$ rpki-client -vvf rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft File: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft (raw, json) Hash identifier: WC2wouYm2qDbr3wtDTJMZpMuaJ5nKq0dQJuK0sWVMlI= Subject key identifier: 68:65:60:47:E7:62:53:D4:C4:DD:53:FB:3B:B5:61:FA:8A:F5:0E:89 Authority key identifier: 70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E Certificate issuer: /CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Certificate serial: 72E53C6FF4A4E51FDE9B6ACC8D5C6C6CB9D3C186 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 16:08:49 +0000 Manifest this update: Tue 16 Jun 2026 16:03:49 +0000 Manifest next update: Wed 17 Jun 2026 19:26:49 +0000 Files and hashes: 1: 70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl (hash: fvK63YivsLjBKqhpCDizuHsvE3LYfkOr02Ye2ynHQ4U=) 2: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: X9vWw5/8oy+SYlKkHILaaaMhFfsqtUesHOd+majUa+4=) 3: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: hBvRTYXcnJk6N7ngUO2oUV6tmwOrz7l2Poiy/ABHqPM=) 4: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: PDVvmstV3iaWyvXstEgcHTvDFJJ9Dg2QcyyOCEhL1rA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e5:3c:6f:f4:a4:e5:1f:de:9b:6a:cc:8d:5c:6c:6c:b9:d3:c1:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CCE031F1044DEE6CAF565B1375F6DD34589B4E Validity Not Before: Jun 16 16:03:49 2026 GMT Not After : Jun 17 19:26:49 2026 GMT Subject: CN=68656047E76253D4C4DD53FB3BB561FA8AF50E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:05:4b:54:c0:77:90:b4:d6:89:69:bd:86: 3e:37:09:72:8b:97:82:51:e5:d9:6d:1f:50:54:55: f6:9b:59:2b:3a:9c:cd:9f:f2:fb:15:ec:fb:3e:96: dd:e5:0c:33:32:a9:57:cb:0a:fe:27:72:a9:f0:cd: 85:d1:b7:99:5e:cc:88:f5:ca:36:17:f3:60:e7:a2: 0b:5a:a2:95:a3:ba:fe:58:c2:15:40:79:41:8f:2c: a9:16:d0:81:73:74:cb:07:85:0e:fd:54:67:09:71: f3:0c:4f:19:f1:2d:f4:c9:73:7e:ac:f5:38:88:b7: f0:49:9a:5a:fe:8f:bd:b9:bb:58:96:64:d5:a8:43: e3:ac:5d:08:95:ea:e4:49:51:5b:f0:91:92:97:e0: 7e:5b:65:a5:07:1e:16:31:47:35:32:0b:78:de:4f: b5:21:aa:96:16:ae:aa:1b:f7:16:64:5f:92:86:10: 82:19:18:67:18:73:9c:bc:ef:a0:84:3d:8e:16:cc: 9e:51:f7:09:9f:28:77:be:5c:03:0c:49:51:24:d8: 72:59:84:98:4c:2e:87:4b:50:88:40:10:7e:b5:ec: 9d:e2:80:77:f8:2a:47:c9:e3:21:b6:f5:95:45:be: 87:67:c3:b9:0f:a2:87:95:44:a4:59:fa:f4:e5:92: 0c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:65:60:47:E7:62:53:D4:C4:DD:53:FB:3B:B5:61:FA:8A:F5:0E:89 X509v3 Authority Key Identifier: keyid:70:CC:E0:31:F1:04:4D:EE:6C:AF:56:5B:13:75:F6:DD:34:58:9B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/70CCE031F1044DEE6CAF565B1375F6DD34589B4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e7:cd:64:48:9a:e4:de:ff:41:8c:33:b7:d1:3c:51:7c:f4: 88:74:35:c0:9b:cd:f2:7c:99:d0:d6:d2:b8:15:95:48:c7:a3: 72:a0:1d:55:fe:96:15:d0:c7:06:80:1b:76:f3:c7:91:90:58: a9:8f:ec:4b:49:cf:40:3b:ed:14:e3:76:f7:99:7d:a3:ee:2c: 38:6d:4d:68:4c:8b:2c:63:e8:f5:0f:e1:ef:c9:9a:85:3d:33: df:99:37:89:b9:ee:54:fb:33:58:4d:57:e9:83:74:ce:15:7b: 82:42:81:54:31:b4:42:94:93:ad:30:f5:8b:a0:85:b2:72:e9: 18:8a:78:26:07:5d:f6:18:18:8c:e4:5b:25:14:b3:16:e5:76: c7:13:bc:0b:65:06:ec:85:d9:e6:c6:9d:1b:20:c5:5a:52:4d: 2e:6c:d0:de:00:d7:d8:49:0f:ff:e1:db:dc:0c:49:ad:d3:85: 64:ae:f1:4c:4f:1a:84:51:f8:dc:24:a5:3e:fc:32:43:15:ca: 7e:2a:ff:0d:96:df:73:9e:9f:7e:72:d8:71:65:a7:3c:1b:36: d4:16:09:a5:6e:08:33:79:3f:f5:69:95:c3:cf:69:9e:34:c2: 2b:1b:61:1c:66:8b:dd:d3:98:1f:a8:fd:bb:54:f8:b1:19:2e: a9:85:2a:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuU8b/Sk5R/em2rMjVxsbLnTwYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2REQz NDU4OUI0RTAeFw0yNjA2MTYxNjAzNDlaFw0yNjA2MTcxOTI2NDlaMDMxMTAvBgNV BAMTKDY4NjU2MDQ3RTc2MjUzRDRDNERENTNGQjNCQjU2MUZBOEFGNTBFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChdAVLVMB3kLTWiWm9hj43CXKL l4JR5dltH1BUVfabWSs6nM2f8vsV7Ps+lt3lDDMyqVfLCv4ncqnwzYXRt5lezIj1 yjYX82DnogtaopWjuv5YwhVAeUGPLKkW0IFzdMsHhQ79VGcJcfMMTxnxLfTJc36s 9TiIt/BJmlr+j725u1iWZNWoQ+OsXQiV6uRJUVvwkZKX4H5bZaUHHhYxRzUyC3je T7UhqpYWrqob9xZkX5KGEIIZGGcYc5y876CEPY4WzJ5R9wmfKHe+XAMMSVEk2HJZ hJhMLodLUIhAEH617J3igHf4KkfJ4yG29ZVFvodnw7kPooeVRKRZ+vTlkgxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaGVgR+diU9TE3VP7O7Vh+or1DokwHwYDVR0j BBgwFoAUcMzgMfEETe5sr1ZbE3X23TRYm04wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGZjZjdjOWUtZjhjMy00MDE1LTg4MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFG MTA0NERFRTZDQUY1NjVCMTM3NUY2REQzNDU4OUI0RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MENDRTAzMUYxMDQ0REVFNkNBRjU2NUIxMzc1RjZERDM0NTg5 QjRFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvNzBDQ0UwMzFGMTA0NERFRTZDQUY1NjVCMTM3NUY2 REQzNDU4OUI0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvnzWRImuTe/0GMM7fRPFF89Ih0NcCbzfJ8 mdDW0rgVlUjHo3KgHVX+lhXQxwaAG3bzx5GQWKmP7EtJz0A77RTjdveZfaPuLDht TWhMiyxj6PUP4e/JmoU9M9+ZN4m57lT7M1hNV+mDdM4Ve4JCgVQxtEKUk60w9Yug hbJy6RiKeCYHXfYYGIzkWyUUsxbldscTvAtlBuyF2ebGnRsgxVpSTS5s0N4A19hJ D//h29wMSa3ThWSu8UxPGoRR+NwkpT78MkMVyn4q/w2W33Oen35y2HFlpzwbNtQW CaVuCDN5P/VplcPPaZ40wisbYRxmi93TmB+o/btU+LEZLqmFKog= -----END CERTIFICATE-----Generated at Wed Jun 17 10:03:14 2026 by rpki-client