$ rpki-client -vvf rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft File: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft (raw, json) Hash identifier: p5Z5XHtmcWh34g1Bgvefuuf5ZDCdwUhJcM0K+1xReb0= Subject key identifier: 9D:F5:00:59:1E:54:88:B6:5B:93:11:7D:B9:B9:E4:85:09:81:23:C3 Authority key identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 Certificate issuer: /CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Certificate serial: 6AB364FBDA8B304EA80311A9B2609ED78131EB11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 08:53:31 +0000 Manifest this update: Sun 02 Aug 2026 08:48:31 +0000 Manifest next update: Mon 03 Aug 2026 09:24:31 +0000 Files and hashes: 1: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl (hash: KcQRehCC0DB6FxfTXoqpf1dC+iuWM3EHty+4c6aMeec=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: xkIsUOsvhzcBh2sD2rCI6s5EqakfkJ/T7bTiJ7H33iA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b3:64:fb:da:8b:30:4e:a8:03:11:a9:b2:60:9e:d7:81:31:eb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Validity Not Before: Aug 2 08:48:31 2026 GMT Not After : Aug 3 09:24:31 2026 GMT Subject: CN=9DF500591E5488B65B93117DB9B9E485098123C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:19:69:4f:c0:82:7c:5d:f7:31:cb:9f:65: 06:2b:a6:67:cb:2b:ce:19:b1:de:c8:c2:ac:e6:78: 48:0f:ca:e6:ce:56:b8:76:5f:77:e7:62:11:90:7e: 6d:ac:c0:f6:3f:3c:01:9b:fb:cf:b0:9c:9f:a8:28: 75:6b:5e:d6:5e:1b:b8:e3:80:86:62:59:81:95:32: 3a:14:af:d1:1e:7e:2d:fd:f0:62:a3:2d:50:88:e3: 04:57:26:d2:e4:76:a6:cc:60:15:09:03:d7:12:12: 77:c4:ff:7a:9e:66:78:be:0d:99:ea:30:35:43:29: 84:fd:17:f7:e4:ac:8f:98:e1:49:a8:e0:d1:9e:da: e2:ab:7d:d6:2d:90:d2:c2:cf:45:b8:c5:98:8a:13: f8:3a:0a:1d:26:5a:71:0e:89:47:1e:63:fd:b6:d5: 1a:88:12:92:f5:0c:87:e7:3d:f4:ad:6b:2c:ba:6b: 3d:35:2a:ef:b7:18:f7:f0:f1:30:28:01:ac:30:5a: da:34:e5:dd:6d:33:80:30:da:8f:6f:76:0a:fb:ba: a1:39:af:b0:e3:da:6c:71:06:2a:31:b9:60:ec:53: 78:ca:df:e7:e0:d8:e6:23:b6:aa:ff:5d:29:12:15: b9:85:37:36:81:fa:f4:6b:fd:e7:99:3a:99:b7:05: db:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F5:00:59:1E:54:88:B6:5B:93:11:7D:B9:B9:E4:85:09:81:23:C3 X509v3 Authority Key Identifier: keyid:70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:9d:42:a1:df:4c:e4:64:48:cd:e1:77:61:97:8b:7f:fa:43: 42:c2:51:ad:65:b7:b1:a6:87:05:c9:18:8e:c4:00:17:37:a0: 88:90:74:1f:18:0e:e2:fd:ca:5b:f1:05:c3:07:fe:b9:1a:40: 3b:1a:10:85:86:5b:5d:e9:45:35:b0:d6:2a:24:b0:65:9f:47: 3d:be:7b:84:f2:e5:0e:8b:68:85:08:a5:16:1f:7f:78:cd:70: 1f:b5:3a:f0:f0:9d:6f:fd:14:cf:8c:9b:b5:c2:e0:38:d7:45: 8f:07:7c:c5:0d:0f:04:ec:f3:3f:3f:3c:f9:2a:1a:63:7e:28: 24:32:d8:1f:fd:de:2c:19:6d:f1:08:3e:33:02:1a:79:c2:52: ed:c4:11:47:c2:b4:c2:1b:13:ba:37:ed:61:77:a5:1f:42:e7: 17:a5:76:60:77:6d:3f:1c:7c:3a:a1:dd:dd:66:e7:f9:3b:c5: 79:a5:f1:29:16:07:2c:08:dd:9d:09:6d:e7:63:04:60:49:c3: db:dc:92:c0:9a:25:67:d6:88:5b:ce:c1:49:db:52:5e:70:8c: 94:f5:e2:31:36:95:ed:bd:d6:c1:26:6a:ae:67:ad:9a:cb:07: 31:b7:5c:80:67:a7:43:be:e5:a0:e2:15:26:ef:14:a5:b0:4e: 2c:11:e4:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarNk+9qLME6oAxGpsmCe14Ex6xEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0 QjQxMTc4MTAeFw0yNjA4MDIwODQ4MzFaFw0yNjA4MDMwOTI0MzFaMDMxMTAvBgNV BAMTKDlERjUwMDU5MUU1NDg4QjY1QjkzMTE3REI5QjlFNDg1MDk4MTIzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDChlpT8CCfF33McufZQYrpmfL K84Zsd7IwqzmeEgPyubOVrh2X3fnYhGQfm2swPY/PAGb+8+wnJ+oKHVrXtZeG7jj gIZiWYGVMjoUr9Eefi398GKjLVCI4wRXJtLkdqbMYBUJA9cSEnfE/3qeZni+DZnq MDVDKYT9F/fkrI+Y4Umo4NGe2uKrfdYtkNLCz0W4xZiKE/g6Ch0mWnEOiUceY/22 1RqIEpL1DIfnPfStayy6az01Ku+3GPfw8TAoAawwWto05d1tM4Aw2o9vdgr7uqE5 r7Dj2mxxBioxuWDsU3jK3+fg2OYjtqr/XSkSFbmFNzaB+vRr/eeZOpm3BduxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnfUAWR5UiLZbkxF9ubnkhQmBI8MwHwYDVR0j BBgwFoAUcPeqTttsRXtdAtZnYt3Y7ktBF4EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZjNWExY2MtY2M1ZS00ZTU4LThkZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVE QjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0QjQxMTc4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY3QUE0RURCNkM0NTdCNUQwMkQ2Njc2MkRERDhFRTRCNDEx NzgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4 RUU0QjQxMTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJadQqHfTORkSM3hd2GXi3/6Q0LCUa1lt7Gm hwXJGI7EABc3oIiQdB8YDuL9ylvxBcMH/rkaQDsaEIWGW13pRTWw1ioksGWfRz2+ e4Ty5Q6LaIUIpRYff3jNcB+1OvDwnW/9FM+Mm7XC4DjXRY8HfMUNDwTs8z8/PPkq GmN+KCQy2B/93iwZbfEIPjMCGnnCUu3EEUfCtMIbE7o37WF3pR9C5xeldmB3bT8c fDqh3d1m5/k7xXml8SkWBywI3Z0JbedjBGBJw9vcksCaJWfWiFvOwUnbUl5wjJT1 4jE2le291sEmaq5nrZrLBzG3XIBnp0O+5aDiFSbvFKWwTiwR5NU= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:36 2026 by rpki-client