$ rpki-client -vvf rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft File: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft (raw, json) Hash identifier: 2BMYQzquljMXGjG1Y/m8RL9K0OXZ0nbNnbFK2EUZ8ZY= Subject key identifier: 98:D9:B9:52:E8:77:50:D8:C0:08:ED:08:F9:5E:A0:16:9C:D7:5E:B3 Authority key identifier: 70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 Certificate issuer: /CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Certificate serial: 1E3D32655E8BE70CABA8F2AACBE5E77E0B665BE1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 23:20:59 +0000 Manifest this update: Wed 17 Jun 2026 23:15:59 +0000 Manifest next update: Fri 19 Jun 2026 00:29:59 +0000 Files and hashes: 1: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: xkIsUOsvhzcBh2sD2rCI6s5EqakfkJ/T7bTiJ7H33iA=) 2: 70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl (hash: gX/luJOtb8RWXOfzmn1epODrNbAl4FnhD7wAT9BF6iw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 00:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3d:32:65:5e:8b:e7:0c:ab:a8:f2:aa:cb:e5:e7:7e:0b:66:5b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F7AA4EDB6C457B5D02D66762DDD8EE4B411781 Validity Not Before: Jun 17 23:15:59 2026 GMT Not After : Jun 19 00:29:59 2026 GMT Subject: CN=98D9B952E87750D8C008ED08F95EA0169CD75EB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:2a:03:4a:7e:af:63:de:23:cf:ec:62:42: d3:48:ba:bb:6c:6e:47:05:d2:74:83:59:0c:ba:fc: 25:aa:43:a6:b0:49:a7:4a:31:17:06:46:2e:fa:73: a8:29:f3:d9:2f:c9:e2:6d:90:32:6e:a5:b4:28:e2: bd:e7:b3:54:51:8f:54:63:87:37:94:b5:cf:0c:e9: a2:1d:c8:d6:df:47:ee:74:14:39:91:75:9c:e0:87: 66:2d:b8:4c:77:9d:76:94:5f:e4:74:e4:17:c4:ae: a3:23:72:0b:b2:b9:95:16:9b:1b:25:86:16:79:f3: 75:ad:92:b4:dc:33:bf:c6:ce:75:97:ae:8a:35:3e: ba:88:cb:bc:fa:82:39:a3:29:57:2d:6c:90:9e:03: 84:7b:d8:43:30:7e:17:9b:55:e2:15:0e:c4:9f:fc: b9:f8:8d:09:ef:f8:ec:d7:f8:8c:81:7a:ae:16:60: 14:f2:e7:00:74:f7:58:17:82:84:df:81:54:37:56: aa:1d:5b:5f:da:56:c8:7a:f4:b6:14:e4:68:ec:ac: 90:0b:30:83:f6:9e:15:25:28:b5:66:da:c3:66:50: a6:04:4c:8f:a5:29:5f:fe:65:01:ce:00:8a:dd:d8: ef:1c:1e:b1:67:ac:7d:71:17:b8:96:b3:5e:e6:92: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D9:B9:52:E8:77:50:D8:C0:08:ED:08:F9:5E:A0:16:9C:D7:5E:B3 X509v3 Authority Key Identifier: keyid:70:F7:AA:4E:DB:6C:45:7B:5D:02:D6:67:62:DD:D8:EE:4B:41:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/70F7AA4EDB6C457B5D02D66762DDD8EE4B411781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a5:ef:f9:54:5f:97:95:80:52:45:51:f8:17:8a:43:b9:fb: ca:3c:ba:ce:df:4d:b1:c5:83:84:20:ab:e3:64:24:e1:96:c7: 58:35:fb:95:d1:40:ec:7c:02:d7:b2:5c:40:9f:3b:5b:df:0e: 70:30:0e:80:86:fe:d3:32:a0:9c:1f:78:2a:07:98:70:fe:c0: 81:18:97:be:c4:74:e6:f6:54:20:1c:39:74:3e:5e:78:4f:a3: 17:b3:5d:3d:fa:e4:bc:a8:52:f0:77:6f:69:11:2d:b4:15:29: ba:66:3b:30:9e:b3:e5:db:0e:b5:a8:f0:e4:6b:8e:d5:62:b3: f2:98:ad:aa:df:b3:42:f9:c6:d5:02:9c:79:86:c9:f6:5a:25: fd:bc:74:bf:40:2e:79:54:41:b5:08:bc:19:0e:22:b7:3d:53: 42:e3:19:05:df:c1:14:58:90:a5:2f:e4:a6:16:fd:63:a2:2c: 91:ba:92:6a:9e:df:a3:6c:18:a6:ba:f7:3c:55:25:16:25:5a: 83:45:20:93:df:f4:b9:a1:10:31:bc:03:9c:96:0b:54:fa:ee: c4:2c:4e:6a:40:38:cb:46:93:05:6d:e8:60:1d:1a:5e:de:cd: 27:34:b7:10:c6:08:cd:e2:82:5e:55:0e:39:1e:f0:23:07:af: ad:c3:42:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHj0yZV6L5wyrqPKqy+XnfgtmW+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0 QjQxMTc4MTAeFw0yNjA2MTcyMzE1NTlaFw0yNjA2MTkwMDI5NTlaMDMxMTAvBgNV BAMTKDk4RDlCOTUyRTg3NzUwRDhDMDA4RUQwOEY5NUVBMDE2OUNENzVFQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCCoDSn6vY94jz+xiQtNIurts bkcF0nSDWQy6/CWqQ6awSadKMRcGRi76c6gp89kvyeJtkDJupbQo4r3ns1RRj1Rj hzeUtc8M6aIdyNbfR+50FDmRdZzgh2YtuEx3nXaUX+R05BfErqMjcguyuZUWmxsl hhZ583WtkrTcM7/GznWXroo1PrqIy7z6gjmjKVctbJCeA4R72EMwfhebVeIVDsSf /Ln4jQnv+OzX+IyBeq4WYBTy5wB091gXgoTfgVQ3VqodW1/aVsh69LYU5GjsrJAL MIP2nhUlKLVm2sNmUKYETI+lKV/+ZQHOAIrd2O8cHrFnrH1xF7iWs17mkvSfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmNm5Uuh3UNjACO0I+V6gFpzXXrMwHwYDVR0j BBgwFoAUcPeqTttsRXtdAtZnYt3Y7ktBF4EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2ZjNWExY2MtY2M1ZS00ZTU4LThkZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVE QjZDNDU3QjVEMDJENjY3NjJEREQ4RUU0QjQxMTc4MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY3QUE0RURCNkM0NTdCNUQwMkQ2Njc2MkRERDhFRTRCNDEx NzgxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvNzBGN0FBNEVEQjZDNDU3QjVEMDJENjY3NjJEREQ4 RUU0QjQxMTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAil7/lUX5eVgFJFUfgXikO5+8o8us7fTbHF g4Qgq+NkJOGWx1g1+5XRQOx8AteyXECfO1vfDnAwDoCG/tMyoJwfeCoHmHD+wIEY l77EdOb2VCAcOXQ+XnhPoxezXT365LyoUvB3b2kRLbQVKbpmOzCes+XbDrWo8ORr jtVis/KYrarfs0L5xtUCnHmGyfZaJf28dL9ALnlUQbUIvBkOIrc9U0LjGQXfwRRY kKUv5KYW/WOiLJG6kmqe36NsGKa69zxVJRYlWoNFIJPf9LmhEDG8A5yWC1T67sQs TmpAOMtGkwVt6GAdGl7ezSc0txDGCM3igl5VDjke8CMHr63DQkU= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:16 2026 by rpki-client