$ rpki-client -vvf rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft File: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft (raw, json) Hash identifier: DcO/95odeQSoE/PFF7/M74ogmC1rj8EPzO9Ju+mfVRY= Subject key identifier: 70:A9:BD:BB:E4:56:06:40:7C:20:01:2E:BF:4F:C1:14:02:7A:CC:E5 Authority key identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 Certificate issuer: /CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Certificate serial: 5B3673E1BB9C454FDE7532896BFF746485C4DB3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:11:58 +0000 Manifest this update: Tue 12 May 2026 17:06:58 +0000 Manifest next update: Wed 13 May 2026 19:26:58 +0000 Files and hashes: 1: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: xkIsUOsvhzcBh2sD2rCI6s5EqakfkJ/T7bTiJ7H33iA=) 2: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl (hash: YL5U+kU1RHCfqooVWx/LdgFtGpoh/Gx2u3PoyP5l1X8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:36:73:e1:bb:9c:45:4f:de:75:32:89:6b:ff:74:64:85:c4:db:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Validity Not Before: May 12 17:06:58 2026 GMT Not After : May 13 19:26:58 2026 GMT Subject: CN=70A9BDBBE45606407C20012EBF4FC114027ACCE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a1:78:2b:a9:fc:71:48:77:aa:d3:58:f7:98: ca:9c:30:04:8c:b7:7a:01:8e:6e:3b:03:57:de:fd: b1:1e:5c:4d:75:3b:65:5a:89:5d:4e:53:17:fc:0c: 00:6c:b4:38:b1:fd:fa:22:9d:a8:8d:a7:e0:77:f2: 95:df:88:8a:56:eb:16:57:5e:f9:86:37:de:49:20: 62:58:54:80:0d:b7:e7:6e:fe:4c:a0:4a:8d:d2:e5: 25:a1:cd:63:a7:63:97:c3:c9:a6:e6:4a:80:89:61: 8c:c5:25:74:36:96:47:5c:2d:b3:65:83:ca:ff:d9: 25:3f:86:fb:5f:37:09:1e:78:c1:ea:b1:58:d2:d4: fd:f2:e5:3a:16:71:01:93:62:3d:d7:1a:a5:a9:4b: 0c:98:66:38:74:cf:60:a5:09:02:97:35:94:d0:ab: 9a:0a:20:05:f7:7f:d7:df:03:48:6b:db:ef:59:e6: 7c:72:69:fc:7f:e2:4e:b2:c1:91:4b:c0:21:f1:44: 3a:ed:a2:5e:36:ca:b7:e7:ed:26:6b:b3:32:1a:5a: fb:de:f5:31:f2:e5:ea:e3:04:a1:c5:d3:5a:48:6a: df:d6:24:24:78:ec:26:0f:6e:44:49:90:d8:0e:23: 9f:41:20:ef:9d:41:42:d1:00:0c:f6:3a:39:02:09: 86:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A9:BD:BB:E4:56:06:40:7C:20:01:2E:BF:4F:C1:14:02:7A:CC:E5 X509v3 Authority Key Identifier: keyid:70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7f:9b:3e:18:51:c7:6e:e9:0a:de:3e:69:28:a9:e7:9d:73: 05:2a:46:d5:76:71:00:1a:3f:6e:c8:cc:39:c2:0b:a2:8c:10: af:ab:67:3a:20:7b:60:df:23:7e:2a:23:5e:df:8a:dc:5e:ba: 19:fe:18:a8:2f:a0:dd:5e:cc:8e:06:50:c1:e4:97:37:bf:5f: 89:1f:08:c3:4a:4f:f1:5d:33:1b:22:e7:85:90:7a:37:1d:6b: c8:52:2f:13:84:f5:d2:6f:bf:38:01:af:df:e1:18:9a:39:4b: 66:c0:4d:4a:46:c2:69:cc:39:1e:18:77:3a:d4:69:c3:20:02: c1:18:c5:ca:74:a7:bb:26:1c:3f:dd:ff:bd:dc:5a:eb:29:2c: b4:f2:ea:41:2e:f0:73:cd:29:94:c4:d0:9f:1e:f4:0a:1c:23: 7a:0c:14:9c:d1:77:6f:9d:6f:52:00:00:a4:66:50:1c:35:8d: 5f:6e:1c:a6:03:9c:2a:00:0c:c2:e2:49:2b:2f:84:9a:4f:a5: a6:66:46:1f:4d:39:15:d2:99:a4:f5:b0:76:0d:1d:83:57:81: bf:f7:a0:94:fd:63:c6:b7:55:96:a4:98:1f:43:f0:0c:e9:5e: 19:21:4b:36:82:a4:aa:9c:66:58:b3:69:cf:c8:6a:a2:d5:e1: 83:e1:e3:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWzZz4bucRU/edTKJa/90ZIXE2zowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0 QjQxMTc4MTAeFw0yNjA1MTIxNzA2NThaFw0yNjA1MTMxOTI2NThaMDMxMTAvBgNV BAMTKDcwQTlCREJCRTQ1NjA2NDA3QzIwMDEyRUJGNEZDMTE0MDI3QUNDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRoXgrqfxxSHeq01j3mMqcMASM t3oBjm47A1fe/bEeXE11O2VaiV1OUxf8DABstDix/foinaiNp+B38pXfiIpW6xZX XvmGN95JIGJYVIANt+du/kygSo3S5SWhzWOnY5fDyabmSoCJYYzFJXQ2lkdcLbNl g8r/2SU/hvtfNwkeeMHqsVjS1P3y5ToWcQGTYj3XGqWpSwyYZjh0z2ClCQKXNZTQ q5oKIAX3f9ffA0hr2+9Z5nxyafx/4k6ywZFLwCHxRDrtol42yrfn7SZrszIaWvve 9THy5erjBKHF01pIat/WJCR47CYPbkRJkNgOI59BIO+dQULRAAz2OjkCCYZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcKm9u+RWBkB8IAEuv0/BFAJ6zOUwHwYDVR0j BBgwFoAUcPeqTttsRXtdAtZnYt3Y7ktBF4EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZjNWExY2MtY2M1ZS00ZTU4LThkZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVE QjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0QjQxMTc4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY3QUE0RURCNkM0NTdCNUQwMkQ2Njc2MkRERDhFRTRCNDEx NzgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4 RUU0QjQxMTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACd/mz4YUcdu6QrePmkoqeedcwUqRtV2cQAa P27IzDnCC6KMEK+rZzoge2DfI34qI17fitxeuhn+GKgvoN1ezI4GUMHklze/X4kf CMNKT/FdMxsi54WQejcda8hSLxOE9dJvvzgBr9/hGJo5S2bATUpGwmnMOR4YdzrU acMgAsEYxcp0p7smHD/d/73cWuspLLTy6kEu8HPNKZTE0J8e9AocI3oMFJzRd2+d b1IAAKRmUBw1jV9uHKYDnCoADMLiSSsvhJpPpaZmRh9NORXSmaT1sHYNHYNXgb/3 oJT9Y8a3VZakmB9D8AzpXhkhSzaCpKqcZlizac/IaqLV4YPh49k= -----END CERTIFICATE-----Generated at Wed May 13 03:16:27 2026 by rpki-client