
$ rpki-client -vvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft
File: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft (raw, json)
Hash identifier: oRqNslX6CBntuMrMaKZjea37fkw6IPn1rwXNfwVb3Wg=
Subject key identifier: 33:65:7D:CB:2A:64:50:4F:39:76:E2:AA:5A:1F:19:C7:CB:9E:27:02
Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E
Certificate issuer: /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E
Certificate serial: 78D0FC8A516D27F008AC9E073710B612D98F0D74
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 08:54:40 +0000
Manifest this update: Sat 13 Jun 2026 08:49:40 +0000
Manifest next update: Sun 14 Jun 2026 12:23:40 +0000
Files and hashes: 1: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (hash: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I=)
2: 3135372e31352e3132322e302f32342d3234203d3e20313532333937.roa (hash: Nx3fcumdsqRiUqwqQ3R1jk6NstvkzNg1p4gYbPnIgK4=)
3: 70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl (hash: qjPbPhT95y6iKYWG3aCl5Cld7VjJ0HI7R4EzEcHzWy8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl
rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d0:fc:8a:51:6d:27:f0:08:ac:9e:07:37:10:b6:12:d9:8f:0d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E
Validity
Not Before: Jun 13 08:49:40 2026 GMT
Not After : Jun 14 12:23:40 2026 GMT
Subject: CN=33657DCB2A64504F3976E2AA5A1F19C7CB9E2702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:c9:14:d3:c8:a2:6e:b1:f8:46:12:f5:f5:
1c:3e:73:68:28:d2:ff:b3:9b:dd:74:98:4b:fa:fa:
c7:09:66:15:63:78:83:b6:03:e4:3c:9d:3e:99:ac:
e5:fc:bc:f9:10:ba:c6:13:19:bc:29:60:dd:b8:67:
72:f7:4e:94:8a:48:2d:f7:ec:27:f0:54:e9:ca:83:
a9:c4:5d:89:33:ff:40:43:f9:3c:84:9b:b2:a5:3a:
23:7c:3f:af:43:bf:08:43:2d:6a:81:2a:9b:5a:9a:
df:b0:95:ca:ea:ac:d4:25:e1:d5:58:b0:1b:98:bb:
12:89:51:47:65:20:fb:0f:e6:a0:65:fa:cd:78:81:
c2:88:fb:4c:bc:99:56:9a:39:a6:d3:f1:fb:d1:fc:
cf:fb:2e:8e:b4:45:89:28:06:c5:7f:ad:d6:0e:96:
3b:a9:c3:fb:f3:e0:5e:6f:3e:e8:ca:4c:d1:3a:b5:
b2:e5:33:20:e1:99:74:b5:c2:7a:13:3f:2c:a0:5d:
80:f0:9b:da:51:af:42:c1:c8:8b:ad:0b:69:18:4e:
fb:94:fe:15:e2:aa:22:03:23:5c:cb:6f:64:c6:6e:
45:5e:e1:e9:b9:75:b9:35:56:96:8a:bf:07:3e:54:
3a:5f:06:bc:7c:e6:18:a6:55:c1:17:91:1b:59:38:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:65:7D:CB:2A:64:50:4F:39:76:E2:AA:5A:1F:19:C7:CB:9E:27:02
X509v3 Authority Key Identifier:
keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f8:d2:83:12:78:cd:b2:25:e1:7a:13:9d:ac:70:da:dd:ec:
54:89:79:99:eb:5f:2e:30:54:f4:8f:a5:2c:f0:a7:6c:6b:89:
12:5d:39:3a:ba:58:7c:a7:b7:5f:83:70:a3:d5:d5:17:f4:94:
42:a8:75:0b:f3:e0:24:7b:5b:8b:ad:f8:6b:03:8c:d8:cb:1c:
54:bb:21:4e:e4:7a:b9:a8:06:47:01:01:9a:c7:a9:ca:f1:a7:
81:2e:5c:8c:73:24:61:77:aa:d9:65:cb:7c:e3:4e:ab:05:c5:
c8:95:ac:d2:5c:02:65:a2:0a:a2:e9:ab:4f:aa:13:79:c5:f1:
4f:62:ff:36:0a:5e:91:bb:b8:c5:40:4c:24:a3:53:8f:2e:d4:
8b:e1:41:50:d9:5c:2b:8d:05:d7:de:60:25:72:26:46:00:86:
17:6e:2d:a1:b2:b9:d5:72:43:90:a7:2a:0c:c0:6b:51:7f:c8:
6a:a8:fe:4b:71:07:42:90:d2:4b:c6:4d:17:95:4d:64:5e:7d:
0e:4d:01:69:c8:0e:08:57:fa:71:4c:5a:c8:3d:17:9a:95:0c:
7f:92:ba:46:6a:9c:4a:5b:aa:d2:9f:ff:e6:99:58:80:dd:00:
2a:0d:80:a1:57:21:15:54:59:fc:dc:2a:5f:8c:8d:be:29:c5:
db:d2:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:27:35 2026 by rpki-client