$ rpki-client -vvf rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft File: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft (raw, json) Hash identifier: CfKCbPsnKwGq1NXTR5rOPEAykKsMonEK0VBrBA5Vnx8= Subject key identifier: EB:E8:AC:B5:0A:D6:6C:52:FD:AE:96:01:14:33:2B:73:5C:43:B1:18 Authority key identifier: F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 Certificate issuer: /CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Certificate serial: 56C225FE89C6ADB531FEBA34DDCBBF18A0A01711 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 13:10:14 +0000 Manifest this update: Tue 16 Jun 2026 13:05:14 +0000 Manifest next update: Wed 17 Jun 2026 16:38:14 +0000 Files and hashes: 1: F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl (hash: SQmrozIDK4R31s+F1l1zyk6W0Gx3BJ3y4plgelf8PPI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c2:25:fe:89:c6:ad:b5:31:fe:ba:34:dd:cb:bf:18:a0:a0:17:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F70D7600E01242693CA0EB5CAB921EE0498C5CD3 Validity Not Before: Jun 16 13:05:14 2026 GMT Not After : Jun 17 16:38:14 2026 GMT Subject: CN=EBE8ACB50AD66C52FDAE960114332B735C43B118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:36:b8:6c:c5:47:07:4b:e6:37:c7:2d:18:05: db:70:ca:65:98:cc:d8:5a:81:c0:e2:aa:61:87:ff: 4f:bc:00:0c:b7:1b:d6:8d:21:02:5c:ed:7e:9d:0f: da:41:0e:02:e4:31:aa:9e:30:e1:e1:15:6a:bc:be: 79:54:71:a9:ae:fd:94:24:39:f4:70:6e:88:c9:2d: bf:9f:4a:82:f4:8d:8a:bd:ff:e2:74:99:de:06:86: 5a:ca:3a:69:45:4a:e4:57:52:c6:5b:04:40:02:28: d3:be:05:68:e2:10:6a:f1:8e:07:47:44:3b:28:51: ad:40:74:d8:3c:5d:b2:84:df:55:ee:5a:3e:bf:6a: e4:ab:c6:7a:d2:84:84:11:33:44:01:81:51:c0:d7: 64:59:43:15:e9:bd:bf:6c:cf:df:c3:c6:46:b3:87: ac:7a:a5:af:db:04:ab:f3:11:cc:f9:e8:b8:06:0e: 2e:be:12:d0:79:f7:6d:32:dd:16:ac:66:78:3b:0a: 36:ca:d4:46:35:0c:46:34:90:1c:1b:5e:bb:97:86: 96:4c:0b:53:c5:02:b0:4c:ea:91:11:35:ab:73:35: 46:f9:2e:1b:34:39:18:c2:5f:67:bd:8b:70:85:73: 7a:de:b0:36:20:bd:e8:b5:54:3e:fb:18:f6:e5:4c: a7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E8:AC:B5:0A:D6:6C:52:FD:AE:96:01:14:33:2B:73:5C:43:B1:18 X509v3 Authority Key Identifier: keyid:F7:0D:76:00:E0:12:42:69:3C:A0:EB:5C:AB:92:1E:E0:49:8C:5C:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/F70D7600E01242693CA0EB5CAB921EE0498C5CD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:74:c5:e0:24:8b:c3:d6:2d:b7:c4:e9:4f:f3:4a:e7:43:a2: f4:a1:7c:bd:9c:d2:b8:53:90:63:bc:da:03:24:7a:6e:41:cf: 57:38:21:85:61:a3:ee:d4:36:81:b7:18:dd:d8:83:81:ad:4e: ba:c0:36:2b:96:fe:51:0b:92:b6:65:be:d3:46:18:1b:d2:3b: 2e:d3:01:97:cf:14:f3:b1:e2:2e:01:7a:94:69:a7:26:5f:18: 44:32:93:55:d4:1c:1c:fc:5a:29:93:76:e5:f2:a8:c6:c9:3a: 79:2c:a5:b1:be:16:33:60:bb:f7:1b:e7:0e:c4:cb:57:59:9f: 50:25:65:ba:a7:ef:f8:52:11:f4:8a:7f:7d:e8:95:c8:4b:9c: 5b:88:33:d8:77:75:19:05:29:d4:88:af:e8:41:18:dd:a2:9f: 12:b9:18:91:96:9e:a9:20:62:88:5d:d9:50:ce:51:fd:39:f5: 43:63:a8:e5:ac:9c:ee:35:b1:37:f4:b1:e6:29:e0:19:d7:30: a4:9e:57:76:55:e4:8d:53:07:2f:39:83:82:23:c1:5c:5a:d9: 2f:e9:73:bd:36:62:14:e7:99:bc:f9:3e:41:3a:38:82:1a:b1: f9:34:24:21:b1:cf:fe:3a:20:23:ad:cc:54:55:66:c1:a3:de: 65:7b:4f:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVsIl/onGrbUx/ro03cu/GKCgFxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0 OThDNUNEMzAeFw0yNjA2MTYxMzA1MTRaFw0yNjA2MTcxNjM4MTRaMDMxMTAvBgNV BAMTKEVCRThBQ0I1MEFENjZDNTJGREFFOTYwMTE0MzMyQjczNUM0M0IxMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcNrhsxUcHS+Y3xy0YBdtwymWY zNhagcDiqmGH/0+8AAy3G9aNIQJc7X6dD9pBDgLkMaqeMOHhFWq8vnlUcamu/ZQk OfRwbojJLb+fSoL0jYq9/+J0md4GhlrKOmlFSuRXUsZbBEACKNO+BWjiEGrxjgdH RDsoUa1AdNg8XbKE31XuWj6/auSrxnrShIQRM0QBgVHA12RZQxXpvb9sz9/Dxkaz h6x6pa/bBKvzEcz56LgGDi6+EtB5920y3RasZng7CjbK1EY1DEY0kBwbXruXhpZM C1PFArBM6pERNatzNUb5Lhs0ORjCX2e9i3CFc3resDYgvei1VD77GPblTKelAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6+istQrWbFL9rpYBFDMrc1xDsRgwHwYDVR0j BBgwFoAU9w12AOASQmk8oOtcq5Ie4EmMXNMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI3NzBmZDMtOTIxNi00MzhiLTk5N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBF MDEyNDI2OTNDQTBFQjVDQUI5MjFFRTA0OThDNUNEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzBENzYwMEUwMTI0MjY5M0NBMEVCNUNBQjkyMUVFMDQ5OEM1 Q0QzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI3NzBmZDMtOTIxNi00MzhiLTk5 N2YtZTU5NzJlNDY0ZTNhLzEvRjcwRDc2MDBFMDEyNDI2OTNDQTBFQjVDQUI5MjFF RTA0OThDNUNEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGh0xeAki8PWLbfE6U/zSudDovShfL2c0rhT kGO82gMkem5Bz1c4IYVho+7UNoG3GN3Yg4GtTrrANiuW/lELkrZlvtNGGBvSOy7T AZfPFPOx4i4BepRppyZfGEQyk1XUHBz8WimTduXyqMbJOnkspbG+FjNgu/cb5w7E y1dZn1AlZbqn7/hSEfSKf33olchLnFuIM9h3dRkFKdSIr+hBGN2inxK5GJGWnqkg Yohd2VDOUf059UNjqOWsnO41sTf0seYp4BnXMKSeV3ZV5I1TBy85g4IjwVxa2S/p c702YhTnmbz5PkE6OIIasfk0JCGxz/46ICOtzFRVZsGj3mV7Tzc= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:13 2026 by rpki-client