
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
File: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft (raw, json)
Hash identifier: 84YJznIcRdazZYHG9n7CuYFYL13HzJXWA4rwbLRNrJY=
Subject key identifier: AA:95:44:A8:82:21:02:99:BC:60:B5:FA:9B:B3:AC:38:C4:3E:CE:37
Authority key identifier: 70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19
Certificate issuer: /CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619
Certificate serial: 0DF5FED968A8A4A4D763DCD4CE803B6D16F1D525
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
Manifest number: 67
Signing time: Fri 17 Jul 2026 17:50:08 +0000
Manifest this update: Fri 17 Jul 2026 17:45:08 +0000
Manifest next update: Sat 18 Jul 2026 20:09:08 +0000
Files and hashes: 1: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: 4MzusLkn8wvWUBvFiEkops16kBYmlHHlayjI7RCIrok=)
2: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl (hash: oxbCLjjI/hm7zQPVORmkbd2EXuCP2GbK2Bojk7nf3gk=)
3: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: EtnUTjZ94OuTXPQ8oodtLlh2y5zeN5ozbISTk51v5C4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl
rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 20:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f5:fe:d9:68:a8:a4:a4:d7:63:dc:d4:ce:80:3b:6d:16:f1:d5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619
Validity
Not Before: Jul 17 17:45:08 2026 GMT
Not After : Jul 18 20:09:08 2026 GMT
Subject: CN=AA9544A882210299BC60B5FA9BB3AC38C43ECE37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bc:a7:aa:2e:33:12:31:70:ea:f8:21:6c:47:
2b:8a:7c:e0:e6:53:00:44:b8:07:57:5c:79:0b:38:
62:92:0a:55:b7:d3:a0:d3:82:37:7b:48:04:75:ab:
80:08:5d:1a:ea:a2:99:26:ee:ed:5e:d8:c8:e5:11:
4b:cf:54:e9:d2:21:d1:20:c6:47:a3:f5:b3:f9:3c:
0a:5d:01:df:95:5f:fe:0a:9d:3b:1c:9f:bb:79:97:
d4:20:4d:c3:59:c9:6b:c6:0d:a7:b1:af:44:5b:94:
d6:a5:e6:97:e1:c6:46:b3:ed:73:5e:ab:b1:f9:d5:
11:8f:28:dd:23:94:28:fd:25:6f:5b:f2:e3:79:32:
96:7f:ae:0a:71:69:9f:b9:a3:3a:cc:1f:b4:ee:3c:
9c:65:c0:f2:dd:c8:8c:bc:48:26:ab:1c:39:cf:8d:
76:09:bb:5b:9f:0d:af:55:45:c1:16:86:57:1b:a8:
5d:06:ac:b5:27:43:06:48:a6:00:67:ce:da:3e:8d:
56:cc:e1:29:16:bb:a3:50:20:13:6f:92:33:3c:7b:
18:b5:80:b9:06:4f:f7:c7:3d:a2:d0:2e:81:04:75:
ef:79:a1:3e:f3:cf:ce:e3:28:bb:78:a9:eb:c0:eb:
b3:de:13:80:6e:d6:7a:04:d4:fb:0d:e7:00:7b:cc:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:44:A8:82:21:02:99:BC:60:B5:FA:9B:B3:AC:38:C4:3E:CE:37
X509v3 Authority Key Identifier:
keyid:70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a6:11:28:94:71:48:2f:c8:85:9d:72:a2:c2:c3:2c:2e:24:
0b:f6:68:8e:c2:82:22:e2:48:ad:2d:cc:c7:2f:c4:ce:ec:c1:
74:b4:cf:f1:89:4d:52:46:59:c0:ec:5f:aa:b1:6f:9d:43:9f:
b3:06:a4:85:6e:a7:0b:d3:97:6f:89:ab:d7:b1:74:60:03:bc:
01:0c:5b:7e:05:74:f6:1b:fe:9a:24:6e:bd:ce:27:c4:62:ac:
8d:39:85:1d:6d:b5:f9:51:01:f1:39:d3:47:1f:bc:36:96:94:
f5:27:e4:07:ff:50:5b:a8:22:b7:a2:78:6b:fb:58:01:34:f5:
e6:fb:9f:cb:45:3b:df:f9:8f:98:62:f9:cb:fa:bb:8e:72:1c:
58:0e:68:9c:d6:ec:cc:f1:8e:9b:ba:eb:89:3f:8d:f1:d1:80:
fa:8b:cc:23:38:53:90:4d:db:a6:43:ce:f8:9f:55:3e:e4:40:
ec:f6:78:5e:05:47:05:8c:90:18:d0:c6:82:a8:ad:8c:2d:d1:
e5:c7:c0:bc:e3:7c:d7:e4:2a:99:42:86:81:34:c6:ce:7c:b6:
b0:cf:e4:d9:45:bd:c4:d1:d2:5b:e6:8e:55:9a:f6:47:90:05:
32:66:e5:96:ab:e8:30:0b:15:fa:43:45:1d:af:9b:f6:c8:fd:
a4:ac:5b:14
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUDfX+2WiopKTXY9zUzoA7bRbx1SUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQw
NEVBODYxOTAeFw0yNjA3MTcxNzQ1MDhaFw0yNjA3MTgyMDA5MDhaMDMxMTAvBgNV
BAMTKEFBOTU0NEE4ODIyMTAyOTlCQzYwQjVGQTlCQjNBQzM4QzQzRUNFMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQvKeqLjMSMXDq+CFsRyuKfODm
UwBEuAdXXHkLOGKSClW306DTgjd7SAR1q4AIXRrqopkm7u1e2MjlEUvPVOnSIdEg
xkej9bP5PApdAd+VX/4KnTscn7t5l9QgTcNZyWvGDaexr0RblNal5pfhxkaz7XNe
q7H51RGPKN0jlCj9JW9b8uN5MpZ/rgpxaZ+5ozrMH7TuPJxlwPLdyIy8SCarHDnP
jXYJu1ufDa9VRcEWhlcbqF0GrLUnQwZIpgBnzto+jVbM4SkWu6NQIBNvkjM8exi1
gLkGT/fHPaLQLoEEde95oT7zz87jKLt4qevA67PeE4Bu1noE1PsN5wB7zPDHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqpVEqIIhApm8YLX6m7OsOMQ+zjcwHwYDVR0j
BBgwFoAUcNO1hUnvLKSrD5G8ADPLTQTqhhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzA4Y2MwYjMtMjUwOC00NzdmLTlmMjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0
OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQwNEVBODYxOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MEQzQjU4NTQ5RUYyQ0E0QUIwRjkxQkMwMDMzQ0I0RDA0RUE4
NjE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA4Y2MwYjMtMjUwOC00NzdmLTlm
MjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NC
NEQwNEVBODYxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACOmESiUcUgvyIWdcqLCwywuJAv2aI7CgiLi
SK0tzMcvxM7swXS0z/GJTVJGWcDsX6qxb51Dn7MGpIVupwvTl2+Jq9exdGADvAEM
W34FdPYb/pokbr3OJ8RirI05hR1ttflRAfE500cfvDaWlPUn5Af/UFuoIreieGv7
WAE09eb7n8tFO9/5j5hi+cv6u45yHFgOaJzW7Mzxjpu664k/jfHRgPqLzCM4U5BN
26ZDzvifVT7kQOz2eF4FRwWMkBjQxoKorYwt0eXHwLzjfNfkKplChoE0xs58trDP
5NlFvcTR0lvmjlWa9keQBTJm5Zar6DALFfpDRR2vm/bI/aSsWxQ=
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:29:15 2026 by rpki-client