$ rpki-client -vvf rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft File: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft (raw, json) Hash identifier: ddGeM6qhMbrJiC3MOZ+OL5aR3w9Bsm27D9NHRX9vo8c= Subject key identifier: 5C:E5:08:83:25:C0:33:BA:CC:6E:3E:08:D9:7F:69:5C:37:CD:56:B0 Authority key identifier: 70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA Certificate issuer: /CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Certificate serial: 487EFD41B293B78F0A2AF24464EB0F330D510A70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:54:23 +0000 Manifest this update: Thu 23 Jul 2026 19:49:23 +0000 Manifest next update: Fri 24 Jul 2026 21:18:23 +0000 Files and hashes: 1: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl (hash: t2JwuCk4KasMmVemXsAJ06rr0Ab85OhGDpn0zc23Jfo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7e:fd:41:b2:93:b7:8f:0a:2a:f2:44:64:eb:0f:33:0d:51:0a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Validity Not Before: Jul 23 19:49:23 2026 GMT Not After : Jul 24 21:18:23 2026 GMT Subject: CN=5CE5088325C033BACC6E3E08D97F695C37CD56B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:06:b9:1d:5b:70:ec:08:21:de:b6:f6:4d: b8:8c:92:9f:59:13:65:39:2d:8e:97:47:d8:74:c8: 68:7f:40:7e:49:cb:af:b8:53:32:ae:04:cf:8e:0d: e5:26:98:9d:9e:01:2e:eb:5a:8f:da:33:ae:a6:b5: 5b:3b:b1:b8:f8:ab:17:5a:23:3b:a4:63:a6:22:dd: 88:fc:04:4a:8b:80:64:22:b5:da:ca:8e:ff:e4:d9: 63:de:4e:5d:5f:68:2e:47:e1:d6:c3:2f:ec:63:93: b8:c4:06:0b:56:af:a9:2a:65:e7:5a:12:66:46:31: a7:b2:14:4e:bb:5d:c0:8c:4d:08:3e:60:b8:05:3e: 57:55:59:77:c2:ed:f5:d6:4a:b1:2c:b5:10:cf:c2: 26:92:5a:3c:22:23:ea:d2:09:df:49:1e:b6:e2:f9: 2b:9f:57:98:1f:77:45:b1:21:d9:81:e3:4f:c5:b6: 82:78:a8:07:fd:f8:ca:d1:e5:e3:f3:a7:9a:fe:c0: 7a:9e:f4:b7:03:52:cc:dd:93:7f:f7:94:90:16:d8: 11:dd:ae:3a:5b:f4:81:1f:04:fb:59:f8:71:f4:86: 2d:ee:40:c8:42:b5:9a:4c:f8:af:a2:c1:12:db:22: 51:5f:a1:76:fb:b3:15:aa:fc:96:fa:61:2a:85:93: 7d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:08:83:25:C0:33:BA:CC:6E:3E:08:D9:7F:69:5C:37:CD:56:B0 X509v3 Authority Key Identifier: keyid:70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:1f:cf:70:a1:44:19:c9:bf:0a:8d:f9:be:d4:89:56:fc:60: 3a:63:70:8e:48:b2:64:ca:7f:2b:b9:ca:5a:b8:78:e1:62:07: 1c:82:26:36:c0:aa:56:d0:47:d1:0b:60:f2:2b:f6:ac:cd:ba: d3:60:7e:71:bc:8f:b6:7c:7d:f9:98:ab:bf:7e:06:9c:ec:23: ac:aa:18:23:90:ca:1d:87:82:53:f4:a9:37:1b:f3:93:36:48: ba:f2:c7:ea:9b:37:c1:74:4a:f7:0a:8a:44:3a:9c:ea:2e:b7: c0:12:ea:db:57:79:97:bd:4b:67:4d:10:f4:42:2b:fa:cd:a1: 99:f6:0d:d1:ea:25:9e:eb:2d:93:47:66:ae:35:ca:84:a3:2c: 41:d2:38:77:fd:fd:3b:6c:7b:e5:95:3d:ae:cb:d7:e5:b9:19: 81:52:a8:f7:45:83:ce:3e:7b:00:84:e0:5e:a7:78:8a:92:6f: 45:9c:e7:89:be:12:77:a2:9c:a4:78:77:c2:4c:c3:22:aa:36: 91:d9:74:68:67:90:cb:d5:8e:e6:a4:3b:ba:e6:82:61:5d:af: 18:ea:c8:31:c7:d5:0d:82:d9:97:5b:72:5e:6d:d4:98:5d:20: e2:50:0f:39:b6:6d:2f:ea:47:20:ea:53:05:c5:c6:19:1c:40: 24:2e:6d:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSH79QbKTt48KKvJEZOsPMw1RCnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3 QjMxMzVBQTAeFw0yNjA3MjMxOTQ5MjNaFw0yNjA3MjQyMTE4MjNaMDMxMTAvBgNV BAMTKDVDRTUwODgzMjVDMDMzQkFDQzZFM0UwOEQ5N0Y2OTVDMzdDRDU2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZwa5HVtw7Agh3rb2TbiMkp9Z E2U5LY6XR9h0yGh/QH5Jy6+4UzKuBM+ODeUmmJ2eAS7rWo/aM66mtVs7sbj4qxda IzukY6Yi3Yj8BEqLgGQitdrKjv/k2WPeTl1faC5H4dbDL+xjk7jEBgtWr6kqZeda EmZGMaeyFE67XcCMTQg+YLgFPldVWXfC7fXWSrEstRDPwiaSWjwiI+rSCd9JHrbi +SufV5gfd0WxIdmB40/FtoJ4qAf9+MrR5ePzp5r+wHqe9LcDUszdk3/3lJAW2BHd rjpb9IEfBPtZ+HH0hi3uQMhCtZpM+K+iwRLbIlFfoXb7sxWq/Jb6YSqFk32pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXOUIgyXAM7rMbj4I2X9pXDfNVrAwHwYDVR0j BBgwFoAUcPTL1fR6U1jnf63tud1GOXsxNaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NDllZjUtYzQ4NC00ZjQxLWEwNTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVG NDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3QjMxMzVBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy83MEY0Q0JENUY0N0E1MzU4RTc3RkFERURCOURENDYzOTdCMzEz NUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2 Mzk3QjMxMzVBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEfz3ChRBnJvwqN+b7UiVb8YDpjcI5IsmTK fyu5ylq4eOFiBxyCJjbAqlbQR9ELYPIr9qzNutNgfnG8j7Z8ffmYq79+BpzsI6yq GCOQyh2HglP0qTcb85M2SLryx+qbN8F0SvcKikQ6nOout8AS6ttXeZe9S2dNEPRC K/rNoZn2DdHqJZ7rLZNHZq41yoSjLEHSOHf9/Ttse+WVPa7L1+W5GYFSqPdFg84+ ewCE4F6neIqSb0Wc54m+EneinKR4d8JMwyKqNpHZdGhnkMvVjuakO7rmgmFdrxjq yDHH1Q2C2Zdbcl5t1JhdIOJQDzm2bS/qRyDqUwXFxhkcQCQubbQ= -----END CERTIFICATE-----Generated at Fri Jul 24 07:45:18 2026 by rpki-client