$ rpki-client -vvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft File: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft (raw, json) Hash identifier: Z0mU1ixiGeTcCutiMK6F5bh+ELyNtpBjfoENvUcGhTY= Subject key identifier: 41:42:7E:80:A8:14:3C:E3:9E:90:78:93:AA:0F:B1:9F:6D:C4:63:5A Authority key identifier: F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 Certificate issuer: /CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Certificate serial: 18D66C14D2F168F7D036A72A0021672852620A14 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:01:21 +0000 Manifest this update: Fri 19 Jun 2026 16:56:21 +0000 Manifest next update: Sat 20 Jun 2026 17:24:21 +0000 Files and hashes: 1: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl (hash: eMriJO442z5ZgGL1twtxyDn5hew4Ot+sKyWWb0Bx3kY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d6:6c:14:d2:f1:68:f7:d0:36:a7:2a:00:21:67:28:52:62:0a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Validity Not Before: Jun 19 16:56:21 2026 GMT Not After : Jun 20 17:24:21 2026 GMT Subject: CN=41427E80A8143CE39E907893AA0FB19F6DC4635A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:32:c3:d6:c1:4e:a6:e4:2b:38:1f:d0:13:f6: 4f:12:16:c6:80:b4:a1:b0:82:96:1e:8f:8d:fe:0d: cf:2c:10:53:3c:10:1a:63:46:47:d3:0e:0f:b9:17: ba:e7:65:ea:56:0c:6c:89:0d:f2:7c:ce:7e:5d:8a: 5c:34:68:7b:b0:dd:92:6d:90:d2:c0:97:b0:da:55: 38:a0:46:a0:26:18:4a:c0:97:4b:ab:91:28:48:fc: 29:6a:dc:22:09:6e:12:41:f3:02:cd:4c:27:92:4f: a2:83:ee:81:6f:e3:c2:2a:00:7d:45:1b:0c:f8:1a: cb:2d:91:a0:8a:70:00:fd:80:11:11:42:13:e0:ea: bb:a7:c6:6a:4d:ed:0d:59:54:2a:ca:85:11:6d:22: bb:09:42:9b:fb:5c:42:54:22:87:4e:b7:0d:97:93: d4:9c:36:23:4d:9e:6f:0a:b8:5b:d6:10:fd:8d:20: b5:53:10:81:7a:ff:17:c7:18:3c:68:73:0b:05:ab: ab:72:cf:92:07:da:79:b5:3f:2a:96:07:42:02:2c: 9a:e2:40:e7:7d:68:bc:32:14:86:c2:84:d8:98:1d: c5:c1:41:af:c0:f6:4b:a1:1f:a0:75:c6:e5:2d:8d: 3f:86:6d:a9:d1:3f:58:57:0a:d1:cc:6f:cd:fd:57: 2c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:42:7E:80:A8:14:3C:E3:9E:90:78:93:AA:0F:B1:9F:6D:C4:63:5A X509v3 Authority Key Identifier: keyid:F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ae:2a:8b:4c:06:da:16:91:1d:b3:a5:fc:f3:56:22:a7:64: 75:63:a2:7b:7a:62:1e:f3:08:13:02:2b:cd:59:ed:c2:75:40: 65:05:f0:47:f8:8f:4e:b9:3c:8b:6c:ee:18:24:8d:84:3f:cf: de:d9:a0:c2:5c:ab:5f:da:50:07:c2:ff:07:4d:4c:31:3b:45: cf:3b:db:85:fb:7a:84:34:94:44:65:f3:46:c9:eb:9a:a3:a7: ae:56:d3:19:0c:9e:7f:e7:74:cc:38:91:29:23:16:54:0b:50: 07:93:2f:b2:07:ed:d5:10:51:35:a7:62:89:07:3f:d9:63:6e: 08:a2:ae:10:48:51:53:17:e9:9d:81:12:8b:fa:b1:01:db:db: 2e:7d:47:c9:85:d8:a8:98:97:63:ca:86:28:a8:e1:8b:4c:7c: 9d:d1:c4:44:e5:87:18:b1:58:22:4e:48:d8:97:71:63:21:9a: ea:dd:a5:3b:46:77:5e:f8:c6:63:48:94:72:75:b2:d0:91:14: d8:de:90:0a:c3:c2:8b:a3:8d:d2:cc:e4:05:8a:43:83:eb:d4: 19:a1:4f:b5:55:d5:50:7c:30:96:eb:84:2b:e3:34:c7:49:89: 7b:ba:e3:7d:06:00:10:30:80:a7:1f:b5:2b:3c:55:e4:ed:85: ea:cb:b2:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNZsFNLxaPfQNqcqACFnKFJiChQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0 OThDNUNEMzAeFw0yNjA2MTkxNjU2MjFaFw0yNjA2MjAxNzI0MjFaMDMxMTAvBgNV BAMTKDQxNDI3RTgwQTgxNDNDRTM5RTkwNzg5M0FBMEZCMTlGNkRDNDYzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYMsPWwU6m5Cs4H9AT9k8SFsaA tKGwgpYej43+Dc8sEFM8EBpjRkfTDg+5F7rnZepWDGyJDfJ8zn5dilw0aHuw3ZJt kNLAl7DaVTigRqAmGErAl0urkShI/Clq3CIJbhJB8wLNTCeST6KD7oFv48IqAH1F Gwz4GsstkaCKcAD9gBERQhPg6runxmpN7Q1ZVCrKhRFtIrsJQpv7XEJUIodOtw2X k9ScNiNNnm8KuFvWEP2NILVTEIF6/xfHGDxocwsFq6tyz5IH2nm1PyqWB0ICLJri QOd9aLwyFIbChNiYHcXBQa/A9kuhH6B1xuUtjT+GbanRP1hXCtHMb839VyzRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQUJ+gKgUPOOekHiTqg+xn23EY1owHwYDVR0j BBgwFoAU9w12AOASQmk8oOtcq5Ie4EmMXNMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBF MDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0OThDNUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzBENzYwMEUwMTI0MjY5M0NBMEVCNUNBQjkyMUVFMDQ5OEM1 Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFF RTA0OThDNUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKuKotMBtoWkR2zpfzzViKnZHVjont6Yh7z CBMCK81Z7cJ1QGUF8Ef4j065PIts7hgkjYQ/z97ZoMJcq1/aUAfC/wdNTDE7Rc87 24X7eoQ0lERl80bJ65qjp65W0xkMnn/ndMw4kSkjFlQLUAeTL7IH7dUQUTWnYokH P9ljbgiirhBIUVMX6Z2BEov6sQHb2y59R8mF2KiYl2PKhiio4YtMfJ3RxETlhxix WCJOSNiXcWMhmurdpTtGd174xmNIlHJ1stCRFNjekArDwoujjdLM5AWKQ4Pr1Bmh T7VV1VB8MJbrhCvjNMdJiXu6430GABAwgKcftSs8VeTtherLstA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:14:56 2026 by rpki-client