$ rpki-client -vvf rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft File: B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft (raw, json) Hash identifier: oX5hLVGDvvGySnxkSUK+OmRAKPo5+Fhx+AZL/q/USOY= Subject key identifier: 63:B8:71:50:6B:B0:F9:71:BE:31:92:1E:50:CD:89:A6:E0:00:15:1D Authority key identifier: B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 Certificate issuer: /CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Certificate serial: 132F69941F01817195D10E412862D8235E99F35A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft Manifest number: 71 Signing time: Thu 23 Jul 2026 23:33:35 +0000 Manifest this update: Thu 23 Jul 2026 23:28:35 +0000 Manifest next update: Sat 25 Jul 2026 00:43:35 +0000 Files and hashes: 1: B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl (hash: BcqDGc1ImIun1sjcP72JXkzllvOL9kirO8YjTWJsavs=) 2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: ZLVGrLGxQp2e5Y2IzOOoMpl4wxPvjrD5ZWNyIr1u5Ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2f:69:94:1f:01:81:71:95:d1:0e:41:28:62:d8:23:5e:99:f3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Validity Not Before: Jul 23 23:28:35 2026 GMT Not After : Jul 25 00:43:35 2026 GMT Subject: CN=63B871506BB0F971BE31921E50CD89A6E000151D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:d3:ba:ec:74:f4:4e:f8:e7:4d:08:1b:f4: 4e:b8:44:4e:b3:85:86:2f:07:3e:c0:ec:ae:18:14: 94:32:4a:ed:22:14:0c:a1:6f:dc:a2:d7:fa:c7:e0: 32:08:b0:b5:68:83:98:03:cc:ae:2b:3a:c8:bb:d6: 2a:d6:68:9a:fe:ff:b4:a8:d0:11:c4:03:52:9f:46: 4c:c2:2a:15:2c:77:39:55:e9:65:5b:cd:8b:ba:c4: 80:3c:a4:8f:1a:de:44:21:9b:38:07:c5:59:06:d1: ae:cf:56:b5:c8:77:61:bd:7b:02:c5:22:c7:1c:7d: 64:e9:f9:3e:2e:d7:5a:6a:86:22:c3:2c:9c:b1:e0: 64:54:dc:22:fc:0f:7f:96:41:3c:a9:07:86:c0:21: ef:06:02:27:f9:cd:56:4f:48:76:91:c8:53:18:83: e1:07:7e:3a:6f:48:fc:c5:50:46:16:37:69:b4:09: 3f:e6:d5:9e:50:50:b5:af:e9:20:01:49:68:ae:69: 08:34:9a:70:67:96:cf:f5:6d:54:c3:ff:2a:4d:4e: d3:83:52:c0:21:a1:57:01:14:66:cd:3f:bc:51:08: c6:71:c2:32:db:d3:a2:f4:77:b4:b1:0a:3f:42:f2: 94:d6:96:f1:15:67:d2:86:91:60:51:0e:da:d2:12: cc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B8:71:50:6B:B0:F9:71:BE:31:92:1E:50:CD:89:A6:E0:00:15:1D X509v3 Authority Key Identifier: keyid:B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5f:f7:b2:24:2e:d1:08:b2:d2:49:a6:b7:2d:b1:28:04:7a: 4d:e1:5f:31:43:88:5b:11:d4:9c:69:2c:38:78:f8:b3:3f:26: d3:ff:32:10:00:52:bb:5b:59:f7:07:2f:14:cb:86:7c:3a:ae: ce:06:35:0d:1e:83:10:67:9f:87:b6:d7:c9:1e:09:61:ab:cf: ed:6d:bc:8b:61:7c:2b:bd:24:d1:4a:4a:51:83:f6:04:a8:7d: 21:d1:5e:5e:17:ff:2d:d3:bd:a7:34:b4:68:1a:6d:04:f9:a8: a2:e1:d7:3b:5d:43:b0:df:48:a0:e3:17:4f:72:34:cd:4d:24: d4:bb:11:a6:ce:91:eb:6a:03:2c:c4:a2:93:64:63:28:de:3e: 03:90:10:f9:c4:7f:1e:cd:a1:d1:a4:f7:1b:c9:a9:8b:f4:e2: a6:cc:95:9a:31:8f:81:ce:3e:5f:5c:54:c9:c4:ae:75:99:6f: 96:bc:8e:74:05:c7:99:21:f9:6a:9b:97:eb:0a:e7:b8:9d:80: 96:35:3c:f5:87:c8:f0:90:f1:72:53:cd:12:9d:d6:d5:da:d2: c0:3e:4e:e6:6d:a6:73:63:b2:3c:80:0d:7f:be:3f:48:3c:6a: 53:b6:ae:e9:d3:31:e2:ee:13:49:2c:71:70:de:5f:d4:f3:67: ba:2e:94:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEy9plB8BgXGV0Q5BKGLYI16Z81owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhF MDZBOTcyODAeFw0yNjA3MjMyMzI4MzVaFw0yNjA3MjUwMDQzMzVaMDMxMTAvBgNV BAMTKDYzQjg3MTUwNkJCMEY5NzFCRTMxOTIxRTUwQ0Q4OUE2RTAwMDE1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ctO67HT0TvjnTQgb9E64RE6z hYYvBz7A7K4YFJQySu0iFAyhb9yi1/rH4DIIsLVog5gDzK4rOsi71irWaJr+/7So 0BHEA1KfRkzCKhUsdzlV6WVbzYu6xIA8pI8a3kQhmzgHxVkG0a7PVrXId2G9ewLF IsccfWTp+T4u11pqhiLDLJyx4GRU3CL8D3+WQTypB4bAIe8GAif5zVZPSHaRyFMY g+EHfjpvSPzFUEYWN2m0CT/m1Z5QULWv6SABSWiuaQg0mnBnls/1bVTD/ypNTtOD UsAhoVcBFGbNP7xRCMZxwjLb06L0d7SxCj9C8pTWlvEVZ9KGkWBRDtrSEswPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY7hxUGuw+XG+MZIeUM2JpuAAFR0wHwYDVR0j BBgwFoAUtw+ECty5+FFxsHO5UdqquOBqlygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIxZjNmYWUtZDBjYi00YTE3LWE1NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFE Q0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhFMDZBOTcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzBGODQwQURDQjlGODUxNzFCMDczQjk1MURBQUFCOEUwNkE5 NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFB QjhFMDZBOTcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxf97IkLtEIstJJprctsSgEek3hXzFDiFsR 1JxpLDh4+LM/JtP/MhAAUrtbWfcHLxTLhnw6rs4GNQ0egxBnn4e218keCWGrz+1t vIthfCu9JNFKSlGD9gSofSHRXl4X/y3Tvac0tGgabQT5qKLh1ztdQ7DfSKDjF09y NM1NJNS7EabOketqAyzEopNkYyjePgOQEPnEfx7NodGk9xvJqYv04qbMlZoxj4HO Pl9cVMnErnWZb5a8jnQFx5kh+Wqbl+sK57idgJY1PPWHyPCQ8XJTzRKd1tXa0sA+ TuZtpnNjsjyADX++P0g8alO2runTMeLuE0kscXDeX9TzZ7oulAw= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:38 2026 by rpki-client