$ rpki-client -vvf rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft File: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft (raw, json) Hash identifier: 55qecKrOqDyPIX1PLl8D+eT8q4CMpTjuO8Z1WeJh9Mg= Subject key identifier: 53:0F:80:A1:A1:4C:2B:48:0C:C7:F4:77:4A:56:35:4E:BD:B6:F6:AC Authority key identifier: 70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19 Certificate issuer: /CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619 Certificate serial: 23141FA7BB13B665E18D02A637B071326A2C5A47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:03:20 +0000 Manifest this update: Tue 02 Jun 2026 14:58:20 +0000 Manifest next update: Wed 03 Jun 2026 18:36:20 +0000 Files and hashes: 1: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: 4MzusLkn8wvWUBvFiEkops16kBYmlHHlayjI7RCIrok=) 2: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl (hash: 1ClrffJC42p3TbtdiccZNXPOz4jEfxroi7SlqeT3V+Q=) 3: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: EtnUTjZ94OuTXPQ8oodtLlh2y5zeN5ozbISTk51v5C4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:14:1f:a7:bb:13:b6:65:e1:8d:02:a6:37:b0:71:32:6a:2c:5a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619 Validity Not Before: Jun 2 14:58:20 2026 GMT Not After : Jun 3 18:36:20 2026 GMT Subject: CN=530F80A1A14C2B480CC7F4774A56354EBDB6F6AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:da:36:c1:b3:80:23:4a:51:4e:6d:f7:5c: c0:c3:93:92:1b:62:af:6b:1a:66:6b:f9:7f:15:0f: f5:af:4b:22:6d:39:25:e6:19:04:69:f6:9b:21:9c: f5:e6:70:e8:6b:cf:ab:bd:07:03:6d:7e:5c:67:c5: 0f:1f:8b:80:f1:90:d2:1b:42:d1:1e:6d:94:90:de: fe:28:cb:98:48:4c:b2:3f:9f:94:cb:e0:34:9e:22: 4d:36:1a:3a:b9:f0:24:4b:91:64:57:21:8d:71:6b: ac:3b:9c:f6:70:82:13:7d:ac:8a:e6:36:67:90:85: 05:29:50:94:e3:20:f5:e4:3c:18:00:26:c1:5d:0d: aa:8f:c2:87:66:4e:81:51:32:4a:11:97:03:44:a6: 55:99:85:bd:d2:ae:07:1b:dc:e9:01:e9:e6:69:c2: 1d:d2:74:be:2f:8d:92:b7:c8:82:2d:06:27:dd:02: 6a:b5:74:50:f8:ea:97:1e:e1:bd:a0:44:f5:16:c2: 65:94:b3:dc:e3:9c:fe:24:8d:be:05:cd:14:74:c0: 6b:ee:ec:92:c2:e8:d1:c5:00:51:92:b5:b5:b6:09: a7:29:03:43:27:d4:82:b8:34:87:85:a2:e8:b3:8d: 7d:7d:4e:9a:24:3a:8b:f0:14:1f:87:82:2f:1d:41: 61:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0F:80:A1:A1:4C:2B:48:0C:C7:F4:77:4A:56:35:4E:BD:B6:F6:AC X509v3 Authority Key Identifier: keyid:70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:92:27:b1:66:af:2b:0c:18:3f:cb:86:08:b6:9a:6d:68:85: 9d:9c:42:07:e1:c7:21:3c:9b:ae:31:0d:84:1e:0f:27:79:e0: be:11:f0:af:2a:81:51:d1:0e:8a:3b:e2:5e:47:bb:2a:38:8c: 6e:77:72:3d:06:de:51:3d:21:4e:cc:b3:6a:8b:01:75:ad:bc: 85:c2:a1:29:4c:33:9b:d1:40:af:b7:6d:21:81:f1:d3:5d:6d: 16:f8:a0:ba:57:a5:6c:c1:92:36:fe:0a:a3:d2:b2:e0:8f:d0: 51:09:36:bb:7f:8f:99:9c:7c:0c:87:6b:07:ac:37:4f:12:c7: 31:21:05:df:97:5b:d0:3e:27:87:ad:0b:5e:be:18:df:65:5d: 83:a7:9d:38:cd:8e:90:e9:7b:00:71:3c:4e:84:3a:47:e8:5c: 72:a3:7d:15:22:5a:da:ed:d8:59:6f:2e:1a:5d:c1:1f:27:6c: 82:97:45:7a:0f:21:3d:aa:a8:5f:95:9d:8c:a8:77:42:f4:79: 41:a1:63:06:af:10:ff:d2:01:2d:85:19:f9:02:e8:f6:a6:93: 92:a7:69:c6:ed:4d:85:1d:08:59:2f:b0:d0:4c:e5:a6:fd:b3: 3c:2f:8d:48:ad:ee:63:8e:2a:7f:7c:bf:7a:5b:99:1e:34:0c: f0:d3:67:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIxQfp7sTtmXhjQKmN7BxMmosWkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQw NEVBODYxOTAeFw0yNjA2MDIxNDU4MjBaFw0yNjA2MDMxODM2MjBaMDMxMTAvBgNV BAMTKDUzMEY4MEExQTE0QzJCNDgwQ0M3RjQ3NzRBNTYzNTRFQkRCNkY2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Cto2wbOAI0pRTm33XMDDk5Ib Yq9rGmZr+X8VD/WvSyJtOSXmGQRp9pshnPXmcOhrz6u9BwNtflxnxQ8fi4DxkNIb QtEebZSQ3v4oy5hITLI/n5TL4DSeIk02Gjq58CRLkWRXIY1xa6w7nPZwghN9rIrm NmeQhQUpUJTjIPXkPBgAJsFdDaqPwodmToFRMkoRlwNEplWZhb3Srgcb3OkB6eZp wh3SdL4vjZK3yIItBifdAmq1dFD46pce4b2gRPUWwmWUs9zjnP4kjb4FzRR0wGvu 7JLC6NHFAFGStbW2CacpA0Mn1IK4NIeFouizjX19TpokOovwFB+Hgi8dQWEDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUw+AoaFMK0gMx/R3SlY1Tr229qwwHwYDVR0j BBgwFoAUcNO1hUnvLKSrD5G8ADPLTQTqhhkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA4Y2MwYjMtMjUwOC00NzdmLTlmMjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0 OUVGMkNBNEFCMEY5MUJDMDAzM0NCNEQwNEVBODYxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MEQzQjU4NTQ5RUYyQ0E0QUIwRjkxQkMwMDMzQ0I0RDA0RUE4 NjE5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA4Y2MwYjMtMjUwOC00NzdmLTlm MjUtNjY4NGQ2NTcyZGRhLzAvNzBEM0I1ODU0OUVGMkNBNEFCMEY5MUJDMDAzM0NC NEQwNEVBODYxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeSJ7FmrysMGD/Lhgi2mm1ohZ2cQgfhxyE8 m64xDYQeDyd54L4R8K8qgVHRDoo74l5Huyo4jG53cj0G3lE9IU7Ms2qLAXWtvIXC oSlMM5vRQK+3bSGB8dNdbRb4oLpXpWzBkjb+CqPSsuCP0FEJNrt/j5mcfAyHawes N08SxzEhBd+XW9A+J4etC16+GN9lXYOnnTjNjpDpewBxPE6EOkfoXHKjfRUiWtrt 2FlvLhpdwR8nbIKXRXoPIT2qqF+VnYyod0L0eUGhYwavEP/SAS2FGfkC6Pamk5Kn acbtTYUdCFkvsNBM5ab9szwvjUit7mOOKn98v3pbmR40DPDTZ3I= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:20 2026 by rpki-client