$ rpki-client -vvf rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft File: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft (raw, json) Hash identifier: V2aYoxQ41BDepaVxoxy4voB54Yu/oCH5pBYA4ynVi4Q= Subject key identifier: A2:5D:10:6A:7C:4D:8D:85:15:BD:52:62:22:D5:44:5C:64:A6:91:1E Authority key identifier: 70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 Certificate issuer: /CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Certificate serial: 429CDEFEF780DB108F547C0E18D23FDA0BCFBD16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:12:50 +0000 Manifest this update: Mon 20 Jul 2026 13:07:50 +0000 Manifest next update: Tue 21 Jul 2026 14:22:50 +0000 Files and hashes: 1: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: hpiL6+O2y1i6nQTaaXJTYqIKZW0DPxyBBggb24eEX0o=) 2: 70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl (hash: DDQI1Fo5GbReVKndi1TTfLEIqjqJ3ebod0PUVyZLOMw=) 3: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: keOPkaU9xFvf9rbttWbatnRuZitbsiWuBrO+qREpte8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9c:de:fe:f7:80:db:10:8f:54:7c:0e:18:d2:3f:da:0b:cf:bd:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8 Validity Not Before: Jul 20 13:07:50 2026 GMT Not After : Jul 21 14:22:50 2026 GMT Subject: CN=A25D106A7C4D8D8515BD526222D5445C64A6911E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2e:40:8e:2f:45:94:e8:c6:bc:52:4d:3f:3f: 5d:f9:3e:8a:2b:46:04:fb:7c:76:b4:2c:ce:9f:55: 82:f3:9e:bb:c2:07:16:87:c4:76:3b:1d:ed:18:f4: 5b:f3:6a:1f:bc:57:54:0d:c9:40:e2:e7:95:b0:1a: 11:34:f4:0e:3b:2b:1a:82:0a:4c:7a:c4:bd:79:5c: 04:43:76:17:aa:2d:0a:dc:ca:32:fb:5b:01:42:53: 13:a0:2e:f0:c3:2e:f3:45:b2:77:f4:de:57:e3:8d: 30:ec:2f:c5:31:b6:64:74:fa:9e:68:d6:bd:a9:0b: be:8a:67:71:ae:d7:87:b8:56:c9:a6:0e:3d:6f:69: 36:12:93:7f:06:a9:09:83:70:a2:a4:b0:5a:7d:87: 28:b7:89:ad:81:c8:dc:c0:c9:0c:c7:27:fc:db:42: 28:00:e9:da:b5:35:0f:b4:8c:17:13:72:4c:5f:b0: c1:f5:ae:0f:a2:f9:93:ba:87:70:9c:08:9a:27:13: 6d:24:10:92:40:4d:02:4d:c4:66:77:61:b9:82:1e: 9a:a0:f5:20:8b:6b:c0:4b:8f:23:d3:61:f8:ac:be: 7c:d3:2e:3c:64:25:ea:20:79:c1:f0:0a:1d:73:ae: 2b:9c:aa:84:ac:39:e3:7a:7f:62:22:00:b2:f5:38: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5D:10:6A:7C:4D:8D:85:15:BD:52:62:22:D5:44:5C:64:A6:91:1E X509v3 Authority Key Identifier: keyid:70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:89:0e:8c:44:09:3a:3c:84:79:8c:cf:58:9d:61:05:a1:1b: c0:b4:7d:6f:aa:fa:6b:b9:da:fc:17:df:66:63:1c:8a:c7:68: 1b:4a:c7:ae:55:af:95:28:8b:ab:c5:30:59:b8:2c:9f:6d:ab: ad:b3:14:11:20:74:50:90:9b:b6:cf:0e:5b:dc:f7:1d:7e:52: fc:79:c6:5c:ab:fe:08:90:0a:13:5c:e6:82:41:59:12:fd:89: 9a:3c:6c:7e:87:da:35:06:aa:86:3e:d1:80:07:3b:54:7e:f4: 8f:09:6b:60:79:17:8d:83:b7:b3:94:f5:46:1d:8a:1f:90:61: 21:fb:69:43:9c:8e:b6:06:3b:11:5a:ad:d4:4a:0b:5e:f9:11: 69:b4:52:65:dc:ea:0b:41:4c:de:06:e2:1b:4c:eb:d5:45:20: 66:41:00:ae:bc:8d:fa:a5:f7:89:eb:93:34:7f:d1:f9:a5:79: 91:47:0f:59:bd:14:aa:86:58:fd:3d:bc:68:74:61:eb:73:8a: 3d:de:4a:e8:88:c4:d0:03:75:b4:2d:b2:de:90:9e:9b:f1:87: 87:d2:18:fe:99:83:89:6c:a0:64:5f:2f:63:65:b2:3c:32:35: 7a:0e:37:84:57:67:94:03:72:23:5e:a6:dc:7c:71:8b:87:84: a4:6f:5c:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQpze/veA2xCPVHwOGNI/2gvPvRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4 QjIzNjRBODAeFw0yNjA3MjAxMzA3NTBaFw0yNjA3MjExNDIyNTBaMDMxMTAvBgNV BAMTKEEyNUQxMDZBN0M0RDhEODUxNUJENTI2MjIyRDU0NDVDNjRBNjkxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLkCOL0WU6Ma8Uk0/P135Poor RgT7fHa0LM6fVYLznrvCBxaHxHY7He0Y9Fvzah+8V1QNyUDi55WwGhE09A47KxqC Ckx6xL15XARDdheqLQrcyjL7WwFCUxOgLvDDLvNFsnf03lfjjTDsL8UxtmR0+p5o 1r2pC76KZ3Gu14e4VsmmDj1vaTYSk38GqQmDcKKksFp9hyi3ia2ByNzAyQzHJ/zb QigA6dq1NQ+0jBcTckxfsMH1rg+i+ZO6h3CcCJonE20kEJJATQJNxGZ3YbmCHpqg 9SCLa8BLjyPTYfisvnzTLjxkJeogecHwCh1zriucqoSsOeN6f2IiALL1OPZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUol0QanxNjYUVvVJiItVEXGSmkR4wHwYDVR0j BBgwFoAUcLVONNzwcBKQt5Lm6grpAIsjZKgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYxNmMwNGQtZDllMC00YzFmLThhMTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzRE Q0YwNzAxMjkwQjc5MkU2RUEwQUU5MDA4QjIzNjRBOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MEI1NEUzNERDRjA3MDEyOTBCNzkyRTZFQTBBRTkwMDhCMjM2 NEE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvNzBCNTRFMzREQ0YwNzAxMjkwQjc5MkU2RUEwQUU5 MDA4QjIzNjRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSJDoxECTo8hHmMz1idYQWhG8C0fW+q+mu5 2vwX32ZjHIrHaBtKx65Vr5Uoi6vFMFm4LJ9tq62zFBEgdFCQm7bPDlvc9x1+Uvx5 xlyr/giQChNc5oJBWRL9iZo8bH6H2jUGqoY+0YAHO1R+9I8Ja2B5F42Dt7OU9UYd ih+QYSH7aUOcjrYGOxFardRKC175EWm0UmXc6gtBTN4G4htM69VFIGZBAK68jfql 94nrkzR/0fmleZFHD1m9FKqGWP09vGh0Yetzij3eSuiIxNADdbQtst6Qnpvxh4fS GP6Zg4lsoGRfL2NlsjwyNXoON4RXZ5QDciNeptx8cYuHhKRvXDQ= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:41 2026 by rpki-client