$ rpki-client -vvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft File: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft (raw, json) Hash identifier: yb6FOVgnw5U7X5SOIZk3wcxlMZozxL7YVmknP3BE9UI= Subject key identifier: 7F:F2:3D:BC:99:14:D8:77:FB:44:5A:C5:5C:5F:EB:B4:16:BB:88:51 Authority key identifier: F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 Certificate issuer: /CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Certificate serial: 7046D3E748ED5890F2E50526EE18C6815CAF37B1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 13:52:01 +0000 Manifest this update: Thu 23 Jul 2026 13:47:01 +0000 Manifest next update: Fri 24 Jul 2026 16:26:01 +0000 Files and hashes: 1: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl (hash: 35gKmtkaySnAJUKfFyfz6Ejn5OHGPV2rCohE5f6veqk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:46:d3:e7:48:ed:58:90:f2:e5:05:26:ee:18:c6:81:5c:af:37:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Validity Not Before: Jul 23 13:47:01 2026 GMT Not After : Jul 24 16:26:01 2026 GMT Subject: CN=7FF23DBC9914D877FB445AC55C5FEBB416BB8851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:14:64:7d:88:50:b7:2c:8a:5d:db:00:a4:58: e5:81:7d:22:42:45:0d:ed:5c:e4:ca:64:c4:be:76: df:ef:89:d6:2c:45:5d:b9:24:62:3c:74:df:ae:0f: 73:dc:3c:3e:38:58:b2:92:73:bf:f6:2d:48:92:de: bb:25:59:d9:4e:a0:46:8b:3f:fd:04:8b:7d:c3:0e: 9a:0d:2e:bb:37:96:c2:3e:92:1a:de:d0:4d:22:9c: 39:f6:3e:b1:bd:fb:b2:34:50:db:27:e9:43:49:be: 2a:53:3c:3d:56:a6:57:94:b3:f8:3e:69:29:58:e2: 75:47:af:5d:f9:3d:fc:b4:37:83:d7:6a:8f:73:49: 4c:1b:2b:7f:8a:9f:8c:db:ab:9c:73:de:82:56:23: 69:eb:9d:99:dc:01:57:8f:ca:62:e9:a1:55:3e:0d: 43:2f:e2:52:a5:f9:04:29:c0:37:68:42:68:22:d1: 08:83:01:b7:82:c6:a6:d6:b2:bc:d3:40:66:34:be: d4:12:58:db:5d:79:86:71:15:59:e1:ac:63:21:f3: 9a:f4:61:73:0e:24:a0:59:5e:cd:8d:aa:f9:4f:0e: 59:f2:8d:27:07:b1:92:10:d3:62:e6:2c:85:f3:a9: 87:07:1a:8a:3b:c7:d9:f9:4b:b2:76:8e:d5:33:e1: 70:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:3D:BC:99:14:D8:77:FB:44:5A:C5:5C:5F:EB:B4:16:BB:88:51 X509v3 Authority Key Identifier: keyid:F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f9:8d:a1:c1:8e:25:43:ac:d4:7e:01:4c:8e:94:57:71:25: ce:93:1b:07:b1:fd:3a:c5:b9:c6:91:e2:0b:94:6f:b2:c1:49: bd:89:57:36:fb:af:03:68:67:f3:d3:eb:a2:c2:a7:74:5b:28: 05:4a:ea:a8:6c:4a:fb:b3:3e:d3:37:8a:a7:50:ec:d3:c4:77: c8:09:f2:ed:3c:4e:a0:c2:13:6e:35:f6:bc:e6:3f:9a:4c:cc: 08:c2:ec:2e:70:94:c0:8d:8e:7f:82:f5:c6:a8:90:8e:48:4a: 0a:5f:45:7d:36:8b:c7:0a:b9:31:64:d2:c3:bb:59:8f:21:e2: 04:74:f8:1c:4e:d2:cb:52:e8:f8:e7:e7:be:62:fe:50:3c:9f: 33:87:c0:90:ba:54:5c:d9:b5:2c:91:0a:50:3f:16:1f:29:a0: 28:3d:7d:0e:3d:c2:3c:32:17:00:d7:b4:53:57:87:1f:b2:1d: 1a:6c:98:6c:e3:fc:14:43:c3:b4:29:d3:95:b6:7e:4a:0b:49: 05:f3:50:e2:82:e9:26:67:21:43:b0:c1:1d:e5:d1:b2:f7:7c: d4:96:0b:7b:93:d7:63:73:b4:4f:95:a8:4a:e3:88:ef:3a:24: d8:9d:31:de:55:91:a8:33:0d:9d:f4:7c:67:35:b2:7f:2b:79: eb:e7:3e:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEbT50jtWJDy5QUm7hjGgVyvN7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0 OThDNUNEMzAeFw0yNjA3MjMxMzQ3MDFaFw0yNjA3MjQxNjI2MDFaMDMxMTAvBgNV BAMTKDdGRjIzREJDOTkxNEQ4NzdGQjQ0NUFDNTVDNUZFQkI0MTZCQjg4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFGR9iFC3LIpd2wCkWOWBfSJC RQ3tXOTKZMS+dt/vidYsRV25JGI8dN+uD3PcPD44WLKSc7/2LUiS3rslWdlOoEaL P/0Ei33DDpoNLrs3lsI+khre0E0inDn2PrG9+7I0UNsn6UNJvipTPD1WpleUs/g+ aSlY4nVHr135Pfy0N4PXao9zSUwbK3+Kn4zbq5xz3oJWI2nrnZncAVePymLpoVU+ DUMv4lKl+QQpwDdoQmgi0QiDAbeCxqbWsrzTQGY0vtQSWNtdeYZxFVnhrGMh85r0 YXMOJKBZXs2NqvlPDlnyjScHsZIQ02LmLIXzqYcHGoo7x9n5S7J2jtUz4XCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf/I9vJkU2Hf7RFrFXF/rtBa7iFEwHwYDVR0j BBgwFoAU9w12AOASQmk8oOtcq5Ie4EmMXNMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBF MDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0OThDNUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzBENzYwMEUwMTI0MjY5M0NBMEVCNUNBQjkyMUVFMDQ5OEM1 Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFF RTA0OThDNUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD5jaHBjiVDrNR+AUyOlFdxJc6TGwex/TrF ucaR4guUb7LBSb2JVzb7rwNoZ/PT66LCp3RbKAVK6qhsSvuzPtM3iqdQ7NPEd8gJ 8u08TqDCE2419rzmP5pMzAjC7C5wlMCNjn+C9caokI5ISgpfRX02i8cKuTFk0sO7 WY8h4gR0+BxO0stS6Pjn575i/lA8nzOHwJC6VFzZtSyRClA/Fh8poCg9fQ49wjwy FwDXtFNXhx+yHRpsmGzj/BRDw7Qp05W2fkoLSQXzUOKC6SZnIUOwwR3l0bL3fNSW C3uT12NztE+VqErjiO86JNidMd5VkagzDZ30fGc1sn8reevnPvU= -----END CERTIFICATE-----Generated at Fri Jul 24 06:17:43 2026 by rpki-client