$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft File: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft (raw, json) Hash identifier: t481I2BO7rqBfAMHoww22C3mB31qECRRQkA7dCtsz7w= Subject key identifier: 20:41:21:CB:A2:4B:C1:30:D8:D6:A0:8F:9F:7E:D1:8C:54:F2:BD:CF Authority key identifier: 70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E Certificate issuer: /CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Certificate serial: 1B239B1825EE770E8843D2E916C759654178AAF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 17:52:26 +0000 Manifest this update: Fri 19 Jun 2026 17:47:26 +0000 Manifest next update: Sat 20 Jun 2026 20:27:26 +0000 Files and hashes: 1: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: hBvRTYXcnJk6N7ngUO2oUV6tmwOrz7l2Poiy/ABHqPM=) 2: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: PDVvmstV3iaWyvXstEgcHTvDFJJ9Dg2QcyyOCEhL1rA=) 3: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: X9vWw5/8oy+SYlKkHILaaaMhFfsqtUesHOd+majUa+4=) 4: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl (hash: 2NcvQ48f8YWOZaXJH9ob9XRLkKDqXteJCBtGG2STMqs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:23:9b:18:25:ee:77:0e:88:43:d2:e9:16:c7:59:65:41:78:aa:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Validity Not Before: Jun 19 17:47:26 2026 GMT Not After : Jun 20 20:27:26 2026 GMT Subject: CN=204121CBA24BC130D8D6A08F9F7ED18C54F2BDCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:16:46:4f:7d:f6:33:3a:a8:81:99:09:19: 53:26:a9:6b:de:fb:1c:1f:7a:ba:7a:4a:72:d5:94: bc:19:8f:70:da:d6:f2:64:eb:a1:bb:7b:ca:56:9f: 18:f6:53:74:9f:1d:31:08:49:59:fd:aa:e6:27:28: 6f:dd:bd:c9:b3:06:9f:a6:52:50:da:4f:33:e7:8c: e4:4b:53:2a:73:20:8c:44:0b:46:74:1a:18:12:0e: 20:26:16:80:e0:0e:68:a2:71:8f:c1:5e:08:82:36: 5e:f1:6f:51:17:3e:af:77:ff:58:04:6b:b1:39:8a: ed:4a:62:53:9b:73:cb:d9:92:58:f7:b9:a6:30:57: e3:b2:c9:74:b1:60:97:e0:5a:d7:12:0a:da:43:e4: db:03:99:71:c2:f9:c6:17:a9:fc:d5:43:81:ca:64: f3:e1:c6:90:22:d8:57:d3:18:68:1f:19:b5:28:6a: f7:b8:11:25:0e:34:23:47:ef:2b:94:ba:48:f7:76: 8c:0b:db:60:ca:a0:6f:27:cc:f3:23:b2:dd:9e:91: 9b:42:e3:de:28:9d:34:d6:7b:a9:73:7a:cb:92:7b: 26:e7:f9:3b:7c:af:69:60:5c:4b:d5:6f:fc:33:81: f3:1e:96:3b:8b:a8:bb:6e:24:f2:c6:4d:90:60:1c: ef:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:41:21:CB:A2:4B:C1:30:D8:D6:A0:8F:9F:7E:D1:8C:54:F2:BD:CF X509v3 Authority Key Identifier: keyid:70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:07:77:29:63:72:60:75:f7:07:a0:94:67:3d:d1:fb:21:08: 37:b8:51:03:47:48:24:bb:78:18:4c:ea:3e:94:73:9b:e8:8e: b5:95:bf:6f:b1:8f:bf:39:6f:c5:06:9b:a7:eb:54:71:a1:fa: b4:d7:63:74:00:b3:6a:08:20:2e:f7:98:f5:e9:7e:f9:3e:8b: e2:96:23:67:6d:16:15:ac:c4:19:b9:cb:dc:22:ed:41:21:9d: 82:c8:5d:46:18:2c:91:c4:5a:68:7b:ae:ce:32:0f:76:85:dd: 82:78:1c:b6:4c:61:4a:c6:6e:35:41:21:c7:be:f1:62:ba:88: 31:10:b4:75:c6:9c:08:a3:36:4a:95:fe:a3:50:1f:1f:20:02: a3:ef:a2:78:b8:ca:36:32:a0:a5:d0:3a:21:e6:7f:1e:df:8c: 68:76:2b:05:46:7d:0b:c1:4a:e4:bc:2f:2b:56:2b:70:68:fc: 5b:26:cd:07:83:80:ea:67:ec:9a:5a:96:d0:b5:e0:d6:48:d9: 07:d3:2e:da:f8:64:91:f2:1c:c1:08:fb:a6:a2:9e:8a:d9:88: d9:17:af:5c:09:b6:8a:ae:c0:18:53:42:5d:95:c1:95:5f:6d: ef:97:40:02:34:5b:87:92:17:9e:24:56:12:21:4d:be:bd:81: 3d:35:68:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGyObGCXudw6IQ9LpFsdZZUF4qvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2REQz NDU4OUI0RTAeFw0yNjA2MTkxNzQ3MjZaFw0yNjA2MjAyMDI3MjZaMDMxMTAvBgNV BAMTKDIwNDEyMUNCQTI0QkMxMzBEOEQ2QTA4RjlGN0VEMThDNTRGMkJEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk1RZGT332MzqogZkJGVMmqWve +xwferp6SnLVlLwZj3Da1vJk66G7e8pWnxj2U3SfHTEISVn9quYnKG/dvcmzBp+m UlDaTzPnjORLUypzIIxEC0Z0GhgSDiAmFoDgDmiicY/BXgiCNl7xb1EXPq93/1gE a7E5iu1KYlObc8vZklj3uaYwV+OyyXSxYJfgWtcSCtpD5NsDmXHC+cYXqfzVQ4HK ZPPhxpAi2FfTGGgfGbUoave4ESUONCNH7yuUukj3dowL22DKoG8nzPMjst2ekZtC 494onTTWe6lzesuSeybn+Tt8r2lgXEvVb/wzgfMeljuLqLtuJPLGTZBgHO9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIEEhy6JLwTDY1qCPn37RjFTyvc8wHwYDVR0j BBgwFoAUcMzgMfEETe5sr1ZbE3X23TRYm04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZjZjdjOWUtZjhjMy00MDE1LTg4MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFG MTA0NERFRTZDQUY1NjVCMTM3NUY2REQzNDU4OUI0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MENDRTAzMUYxMDQ0REVFNkNBRjU2NUIxMzc1RjZERDM0NTg5 QjRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2 REQzNDU4OUI0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoHdyljcmB19weglGc90fshCDe4UQNHSCS7 eBhM6j6Uc5vojrWVv2+xj785b8UGm6frVHGh+rTXY3QAs2oIIC73mPXpfvk+i+KW I2dtFhWsxBm5y9wi7UEhnYLIXUYYLJHEWmh7rs4yD3aF3YJ4HLZMYUrGbjVBIce+ 8WK6iDEQtHXGnAijNkqV/qNQHx8gAqPvoni4yjYyoKXQOiHmfx7fjGh2KwVGfQvB SuS8LytWK3Bo/FsmzQeDgOpn7JpaltC14NZI2QfTLtr4ZJHyHMEI+6ainorZiNkX r1wJtoquwBhTQl2VwZVfbe+XQAI0W4eSF54kVhIhTb69gT01aEk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:06 2026 by rpki-client