$ rpki-client -vvf rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft File: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft (raw, json) Hash identifier: FHpklmT55ZBixrgTkzrigh8HTw5mzxtP3Wlja9HMli4= Subject key identifier: A5:34:49:D7:13:7B:5D:9D:8E:17:56:C7:0E:A3:B3:B1:F1:54:95:3F Authority key identifier: 70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 Certificate issuer: /CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Certificate serial: 422B451AAD3C1FE531EE97537335CEACF1120549 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:03:48 +0000 Manifest this update: Tue 02 Jun 2026 22:58:48 +0000 Manifest next update: Thu 04 Jun 2026 01:34:48 +0000 Files and hashes: 1: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: hpiL6+O2y1i6nQTaaXJTYqIKZW0DPxyBBggb24eEX0o=) 2: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: keOPkaU9xFvf9rbttWbatnRuZitbsiWuBrO+qREpte8=) 3: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl (hash: UaqavBdpmfpuCEer6+yiJtOU+Hvf9/HirtzMtJeGOq8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 01:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2b:45:1a:ad:3c:1f:e5:31:ee:97:53:73:35:ce:ac:f1:12:05:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Validity Not Before: Jun 2 22:58:48 2026 GMT Not After : Jun 4 01:34:48 2026 GMT Subject: CN=A53449D7137B5D9D8E1756C70EA3B3B1F154953F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:fb:0d:3e:f8:ed:8d:26:a7:1f:25:c1:c9: 38:01:b0:33:3c:5a:a4:f6:42:04:1f:df:c5:ca:86: 51:22:84:34:94:5f:af:3d:09:0b:14:fe:f1:44:b5: 9c:1b:8a:d0:24:f9:f4:02:6a:e3:47:68:66:b5:7e: a2:0a:49:45:b9:de:c9:c1:d5:94:74:80:70:a1:79: f2:f8:82:b4:10:cf:6c:0d:58:64:02:5b:5c:e4:c1: fe:fc:43:89:01:76:a2:d6:0e:4a:1b:94:50:bc:fb: 1f:e5:24:76:d1:30:6c:af:9f:38:95:4f:26:1c:bc: e2:d7:ee:f0:66:a7:bb:d7:1c:b5:27:01:9e:b3:f8: e4:04:a1:a8:9a:fd:f4:2f:97:a5:46:02:10:f6:13: 63:ea:f9:61:f9:33:c2:24:bd:f8:40:4a:fd:2f:88: 5d:9d:7b:09:5b:30:13:9b:92:89:c9:d1:a7:c0:58: a1:f7:ca:2b:08:8d:91:61:55:2a:b5:1c:de:26:1f: c3:45:6f:f9:49:13:67:23:52:6d:ce:19:d9:82:e9: a0:31:cd:58:88:c6:6e:32:cb:44:ba:5d:b2:15:f3: 81:c3:b0:64:95:ef:ca:43:42:9a:68:ac:d2:ee:33: 67:28:6c:14:b7:6c:02:17:a4:a7:17:99:c5:81:f3: a5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:34:49:D7:13:7B:5D:9D:8E:17:56:C7:0E:A3:B3:B1:F1:54:95:3F X509v3 Authority Key Identifier: keyid:70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:27:5b:e7:c5:4b:f0:08:24:18:d6:b0:b5:fd:60:ce:df:6d: 4f:28:ec:de:75:0c:78:f7:80:bd:65:09:c2:fe:64:d6:bc:dd: fc:c2:6c:7a:6c:5c:13:8e:eb:ed:63:cc:70:94:8c:a9:98:77: c7:43:59:a9:df:14:d5:5e:e2:da:94:b0:9f:ad:16:bf:71:90: 9c:10:d2:6f:5b:e4:a1:18:d2:90:87:ba:d3:f7:d7:3c:ef:0f: 96:ea:26:6f:93:f8:02:d3:93:30:11:93:cf:9b:95:e7:66:41: e8:a5:e6:8a:be:c8:0a:1d:51:a9:ff:a6:3e:62:24:10:6e:50: 89:7e:55:ca:c5:5b:47:85:65:a9:05:a9:a7:a7:82:82:34:b8: ec:65:98:4a:57:6f:33:c8:8e:7e:4c:75:ce:90:50:f7:e0:40: 7b:81:08:ea:2e:3c:ec:5e:b2:3b:66:68:5b:41:e2:81:28:70: 15:1c:d1:a0:c5:d2:81:9d:30:04:2e:01:6f:78:cc:8f:01:39: 1b:5f:f3:3c:8d:df:b7:de:b8:80:61:fd:39:6b:e0:5b:3f:d3: fe:07:fc:52:a7:b4:9e:6b:30:14:04:38:c9:83:f4:1b:8c:7c: a6:e2:e2:42:f8:f0:37:1e:8b:6e:33:74:63:c2:cf:1a:51:9a: bc:92:e9:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQitFGq08H+Ux7pdTczXOrPESBUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4 QjIzNjRBODAeFw0yNjA2MDIyMjU4NDhaFw0yNjA2MDQwMTM0NDhaMDMxMTAvBgNV BAMTKEE1MzQ0OUQ3MTM3QjVEOUQ4RTE3NTZDNzBFQTNCM0IxRjE1NDk1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6fsNPvjtjSanHyXByTgBsDM8 WqT2QgQf38XKhlEihDSUX689CQsU/vFEtZwbitAk+fQCauNHaGa1fqIKSUW53snB 1ZR0gHChefL4grQQz2wNWGQCW1zkwf78Q4kBdqLWDkoblFC8+x/lJHbRMGyvnziV TyYcvOLX7vBmp7vXHLUnAZ6z+OQEoaia/fQvl6VGAhD2E2Pq+WH5M8IkvfhASv0v iF2dewlbMBObkonJ0afAWKH3yisIjZFhVSq1HN4mH8NFb/lJE2cjUm3OGdmC6aAx zViIxm4yy0S6XbIV84HDsGSV78pDQpporNLuM2cobBS3bAIXpKcXmcWB86UtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpTRJ1xN7XZ2OF1bHDqOzsfFUlT8wHwYDVR0j BBgwFoAUcLVONNzwcBKQt5Lm6grpAIsjZKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYxNmMwNGQtZDllMC00YzFmLThhMTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzRE Q0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4QjIzNjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MEI1NEUzNERDRjA3MDEyOTBCNzkyRTZFQTBBRTkwMDhCMjM2 NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5 MDA4QjIzNjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwnW+fFS/AIJBjWsLX9YM7fbU8o7N51DHj3 gL1lCcL+ZNa83fzCbHpsXBOO6+1jzHCUjKmYd8dDWanfFNVe4tqUsJ+tFr9xkJwQ 0m9b5KEY0pCHutP31zzvD5bqJm+T+ALTkzARk8+bledmQeil5oq+yAodUan/pj5i JBBuUIl+VcrFW0eFZakFqaengoI0uOxlmEpXbzPIjn5Mdc6QUPfgQHuBCOouPOxe sjtmaFtB4oEocBUc0aDF0oGdMAQuAW94zI8BORtf8zyN37feuIBh/Tlr4Fs/0/4H /FKntJ5rMBQEOMmD9BuMfKbi4kL48Dcei24zdGPCzxpRmryS6Zc= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:30 2026 by rpki-client