
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
File: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft (raw, json)
Hash identifier: dzxPoSyj16uDKJeicc0xTlbBOSOMxfVscPZyyN0Er1w=
Subject key identifier: 55:33:53:B8:76:B7:2C:C1:C2:DC:7C:78:96:24:86:A2:60:AB:7F:F4
Authority key identifier: 70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19
Certificate issuer: /CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619
Certificate serial: 4DA21423A4962678120506DAAAA33E907E184048
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 23:59:07 +0000
Manifest this update: Thu 23 Jul 2026 23:54:07 +0000
Manifest next update: Sat 25 Jul 2026 02:03:07 +0000
Files and hashes: 1: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: 4MzusLkn8wvWUBvFiEkops16kBYmlHHlayjI7RCIrok=)
2: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl (hash: SEnlBNI5BzXLhfYmydhwkoXCKgM6JIRl+yShmtBgVeg=)
3: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: EtnUTjZ94OuTXPQ8oodtLlh2y5zeN5ozbISTk51v5C4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl
rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a2:14:23:a4:96:26:78:12:05:06:da:aa:a3:3e:90:7e:18:40:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619
Validity
Not Before: Jul 23 23:54:07 2026 GMT
Not After : Jul 25 02:03:07 2026 GMT
Subject: CN=553353B876B72CC1C2DC7C78962486A260AB7FF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:6e:38:40:f1:15:7b:2a:50:7d:6f:09:82:
31:c0:eb:b7:f2:5f:4c:bc:00:91:99:3d:2a:40:af:
95:e6:89:83:65:9e:47:05:b3:aa:4e:b0:8c:50:18:
99:97:71:9b:48:e0:3d:8b:8d:89:32:5c:53:35:bb:
6e:c5:3a:c9:e9:ac:6e:cf:f0:c4:ef:e9:e9:cf:a5:
e1:00:8b:8e:63:c7:f0:fa:e4:3c:44:1e:d0:7a:65:
98:da:fd:0d:a7:cf:50:40:b2:86:b6:09:43:36:91:
c2:ef:a4:ee:57:d8:63:11:a0:65:fa:86:93:ea:ae:
a3:8e:a5:51:3f:85:97:83:49:76:7f:dc:cf:74:65:
53:45:6f:3a:a6:41:51:ba:35:2a:1d:71:a3:81:a0:
aa:08:4d:1a:33:a1:4a:ca:4b:69:96:75:c7:f0:9b:
60:1b:75:98:bb:61:d9:8e:64:50:fe:ab:af:cd:d9:
63:07:c1:9d:fd:fc:64:59:ed:ca:60:46:0f:df:cc:
3e:de:99:71:91:f7:b1:8a:6a:8b:74:50:4e:c6:47:
a4:84:9e:60:2b:49:f4:a5:3f:2e:f3:db:f2:a1:3c:
16:60:87:91:2c:46:d3:3b:34:e8:1a:21:c6:f5:85:
f1:31:19:ac:1e:9c:21:34:de:69:8e:4c:9c:10:da:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:53:B8:76:B7:2C:C1:C2:DC:7C:78:96:24:86:A2:60:AB:7F:F4
X509v3 Authority Key Identifier:
keyid:70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:09:3e:0f:ca:59:c4:35:f5:a7:55:e4:72:d1:c2:ca:5a:2f:
4c:5c:06:fe:44:0d:79:08:70:c9:51:70:9d:79:5e:59:f3:34:
71:50:e5:fb:2d:23:8c:8f:58:33:91:f8:96:3d:fc:62:8d:6d:
3b:74:79:48:d4:5a:77:45:1b:ef:38:db:09:17:02:e4:62:8d:
3f:6a:b3:26:c8:71:98:fb:30:a4:f2:17:35:79:47:ac:cf:17:
74:e3:d9:8d:fc:2e:59:6c:c4:d4:c2:97:bc:29:c4:57:08:0c:
c8:ff:9f:02:5f:a6:bf:b8:3f:e1:b0:8e:c5:54:11:3c:89:58:
63:2c:8b:61:ad:ed:0d:53:80:d5:a6:00:0d:27:5b:df:b6:17:
7c:5e:44:63:33:3f:88:e6:80:1f:2e:a6:4a:08:b5:9e:be:40:
0c:ba:cb:f3:32:c7:c3:b9:72:a6:58:5e:33:d7:a2:59:1a:10:
23:a2:8a:63:d0:1c:e4:05:83:61:de:40:d5:50:50:2b:53:c6:
a5:43:30:b9:67:1e:56:5d:78:86:cb:ac:fe:27:f4:43:8d:64:
e5:31:d4:3d:be:d9:6f:f5:24:95:59:3d:af:0b:b3:e7:b4:68:
8d:ea:d7:9a:8a:35:94:56:26:91:17:26:b2:20:51:0f:f0:72:
bc:d4:15:96
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTaIUI6SWJngSBQbaqqM+kH4YQEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQw
NEVBODYxOTAeFw0yNjA3MjMyMzU0MDdaFw0yNjA3MjUwMjAzMDdaMDMxMTAvBgNV
BAMTKDU1MzM1M0I4NzZCNzJDQzFDMkRDN0M3ODk2MjQ4NkEyNjBBQjdGRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfG44QPEVeypQfW8JgjHA67fy
X0y8AJGZPSpAr5XmiYNlnkcFs6pOsIxQGJmXcZtI4D2LjYkyXFM1u27FOsnprG7P
8MTv6enPpeEAi45jx/D65DxEHtB6ZZja/Q2nz1BAsoa2CUM2kcLvpO5X2GMRoGX6
hpPqrqOOpVE/hZeDSXZ/3M90ZVNFbzqmQVG6NSodcaOBoKoITRozoUrKS2mWdcfw
m2AbdZi7YdmOZFD+q6/N2WMHwZ39/GRZ7cpgRg/fzD7emXGR97GKaot0UE7GR6SE
nmArSfSlPy7z2/KhPBZgh5EsRtM7NOgaIcb1hfExGawenCE03mmOTJwQ2hcXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVTNTuHa3LMHC3Hx4liSGomCrf/QwHwYDVR0j
BBgwFoAUcNO1hUnvLKSrD5G8ADPLTQTqhhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzA4Y2MwYjMtMjUwOC00NzdmLTlmMjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0
OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQwNEVBODYxOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MEQzQjU4NTQ5RUYyQ0E0QUIwRjkxQkMwMDMzQ0I0RDA0RUE4
NjE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA4Y2MwYjMtMjUwOC00NzdmLTlm
MjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NC
NEQwNEVBODYxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEsJPg/KWcQ19adV5HLRwspaL0xcBv5EDXkI
cMlRcJ15XlnzNHFQ5fstI4yPWDOR+JY9/GKNbTt0eUjUWndFG+842wkXAuRijT9q
sybIcZj7MKTyFzV5R6zPF3Tj2Y38LllsxNTCl7wpxFcIDMj/nwJfpr+4P+GwjsVU
ETyJWGMsi2Gt7Q1TgNWmAA0nW9+2F3xeRGMzP4jmgB8upkoItZ6+QAy6y/Myx8O5
cqZYXjPXolkaECOiimPQHOQFg2HeQNVQUCtTxqVDMLlnHlZdeIbLrP4n9EONZOUx
1D2+2W/1JJVZPa8Ls+e0aI3q15qKNZRWJpEXJrIgUQ/wcrzUFZY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:37:41 2026 by rpki-client