$ rpki-client -vvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft File: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft (raw, json) Hash identifier: 9qPvkFWY77cX1KfQDnuxlhzCqzmI+u9+bQzxi+qa9fs= Subject key identifier: 1A:FC:CD:07:B2:3B:A5:3C:61:C2:EA:12:B1:10:1F:18:30:76:62:F1 Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E Certificate issuer: /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Certificate serial: 1123E6FD823ABDE7E99CCE7B2B4AF1334F1B7D7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 04:07:27 +0000 Manifest this update: Sun 02 Aug 2026 04:02:27 +0000 Manifest next update: Mon 03 Aug 2026 05:32:27 +0000 Files and hashes: 1: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl (hash: 8QsPgncGVToVHYvyzD+P/y0Qv0XhL0a5vh/WEAVqdx0=) 2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: Nx3fcumdsqRiUqwqQ3R1jk6NstvkzNg1p4gYbPnIgK4=) 3: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:23:e6:fd:82:3a:bd:e7:e9:9c:ce:7b:2b:4a:f1:33:4f:1b:7d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Validity Not Before: Aug 2 04:02:27 2026 GMT Not After : Aug 3 05:32:27 2026 GMT Subject: CN=1AFCCD07B23BA53C61C2EA12B1101F18307662F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:09:f7:a6:59:20:62:e5:1e:de:f8:9a:6a: 1f:f5:83:f1:bb:a0:eb:6d:c3:26:2b:7d:85:89:3c: f5:62:3a:18:53:9f:17:83:54:57:6b:01:8f:8a:dc: 85:fb:14:92:31:ec:d0:0b:80:73:6e:f1:eb:0d:f5: 37:2c:69:6e:37:d2:45:22:83:b5:40:bc:36:37:3b: 9b:b2:b4:bb:1b:56:eb:3d:3d:4e:72:f3:f7:f0:de: 0e:1d:e6:30:22:38:5c:d7:84:44:08:b4:26:ec:13: e5:95:da:15:3f:c8:52:c8:b8:17:30:dd:9e:9b:ae: b6:4a:50:e2:04:19:8a:85:3b:de:41:85:7e:38:72: d0:80:7e:17:1a:8a:b6:e3:71:26:b4:6a:b1:d2:42: 30:bc:c5:c1:76:8e:f1:be:1a:22:ae:8c:8f:d0:86: eb:0a:e3:c9:40:b8:2e:29:a3:99:89:16:b9:11:91: bd:03:df:e4:34:28:de:c0:e3:f6:29:59:5b:ff:90: df:68:5b:b9:19:b8:ec:d6:7a:b0:4f:15:65:3a:40: f0:a9:8c:25:56:6d:52:16:6c:04:4f:f7:65:64:82: 8d:d3:55:7c:47:05:4d:09:ae:39:8d:ba:a4:9d:61: bb:72:ff:63:c8:ab:f1:1d:ab:b2:64:c3:a0:72:cf: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FC:CD:07:B2:3B:A5:3C:61:C2:EA:12:B1:10:1F:18:30:76:62:F1 X509v3 Authority Key Identifier: keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ed:df:b1:b8:4b:c9:f0:30:d3:25:9f:e2:6a:88:69:7c:10:53: 67:cb:81:6c:8a:5f:8d:9c:d5:d7:1d:fa:98:94:99:71:c5:0d: f3:73:a6:d8:31:25:5c:9e:96:ad:cb:a7:f9:2a:07:01:5b:9c: 49:6c:ab:4d:46:36:72:6e:06:46:db:75:b0:8f:0e:63:3e:e0: ec:46:83:28:e8:aa:b5:2a:81:c2:9e:55:79:60:ae:ac:8e:f3: 12:8a:5f:31:30:66:7b:d6:bd:62:99:d1:b8:48:42:b9:4b:02: 0b:45:d9:d0:01:47:0e:00:ae:e2:ac:18:e3:8f:35:42:a9:07: 7d:0c:7c:f3:a0:bf:1d:49:07:63:2f:75:c8:85:e7:88:5b:1e: e1:43:42:c1:aa:20:ed:8c:99:65:74:30:a7:5e:78:80:c9:e5: 80:82:ea:4d:2e:1d:0f:b6:32:cf:22:8f:f5:8f:a6:ed:26:db: 29:7b:58:8d:81:1c:a2:b6:ac:00:2e:43:09:9e:cb:22:0b:c6: 23:af:94:1f:e4:d8:ef:93:04:bd:a3:bd:81:8e:fe:4c:63:b8: 0b:49:f4:58:27:41:39:9e:56:02:ff:8f:82:92:cc:d8:69:31: 26:1b:94:d1:3c:a3:77:1a:c2:dd:77:0e:71:aa:fa:52:77:2f: b0:b6:40:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESPm/YI6vefpnM57K0rxM08bfX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VC Qzk5REI4RTAeFw0yNjA4MDIwNDAyMjdaFw0yNjA4MDMwNTMyMjdaMDMxMTAvBgNV BAMTKDFBRkNDRDA3QjIzQkE1M0M2MUMyRUExMkIxMTAxRjE4MzA3NjYyRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyewn3plkgYuUe3viaah/1g/G7 oOttwyYrfYWJPPViOhhTnxeDVFdrAY+K3IX7FJIx7NALgHNu8esN9TcsaW430kUi g7VAvDY3O5uytLsbVus9PU5y8/fw3g4d5jAiOFzXhEQItCbsE+WV2hU/yFLIuBcw 3Z6brrZKUOIEGYqFO95BhX44ctCAfhcairbjcSa0arHSQjC8xcF2jvG+GiKujI/Q husK48lAuC4po5mJFrkRkb0D3+Q0KN7A4/YpWVv/kN9oW7kZuOzWerBPFWU6QPCp jCVWbVIWbARP92Vkgo3TVXxHBU0JrjmNuqSdYbty/2PIq/Edq7Jkw6Byz/zHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGvzNB7I7pTxhwuoSsRAfGDB2YvEwHwYDVR0j BBgwFoAUcPbsHnI9be1CS5NFzD32zryZ244wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZkZDE1ZTMtOWVlNS00ZDUyLTllZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3 MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VCQzk5REI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY2RUMxRTcyM0Q2REVENDI0QjkzNDVDQzNERjZDRUJDOTlE QjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzZkZDE1ZTMtOWVlNS00ZDUyLTll ZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2 Q0VCQzk5REI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO3fsbhLyfAw0yWf4mqIaXwQU2fLgWyKX42c 1dcd+piUmXHFDfNzptgxJVyelq3Lp/kqBwFbnElsq01GNnJuBkbbdbCPDmM+4OxG gyjoqrUqgcKeVXlgrqyO8xKKXzEwZnvWvWKZ0bhIQrlLAgtF2dABRw4AruKsGOOP NUKpB30MfPOgvx1JB2MvdciF54hbHuFDQsGqIO2MmWV0MKdeeIDJ5YCC6k0uHQ+2 Ms8ij/WPpu0m2yl7WI2BHKK2rAAuQwmeyyILxiOvlB/k2O+TBL2jvYGO/kxjuAtJ 9FgnQTmeVgL/j4KSzNhpMSYblNE8o3cawt13DnGq+lJ3L7C2QII= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:45 2026 by rpki-client