
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
File: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft (raw, json)
Hash identifier: LTzbhOkvcd1uaMDxDXDjXJ0k5a8V1rdheLeSO7+fBB4=
Subject key identifier: A4:21:29:3B:31:98:B1:FD:C2:D7:EE:1D:D2:F0:B3:8A:6F:02:83:36
Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Certificate serial: 4D4BF3B17FF7B62F41F3E999974E12B11BB206E8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:25:41 +0000
Manifest this update: Tue 12 May 2026 22:20:41 +0000
Manifest next update: Thu 14 May 2026 01:28:41 +0000
Files and hashes: 1: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: 7JThFy92/VpEXEDJA9kwrgcgGhSHAfaM/+d1+Zp5aK8=)
2: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: pEjlBEcf4SMwhsnq2l8vEuSNRarcFG9m4tfJC8/w2lc=)
3: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 1pB/Nqd7vJqSwm7DTejyzXpeJQSOjzzPkrlOSeZoqb4=)
4: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: uVaL+tfCNM5zPaOPcfVzgSdj2M5cAqybg0t35qHDKfE=)
5: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl (hash: aujyGAWIW/x3Lk6flI+xuvwgb/85vPCvtLKRO51Jr4g=)
6: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: CRQfQvukFddl9vchPsTgKBPY7+BHd3EPebDgJxEISnw=)
7: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: lCknCbn1e4JowaioeH82UQR3fwZeR46CsNwrligI+W0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:4b:f3:b1:7f:f7:b6:2f:41:f3:e9:99:97:4e:12:b1:1b:b2:06:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Validity
Not Before: May 12 22:20:41 2026 GMT
Not After : May 14 01:28:41 2026 GMT
Subject: CN=A421293B3198B1FDC2D7EE1DD2F0B38A6F028336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:16:2c:6b:d1:8c:fc:bc:2e:d8:dc:8c:e9:
44:30:aa:0c:4a:e1:14:17:eb:1e:8b:84:23:2e:f8:
14:30:2f:e8:a9:30:22:21:89:dd:49:2c:a5:af:a8:
d5:66:6f:9e:4b:9c:8c:84:90:01:a2:ab:ad:d5:96:
81:7f:37:95:ef:93:91:ab:c5:00:5b:b4:53:f1:4e:
70:00:fd:88:28:d9:5b:b3:14:f7:bc:52:28:57:28:
fe:3d:d6:bb:91:e5:1a:5c:87:e5:91:08:82:7e:1e:
5a:0a:fb:14:66:80:5a:dc:29:dd:8e:94:57:a2:0f:
ba:e1:6e:d7:f8:d3:6f:b2:05:ad:f4:fc:b3:81:68:
1f:88:f1:7b:f6:e5:98:94:02:78:a5:ef:e4:10:57:
78:64:3b:45:49:e8:6c:98:8d:08:bd:e4:73:86:a2:
8e:1e:54:ae:93:56:b5:b0:b8:c7:0d:e0:f6:58:4a:
d2:d9:ee:8b:b4:71:95:14:bb:45:16:e5:ae:98:15:
d4:81:0d:8b:f9:a8:d4:b1:46:4f:64:b5:f2:75:06:
f5:68:e4:02:07:3e:84:0e:d4:7f:27:fd:13:c4:59:
3a:fb:82:80:83:89:5e:73:dd:7c:a6:84:5e:fc:ee:
a5:54:02:dd:13:2a:5e:59:a9:7d:2c:3c:3c:af:e8:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:21:29:3B:31:98:B1:FD:C2:D7:EE:1D:D2:F0:B3:8A:6F:02:83:36
X509v3 Authority Key Identifier:
keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a5:55:a1:95:ec:78:c8:5d:12:e8:50:ee:3b:7c:7e:5a:a4:
1f:2f:f7:84:09:2e:95:7c:0c:3f:44:8c:7e:d9:b2:bb:8c:b0:
6a:5d:c5:3e:de:00:c2:5a:99:66:4c:f6:4f:33:d5:c6:3f:62:
18:c3:0e:61:14:9f:44:19:e0:ee:23:2f:af:a9:a4:d1:dc:e3:
80:db:6e:35:59:be:3e:7c:83:88:e0:32:ea:a5:f3:ae:6c:59:
99:39:06:5f:bd:ba:ab:ad:b0:2d:39:f6:3e:d5:4e:42:ac:9c:
44:61:8a:7e:b4:68:0e:a1:58:1a:8d:d7:b9:42:22:93:30:c9:
09:15:e5:66:79:ee:1e:6b:58:77:a9:4f:17:ca:71:fd:cd:4d:
5c:c4:4e:0f:80:c6:18:38:f8:6d:6b:b3:28:87:ab:38:44:0d:
3e:ba:8b:17:ce:a4:25:67:68:75:ff:85:05:00:61:9b:b0:c9:
1e:54:22:d9:30:34:11:14:d4:ae:b6:50:75:17:fe:7f:03:0a:
6c:ec:fd:df:8c:27:e0:15:7f:b8:99:e0:d5:27:7a:97:68:31:
a0:8c:0a:e8:66:c1:67:d8:4b:32:cb:52:75:76:8b:a9:d9:1f:
e9:16:54:8d:c7:c6:1e:e9:3d:4b:9d:3f:66:d7:4a:eb:bf:85:
97:fa:ca:31
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTUvzsX/3ti9B8+mZl04SsRuyBugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2
N0ZGRUZBQTAeFw0yNjA1MTIyMjIwNDFaFw0yNjA1MTQwMTI4NDFaMDMxMTAvBgNV
BAMTKEE0MjEyOTNCMzE5OEIxRkRDMkQ3RUUxREQyRjBCMzhBNkYwMjgzMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYmBYsa9GM/Lwu2NyM6UQwqgxK
4RQX6x6LhCMu+BQwL+ipMCIhid1JLKWvqNVmb55LnIyEkAGiq63VloF/N5Xvk5Gr
xQBbtFPxTnAA/Ygo2VuzFPe8UihXKP491ruR5Rpch+WRCIJ+HloK+xRmgFrcKd2O
lFeiD7rhbtf402+yBa30/LOBaB+I8Xv25ZiUAnil7+QQV3hkO0VJ6GyYjQi95HOG
oo4eVK6TVrWwuMcN4PZYStLZ7ou0cZUUu0UW5a6YFdSBDYv5qNSxRk9ktfJ1BvVo
5AIHPoQO1H8n/RPEWTr7goCDiV5z3XymhF787qVUAt0TKl5ZqX0sPDyv6JpVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpCEpOzGYsf3C1+4d0vCzim8CgzYwHwYDVR0j
BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw
RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF
RkFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5
NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1
M0E2N0ZGRUZBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABmlVaGV7HjIXRLoUO47fH5apB8v94QJLpV8
DD9EjH7ZsruMsGpdxT7eAMJamWZM9k8z1cY/YhjDDmEUn0QZ4O4jL6+ppNHc44Db
bjVZvj58g4jgMuql865sWZk5Bl+9uqutsC059j7VTkKsnERhin60aA6hWBqN17lC
IpMwyQkV5WZ57h5rWHepTxfKcf3NTVzETg+Axhg4+G1rsyiHqzhEDT66ixfOpCVn
aHX/hQUAYZuwyR5UItkwNBEU1K62UHUX/n8DCmzs/d+MJ+AVf7iZ4NUnepdoMaCM
CuhmwWfYSzLLUnV2i6nZH+kWVI3Hxh7pPUudP2bXSuu/hZf6yjE=
-----END CERTIFICATE-----
Generated at Wed May 13 07:56:34 2026 by rpki-client