$ rpki-client -vvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft File: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft (raw, json) Hash identifier: a/G1KnboM71BL0zPiPi4A6dHJ90cJFvUWTRtR/5oDGA= Subject key identifier: 04:F5:C2:DB:9E:78:28:ED:EA:2A:C8:8C:DF:A7:62:46:50:E4:36:28 Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E Certificate issuer: /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Certificate serial: 7502A0F1AFCAD6A4C1A6943F6FD8133BD7B3B376 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:20:11 +0000 Manifest this update: Thu 23 Jul 2026 12:15:11 +0000 Manifest next update: Fri 24 Jul 2026 13:11:11 +0000 Files and hashes: 1: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I=) 2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: Nx3fcumdsqRiUqwqQ3R1jk6NstvkzNg1p4gYbPnIgK4=) 3: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl (hash: bGBRmiRxeuqtse5TV6ZUm4LMhtVxBcNGzdWO6jWOSOI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:02:a0:f1:af:ca:d6:a4:c1:a6:94:3f:6f:d8:13:3b:d7:b3:b3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Validity Not Before: Jul 23 12:15:11 2026 GMT Not After : Jul 24 13:11:11 2026 GMT Subject: CN=04F5C2DB9E7828EDEA2AC88CDFA7624650E43628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:07:2d:55:d1:61:25:d9:76:4d:b5:3f:80: f1:c4:45:bd:eb:d5:8b:e8:cd:99:36:61:67:c6:d5: 45:35:a1:88:26:e4:75:f7:2d:c0:94:8d:ae:15:ec: 38:29:c6:5c:82:19:ad:3b:c9:b1:1b:a9:cb:0b:bb: e2:52:57:18:83:36:2a:44:06:09:6f:50:3a:ad:8b: 60:3a:3d:24:33:97:3d:84:ce:e6:ed:b1:39:2c:7c: 25:38:43:6a:b8:cb:ce:20:c6:96:7a:7a:99:26:c1: ba:41:a8:74:11:98:2e:e6:ea:cd:e5:4f:ba:52:d5: c8:d0:9b:2f:6e:11:e5:f8:74:5e:4d:fa:b8:e9:b8: ef:d4:69:70:5d:77:1d:e3:f0:3d:39:c6:97:88:97: db:f5:47:81:9b:f6:5b:46:c5:8a:ad:f8:05:50:7b: 08:ab:f5:c6:44:99:c1:81:fa:c9:1b:08:f5:e6:ce: b3:75:1c:3b:96:2e:e4:c1:70:cb:4e:10:80:4e:9d: b3:02:c5:1c:35:9f:2e:1e:89:a1:21:5e:a6:80:68: e6:34:fb:44:7b:e5:f8:58:d1:66:e7:fe:e5:4e:87: 69:d9:a2:f3:2d:10:65:2e:dd:d3:90:48:44:c4:61: 85:6f:11:19:56:55:e6:d2:3f:65:dc:53:8e:fb:ac: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F5:C2:DB:9E:78:28:ED:EA:2A:C8:8C:DF:A7:62:46:50:E4:36:28 X509v3 Authority Key Identifier: keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e3:6e:4f:f6:c4:e7:cc:88:37:cd:43:04:76:84:9f:2c:27: 3e:79:04:95:e4:20:2f:7f:59:fc:c9:a5:89:1d:42:a8:03:0f: 1a:ab:4e:ca:60:91:b1:f4:89:8b:c9:1c:4d:16:72:54:5b:b4: df:91:65:3f:15:f5:83:a3:7d:b2:0b:86:de:f2:36:44:ae:1c: b1:ba:54:7a:94:02:eb:f0:0a:53:4a:57:4b:d4:a3:ff:d3:4e: 2f:97:1a:03:ad:5f:c0:85:37:00:f0:5c:03:d6:ed:da:d0:46: 76:e0:0c:1d:25:c6:44:54:16:4d:39:8f:a1:a5:ad:da:d6:c8: 4e:b9:23:59:0d:d6:62:99:d9:09:78:47:11:c3:50:32:5d:c4: a1:8f:32:09:91:f2:74:f7:f5:66:5d:88:65:c6:82:87:80:2d: 23:8a:a1:27:f6:5c:5c:c8:bf:b2:e1:6f:bb:84:d1:43:1d:20: 55:96:f4:78:e0:50:29:7c:07:88:68:2f:76:09:35:91:9a:69: 37:ab:0d:16:ec:36:d0:95:fd:c8:e1:b2:6a:7e:0b:c7:1c:ef: f1:0d:97:f8:4d:dc:c0:70:41:a6:8f:6e:c1:8e:3b:e6:dc:7a: dc:c6:34:3f:8d:9c:95:66:75:56:ff:20:62:97:a5:e8:e8:1e: ad:e6:88:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQKg8a/K1qTBppQ/b9gTO9ezs3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VC Qzk5REI4RTAeFw0yNjA3MjMxMjE1MTFaFw0yNjA3MjQxMzExMTFaMDMxMTAvBgNV BAMTKDA0RjVDMkRCOUU3ODI4RURFQTJBQzg4Q0RGQTc2MjQ2NTBFNDM2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzwctVdFhJdl2TbU/gPHERb3r 1YvozZk2YWfG1UU1oYgm5HX3LcCUja4V7DgpxlyCGa07ybEbqcsLu+JSVxiDNipE BglvUDqti2A6PSQzlz2EzubtsTksfCU4Q2q4y84gxpZ6epkmwbpBqHQRmC7m6s3l T7pS1cjQmy9uEeX4dF5N+rjpuO/UaXBddx3j8D05xpeIl9v1R4Gb9ltGxYqt+AVQ ewir9cZEmcGB+skbCPXmzrN1HDuWLuTBcMtOEIBOnbMCxRw1ny4eiaEhXqaAaOY0 +0R75fhY0Wbn/uVOh2nZovMtEGUu3dOQSETEYYVvERlWVebSP2XcU477rGIJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPXC2554KO3qKsiM36diRlDkNigwHwYDVR0j BBgwFoAUcPbsHnI9be1CS5NFzD32zryZ244wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZkZDE1ZTMtOWVlNS00ZDUyLTllZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3 MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VCQzk5REI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY2RUMxRTcyM0Q2REVENDI0QjkzNDVDQzNERjZDRUJDOTlE QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2 Q0VCQzk5REI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7jbk/2xOfMiDfNQwR2hJ8sJz55BJXkIC9/ WfzJpYkdQqgDDxqrTspgkbH0iYvJHE0WclRbtN+RZT8V9YOjfbILht7yNkSuHLG6 VHqUAuvwClNKV0vUo//TTi+XGgOtX8CFNwDwXAPW7drQRnbgDB0lxkRUFk05j6Gl rdrWyE65I1kN1mKZ2Ql4RxHDUDJdxKGPMgmR8nT39WZdiGXGgoeALSOKoSf2XFzI v7Lhb7uE0UMdIFWW9HjgUCl8B4hoL3YJNZGaaTerDRbsNtCV/cjhsmp+C8cc7/EN l/hN3MBwQaaPbsGOO+bcetzGND+NnJVmdVb/IGKXpejoHq3miJU= -----END CERTIFICATE-----Generated at Fri Jul 24 06:17:41 2026 by rpki-client