$ rpki-client -vvf rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft File: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft (raw, json) Hash identifier: SwSY8+jenqAtPqceaEeM36ExnAhfag3Qsf9Wb93RRQM= Subject key identifier: 76:88:A5:CD:25:F7:AC:46:4A:44:55:F2:87:E4:D9:DD:2A:AF:4E:31 Authority key identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 Certificate issuer: /CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Certificate serial: 7FD55411108B9AE0CD1330298C12CD9AD84F2314 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:49:21 +0000 Manifest this update: Thu 23 Jul 2026 19:44:21 +0000 Manifest next update: Fri 24 Jul 2026 23:20:21 +0000 Files and hashes: 1: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl (hash: 5JZsV38TY3Kk9WP3L7r9ZkB0M3y5+FFxhCuLuA3b154=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: xkIsUOsvhzcBh2sD2rCI6s5EqakfkJ/T7bTiJ7H33iA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d5:54:11:10:8b:9a:e0:cd:13:30:29:8c:12:cd:9a:d8:4f:23:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Validity Not Before: Jul 23 19:44:21 2026 GMT Not After : Jul 24 23:20:21 2026 GMT Subject: CN=7688A5CD25F7AC464A4455F287E4D9DD2AAF4E31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:79:f3:09:43:fc:94:48:1d:15:1f:ac:ab: 1f:f6:b8:83:fb:64:3f:39:1d:a8:f6:77:03:01:87: 71:d5:45:f9:2d:ec:b2:53:11:66:7e:f1:21:fd:c9: 36:e0:b0:22:60:44:a9:c2:8d:13:f2:80:8e:d7:4f: d0:3f:a2:96:15:46:93:81:a1:ba:45:a8:95:02:35: 49:b2:14:6d:b2:e8:b9:1f:83:0a:93:fa:c7:69:b5: a9:d1:57:e3:31:3e:56:71:e7:9c:b7:83:be:57:1f: 34:e9:38:7c:68:81:8a:16:91:0a:2c:7a:68:0a:6a: c1:67:67:0c:92:28:49:89:6f:a3:da:52:9e:c2:bc: 2b:06:66:84:c3:56:fb:de:28:c7:a2:3f:f9:41:98: 10:b7:8b:1b:97:31:79:67:23:8a:62:70:46:c4:08: 8e:59:15:47:7d:9a:69:03:60:55:93:55:c5:a8:b3: 26:d1:9e:10:d5:c7:c5:80:4e:ee:91:20:ca:42:8d: 33:e9:5b:e4:8e:06:7b:e0:3e:bd:9d:16:88:8f:d1: 5a:4e:b4:b1:35:ad:cd:e4:52:11:b8:7a:55:bb:15: 68:6d:41:1f:fb:10:23:94:bd:b4:4c:f8:a9:ca:3c: 88:22:95:28:16:69:c9:65:3a:15:43:f8:ed:9a:ef: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:88:A5:CD:25:F7:AC:46:4A:44:55:F2:87:E4:D9:DD:2A:AF:4E:31 X509v3 Authority Key Identifier: keyid:70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1a:21:a3:05:87:65:13:f9:30:7a:4e:96:99:74:6b:97:87: 1d:5d:6c:f3:e1:22:ab:d9:2f:dc:f7:dd:80:a6:32:e6:8b:b2: 2f:60:82:0b:80:04:43:75:66:9b:e4:d2:41:5a:8a:a4:32:38: 0c:3c:64:59:78:c0:53:9c:1c:43:1c:9b:1d:76:ec:57:c4:b1: ca:1a:f0:db:08:ba:5e:7a:0e:2f:fa:7c:0c:3f:18:a9:69:d3: ab:dd:bb:b0:43:13:46:9d:36:71:a9:73:c2:64:c9:94:f1:da: 36:20:e0:f7:55:9f:53:c3:51:49:ce:da:74:73:3d:66:e9:82: d5:7a:43:5d:89:f0:4c:31:4f:77:42:22:04:d6:da:d4:8c:3f: d4:e3:42:9a:ff:45:bd:ff:b0:f1:65:bc:4f:58:1f:20:ef:63: 99:5a:98:c5:f7:a4:94:7f:e4:88:fd:04:c0:d5:1d:f2:e1:92: 5e:b7:77:38:96:ac:af:12:f1:e2:0a:b3:81:40:10:17:f0:ba: 91:84:c2:2a:9c:5b:13:7f:74:7a:39:b3:dc:16:0f:f9:b9:fc: c2:23:04:cf:6e:e1:cf:d5:d9:c7:3e:95:bf:b4:07:48:2d:5e: 57:17:c0:18:9a:fd:1b:a0:02:fb:9a:80:57:eb:7b:7c:0a:21: cf:c4:d3:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf9VUERCLmuDNEzApjBLNmthPIxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0 QjQxMTc4MTAeFw0yNjA3MjMxOTQ0MjFaFw0yNjA3MjQyMzIwMjFaMDMxMTAvBgNV BAMTKDc2ODhBNUNEMjVGN0FDNDY0QTQ0NTVGMjg3RTREOUREMkFBRjRFMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqonnzCUP8lEgdFR+sqx/2uIP7 ZD85Haj2dwMBh3HVRfkt7LJTEWZ+8SH9yTbgsCJgRKnCjRPygI7XT9A/opYVRpOB obpFqJUCNUmyFG2y6LkfgwqT+sdptanRV+MxPlZx55y3g75XHzTpOHxogYoWkQos emgKasFnZwySKEmJb6PaUp7CvCsGZoTDVvveKMeiP/lBmBC3ixuXMXlnI4picEbE CI5ZFUd9mmkDYFWTVcWosybRnhDVx8WATu6RIMpCjTPpW+SOBnvgPr2dFoiP0VpO tLE1rc3kUhG4elW7FWhtQR/7ECOUvbRM+KnKPIgilSgWacllOhVD+O2a7wtLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdoilzSX3rEZKRFXyh+TZ3SqvTjEwHwYDVR0j BBgwFoAUcPeqTttsRXtdAtZnYt3Y7ktBF4EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZjNWExY2MtY2M1ZS00ZTU4LThkZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVE QjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0QjQxMTc4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY3QUE0RURCNkM0NTdCNUQwMkQ2Njc2MkRERDhFRTRCNDEx NzgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4 RUU0QjQxMTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsaIaMFh2UT+TB6TpaZdGuXhx1dbPPhIqvZ L9z33YCmMuaLsi9ggguABEN1Zpvk0kFaiqQyOAw8ZFl4wFOcHEMcmx127FfEscoa 8NsIul56Di/6fAw/GKlp06vdu7BDE0adNnGpc8JkyZTx2jYg4PdVn1PDUUnO2nRz PWbpgtV6Q12J8EwxT3dCIgTW2tSMP9TjQpr/Rb3/sPFlvE9YHyDvY5lamMX3pJR/ 5Ij9BMDVHfLhkl63dziWrK8S8eIKs4FAEBfwupGEwiqcWxN/dHo5s9wWD/m5/MIj BM9u4c/V2cc+lb+0B0gtXlcXwBia/RugAvuagFfre3wKIc/E02c= -----END CERTIFICATE-----Generated at Fri Jul 24 02:48:43 2026 by rpki-client