
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
File: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft (raw, json)
Hash identifier: HYikk4Z8WGXU/apIauWFLVc6OhBQI7MsoRudYKlACWI=
Subject key identifier: EE:0D:AD:9D:4D:2E:4B:1D:C3:50:A8:10:00:23:E8:2D:7B:CA:24:C7
Authority key identifier: 70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19
Certificate issuer: /CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619
Certificate serial: 6E49EDA7D588004CC01221C76A95D640AF8E3A03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
Manifest number: 0F
Signing time: Wed 13 May 2026 01:45:46 +0000
Manifest this update: Wed 13 May 2026 01:40:46 +0000
Manifest next update: Thu 14 May 2026 02:33:46 +0000
Files and hashes: 1: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: EtnUTjZ94OuTXPQ8oodtLlh2y5zeN5ozbISTk51v5C4=)
2: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: 4MzusLkn8wvWUBvFiEkops16kBYmlHHlayjI7RCIrok=)
3: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl (hash: lvkPZMF3h+HvwgSrR+h4vkQ0iwaWHg/JVKZyxxRn8tc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl
rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:49:ed:a7:d5:88:00:4c:c0:12:21:c7:6a:95:d6:40:af:8e:3a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619
Validity
Not Before: May 13 01:40:46 2026 GMT
Not After : May 14 02:33:46 2026 GMT
Subject: CN=EE0DAD9D4D2E4B1DC350A8100023E82D7BCA24C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:fd:b7:85:60:20:b8:cf:f9:07:42:7c:ba:
25:8a:32:fe:4b:90:c0:66:61:90:ed:4b:df:09:c6:
00:15:1b:fb:17:24:9e:15:71:42:67:e6:84:21:7d:
75:85:dc:49:2c:8f:c7:a9:67:8f:fc:4e:fa:39:a3:
06:ee:cc:18:f1:37:71:05:a1:a8:54:d5:2a:47:24:
77:fe:0e:30:62:62:a7:02:80:24:c3:02:2a:12:28:
76:ee:66:bd:9b:7b:8a:eb:65:52:e3:a6:be:72:9b:
4e:e4:b7:70:ef:f1:ea:eb:e1:5c:29:7f:41:18:76:
2c:3d:5c:21:f2:d1:3c:eb:c2:3c:af:40:47:ef:ea:
4c:a0:b2:3c:eb:3c:4e:92:cd:85:d4:33:1f:6c:99:
8f:45:6f:ab:20:7f:7b:f0:94:89:71:9e:bb:b5:30:
c6:d5:d4:3b:da:82:8c:f1:9a:25:63:6f:0c:75:2f:
c5:a2:30:ed:5e:97:3b:08:27:7e:e5:08:f0:a6:14:
a5:d2:e3:e0:e5:f9:9d:90:04:24:f0:c1:05:25:8b:
6d:c6:1e:94:c5:66:85:9d:fd:a0:40:5c:a6:3e:b6:
e5:3a:04:8c:fc:5e:d1:d5:13:6d:30:f1:86:99:95:
d9:ec:77:6f:a8:82:7c:44:9d:c2:36:85:9a:b2:a3:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0D:AD:9D:4D:2E:4B:1D:C3:50:A8:10:00:23:E8:2D:7B:CA:24:C7
X509v3 Authority Key Identifier:
keyid:70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2e:26:fb:9b:9d:ef:4e:de:d2:d1:a9:5e:22:c3:5f:a0:eb:
f5:4c:a3:53:b5:37:e8:29:92:0c:84:8e:de:a1:b4:2e:d6:ff:
06:b1:0c:40:5a:ff:8d:7c:47:ca:81:4c:72:f5:af:ca:09:f4:
3a:bf:d6:19:96:92:24:31:a6:0f:a7:26:38:d6:01:84:9f:e7:
6d:01:8e:73:42:5f:70:a1:23:2e:06:ab:ef:f4:3d:4c:84:87:
99:a9:4b:cc:ff:d6:24:8f:dc:e7:b2:ac:f3:06:90:ab:47:b0:
6b:b9:bb:05:85:3d:2a:20:99:ec:fa:59:ff:ee:57:15:21:32:
45:2e:af:5d:7c:96:ae:fe:9f:ca:08:31:53:15:20:ba:f9:63:
32:c9:ce:69:26:7d:bb:c5:74:13:a3:df:5b:0e:8f:58:c3:a7:
c4:b9:13:73:f8:73:b9:86:cb:bd:1d:3c:8a:e8:f5:7d:6e:ed:
06:59:c9:9b:70:d9:0a:34:ab:c2:fa:7c:8f:a3:df:c1:03:5f:
9b:8e:f0:e5:14:19:5d:84:db:3b:94:78:af:16:cd:61:a8:26:
be:64:27:38:3f:ef:c7:36:23:20:4b:a0:c4:dd:0b:f3:0f:fc:
c3:ae:ed:99:5e:21:77:a8:ec:7c:f9:d9:30:fc:01:35:0a:73:
79:a3:29:2b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbkntp9WIAEzAEiHHapXWQK+OOgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQw
NEVBODYxOTAeFw0yNjA1MTMwMTQwNDZaFw0yNjA1MTQwMjMzNDZaMDMxMTAvBgNV
BAMTKEVFMERBRDlENEQyRTRCMURDMzUwQTgxMDAwMjNFODJEN0JDQTI0QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgP23hWAguM/5B0J8uiWKMv5L
kMBmYZDtS98JxgAVG/sXJJ4VcUJn5oQhfXWF3Eksj8epZ4/8Tvo5owbuzBjxN3EF
oahU1SpHJHf+DjBiYqcCgCTDAioSKHbuZr2be4rrZVLjpr5ym07kt3Dv8err4Vwp
f0EYdiw9XCHy0TzrwjyvQEfv6kygsjzrPE6SzYXUMx9smY9Fb6sgf3vwlIlxnru1
MMbV1DvagozxmiVjbwx1L8WiMO1elzsIJ37lCPCmFKXS4+Dl+Z2QBCTwwQUli23G
HpTFZoWd/aBAXKY+tuU6BIz8XtHVE20w8YaZldnsd2+ognxEncI2hZqyox8vAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7g2tnU0uSx3DUKgQACPoLXvKJMcwHwYDVR0j
BBgwFoAUcNO1hUnvLKSrD5G8ADPLTQTqhhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzA4Y2MwYjMtMjUwOC00NzdmLTlmMjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0
OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQwNEVBODYxOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MEQzQjU4NTQ5RUYyQ0E0QUIwRjkxQkMwMDMzQ0I0RDA0RUE4
NjE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA4Y2MwYjMtMjUwOC00NzdmLTlm
MjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NC
NEQwNEVBODYxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAUuJvubne9O3tLRqV4iw1+g6/VMo1O1N+gp
kgyEjt6htC7W/waxDEBa/418R8qBTHL1r8oJ9Dq/1hmWkiQxpg+nJjjWAYSf520B
jnNCX3ChIy4Gq+/0PUyEh5mpS8z/1iSP3OeyrPMGkKtHsGu5uwWFPSogmez6Wf/u
VxUhMkUur118lq7+n8oIMVMVILr5YzLJzmkmfbvFdBOj31sOj1jDp8S5E3P4c7mG
y70dPIro9X1u7QZZyZtw2Qo0q8L6fI+j38EDX5uO8OUUGV2E2zuUeK8WzWGoJr5k
Jzg/78c2IyBLoMTdC/MP/MOu7ZleIXeo7Hz52TD8ATUKc3mjKSs=
-----END CERTIFICATE-----
Generated at Wed May 13 04:10:04 2026 by rpki-client