$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft File: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft (raw, json) Hash identifier: 15C8tuIr6iTne6khTUhzrkDKkX6y2C6QahXc+Gx/W/c= Subject key identifier: 2E:87:B7:C1:67:B9:57:9C:55:35:F6:FF:7E:9E:E7:A6:A4:53:FD:60 Authority key identifier: C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 Certificate issuer: /CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Certificate serial: 5FF3518C8CC1D3C04B4FFC4D4D0CCB6353559DBB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 18:19:15 +0000 Manifest this update: Mon 20 Jul 2026 18:14:15 +0000 Manifest next update: Tue 21 Jul 2026 19:38:15 +0000 Files and hashes: 1: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: IG22wGAeafPyZiCHJfimAg7HtJoJBGXUaInRtJgtJX8=) 2: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: RMvUFQrKL018cFixmOMzozWh6kTAtIwXuWq18nozxuA=) 3: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl (hash: kDT+o4bkLCve018JLF6vyXXQ97n2Htg+9QIigUTztqQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f3:51:8c:8c:c1:d3:c0:4b:4f:fc:4d:4d:0c:cb:63:53:55:9d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Validity Not Before: Jul 20 18:14:15 2026 GMT Not After : Jul 21 19:38:15 2026 GMT Subject: CN=2E87B7C167B9579C5535F6FF7E9EE7A6A453FD60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:58:cd:16:b5:28:2f:b5:5a:10:b1:49:80: b3:49:23:e1:24:de:87:a3:fa:8e:34:cb:83:88:e0: dd:32:0c:12:46:fd:58:c7:88:c2:c0:0b:f3:ff:f8: 5b:b1:84:e8:6f:0e:e8:de:6e:4f:eb:9e:ff:eb:3b: dd:7f:6a:53:30:0c:37:e4:d2:67:6a:22:0d:e9:26: 65:b2:8e:ca:6e:cd:7d:c2:e7:a3:c2:d2:d4:c7:43: 6d:be:62:6e:bb:4c:31:e9:2e:b3:78:71:ed:d5:53: 95:3b:49:24:76:07:ce:d7:84:36:80:b1:0c:c7:69: 48:60:1a:cb:d6:30:c8:d5:c1:34:26:0f:04:90:db: 22:30:56:18:22:ac:a9:eb:51:cb:bc:52:11:20:44: 82:2e:dc:4e:9e:dd:1b:f9:8c:99:33:7e:f3:59:14: 6b:e6:67:92:78:88:9e:7b:b2:8d:c0:44:17:bc:8d: bc:da:2e:95:3a:66:78:29:10:ee:81:4f:bc:59:13: c2:b2:76:c4:4f:aa:b4:12:a1:96:20:5b:0f:fa:bc: f6:c0:97:09:7a:7b:2f:26:f8:72:7d:e2:8d:72:80: d6:65:07:be:9e:69:ec:b1:71:cf:fb:a7:51:5d:17: 27:8f:66:ee:4f:03:0b:b6:fd:23:6a:c8:6b:8d:08: 2b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:87:B7:C1:67:B9:57:9C:55:35:F6:FF:7E:9E:E7:A6:A4:53:FD:60 X509v3 Authority Key Identifier: keyid:C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:27:3c:4f:cd:13:66:d0:e3:27:64:51:72:e6:cc:eb:ca:e0: ce:c8:0f:cc:61:71:1f:27:47:cd:b0:0f:89:62:f6:cf:55:a0: b0:ca:43:21:77:1e:a5:eb:8b:80:47:55:d5:de:b6:e8:b8:7f: 74:ae:cc:35:d9:a1:bd:a3:49:66:fa:01:5e:da:89:a9:b3:f1: 2f:7c:e9:23:4e:98:a4:30:73:bc:b1:44:ba:d6:4a:fc:07:23: f0:6e:38:6c:c0:c3:25:16:8a:00:b8:ea:e4:e0:58:c0:6c:26: 00:7e:60:ee:ee:9e:cc:2e:de:13:b0:e5:25:3e:89:03:7a:45: be:9f:af:d2:56:a6:ad:c2:4e:a7:20:0b:48:24:d3:af:45:9f: 54:3a:bc:33:58:36:9f:ab:b3:7b:97:ad:96:cc:88:1c:7d:58: 37:d8:ee:c6:0e:2c:5a:35:1a:8f:27:a8:14:18:4b:f6:0f:7b: a6:cd:8a:fa:dd:12:0e:73:62:c6:28:a7:27:e3:7e:df:a2:3d: f1:10:1a:f3:3b:bb:3e:f4:a6:57:34:49:84:aa:65:38:98:bc: 31:8e:bc:53:83:9c:d9:02:56:2d:7f:21:8d:cc:f2:85:17:e1: 2b:e8:99:62:a2:21:4a:22:14:95:fc:1b:9c:3a:2e:29:21:53: f9:89:16:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX/NRjIzB08BLT/xNTQzLY1NVnbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlD MDQ3MkI1MDAeFw0yNjA3MjAxODE0MTVaFw0yNjA3MjExOTM4MTVaMDMxMTAvBgNV BAMTKDJFODdCN0MxNjdCOTU3OUM1NTM1RjZGRjdFOUVFN0E2QTQ1M0ZENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/1jNFrUoL7VaELFJgLNJI+Ek 3oej+o40y4OI4N0yDBJG/VjHiMLAC/P/+FuxhOhvDujebk/rnv/rO91/alMwDDfk 0mdqIg3pJmWyjspuzX3C56PC0tTHQ22+Ym67TDHpLrN4ce3VU5U7SSR2B87XhDaA sQzHaUhgGsvWMMjVwTQmDwSQ2yIwVhgirKnrUcu8UhEgRIIu3E6e3Rv5jJkzfvNZ FGvmZ5J4iJ57so3ARBe8jbzaLpU6ZngpEO6BT7xZE8KydsRPqrQSoZYgWw/6vPbA lwl6ey8m+HJ94o1ygNZlB76eaeyxcc/7p1FdFyePZu5PAwu2/SNqyGuNCCsTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULoe3wWe5V5xVNfb/fp7npqRT/WAwHwYDVR0j BBgwFoAUxwqifmAZfQLw3M2OeST/+cBHK1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlODM2NzMtMDk2YS00NDBjLWIyN2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2 MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlDMDQ3MkI1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzBBQTI3RTYwMTk3RDAyRjBEQ0NEOEU3OTI0RkZGOUMwNDcy QjUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZG RjlDMDQ3MkI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEnPE/NE2bQ4ydkUXLmzOvK4M7ID8xhcR8n R82wD4li9s9VoLDKQyF3HqXri4BHVdXetui4f3SuzDXZob2jSWb6AV7aiamz8S98 6SNOmKQwc7yxRLrWSvwHI/BuOGzAwyUWigC46uTgWMBsJgB+YO7unswu3hOw5SU+ iQN6Rb6fr9JWpq3CTqcgC0gk069Fn1Q6vDNYNp+rs3uXrZbMiBx9WDfY7sYOLFo1 Go8nqBQYS/YPe6bNivrdEg5zYsYopyfjft+iPfEQGvM7uz70plc0SYSqZTiYvDGO vFODnNkCVi1/IY3M8oUX4SvomWKiIUoiFJX8G5w6LikhU/mJFqk= -----END CERTIFICATE-----Generated at Tue Jul 21 08:13:03 2026 by rpki-client