$ rpki-client -vvf rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft File: B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft (raw, json) Hash identifier: SajTM8GykuCwDrkPRt0VnBKBHhwoM5U5BejyaWVhxfc= Subject key identifier: 89:B9:B5:66:40:6A:5D:E4:C1:29:C7:0F:B8:BF:12:F4:CA:FE:C5:51 Authority key identifier: B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 Certificate issuer: /CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Certificate serial: 74B9FB357D98D6AA883C87419EA3F61651C5C03F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft Manifest number: 6D Signing time: Tue 21 Jul 2026 00:46:51 +0000 Manifest this update: Tue 21 Jul 2026 00:41:51 +0000 Manifest next update: Wed 22 Jul 2026 04:19:51 +0000 Files and hashes: 1: B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl (hash: jkC9lvHC/zCdzutQaTR8FCjzvfjg1ymjuPTLGplwDpE=) 2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: ZLVGrLGxQp2e5Y2IzOOoMpl4wxPvjrD5ZWNyIr1u5Ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b9:fb:35:7d:98:d6:aa:88:3c:87:41:9e:a3:f6:16:51:c5:c0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Validity Not Before: Jul 21 00:41:51 2026 GMT Not After : Jul 22 04:19:51 2026 GMT Subject: CN=89B9B566406A5DE4C129C70FB8BF12F4CAFEC551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:9c:bc:51:ca:eb:89:3f:d7:5d:be:5b:4f: fc:41:80:e1:ad:03:e4:20:3c:f3:4c:60:a0:d5:8c: cc:8d:97:86:cc:87:41:e5:e2:30:9d:88:50:dd:6f: 73:db:f9:e5:cc:0f:30:69:3c:5b:58:bb:57:e1:63: 08:35:de:30:83:6d:e7:9a:66:b7:38:e1:6f:9b:3b: ef:14:00:51:bb:28:2e:ba:a1:63:65:2a:2a:f7:be: 41:3a:8e:72:ef:6a:f8:02:91:ef:c5:80:1d:3b:70: eb:c4:f3:27:d7:00:2d:55:c7:e2:c4:51:fb:d3:14: 5a:0a:e4:d8:4f:b1:63:3e:84:5e:55:ac:0b:1c:16: 6c:8b:85:e9:30:0b:eb:83:8a:7e:89:8d:3f:7a:ad: 47:29:36:93:14:e8:31:71:1b:bc:27:79:28:63:eb: ec:89:d7:e6:b2:1c:ac:ff:fd:32:3a:94:34:39:e9: 0b:41:c1:73:b5:50:5d:3c:0b:17:de:26:35:ee:9a: ac:e1:0d:ff:d2:cf:df:68:c0:da:3f:bb:d5:33:13: 4d:3c:38:f9:76:fd:33:09:d7:b3:0c:a4:44:c3:47: e4:26:c4:9d:c6:56:14:36:64:c4:7f:89:e6:f3:d5: 29:be:ce:0a:30:d8:fb:18:74:b4:af:e1:62:d1:1d: 88:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:B5:66:40:6A:5D:E4:C1:29:C7:0F:B8:BF:12:F4:CA:FE:C5:51 X509v3 Authority Key Identifier: keyid:B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:68:7a:c2:b4:4c:a1:b0:a3:d8:3e:44:5c:1c:e9:51:2f:7b: 8e:98:50:e5:c2:9c:3d:03:d5:5b:eb:fb:9f:93:97:ac:27:5b: c5:9e:0e:5f:b9:77:68:fc:de:1b:82:81:d2:36:d7:8b:8b:84: 47:03:9a:cb:81:53:24:8b:25:30:5e:e3:11:ab:ce:a8:8d:3c: ed:02:31:26:c0:f6:33:4b:8d:47:c7:fa:f7:94:ac:d0:cb:e6: e6:ff:e0:28:ee:38:3d:63:8d:d6:cf:5d:70:0c:39:d7:9f:8b: f6:9f:33:02:c5:1e:83:3a:64:8b:19:5f:14:90:28:a0:dc:e4: 18:3c:64:5d:51:e7:ef:9b:bb:f1:7f:1b:19:b6:ef:53:82:d8: e7:34:27:27:23:3a:4b:2d:44:e3:f9:11:3a:86:d6:f4:95:9c: 63:13:68:13:5e:09:0d:36:e8:69:fc:16:a8:10:1b:b1:95:de: c7:be:ab:08:91:84:da:90:34:12:4e:ca:72:5b:da:f0:0c:ed: 3a:4c:97:4a:62:4d:2f:c3:dd:fc:d6:6f:d2:aa:75:1a:c1:a0: a6:f6:81:d5:9a:8c:aa:39:b0:cb:6e:17:df:4f:3d:20:6c:51: 43:9a:28:76:cb:55:86:56:08:6a:e1:27:ae:2e:b0:10:5f:8c: c3:41:7e:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLn7NX2Y1qqIPIdBnqP2FlHFwD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhF MDZBOTcyODAeFw0yNjA3MjEwMDQxNTFaFw0yNjA3MjIwNDE5NTFaMDMxMTAvBgNV BAMTKDg5QjlCNTY2NDA2QTVERTRDMTI5QzcwRkI4QkYxMkY0Q0FGRUM1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfJy8UcrriT/XXb5bT/xBgOGt A+QgPPNMYKDVjMyNl4bMh0Hl4jCdiFDdb3Pb+eXMDzBpPFtYu1fhYwg13jCDbeea Zrc44W+bO+8UAFG7KC66oWNlKir3vkE6jnLvavgCke/FgB07cOvE8yfXAC1Vx+LE UfvTFFoK5NhPsWM+hF5VrAscFmyLhekwC+uDin6JjT96rUcpNpMU6DFxG7wneShj 6+yJ1+ayHKz//TI6lDQ56QtBwXO1UF08CxfeJjXumqzhDf/Sz99owNo/u9UzE008 OPl2/TMJ17MMpETDR+QmxJ3GVhQ2ZMR/iebz1Sm+zgow2PsYdLSv4WLRHYiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUibm1ZkBqXeTBKccPuL8S9Mr+xVEwHwYDVR0j BBgwFoAUtw+ECty5+FFxsHO5UdqquOBqlygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIxZjNmYWUtZDBjYi00YTE3LWE1NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFE Q0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhFMDZBOTcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzBGODQwQURDQjlGODUxNzFCMDczQjk1MURBQUFCOEUwNkE5 NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFB QjhFMDZBOTcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1oesK0TKGwo9g+RFwc6VEve46YUOXCnD0D 1Vvr+5+Tl6wnW8WeDl+5d2j83huCgdI214uLhEcDmsuBUySLJTBe4xGrzqiNPO0C MSbA9jNLjUfH+veUrNDL5ub/4CjuOD1jjdbPXXAMOdefi/afMwLFHoM6ZIsZXxSQ KKDc5Bg8ZF1R5++bu/F/Gxm271OC2Oc0JycjOkstROP5ETqG1vSVnGMTaBNeCQ02 6Gn8FqgQG7GV3se+qwiRhNqQNBJOynJb2vAM7TpMl0piTS/D3fzWb9KqdRrBoKb2 gdWajKo5sMtuF99PPSBsUUOaKHbLVYZWCGrhJ64usBBfjMNBfvs= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:06 2026 by rpki-client