$ rpki-client -vvf rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft File: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft (raw, json) Hash identifier: a4/mXh0V8Oyh4QCZTBer6NA3cbfZnB9YLK8BOqn5Ndw= Subject key identifier: A2:08:BF:06:0E:3E:AE:9B:B5:8E:AB:E9:1C:3E:DF:4D:CB:B3:99:11 Authority key identifier: 70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA Certificate issuer: /CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Certificate serial: 0D811EF69B7B1161AA00756C75AF3D07CDBCAEB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft Manifest number: 0E Signing time: Tue 12 May 2026 20:42:48 +0000 Manifest this update: Tue 12 May 2026 20:37:48 +0000 Manifest next update: Wed 13 May 2026 21:38:48 +0000 Files and hashes: 1: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl (hash: 3YpO9nnWfK4Cl/SYjwOgdB0Isn12zq6D2lXOjjDv6+c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:81:1e:f6:9b:7b:11:61:aa:00:75:6c:75:af:3d:07:cd:bc:ae:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Validity Not Before: May 12 20:37:48 2026 GMT Not After : May 13 21:38:48 2026 GMT Subject: CN=A208BF060E3EAE9BB58EABE91C3EDF4DCBB39911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:9d:4d:c7:04:b2:78:1f:06:10:54:95:fe: 14:77:c9:47:88:57:a5:79:45:aa:8d:98:21:f9:6c: 4f:a3:eb:cf:56:9e:0c:b8:ba:71:d1:cb:60:ec:92: 5a:5f:c7:41:53:13:d9:a5:8c:94:5f:4a:95:f1:df: 4c:cf:6a:02:f1:1d:ce:5b:fd:83:15:b5:78:f4:08: f2:e1:fc:77:a1:68:b7:43:0f:ef:9f:41:8e:fa:56: e0:51:01:1c:03:24:a3:48:09:03:59:9d:2d:be:0e: 17:fd:89:94:de:49:b1:95:39:85:84:29:c4:56:1f: 28:bc:10:29:55:00:08:f7:11:d7:33:04:4a:3d:34: 52:ed:44:48:61:5c:d2:b0:20:4e:fc:a9:34:be:a8: c5:2c:d8:d3:ea:03:e7:d7:f9:d7:32:ad:f7:ab:4b: 9f:a6:e9:18:0f:02:e7:3e:e0:64:4d:32:39:fe:fd: 1d:95:81:83:a9:22:d0:51:5a:a9:c5:a5:84:72:e6: 09:bd:bf:cf:23:62:ea:2f:b4:f9:61:f5:0f:bf:98: d0:e1:34:28:df:c5:fa:32:a9:ce:1e:0a:3d:6b:7a: 34:be:3e:02:75:61:94:92:e9:ea:03:42:dd:40:01: cb:41:9f:4e:c3:85:49:5a:dd:90:50:6f:8e:df:e2: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:08:BF:06:0E:3E:AE:9B:B5:8E:AB:E9:1C:3E:DF:4D:CB:B3:99:11 X509v3 Authority Key Identifier: keyid:70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:04:f1:a4:5a:37:90:8a:3c:af:a0:76:b3:24:eb:ab:e3:55: f6:4b:39:5e:de:3d:4b:bf:3b:d3:2d:8d:4b:b3:46:23:01:96: 1d:29:3f:65:27:33:0d:fd:51:b1:e1:64:a1:e2:5d:b1:22:52: 8f:78:23:b7:42:aa:74:ad:e8:dd:aa:c9:2c:d9:5e:a5:31:32: b2:5e:23:f3:c2:6f:13:10:dc:01:3d:a5:a6:dd:bf:82:ef:84: 8b:36:6c:c1:70:55:63:07:aa:80:57:f3:de:69:ef:14:4b:5f: 48:55:46:6c:16:5e:bb:18:08:41:72:89:5a:93:8f:9d:13:bc: be:6e:60:ec:1c:2b:48:f2:27:06:8c:9c:ac:95:f2:5e:ba:1a: 45:b9:61:34:c2:41:96:0d:a4:14:78:fd:56:a2:ba:34:f8:e8: 0a:b5:72:2a:0d:70:dd:d2:3a:6d:7f:31:43:26:94:b5:a7:0f: 27:60:4a:6e:11:b3:f0:68:1c:80:1f:7f:c2:a8:32:9b:d5:90: 29:b8:49:0c:a7:9e:42:31:c0:22:67:3f:61:bc:c1:e5:10:cc: 2a:0d:d8:b4:4a:b4:68:1b:02:12:1b:f9:de:00:fe:e9:0d:ef: f5:e2:4a:87:ed:9d:c6:f4:fc:31:3c:0c:ca:e1:28:40:28:b6: 5d:2f:29:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYEe9pt7EWGqAHVsda89B828rrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3 QjMxMzVBQTAeFw0yNjA1MTIyMDM3NDhaFw0yNjA1MTMyMTM4NDhaMDMxMTAvBgNV BAMTKEEyMDhCRjA2MEUzRUFFOUJCNThFQUJFOTFDM0VERjREQ0JCMzk5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0n51NxwSyeB8GEFSV/hR3yUeI V6V5RaqNmCH5bE+j689Wngy4unHRy2Dsklpfx0FTE9mljJRfSpXx30zPagLxHc5b /YMVtXj0CPLh/HehaLdDD++fQY76VuBRARwDJKNICQNZnS2+Dhf9iZTeSbGVOYWE KcRWHyi8EClVAAj3EdczBEo9NFLtREhhXNKwIE78qTS+qMUs2NPqA+fX+dcyrfer S5+m6RgPAuc+4GRNMjn+/R2VgYOpItBRWqnFpYRy5gm9v88jYuovtPlh9Q+/mNDh NCjfxfoyqc4eCj1rejS+PgJ1YZSS6eoDQt1AActBn07DhUla3ZBQb47f4r+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUogi/Bg4+rpu1jqvpHD7fTcuzmREwHwYDVR0j BBgwFoAUcPTL1fR6U1jnf63tud1GOXsxNaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NDllZjUtYzQ4NC00ZjQxLWEwNTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVG NDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3QjMxMzVBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy83MEY0Q0JENUY0N0E1MzU4RTc3RkFERURCOURENDYzOTdCMzEz NUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2 Mzk3QjMxMzVBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoE8aRaN5CKPK+gdrMk66vjVfZLOV7ePUu/ O9MtjUuzRiMBlh0pP2UnMw39UbHhZKHiXbEiUo94I7dCqnSt6N2qySzZXqUxMrJe I/PCbxMQ3AE9pabdv4LvhIs2bMFwVWMHqoBX895p7xRLX0hVRmwWXrsYCEFyiVqT j50TvL5uYOwcK0jyJwaMnKyV8l66GkW5YTTCQZYNpBR4/VaiujT46Aq1cioNcN3S Om1/MUMmlLWnDydgSm4Rs/BoHIAff8KoMpvVkCm4SQynnkIxwCJnP2G8weUQzCoN 2LRKtGgbAhIb+d4A/ukN7/XiSoftncb0/DE8DMrhKEAotl0vKXs= -----END CERTIFICATE-----Generated at Wed May 13 03:53:14 2026 by rpki-client