$ rpki-client -vvf rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft File: B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft (raw, json) Hash identifier: 70k497ggze7sx3qECeZ/IdjVhRkqR+1YquGNIrEfyhA= Subject key identifier: B1:40:B5:D4:5D:91:C1:0E:17:EA:D4:18:CF:E0:35:59:3B:E5:4C:B8 Authority key identifier: B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 Certificate issuer: /CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Certificate serial: 78DACA3A91043D8F4E1B5064734102CE13F7BEB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:59:40 +0000 Manifest this update: Tue 12 May 2026 18:54:40 +0000 Manifest next update: Wed 13 May 2026 20:41:40 +0000 Files and hashes: 1: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: ZLVGrLGxQp2e5Y2IzOOoMpl4wxPvjrD5ZWNyIr1u5Ho=) 2: B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl (hash: pUTb2TE+vBXzNuVQsxXLmKFno+b4er1dxRMOqEaVj/I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:da:ca:3a:91:04:3d:8f:4e:1b:50:64:73:41:02:ce:13:f7:be:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Validity Not Before: May 12 18:54:40 2026 GMT Not After : May 13 20:41:40 2026 GMT Subject: CN=B140B5D45D91C10E17EAD418CFE035593BE54CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:85:66:58:ca:b5:91:08:be:51:fa:65:45:63: 73:65:3b:6f:15:22:ea:5b:50:b8:6d:35:ee:b6:6c: 30:45:98:b1:5c:e4:9c:2a:49:f8:5b:6b:9a:a3:f8: 3b:6b:90:bd:76:18:a7:c5:e0:0d:a2:7b:86:f6:d7: 46:ca:04:47:68:19:3b:14:2f:08:17:5b:96:74:31: ff:80:46:64:3c:22:da:06:70:6c:4f:49:76:fa:59: 21:9e:13:f2:90:d7:5e:d8:2d:89:c2:8d:85:4d:95: df:bd:03:4d:30:ee:53:5d:0a:84:7b:36:4a:a6:bf: 89:34:c6:ef:ee:c1:85:d5:58:00:31:8d:e8:3e:3f: 74:9f:8c:d9:a5:a4:bc:64:6c:16:d2:18:58:0a:18: c0:e0:15:bc:ea:d7:a3:c9:6d:14:43:45:25:06:d3: 5d:78:99:07:b6:93:99:2d:93:07:89:03:d6:d1:d6: 0c:d2:1a:47:ff:32:c0:4a:b7:cf:92:e1:10:b2:6d: da:53:28:f8:fe:ba:d1:ae:c8:d9:6b:8e:a9:a5:b4: 88:80:a9:59:4a:f1:0a:b4:bf:52:d0:aa:3e:ce:00: d9:66:3f:20:6f:d5:65:a1:f3:16:b1:04:54:0b:6e: 92:66:c1:2c:2e:3f:80:59:fb:e6:ca:5d:99:58:fe: e5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:40:B5:D4:5D:91:C1:0E:17:EA:D4:18:CF:E0:35:59:3B:E5:4C:B8 X509v3 Authority Key Identifier: keyid:B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:fc:e4:08:69:9f:4e:fe:c0:b4:a2:ca:01:aa:3a:ea:bf:a9: c0:d9:6d:c2:04:f0:39:18:ed:7b:d7:35:eb:8d:88:55:ec:5a: 41:0c:db:48:32:8f:dc:a2:fe:00:9d:6d:a3:13:30:86:7c:8a: e9:54:8c:36:84:43:04:6b:6e:3c:71:7c:cb:68:3b:7a:58:88: 5d:9e:23:3e:d7:d9:c0:f2:8d:4d:ff:8e:7a:45:99:43:85:e8: a9:83:49:04:3c:73:80:77:ac:eb:45:87:12:42:3d:bf:77:81: 05:7f:fb:d8:d9:0a:0f:d6:7d:9f:c3:3a:64:a8:97:85:c4:c3: fe:1f:9b:68:87:ca:41:a0:a9:eb:bf:a8:3f:58:5d:f1:04:59: 1f:26:8f:b1:53:ad:45:4a:c7:46:58:f4:1d:94:73:fc:63:df: ab:90:35:32:2c:fa:27:ad:30:7b:c0:67:49:a1:f9:b3:31:2b: 0f:8a:f6:b3:4b:d5:1d:ac:cd:4a:cc:cb:6f:14:78:00:e5:df: 25:e2:a2:f1:15:1e:72:85:e2:d7:0c:4b:a7:fc:fc:dc:32:22: e9:cb:56:d7:e7:75:0f:fa:11:54:28:43:96:3c:40:24:dd:88: cf:28:51:8d:c5:3d:c2:a9:b8:13:fc:35:ef:9f:6f:8e:aa:99: 68:69:84:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNrKOpEEPY9OG1Bkc0ECzhP3vrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhF MDZBOTcyODAeFw0yNjA1MTIxODU0NDBaFw0yNjA1MTMyMDQxNDBaMDMxMTAvBgNV BAMTKEIxNDBCNUQ0NUQ5MUMxMEUxN0VBRDQxOENGRTAzNTU5M0JFNTRDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMhWZYyrWRCL5R+mVFY3NlO28V IupbULhtNe62bDBFmLFc5JwqSfhba5qj+DtrkL12GKfF4A2ie4b210bKBEdoGTsU LwgXW5Z0Mf+ARmQ8ItoGcGxPSXb6WSGeE/KQ117YLYnCjYVNld+9A00w7lNdCoR7 Nkqmv4k0xu/uwYXVWAAxjeg+P3SfjNmlpLxkbBbSGFgKGMDgFbzq16PJbRRDRSUG 0114mQe2k5ktkweJA9bR1gzSGkf/MsBKt8+S4RCybdpTKPj+utGuyNlrjqmltIiA qVlK8Qq0v1LQqj7OANlmPyBv1WWh8xaxBFQLbpJmwSwuP4BZ++bKXZlY/uVZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsUC11F2RwQ4X6tQYz+A1WTvlTLgwHwYDVR0j BBgwFoAUtw+ECty5+FFxsHO5UdqquOBqlygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIxZjNmYWUtZDBjYi00YTE3LWE1NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFE Q0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhFMDZBOTcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzBGODQwQURDQjlGODUxNzFCMDczQjk1MURBQUFCOEUwNkE5 NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFB QjhFMDZBOTcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADj85Ahpn07+wLSiygGqOuq/qcDZbcIE8DkY 7XvXNeuNiFXsWkEM20gyj9yi/gCdbaMTMIZ8iulUjDaEQwRrbjxxfMtoO3pYiF2e Iz7X2cDyjU3/jnpFmUOF6KmDSQQ8c4B3rOtFhxJCPb93gQV/+9jZCg/WfZ/DOmSo l4XEw/4fm2iHykGgqeu/qD9YXfEEWR8mj7FTrUVKx0ZY9B2Uc/xj36uQNTIs+iet MHvAZ0mh+bMxKw+K9rNL1R2szUrMy28UeADl3yXiovEVHnKF4tcMS6f8/NwyIunL VtfndQ/6EVQoQ5Y8QCTdiM8oUY3FPcKpuBP8Ne+fb46qmWhphPg= -----END CERTIFICATE-----Generated at Wed May 13 02:47:23 2026 by rpki-client