$ rpki-client -vvf rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft File: B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft (raw, json) Hash identifier: y0odVJXqpSr/ieM0x9IDkgi31DZWMGHH87W3Jls1t0E= Subject key identifier: 2D:5E:F2:36:C7:FC:0C:60:5F:2A:A4:71:F7:DD:53:92:73:FD:02:BA Authority key identifier: B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 Certificate issuer: /CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Certificate serial: 6EC4763B86FFD5083E1273FDE6FB6FC165E67C86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:33:56 +0000 Manifest this update: Tue 02 Jun 2026 15:28:56 +0000 Manifest next update: Wed 03 Jun 2026 15:52:56 +0000 Files and hashes: 1: B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl (hash: 3SaWa2BVK+Wc5nLOd9I733Mnl4rnkF+vfibwcMnRraw=) 2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: ZLVGrLGxQp2e5Y2IzOOoMpl4wxPvjrD5ZWNyIr1u5Ho=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c4:76:3b:86:ff:d5:08:3e:12:73:fd:e6:fb:6f:c1:65:e6:7c:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728 Validity Not Before: Jun 2 15:28:56 2026 GMT Not After : Jun 3 15:52:56 2026 GMT Subject: CN=2D5EF236C7FC0C605F2AA471F7DD539273FD02BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:b3:d8:6f:0a:ec:df:62:d8:95:de:b4:8e: 15:21:f0:7f:bd:cb:35:a6:53:67:d8:92:74:a6:3d: ee:6f:45:fd:d5:86:6a:97:70:5a:d8:84:0e:b0:49: 3a:e0:8c:35:0e:b0:95:73:ec:c8:85:ac:91:75:a5: 2b:68:12:e0:53:c7:c1:33:4c:2c:4f:7b:aa:1f:9b: dc:a3:73:9a:cc:7e:d9:67:fc:4e:93:02:7a:37:c4: 1c:5c:fd:b7:c2:69:ee:1a:50:0b:5b:61:fc:0e:3f: 53:bc:79:fe:39:18:32:65:44:04:25:88:9f:cc:c0: 12:4a:cb:4f:dd:24:91:f3:66:41:f9:99:c1:c2:1a: bc:76:c8:d6:e2:27:ec:b1:f9:7f:04:53:85:ea:af: 82:5d:06:48:73:00:e4:f7:4e:f7:16:24:d3:33:6b: 83:67:db:2b:3b:5f:6d:db:bd:9e:e2:7a:04:b7:af: 3e:19:f2:fb:0b:3b:b5:20:05:af:4a:31:75:51:cf: ff:39:22:4c:87:14:e4:d6:f7:2d:31:0e:5c:99:eb: f2:2c:08:2d:5d:d5:e3:7e:34:27:32:50:71:af:c8: e0:bc:76:a9:99:a2:b3:67:65:29:b1:22:07:ba:30: 98:a4:cf:0c:1b:7c:7b:54:26:6a:79:dd:5c:dc:d0: e3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5E:F2:36:C7:FC:0C:60:5F:2A:A4:71:F7:DD:53:92:73:FD:02:BA X509v3 Authority Key Identifier: keyid:B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:06:da:c2:d1:05:e5:c6:9a:aa:a5:4a:22:c6:d8:3f:80:20: 18:5b:a5:59:c3:30:44:35:0a:2c:70:d3:11:51:6e:f8:09:9b: d2:84:71:fd:25:57:3c:98:d9:ae:e2:66:b5:ba:25:6a:b6:da: 0e:f1:68:2b:9c:9f:98:03:e9:c9:60:dc:24:c8:94:d9:80:f5: 91:cc:8a:68:c0:59:d8:5f:e8:04:17:43:13:c0:a5:37:81:7e: ff:29:80:1f:1c:7d:45:dc:e9:f7:cc:20:68:65:b5:ae:ed:ea: 06:bb:28:0d:e3:a2:84:2a:f8:29:32:a3:39:bc:e4:94:a8:3f: 40:53:c6:7b:fc:a7:de:c5:f5:ad:17:8c:5c:5c:91:c3:a5:8d: f0:55:5f:4c:37:61:8f:94:d6:be:e5:e3:ca:63:a6:79:03:98: ab:20:53:3b:33:1f:84:4a:84:e1:58:c0:23:14:a0:09:a3:80: bb:47:d3:8d:d0:8a:50:3f:25:96:c3:a8:9f:e5:6f:00:35:32: 35:25:5d:a6:30:fd:af:09:89:e9:6c:51:76:f7:85:e1:12:d8: e0:55:83:c9:ff:58:79:1a:d5:1a:94:8a:8b:38:d2:40:97:c5: 32:c5:a4:16:20:6a:02:5d:dc:d2:c3:96:76:c1:9b:d4:22:e3: ac:50:f3:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsR2O4b/1Qg+EnP95vtvwWXmfIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhF MDZBOTcyODAeFw0yNjA2MDIxNTI4NTZaFw0yNjA2MDMxNTUyNTZaMDMxMTAvBgNV BAMTKDJENUVGMjM2QzdGQzBDNjA1RjJBQTQ3MUY3REQ1MzkyNzNGRDAyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68rPYbwrs32LYld60jhUh8H+9 yzWmU2fYknSmPe5vRf3VhmqXcFrYhA6wSTrgjDUOsJVz7MiFrJF1pStoEuBTx8Ez TCxPe6ofm9yjc5rMftln/E6TAno3xBxc/bfCae4aUAtbYfwOP1O8ef45GDJlRAQl iJ/MwBJKy0/dJJHzZkH5mcHCGrx2yNbiJ+yx+X8EU4Xqr4JdBkhzAOT3TvcWJNMz a4Nn2ys7X23bvZ7iegS3rz4Z8vsLO7UgBa9KMXVRz/85IkyHFOTW9y0xDlyZ6/Is CC1d1eN+NCcyUHGvyOC8dqmZorNnZSmxIge6MJikzwwbfHtUJmp53Vzc0OPbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULV7yNsf8DGBfKqRx991TknP9ArowHwYDVR0j BBgwFoAUtw+ECty5+FFxsHO5UdqquOBqlygwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjIxZjNmYWUtZDBjYi00YTE3LWE1NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFE Q0I5Rjg1MTcxQjA3M0I5NTFEQUFBQjhFMDZBOTcyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNzBGODQwQURDQjlGODUxNzFCMDczQjk1MURBQUFCOEUwNkE5 NzI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjIxZjNmYWUtZDBjYi00YTE3LWE1 NDgtMWJhNjYzMWIxZTA5LzAvQjcwRjg0MEFEQ0I5Rjg1MTcxQjA3M0I5NTFEQUFB QjhFMDZBOTcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANkG2sLRBeXGmqqlSiLG2D+AIBhbpVnDMEQ1 Cixw0xFRbvgJm9KEcf0lVzyY2a7iZrW6JWq22g7xaCucn5gD6clg3CTIlNmA9ZHM imjAWdhf6AQXQxPApTeBfv8pgB8cfUXc6ffMIGhlta7t6ga7KA3jooQq+Ckyozm8 5JSoP0BTxnv8p97F9a0XjFxckcOljfBVX0w3YY+U1r7l48pjpnkDmKsgUzszH4RK hOFYwCMUoAmjgLtH043QilA/JZbDqJ/lbwA1MjUlXaYw/a8JielsUXb3heES2OBV g8n/WHka1RqUios40kCXxTLFpBYgagJd3NLDlnbBm9Qi46xQ890= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:54 2026 by rpki-client