$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft File: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft (raw, json) Hash identifier: XmB9+kFXQ8rZozRSDoWBScIjQAv4wLBPuaV6sP961B0= Subject key identifier: 43:44:6E:5A:67:99:51:B2:39:E4:A6:B9:82:DF:FC:D9:0A:94:C3:A9 Authority key identifier: 2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 Certificate issuer: /CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Certificate serial: 060C05B32D22271A8C6FC668CD593A0459F8AB28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft Manifest number: 12 Signing time: Fri 15 May 2026 00:20:27 +0000 Manifest this update: Fri 15 May 2026 00:15:27 +0000 Manifest next update: Sat 16 May 2026 02:56:27 +0000 Files and hashes: 1: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl (hash: hj2PssB7PMt4tzfCJFRkoRKVIEOYBrXW/WDJiSoWvUs=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: 6hdyf5UyF+Tqhlq/rEWrqEwjd98p7rc0NoOyzHNtasM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 20:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0c:05:b3:2d:22:27:1a:8c:6f:c6:68:cd:59:3a:04:59:f8:ab:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Validity Not Before: May 15 00:15:27 2026 GMT Not After : May 16 02:56:27 2026 GMT Subject: CN=43446E5A679951B239E4A6B982DFFCD90A94C3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:a1:59:c4:64:84:bb:46:38:0a:99:aa:95: f0:0e:33:02:bf:6d:93:50:e2:fd:56:26:1d:2e:12: cc:ae:77:d4:66:2f:54:e8:00:1a:0a:36:52:9d:8c: 36:28:f9:f6:38:b2:9f:72:78:e4:0c:5f:6d:2a:31: 22:ca:0e:dc:18:49:6c:3a:e6:ee:3e:fa:de:ee:b5: fa:36:25:f6:47:cf:b3:23:c1:a7:47:d7:5e:98:71: c0:99:52:86:3d:cd:69:8b:62:d8:56:95:e1:cb:34: 81:36:7f:b3:ae:da:b0:3a:2d:ed:25:0e:16:b2:57: b1:9a:92:28:4b:18:03:8c:64:88:9b:f8:c9:79:4f: 7c:14:da:c1:b0:72:b6:75:44:8e:8a:3c:68:ea:ec: 20:60:c7:6f:db:dd:6e:71:35:d0:cb:36:d5:2c:54: 6c:8d:9e:47:35:8b:0b:29:26:e6:07:70:a0:22:32: de:0f:71:aa:88:52:66:64:3e:80:e8:04:bd:5f:f0: 5c:74:f2:53:20:cb:7c:be:8e:e3:0b:bc:23:14:08: 1c:d8:8d:9c:f9:78:04:96:af:e6:e1:96:ba:35:69: 8b:eb:13:41:94:91:dd:2d:91:92:d5:be:af:ae:17: 11:2a:f8:c9:66:d4:a6:e0:fb:b8:cc:22:0c:14:24: bc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:44:6E:5A:67:99:51:B2:39:E4:A6:B9:82:DF:FC:D9:0A:94:C3:A9 X509v3 Authority Key Identifier: keyid:2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2b:12:d3:c0:2e:53:5f:b7:c4:80:3b:32:25:f0:18:63:4e: c5:0f:91:aa:aa:25:3f:ca:19:78:5f:1c:0a:3d:e6:3e:c4:c9: 19:03:cb:ed:16:24:37:b1:63:a6:58:cd:3d:19:c4:6d:ed:c9: ec:d2:df:c1:20:63:62:7a:b9:7b:b0:bc:ef:0d:98:0a:8f:e2: 99:f8:e5:57:8d:08:58:87:4d:12:e8:eb:c2:af:91:64:b3:1d: 87:7b:51:4e:bb:d7:7f:26:85:0a:59:dd:0a:35:d4:77:59:c3: 5c:e8:ff:b1:2c:79:f2:89:4a:61:c1:f4:15:86:f4:b7:ef:ca: 3a:09:a9:82:6d:6c:92:8e:a7:7c:c0:27:45:e1:b8:00:ce:00: e1:1d:2a:60:ec:93:bf:cd:bf:a1:69:a1:83:f5:c3:dd:76:a2: 83:85:25:08:f0:98:53:4c:0a:1b:c6:e9:98:ce:80:a9:45:32: 37:21:82:1b:e3:19:54:c4:73:06:58:dc:cf:22:b9:9a:ac:68: 65:d9:c4:91:47:49:38:e1:e2:b9:50:e6:76:01:e2:4e:15:58: 35:33:31:51:f0:51:a2:95:c5:90:60:e5:b7:09:43:5e:55:39: d9:87:a1:e2:31:1a:68:59:23:3a:23:a7:5c:c1:0c:f4:45:97: 69:fe:f2:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgwFsy0iJxqMb8ZozVk6BFn4qygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFB MjRBNUY3NzAeFw0yNjA1MTUwMDE1MjdaFw0yNjA1MTYwMjU2MjdaMDMxMTAvBgNV BAMTKDQzNDQ2RTVBNjc5OTUxQjIzOUU0QTZCOTgyREZGQ0Q5MEE5NEMzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCinKFZxGSEu0Y4CpmqlfAOMwK/ bZNQ4v1WJh0uEsyud9RmL1ToABoKNlKdjDYo+fY4sp9yeOQMX20qMSLKDtwYSWw6 5u4++t7utfo2JfZHz7MjwadH116YccCZUoY9zWmLYthWleHLNIE2f7Ou2rA6Le0l DhayV7GakihLGAOMZIib+Ml5T3wU2sGwcrZ1RI6KPGjq7CBgx2/b3W5xNdDLNtUs VGyNnkc1iwspJuYHcKAiMt4PcaqIUmZkPoDoBL1f8Fx08lMgy3y+juMLvCMUCBzY jZz5eASWr+bhlro1aYvrE0GUkd0tkZLVvq+uFxEq+Mlm1Kbg+7jMIgwUJLw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ0RuWmeZUbI55Ka5gt/82QqUw6kwHwYDVR0j BBgwFoAUL3CrNfGqii4Yq+Or8Y5G4aJKX3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0OGJiODgtYTc1OC00NDNmLWI3MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVG MUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFBMjRBNUY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjcwQUIzNUYxQUE4QTJFMThBQkUzQUJGMThFNDZFMUEyNEE1 Rjc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2 RTFBMjRBNUY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcrEtPALlNft8SAOzIl8BhjTsUPkaqqJT/K GXhfHAo95j7EyRkDy+0WJDexY6ZYzT0ZxG3tyezS38EgY2J6uXuwvO8NmAqP4pn4 5VeNCFiHTRLo68KvkWSzHYd7UU67138mhQpZ3Qo11HdZw1zo/7EsefKJSmHB9BWG 9LfvyjoJqYJtbJKOp3zAJ0XhuADOAOEdKmDsk7/Nv6FpoYP1w912ooOFJQjwmFNM ChvG6ZjOgKlFMjchghvjGVTEcwZY3M8iuZqsaGXZxJFHSTjh4rlQ5nYB4k4VWDUz MVHwUaKVxZBg5bcJQ15VOdmHoeIxGmhZIzojp1zBDPRFl2n+8qg= -----END CERTIFICATE-----Generated at Fri May 15 11:53:56 2026 by rpki-client