$ rpki-client -vvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft File: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft (raw, json) Hash identifier: ZmUfd7csbfHKMeW/ZCAPz/nSgUm7YKz+0iTURg/VNTU= Subject key identifier: 92:AC:F3:7F:03:1E:E7:58:04:05:31:E3:8C:2F:F6:C6:F6:59:17:8C Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E Certificate issuer: /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Certificate serial: 1B6F8B940ADFFCF1E0DEBD5689B234D13853658F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:20:39 +0000 Manifest this update: Tue 12 May 2026 05:15:39 +0000 Manifest next update: Wed 13 May 2026 06:06:39 +0000 Files and hashes: 1: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl (hash: lRCeKjwx23XRRgTza3eCg78hRWSvomur+5VXwiNhgqw=) 2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: Nx3fcumdsqRiUqwqQ3R1jk6NstvkzNg1p4gYbPnIgK4=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6f:8b:94:0a:df:fc:f1:e0:de:bd:56:89:b2:34:d1:38:53:65:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Validity Not Before: May 12 05:15:39 2026 GMT Not After : May 13 06:06:39 2026 GMT Subject: CN=92ACF37F031EE758040531E38C2FF6C6F659178C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:f0:84:7d:53:a3:34:f6:c0:bf:6f:a1:55: 2c:05:48:62:b8:8a:f3:22:91:ed:f8:b8:c7:b6:1c: a3:5e:e5:a1:7b:4b:0d:38:d2:75:aa:c6:38:3c:05: 28:25:66:31:6d:d4:af:c7:fc:ed:2f:ed:aa:8d:52: 01:34:bc:1f:7b:83:d3:15:05:1a:c5:bc:47:f5:f2: 97:2f:91:33:86:4a:36:45:0d:63:f8:c1:5e:3c:eb: 0b:7f:9d:c0:b9:3c:c1:e5:ec:76:db:95:61:88:1b: 2f:10:0a:5c:c6:8b:2a:5e:f4:5b:66:7f:6c:23:b5: 03:e1:56:41:de:54:af:db:31:78:5e:a8:1d:2d:88: d2:70:1e:86:e0:6f:3e:cc:15:1f:75:b3:6e:d3:00: 7b:38:70:db:17:d1:16:c8:52:2c:b6:31:37:17:22: e2:c5:9d:4c:72:92:13:65:5d:00:96:48:9c:d1:00: 2c:e5:20:5b:cf:10:2d:d1:78:e9:97:e9:9c:6b:a0: db:9a:87:a3:06:eb:91:d7:db:17:36:d9:22:fc:58: 69:10:a0:ff:c3:0e:27:00:a5:85:52:a4:a9:34:c0: 43:64:ef:4c:8c:cd:14:d0:9e:4c:b9:21:f9:ad:af: b5:9a:4d:e6:45:be:35:46:ae:37:99:28:ca:f2:69: 1b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AC:F3:7F:03:1E:E7:58:04:05:31:E3:8C:2F:F6:C6:F6:59:17:8C X509v3 Authority Key Identifier: keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:79:4d:1c:2a:e6:0e:cb:09:6c:97:5a:8d:cc:2a:47:65:07: ce:3c:37:68:1c:b4:2e:43:25:bf:24:ab:db:15:15:81:41:5d: 82:3d:a8:61:ab:42:00:fc:6b:a0:51:eb:a9:17:ce:8e:79:51: 74:6a:2f:40:5d:3f:e7:6e:03:15:a4:4a:b1:e7:5a:fd:f9:16: 17:08:87:a9:64:9e:7e:6e:bc:3b:bb:76:50:99:97:99:bc:0e: b6:1e:6e:66:eb:39:e4:1f:68:5a:16:88:c8:6d:12:4e:f1:0b: 90:59:eb:ad:2d:23:88:eb:0d:d7:5a:e0:c5:05:8d:86:bd:1a: 80:d4:a4:a5:e1:c7:36:c1:1f:e2:ba:f7:bd:7b:17:d4:b0:52: b3:58:24:ae:c8:7a:4d:90:ee:fc:45:8a:af:1e:f4:83:9d:b6: dc:c1:44:f1:92:ec:46:22:b1:59:a7:e1:26:39:37:b1:ee:57: ac:04:39:c8:75:06:d6:2f:f0:82:18:95:25:30:45:2f:ac:26: 15:42:00:36:44:cc:a0:99:96:1b:26:dd:73:cf:e5:6c:6c:ff: 75:08:8a:5e:86:73:9d:b7:f4:62:bb:04:97:5f:c5:b8:f8:3d: 7a:09:f9:e7:13:67:7a:d2:6a:1e:cf:99:48:50:d6:2c:72:07: cc:52:b7:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2+LlArf/PHg3r1WibI00ThTZY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VC Qzk5REI4RTAeFw0yNjA1MTIwNTE1MzlaFw0yNjA1MTMwNjA2MzlaMDMxMTAvBgNV BAMTKDkyQUNGMzdGMDMxRUU3NTgwNDA1MzFFMzhDMkZGNkM2RjY1OTE3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiq/CEfVOjNPbAv2+hVSwFSGK4 ivMike34uMe2HKNe5aF7Sw040nWqxjg8BSglZjFt1K/H/O0v7aqNUgE0vB97g9MV BRrFvEf18pcvkTOGSjZFDWP4wV486wt/ncC5PMHl7HbblWGIGy8QClzGiype9Ftm f2wjtQPhVkHeVK/bMXheqB0tiNJwHobgbz7MFR91s27TAHs4cNsX0RbIUiy2MTcX IuLFnUxykhNlXQCWSJzRACzlIFvPEC3ReOmX6ZxroNuah6MG65HX2xc22SL8WGkQ oP/DDicApYVSpKk0wENk70yMzRTQnky5Ifmtr7WaTeZFvjVGrjeZKMryaRs7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkqzzfwMe51gEBTHjjC/2xvZZF4wwHwYDVR0j BBgwFoAUcPbsHnI9be1CS5NFzD32zryZ244wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZkZDE1ZTMtOWVlNS00ZDUyLTllZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3 MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VCQzk5REI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY2RUMxRTcyM0Q2REVENDI0QjkzNDVDQzNERjZDRUJDOTlE QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2 Q0VCQzk5REI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMR5TRwq5g7LCWyXWo3MKkdlB848N2gctC5D Jb8kq9sVFYFBXYI9qGGrQgD8a6BR66kXzo55UXRqL0BdP+duAxWkSrHnWv35FhcI h6lknn5uvDu7dlCZl5m8DrYebmbrOeQfaFoWiMhtEk7xC5BZ660tI4jrDdda4MUF jYa9GoDUpKXhxzbBH+K69717F9SwUrNYJK7Iek2Q7vxFiq8e9IOdttzBRPGS7EYi sVmn4SY5N7HuV6wEOch1BtYv8IIYlSUwRS+sJhVCADZEzKCZlhsm3XPP5Wxs/3UI il6Gc5239GK7BJdfxbj4PXoJ+ecTZ3rSah7PmUhQ1ixyB8xSt9M= -----END CERTIFICATE-----Generated at Tue May 12 22:47:25 2026 by rpki-client