEzRDRDQTg1OUQ1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2jnrN0DBQ6XRSAij6bYFDcvx 4Ax10IOfWzq+LgVr8OZm1JYtSg0uWtPBesDrd3Ceu5t6b/EKybN9l5/Rfnnv9t81 RJZ25kmXXFCLQbQbVPGdRinbByKsWblDlzbgmfzUNz3UaznSepySAHe9+rav8jw4 jURQLfWmGmzF9AOI2G2NAeXdM2uJTMQGZpljjjSHiNZsw6Pa3Ceiumk5LxFBPmgp vIWSyVi9+hREMwt7qPjD+UXkwEMFEUFqZYuungudoWiPmupyy5PqI/L5aOH5CKGI LeOcpmTFQSOinbT1VcSISwhTdeevfxmZI+Gdunrswg3BzLEsTNPKOgGlFzj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUct7nUoMMwgiutePXvxE9TKhZ1c0wHwYDVR0j BBgwFoAUcMzgMfEETe5sr1ZbE3X23TRYm04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZjZjdjOWUtZjhjMy00MDE1LTg4MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFG MTA0NERFRTZDQUY1NjVCMTM3NUY2REQzNDU4OUI0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MENDRTAzMUYxMDQ0REVFNkNBRjU2NUIxMzc1RjZERDM0NTg5 QjRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2 REQzNDU4OUI0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPIrWSgAiiv3zXM88aGzIfYOhmUIGCCZ2mC 8sHDRyY2zFULLQ3ORHyUxF8InVNR89zErxgA8iklQpH16VBSCuM7t5zJloZxx0Qx EaGS9SVTnPe+RcyO6RHMpf3rc3Ffor11FFz96WnMOFflWyMk4tCl/Xim+Rv7Qoj8 ojcWyAbBjsfRVfFrWjfbt78zVjWFTKxK2gdNCzHG2ahwXBSNR2D9OjMbI+sAW2fw cSZu0qIKUEnSABc6+EOZWEb4nZMUxj4h/yvBbjtnNDWgyAhNFZZTg3HV1UN620Ff 6U8sgc64aEiqQG7/oHvauroB1x+Hvpb/l+fHVEILVTmv7eIbkIM= -----END CERTIFICATE-----Generated at Wed May 13 06:25:59 2026 by rpki-client