$ rpki-client -vvf rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft File: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft (raw, json) Hash identifier: 4SG2E/AMnK2LygvjSXGBObJEGKAjyuI6Q/fxTOD7DSo= Subject key identifier: 8E:34:C5:1A:FE:2A:C0:B9:C2:70:B0:86:E7:CC:68:BE:BF:D9:4B:88 Authority key identifier: 70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA Certificate issuer: /CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Certificate serial: 5E3E65FB41510CD69442C595D93E35145DF1EA8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 06:52:59 +0000 Manifest this update: Sat 20 Jun 2026 06:47:59 +0000 Manifest next update: Sun 21 Jun 2026 07:37:59 +0000 Files and hashes: 1: 70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl (hash: UW7ycszcYis70G2xIYWTHiqtgEiXMOMMwWAQ+MShE80=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3e:65:fb:41:51:0c:d6:94:42:c5:95:d9:3e:35:14:5d:f1:ea:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F4CBD5F47A5358E77FADEDB9DD46397B3135AA Validity Not Before: Jun 20 06:47:59 2026 GMT Not After : Jun 21 07:37:59 2026 GMT Subject: CN=8E34C51AFE2AC0B9C270B086E7CC68BEBFD94B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:ac:b1:cd:e1:95:1a:9d:6f:ef:a4:a5:7f: f5:75:3b:6d:d5:e0:96:f5:80:68:0b:f7:44:d3:f4: 33:3f:17:d2:19:72:e6:43:f2:bb:bc:c1:13:14:dc: 80:ed:ce:89:ce:84:55:f7:1b:e7:7a:32:e9:1f:94: fe:75:d5:b0:73:f6:ad:fa:75:64:5f:cd:12:71:8d: 5a:0d:a8:cd:20:af:a8:63:04:87:03:5e:52:db:23: ec:7e:e8:8d:23:98:ee:cd:dd:6f:ed:3e:f3:53:12: 9a:22:c5:2a:c7:18:8a:5c:dc:e9:85:e9:80:96:cb: e4:62:60:a5:9b:f0:f1:cb:ca:e5:74:cb:29:ec:65: f5:d4:02:7b:fa:09:ca:32:c7:4e:c0:0c:7f:41:e6: 84:71:49:64:e2:77:0c:d2:5a:e3:b2:97:a9:6a:a8: 1d:29:b3:4f:81:ee:39:ec:62:52:ad:7f:0e:3b:c0: 82:05:27:13:8a:c8:69:e5:b0:e2:47:91:6d:2f:3d: ff:81:32:7d:75:bd:b2:5d:be:6d:22:36:f1:b2:79: f3:43:93:05:80:ed:95:ed:a3:ac:b7:05:4d:a6:4e: 1b:d8:54:6c:91:91:e3:1b:6d:0e:ec:ce:b4:66:20: 7c:e4:98:20:ea:2a:8a:8d:c8:44:a4:ee:2d:1b:83: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:34:C5:1A:FE:2A:C0:B9:C2:70:B0:86:E7:CC:68:BE:BF:D9:4B:88 X509v3 Authority Key Identifier: keyid:70:F4:CB:D5:F4:7A:53:58:E7:7F:AD:ED:B9:DD:46:39:7B:31:35:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/70F4CBD5F47A5358E77FADEDB9DD46397B3135AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e9:52:b6:b3:dc:84:75:10:21:fe:95:41:28:b9:ff:ed:4f: 4f:7e:94:f7:80:ff:b6:5e:6e:7e:ee:2f:05:9c:85:93:27:51: e5:cd:cf:77:08:5a:55:31:d2:78:0b:a8:14:9b:d6:86:ec:a1: 6b:a9:5b:ad:aa:68:ba:df:a7:b4:97:3e:04:a8:c6:7a:2c:12: e5:02:14:6b:42:47:d0:39:77:6f:23:0e:26:89:26:ff:d6:c9: bf:c8:f9:18:03:cb:26:57:27:1f:d9:ce:b9:dd:86:e9:25:e3: 06:f6:65:08:96:57:97:25:06:61:e1:56:88:f5:5a:3b:3c:56: 05:31:34:85:c8:5c:ff:89:5d:de:ff:eb:cc:51:39:b3:29:56: f6:de:a2:77:7c:1c:8e:87:a5:05:26:f4:15:e4:f1:aa:10:b6: a8:19:21:b4:07:50:f3:9a:fd:3b:11:cb:21:2c:a0:86:6f:e9: 15:4f:f0:59:19:72:fe:b1:7e:d2:0e:62:5f:d4:60:71:4c:77: c1:ad:19:ad:24:c8:78:a9:1d:08:94:40:d0:17:7a:94:1b:77: 68:89:65:00:66:d6:52:a2:c8:bb:17:e8:4b:34:32:35:8c:d2: 72:34:4f:f1:09:c6:b7:fd:a1:0c:18:96:59:fe:98:9c:26:27: 5b:3f:0c:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXj5l+0FRDNaUQsWV2T41FF3x6owwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3 QjMxMzVBQTAeFw0yNjA2MjAwNjQ3NTlaFw0yNjA2MjEwNzM3NTlaMDMxMTAvBgNV BAMTKDhFMzRDNTFBRkUyQUMwQjlDMjcwQjA4NkU3Q0M2OEJFQkZEOTRCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6NqyxzeGVGp1v76Slf/V1O23V 4Jb1gGgL90TT9DM/F9IZcuZD8ru8wRMU3IDtzonOhFX3G+d6MukflP511bBz9q36 dWRfzRJxjVoNqM0gr6hjBIcDXlLbI+x+6I0jmO7N3W/tPvNTEpoixSrHGIpc3OmF 6YCWy+RiYKWb8PHLyuV0yynsZfXUAnv6Ccoyx07ADH9B5oRxSWTidwzSWuOyl6lq qB0ps0+B7jnsYlKtfw47wIIFJxOKyGnlsOJHkW0vPf+BMn11vbJdvm0iNvGyefND kwWA7ZXto6y3BU2mThvYVGyRkeMbbQ7szrRmIHzkmCDqKoqNyESk7i0bg1ynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjjTFGv4qwLnCcLCG58xovr/ZS4gwHwYDVR0j BBgwFoAUcPTL1fR6U1jnf63tud1GOXsxNaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NDllZjUtYzQ4NC00ZjQxLWEwNTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVG NDdBNTM1OEU3N0ZBREVEQjlERDQ2Mzk3QjMxMzVBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy83MEY0Q0JENUY0N0E1MzU4RTc3RkFERURCOURENDYzOTdCMzEz NUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzEvNzBGNENCRDVGNDdBNTM1OEU3N0ZBREVEQjlERDQ2 Mzk3QjMxMzVBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvpUraz3IR1ECH+lUEouf/tT09+lPeA/7Ze bn7uLwWchZMnUeXNz3cIWlUx0ngLqBSb1obsoWupW62qaLrfp7SXPgSoxnosEuUC FGtCR9A5d28jDiaJJv/Wyb/I+RgDyyZXJx/Zzrndhukl4wb2ZQiWV5clBmHhVoj1 Wjs8VgUxNIXIXP+JXd7/68xRObMpVvbeond8HI6HpQUm9BXk8aoQtqgZIbQHUPOa /TsRyyEsoIZv6RVP8FkZcv6xftIOYl/UYHFMd8GtGa0kyHipHQiUQNAXepQbd2iJ ZQBm1lKiyLsX6Es0MjWM0nI0T/EJxrf9oQwYlln+mJwmJ1s/DEY= -----END CERTIFICATE-----Generated at Sat Jun 20 13:19:36 2026 by rpki-client