$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft File: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft (raw, json) Hash identifier: ID0EdU7B899mFWTg4wxmhrjaNgFQCRhnl1RsTZVqwFw= Subject key identifier: 26:BD:59:C8:D6:15:DF:3B:02:20:2E:D0:3F:A3:68:DE:E4:4B:D1:A5 Authority key identifier: C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 Certificate issuer: /CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Certificate serial: 2485BB61E1C396D3032DFC1BE37A369E4601EA24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft Manifest number: 0F Signing time: Tue 12 May 2026 12:58:12 +0000 Manifest this update: Tue 12 May 2026 12:53:12 +0000 Manifest next update: Wed 13 May 2026 13:12:12 +0000 Files and hashes: 1: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl (hash: IXunIWCp8lof1yLEGbCL4bq2pSA/r6rvZNdym6Rsvek=) 2: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: IG22wGAeafPyZiCHJfimAg7HtJoJBGXUaInRtJgtJX8=) 3: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: RMvUFQrKL018cFixmOMzozWh6kTAtIwXuWq18nozxuA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:85:bb:61:e1:c3:96:d3:03:2d:fc:1b:e3:7a:36:9e:46:01:ea:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Validity Not Before: May 12 12:53:12 2026 GMT Not After : May 13 13:12:12 2026 GMT Subject: CN=26BD59C8D615DF3B02202ED03FA368DEE44BD1A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:17:3d:d7:ad:c2:c7:db:5c:81:b8:d9:13: a2:50:7d:12:93:c2:65:ad:0f:4b:68:8e:1c:6e:01: 38:e6:32:3d:fa:da:93:a7:a2:92:31:3d:0b:14:fb: 3b:ed:0f:ac:85:6c:65:81:c1:28:68:0a:5d:d4:d8: a9:f5:b7:e1:41:e0:0d:80:01:ec:13:79:9a:f1:ed: f0:4f:db:fe:c5:e5:22:e5:a2:fc:6a:10:03:8d:d7: 9f:26:2c:a4:47:c4:44:dc:d6:7c:02:8f:21:3e:85: 9b:43:2b:7e:36:ec:f6:1b:61:dc:1d:d7:8e:3b:8f: 03:d4:d3:59:90:57:0e:a4:ae:3e:9d:c3:a1:db:7b: bd:23:06:65:d0:ef:50:dd:ff:eb:8b:53:14:a1:c3: f7:d6:b3:69:bc:ff:93:64:54:c1:52:a2:05:8e:64: 02:9b:89:d7:2d:6e:87:aa:ca:c6:c7:9d:e2:67:24: ef:66:a8:3e:58:20:59:3b:a5:32:27:31:bf:f4:75: 0f:d8:81:16:ea:7e:e2:a2:40:1a:30:56:55:72:12: 55:77:a8:5e:e2:3f:10:c7:fa:e6:87:a9:54:5c:f3: 43:ca:46:23:c6:99:e0:36:f0:66:96:df:f2:ad:aa: b5:a1:3e:0c:84:86:63:96:59:b1:58:5d:37:02:7c: ec:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BD:59:C8:D6:15:DF:3B:02:20:2E:D0:3F:A3:68:DE:E4:4B:D1:A5 X509v3 Authority Key Identifier: keyid:C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d7:36:09:4b:73:a5:a0:62:86:b4:f7:f7:98:0e:41:20:a4: 60:a6:e4:b6:4c:3d:93:6e:1f:95:6b:d7:da:ba:0e:74:73:d3: a5:d9:f2:bb:ad:bb:c3:b9:f4:67:ab:d6:dc:0c:8d:fa:c8:84: 7b:d5:c8:61:4b:e3:89:08:25:f1:8b:06:a5:49:64:58:15:8a: 07:f9:95:2b:8a:dd:62:e7:2f:b0:ef:a6:dc:41:c6:8b:d0:de: 26:25:be:66:5a:85:7d:73:ed:ad:fe:e8:3b:13:45:80:a8:1a: 2e:ac:8b:dd:51:8a:76:93:25:d6:e7:a0:bd:05:6c:ce:19:d8: 16:24:28:03:ba:b7:36:72:76:4b:dd:11:4e:01:c3:0b:9d:06: ce:0b:ff:00:c2:d4:cc:cc:8b:eb:04:e1:1f:6f:da:6d:72:ec: 3c:4e:e9:28:93:87:ea:64:c3:7b:71:d3:50:1d:c8:00:1c:7c: 55:2d:5f:e4:65:57:2b:77:14:1c:a0:4c:9a:02:dd:8a:e2:bd: ef:c0:09:9c:66:da:0c:d5:dc:7e:b1:d2:69:82:8f:8a:4b:94: d5:0e:77:e7:b6:07:f5:2c:f2:e5:8c:8a:02:93:35:47:d2:01: 40:6e:10:15:71:dc:81:88:10:9f:f6:2c:dc:5e:69:a6:61:9e: fc:25:2f:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIW7YeHDltMDLfwb43o2nkYB6iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlD MDQ3MkI1MDAeFw0yNjA1MTIxMjUzMTJaFw0yNjA1MTMxMzEyMTJaMDMxMTAvBgNV BAMTKDI2QkQ1OUM4RDYxNURGM0IwMjIwMkVEMDNGQTM2OERFRTQ0QkQxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqahc9163Cx9tcgbjZE6JQfRKT wmWtD0tojhxuATjmMj362pOnopIxPQsU+zvtD6yFbGWBwShoCl3U2Kn1t+FB4A2A AewTeZrx7fBP2/7F5SLlovxqEAON158mLKRHxETc1nwCjyE+hZtDK3427PYbYdwd 1447jwPU01mQVw6krj6dw6Hbe70jBmXQ71Dd/+uLUxShw/fWs2m8/5NkVMFSogWO ZAKbidctboeqysbHneJnJO9mqD5YIFk7pTInMb/0dQ/YgRbqfuKiQBowVlVyElV3 qF7iPxDH+uaHqVRc80PKRiPGmeA28GaW3/KtqrWhPgyEhmOWWbFYXTcCfOwzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJr1ZyNYV3zsCIC7QP6No3uRL0aUwHwYDVR0j BBgwFoAUxwqifmAZfQLw3M2OeST/+cBHK1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlODM2NzMtMDk2YS00NDBjLWIyN2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2 MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlDMDQ3MkI1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzBBQTI3RTYwMTk3RDAyRjBEQ0NEOEU3OTI0RkZGOUMwNDcy QjUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZG RjlDMDQ3MkI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHXNglLc6WgYoa09/eYDkEgpGCm5LZMPZNu H5Vr19q6DnRz06XZ8rutu8O59Ger1twMjfrIhHvVyGFL44kIJfGLBqVJZFgVigf5 lSuK3WLnL7DvptxBxovQ3iYlvmZahX1z7a3+6DsTRYCoGi6si91RinaTJdbnoL0F bM4Z2BYkKAO6tzZydkvdEU4BwwudBs4L/wDC1MzMi+sE4R9v2m1y7DxO6SiTh+pk w3tx01AdyAAcfFUtX+RlVyt3FBygTJoC3Yrive/ACZxm2gzV3H6x0mmCj4pLlNUO d+e2B/Us8uWMigKTNUfSAUBuEBVx3IGIEJ/2LNxeaaZhnvwlL74= -----END CERTIFICATE-----Generated at Wed May 13 02:19:02 2026 by rpki-client