$ rpki-client -vvf rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft File: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft (raw, json) Hash identifier: ZSCr2YHZ0hHDy0/H1MW0cHqyJZmwBvEM08a+U5NcdIQ= Subject key identifier: 04:8D:E1:3D:96:04:CA:F3:C8:A8:8C:EB:56:30:D5:92:D0:DF:77:7C Authority key identifier: 70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA Certificate issuer: /CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Certificate serial: 6E0685B031ADBE3AD2547C757E6ABAD9F6B53C92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft Manifest number: 04 Signing time: Tue 05 May 2026 07:27:01 +0000 Manifest this update: Tue 05 May 2026 07:22:01 +0000 Manifest next update: Wed 06 May 2026 10:50:01 +0000 Files and hashes: 1: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl (hash: 9RQntGxRTT96luSwkTm7wv5+Ry5VL9I7wDzHRxocLH0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:06:85:b0:31:ad:be:3a:d2:54:7c:75:7e:6a:ba:d9:f6:b5:3c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Validity Not Before: May 5 07:22:01 2026 GMT Not After : May 6 10:50:01 2026 GMT Subject: CN=048DE13D9604CAF3C8A88CEB5630D592D0DF777C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:b0:01:f1:c7:dd:98:a3:ba:c5:c1:a1:2c: 6f:8a:3c:fe:b7:78:1a:44:32:40:ef:ac:67:4b:bb: e9:34:34:4e:2b:63:64:2c:be:f2:90:3d:07:01:4c: 72:88:2a:a7:d6:c4:b1:20:82:32:22:21:8a:5e:94: 2c:58:d8:14:d0:72:e4:fb:b9:05:ba:d1:6b:cf:e1: 0a:06:94:30:32:06:ee:ef:8c:95:c1:12:d4:9b:47: ae:9d:79:ca:d7:c8:2f:52:fa:ef:9f:58:1f:d9:97: 71:20:0f:96:44:45:5a:f9:f3:70:92:1f:f0:f1:e5: a8:9b:70:43:be:58:7e:44:01:0c:21:a0:f1:1f:8a: 4f:be:86:06:67:25:f9:65:92:4f:21:eb:a5:b0:83: 2b:50:f2:42:76:eb:b4:61:cb:8f:5e:48:19:44:43: 44:99:76:0a:1c:ec:9b:33:01:1b:bd:b1:14:2c:41: 75:b8:d9:02:6e:58:44:75:73:54:1a:54:c3:10:af: 1b:42:b2:64:a4:31:da:f3:80:73:38:9c:be:e4:e4: 9a:2a:33:ad:17:d9:47:88:6c:d2:77:08:ce:9d:05: e7:9c:7e:6b:62:f2:91:d4:a2:67:fa:66:c3:fb:f1: 0f:62:a5:cf:58:06:71:38:2c:3d:17:b0:4c:62:96: 5f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8D:E1:3D:96:04:CA:F3:C8:A8:8C:EB:56:30:D5:92:D0:DF:77:7C X509v3 Authority Key Identifier: keyid:70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4c:d9:f1:20:18:8e:fe:8d:d7:23:0f:33:39:a2:c7:26:13: 7f:b9:0a:4a:c5:92:0c:a9:6b:08:bf:c5:a3:b8:00:a3:8c:4a: dd:86:de:4c:ca:b9:c9:e2:c4:e5:07:4c:03:23:cc:98:6e:01: 67:61:e6:65:2c:f0:3f:a5:d9:11:08:ba:7d:5c:3e:bf:ca:9f: e2:4a:7d:83:76:8d:56:29:ab:28:37:07:11:f0:12:60:aa:56: 75:f8:cd:8c:37:9e:b7:10:67:ca:a5:15:9d:23:6a:c8:98:c6: 9e:60:01:e8:fe:6e:4a:49:38:fd:ce:32:77:fd:85:f5:30:7a: 00:28:3f:28:99:14:a4:a9:a9:9b:a6:c8:1c:86:6b:8d:14:16: 02:df:5b:6f:89:5a:ed:46:e9:31:14:7d:ae:0a:25:86:54:44: 5a:45:64:9e:f3:17:30:89:b1:fa:b4:38:32:e6:3f:1f:c0:b1: 4f:36:9e:9e:a3:5e:21:bd:95:ad:92:fd:f1:24:0c:b1:33:29: 9d:fa:34:21:61:3b:1d:e3:95:33:c7:73:9e:3e:15:f1:cc:96: 00:1e:28:10:45:7b:88:00:9e:90:39:b6:3a:92:a0:ce:c2:8a: 27:8d:14:21:9c:a8:a0:52:94:81:eb:5b:06:e7:ac:12:24:27: ad:7c:89:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbgaFsDGtvjrSVHx1fmq62fa1PJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3 QjMxMzVBQTAeFw0yNjA1MDUwNzIyMDFaFw0yNjA1MDYxMDUwMDFaMDMxMTAvBgNV BAMTKDA0OERFMTNEOTYwNENBRjNDOEE4OENFQjU2MzBENTkyRDBERjc3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWC7AB8cfdmKO6xcGhLG+KPP63 eBpEMkDvrGdLu+k0NE4rY2QsvvKQPQcBTHKIKqfWxLEggjIiIYpelCxY2BTQcuT7 uQW60WvP4QoGlDAyBu7vjJXBEtSbR66decrXyC9S+u+fWB/Zl3EgD5ZERVr583CS H/Dx5aibcEO+WH5EAQwhoPEfik++hgZnJfllkk8h66WwgytQ8kJ267Rhy49eSBlE Q0SZdgoc7JszARu9sRQsQXW42QJuWER1c1QaVMMQrxtCsmSkMdrzgHM4nL7k5Joq M60X2UeIbNJ3CM6dBeecfmti8pHUomf6ZsP78Q9ipc9YBnE4LD0XsExill8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBI3hPZYEyvPIqIzrVjDVktDfd3wwHwYDVR0j BBgwFoAUcPTL1fR6U1jnf63tud1GOXsxNaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NDllZjUtYzQ4NC00ZjQxLWEwNTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVG NDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3QjMxMzVBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy83MEY0Q0JENUY0N0E1MzU4RTc3RkFERURCOURENDYzOTdCMzEz NUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2 Mzk3QjMxMzVBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpM2fEgGI7+jdcjDzM5oscmE3+5CkrFkgyp awi/xaO4AKOMSt2G3kzKucnixOUHTAMjzJhuAWdh5mUs8D+l2REIun1cPr/Kn+JK fYN2jVYpqyg3BxHwEmCqVnX4zYw3nrcQZ8qlFZ0jasiYxp5gAej+bkpJOP3OMnf9 hfUwegAoPyiZFKSpqZumyByGa40UFgLfW2+JWu1G6TEUfa4KJYZURFpFZJ7zFzCJ sfq0ODLmPx/AsU82np6jXiG9la2S/fEkDLEzKZ36NCFhOx3jlTPHc54+FfHMlgAe KBBFe4gAnpA5tjqSoM7CiieNFCGcqKBSlIHrWwbnrBIkJ618ies= -----END CERTIFICATE-----Generated at Tue May 5 15:38:53 2026 by rpki-client