$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft File: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft (raw, json) Hash identifier: o3xdoOtlSAJEhqzMbTicP5Bd0semwbcaYM+5pqz38wk= Subject key identifier: 65:53:FA:B6:FB:57:0F:CF:4B:F4:46:90:A7:96:41:BC:BF:3D:8A:46 Authority key identifier: C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 Certificate issuer: /CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Certificate serial: 74BEA768A39AC29ED417007E12C99BE2F2D98B74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 18:58:23 +0000 Manifest this update: Thu 23 Jul 2026 18:53:23 +0000 Manifest next update: Fri 24 Jul 2026 20:22:23 +0000 Files and hashes: 1: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl (hash: NyB1sfGb0wSgrqo9cWy3cHohYsXNAL1IJs9RLLOKgMk=) 2: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: RMvUFQrKL018cFixmOMzozWh6kTAtIwXuWq18nozxuA=) 3: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: IG22wGAeafPyZiCHJfimAg7HtJoJBGXUaInRtJgtJX8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:be:a7:68:a3:9a:c2:9e:d4:17:00:7e:12:c9:9b:e2:f2:d9:8b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Validity Not Before: Jul 23 18:53:23 2026 GMT Not After : Jul 24 20:22:23 2026 GMT Subject: CN=6553FAB6FB570FCF4BF44690A79641BCBF3D8A46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a6:0d:b2:d8:79:d2:29:43:11:76:7d:dc:c7: fb:42:4a:30:e4:f1:88:a5:44:56:08:aa:03:60:c8: e3:f4:92:cc:c9:1d:be:7e:1e:59:e8:e9:f1:00:ff: 46:e9:e7:9c:6e:f6:f6:3b:1e:c9:3f:34:a4:a6:f4: 4d:59:f0:f9:b2:c0:4d:31:8f:e8:bb:ed:82:94:a7: 3c:c3:c4:b9:d7:90:1b:d2:69:66:10:6f:89:89:7f: 84:5d:b2:74:ef:b2:9e:e5:3c:2c:8c:2b:ae:c2:0c: 96:9c:9b:7b:97:78:8c:3f:f6:0d:e7:71:84:01:24: 4a:dd:0b:81:6c:93:31:de:26:b5:f8:38:12:7a:1f: 7f:e4:f4:48:93:e4:a1:43:30:73:92:70:d8:57:8e: de:06:0c:8a:97:36:6c:64:9f:33:4d:d9:6e:d0:25: 39:18:b1:01:85:86:4a:04:db:8e:69:e6:25:38:3f: 93:6b:9a:f6:82:d4:66:8e:f1:b4:52:89:ed:8c:1e: 6f:38:04:88:a2:2c:25:31:f4:c9:11:13:e4:7f:ac: 26:bc:f4:fb:4b:84:a2:cb:9e:ef:61:0d:58:4f:90: 16:c9:f7:0c:1e:82:58:f6:c0:99:70:f0:36:19:5b: 19:5d:49:1c:e3:11:da:0a:3a:ab:38:e3:07:2e:0d: a1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:53:FA:B6:FB:57:0F:CF:4B:F4:46:90:A7:96:41:BC:BF:3D:8A:46 X509v3 Authority Key Identifier: keyid:C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:36:23:ca:0f:d5:ad:0d:0b:e0:d9:86:ec:53:3d:34:9b:5d: a9:a1:55:a5:8e:70:6c:e2:32:d3:2b:7b:32:9a:51:64:1c:bb: bd:99:32:ef:3e:c0:b5:91:13:17:2e:7a:0a:08:dc:7d:65:e5: d6:5c:e7:51:8b:dd:a1:73:3b:0d:ec:48:bc:d7:f6:a2:2f:e3: 6b:43:9c:fe:69:10:33:ff:2d:b7:0e:1f:b9:88:e5:c1:4e:5f: 4f:b5:b6:46:10:3c:50:75:9b:52:06:a5:3b:79:20:65:05:e9: 3b:c3:5d:87:51:b1:0a:a3:5e:9d:bf:a3:48:8c:d1:7c:5f:70: d0:23:b5:ec:35:bb:5a:6d:c7:3f:ad:0c:e6:e7:e5:cf:33:17: d9:ad:45:38:29:7c:53:e9:58:e3:a9:aa:64:d8:d2:f4:e1:69: d7:70:26:90:39:77:d8:5a:1c:fe:65:d1:3f:67:fc:ef:47:f8: 7f:39:61:b3:53:81:ff:d3:3e:7b:e7:22:2b:b0:5c:ea:db:af: f7:7a:5f:76:6f:d4:06:74:8d:0e:97:16:c3:13:fe:97:0e:d1: 63:4e:1c:08:a2:f8:6e:be:5e:1f:a9:73:e9:f2:23:e9:41:4e: 41:45:a3:74:88:6f:a8:83:29:2b:8d:eb:a7:cf:8a:a6:8e:7d: e4:dc:7d:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdL6naKOawp7UFwB+Esmb4vLZi3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlD MDQ3MkI1MDAeFw0yNjA3MjMxODUzMjNaFw0yNjA3MjQyMDIyMjNaMDMxMTAvBgNV BAMTKDY1NTNGQUI2RkI1NzBGQ0Y0QkY0NDY5MEE3OTY0MUJDQkYzRDhBNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjpg2y2HnSKUMRdn3cx/tCSjDk 8YilRFYIqgNgyOP0kszJHb5+Hlno6fEA/0bp55xu9vY7Hsk/NKSm9E1Z8PmywE0x j+i77YKUpzzDxLnXkBvSaWYQb4mJf4RdsnTvsp7lPCyMK67CDJacm3uXeIw/9g3n cYQBJErdC4FskzHeJrX4OBJ6H3/k9EiT5KFDMHOScNhXjt4GDIqXNmxknzNN2W7Q JTkYsQGFhkoE245p5iU4P5NrmvaC1GaO8bRSie2MHm84BIiiLCUx9MkRE+R/rCa8 9PtLhKLLnu9hDVhPkBbJ9wweglj2wJlw8DYZWxldSRzjEdoKOqs44wcuDaGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVP6tvtXD89L9EaQp5ZBvL89ikYwHwYDVR0j BBgwFoAUxwqifmAZfQLw3M2OeST/+cBHK1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlODM2NzMtMDk2YS00NDBjLWIyN2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2 MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlDMDQ3MkI1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzBBQTI3RTYwMTk3RDAyRjBEQ0NEOEU3OTI0RkZGOUMwNDcy QjUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZG RjlDMDQ3MkI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKc2I8oP1a0NC+DZhuxTPTSbXamhVaWOcGzi MtMrezKaUWQcu72ZMu8+wLWRExcuegoI3H1l5dZc51GL3aFzOw3sSLzX9qIv42tD nP5pEDP/LbcOH7mI5cFOX0+1tkYQPFB1m1IGpTt5IGUF6TvDXYdRsQqjXp2/o0iM 0XxfcNAjtew1u1ptxz+tDObn5c8zF9mtRTgpfFPpWOOpqmTY0vThaddwJpA5d9ha HP5l0T9n/O9H+H85YbNTgf/TPnvnIiuwXOrbr/d6X3Zv1AZ0jQ6XFsMT/pcO0WNO HAii+G6+Xh+pc+nyI+lBTkFFo3SIb6iDKSuN66fPiqaOfeTcfds= -----END CERTIFICATE-----Generated at Fri Jul 24 10:02:09 2026 by rpki-client