$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft File: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft (raw, json) Hash identifier: QhWKQX+LgfpnNp0wG7DWI9i+wOFjVWoGwOA4NqqyuCo= Subject key identifier: 85:64:C9:25:27:FB:7B:48:59:AE:56:6B:74:58:76:F6:05:4A:71:2A Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Certificate serial: 15D1BF1310F035AE43DA160E3D22EA58F427E382 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 21:42:08 +0000 Manifest this update: Fri 19 Jun 2026 21:37:08 +0000 Manifest next update: Sat 20 Jun 2026 23:54:08 +0000 Files and hashes: 1: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl (hash: EHShapJ8euijcrEQHVHRaIX0IkHZ/Rlsioe/chjXptw=) 2: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 1pB/Nqd7vJqSwm7DTejyzXpeJQSOjzzPkrlOSeZoqb4=) 3: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: CRQfQvukFddl9vchPsTgKBPY7+BHd3EPebDgJxEISnw=) 4: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: pEjlBEcf4SMwhsnq2l8vEuSNRarcFG9m4tfJC8/w2lc=) 5: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: lCknCbn1e4JowaioeH82UQR3fwZeR46CsNwrligI+W0=) 6: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: 7JThFy92/VpEXEDJA9kwrgcgGhSHAfaM/+d1+Zp5aK8=) 7: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: uVaL+tfCNM5zPaOPcfVzgSdj2M5cAqybg0t35qHDKfE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d1:bf:13:10:f0:35:ae:43:da:16:0e:3d:22:ea:58:f4:27:e3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA Validity Not Before: Jun 19 21:37:08 2026 GMT Not After : Jun 20 23:54:08 2026 GMT Subject: CN=8564C92527FB7B4859AE566B745876F6054A712A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:b5:1f:78:25:16:1e:22:7d:cb:1d:25:97: 7c:1f:87:b5:1d:26:01:e0:44:4a:9f:f9:90:34:32: 72:70:3a:f7:d5:c1:d8:ce:20:f9:28:14:13:25:24: 8a:c0:e1:50:74:7c:6a:6e:04:6f:54:e1:21:ac:13: b2:38:5b:f8:43:6d:33:a3:e2:1d:48:da:58:ac:d4: 0b:5d:c2:50:88:85:32:b2:60:88:12:72:19:25:82: 06:be:7c:7c:6c:e6:51:3c:9c:4a:60:4a:cd:01:10: 4c:6f:da:b7:55:1f:9d:92:e6:89:17:e8:fb:c1:d6: b2:a6:f2:f7:59:bf:6c:da:d5:2f:24:87:4c:1a:72: fe:a3:3e:cc:2f:70:78:30:7c:82:10:b9:f9:d0:5d: bb:75:21:5d:7e:95:ec:47:f3:69:88:55:a3:aa:a8: 97:31:71:37:5f:ed:cb:8c:73:4a:54:68:37:37:47: d7:bc:de:1f:34:d4:57:45:89:9c:4b:95:cb:dc:b0: 63:5b:6a:b3:3a:8e:fa:da:71:2c:a2:2e:88:35:4c: 33:91:d2:70:2d:09:72:cd:8c:0e:df:98:84:3c:78: e0:91:09:5b:d6:66:c8:bb:7d:89:e1:82:99:08:d1: 96:48:5a:51:7e:81:98:ec:0e:29:0f:3c:0e:39:78: 6c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:64:C9:25:27:FB:7B:48:59:AE:56:6B:74:58:76:F6:05:4A:71:2A X509v3 Authority Key Identifier: keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5b:c2:9b:b1:2b:0c:c3:62:86:c9:05:62:d7:21:87:60:14: 9d:39:8b:82:ec:65:9f:73:7c:00:73:be:e2:8f:64:95:be:52: 63:69:db:66:a9:89:17:db:3b:b9:8a:74:cc:30:1f:7e:1a:da: b6:44:b3:47:b5:d7:b6:c5:98:c8:a6:32:d1:2e:a2:7c:a5:b9: 21:72:40:1c:81:a6:f9:5b:cb:09:d8:1f:0d:79:96:ab:88:65: dc:49:8f:f2:76:76:12:27:42:9d:44:1c:6a:1c:3d:3e:ea:dd: c6:90:55:99:a5:f4:59:23:e6:36:38:d6:d7:46:b0:91:fc:2e: c9:fe:74:82:af:3b:e0:87:90:43:73:47:ae:57:cc:05:c8:34: f4:3f:24:01:82:1e:f6:e9:4e:1b:19:86:ec:1a:34:e6:55:d3: 36:ab:fc:86:33:0f:b3:9d:fd:39:34:7e:06:e2:3d:44:14:a0: 32:29:52:7b:cb:bf:66:99:4f:c0:42:86:b1:b0:09:25:e8:30: d7:2f:89:b9:74:50:2a:37:30:6d:bd:1f:e1:0a:39:94:0c:85: 9f:78:33:cc:2e:9d:5c:7b:6e:d0:5f:e0:97:63:96:11:a6:ac: e3:c7:03:8a:2d:9a:71:82:a1:5f:a0:d4:3e:f9:79:40:61:9a: 1c:02:90:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdG/ExDwNa5D2hYOPSLqWPQn44IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2 N0ZGRUZBQTAeFw0yNjA2MTkyMTM3MDhaFw0yNjA2MjAyMzU0MDhaMDMxMTAvBgNV BAMTKDg1NjRDOTI1MjdGQjdCNDg1OUFFNTY2Qjc0NTg3NkY2MDU0QTcxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMLUfeCUWHiJ9yx0ll3wfh7Ud JgHgREqf+ZA0MnJwOvfVwdjOIPkoFBMlJIrA4VB0fGpuBG9U4SGsE7I4W/hDbTOj 4h1I2lis1AtdwlCIhTKyYIgSchklgga+fHxs5lE8nEpgSs0BEExv2rdVH52S5okX 6PvB1rKm8vdZv2za1S8kh0wacv6jPswvcHgwfIIQufnQXbt1IV1+lexH82mIVaOq qJcxcTdf7cuMc0pUaDc3R9e83h801FdFiZxLlcvcsGNbarM6jvracSyiLog1TDOR 0nAtCXLNjA7fmIQ8eOCRCVvWZsi7fYnhgpkI0ZZIWlF+gZjsDikPPA45eGxBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhWTJJSf7e0hZrlZrdFh29gVKcSowHwYDVR0j BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF RkFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1 M0E2N0ZGRUZBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1bwpuxKwzDYobJBWLXIYdgFJ05i4LsZZ9z fABzvuKPZJW+UmNp22apiRfbO7mKdMwwH34a2rZEs0e117bFmMimMtEuonyluSFy QByBpvlbywnYHw15lquIZdxJj/J2dhInQp1EHGocPT7q3caQVZml9Fkj5jY41tdG sJH8Lsn+dIKvO+CHkENzR65XzAXINPQ/JAGCHvbpThsZhuwaNOZV0zar/IYzD7Od /Tk0fgbiPUQUoDIpUnvLv2aZT8BChrGwCSXoMNcvibl0UCo3MG29H+EKOZQMhZ94 M8wunVx7btBf4JdjlhGmrOPHA4otmnGCoV+g1D75eUBhmhwCkAM= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:12 2026 by rpki-client