$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft File: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft (raw, json) Hash identifier: cYGQfC283LxpQLhmF6efXR2BeWFxb0N+LPf+5bqxHc4= Subject key identifier: 46:AB:96:1E:52:C5:93:1C:1E:0E:52:AE:45:51:F8:F0:B3:84:5E:10 Authority key identifier: C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 Certificate issuer: /CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Certificate serial: 7D598DC551A0BC4C9453728C571B9514044CADB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:11:10 +0000 Manifest this update: Tue 16 Jun 2026 18:06:10 +0000 Manifest next update: Wed 17 Jun 2026 20:17:10 +0000 Files and hashes: 1: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: RMvUFQrKL018cFixmOMzozWh6kTAtIwXuWq18nozxuA=) 2: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: IG22wGAeafPyZiCHJfimAg7HtJoJBGXUaInRtJgtJX8=) 3: C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl (hash: 5avG0XkIZyFEIe6fUbc5cgk/a/p3cLIOKcwAgK5Zxjc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:59:8d:c5:51:a0:bc:4c:94:53:72:8c:57:1b:95:14:04:4c:ad:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70AA27E60197D02F0DCCD8E7924FFF9C0472B50 Validity Not Before: Jun 16 18:06:10 2026 GMT Not After : Jun 17 20:17:10 2026 GMT Subject: CN=46AB961E52C5931C1E0E52AE4551F8F0B3845E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c6:1e:12:a6:93:85:47:88:87:d3:e6:5f:2e: 3f:f4:ac:a5:e1:00:1f:db:a8:f7:f7:d5:63:19:44: 00:af:54:e7:1c:92:fe:1d:12:70:75:cf:7e:47:fc: e1:41:6b:9b:38:4f:ca:67:9d:9c:6a:17:7a:b6:b0: b7:76:66:27:36:57:38:25:5b:3c:3e:01:a9:9a:4d: 63:fa:26:73:72:23:96:b8:91:06:07:c7:41:ad:c9: 1e:58:88:bd:64:37:95:88:31:21:07:4a:6e:26:87: 13:14:0a:1a:f8:8d:b3:a5:2a:88:f8:e7:e0:5b:08: c4:d2:68:3d:6c:f2:a8:e6:66:05:b5:cd:86:27:9f: 78:0b:b4:10:46:57:b1:7d:01:4d:23:7e:fb:6d:77: eb:eb:08:d3:01:bf:a0:5f:b8:e5:d1:01:c4:4e:2e: c3:51:ec:ec:7f:41:8f:72:ba:e8:c2:a6:0d:40:b3: fb:a1:ce:e3:31:79:e7:c6:5b:4b:a8:6e:68:db:93: a3:7a:86:02:1a:d2:b9:f1:cd:06:ca:c9:4e:7c:5e: 6b:c0:81:40:64:bd:22:6e:51:8a:8c:95:55:11:0b: 65:b8:48:03:68:8f:f8:bb:ab:81:03:f6:13:5a:81: 2d:49:00:94:38:02:13:d8:6b:23:73:d2:23:e0:c4: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AB:96:1E:52:C5:93:1C:1E:0E:52:AE:45:51:F8:F0:B3:84:5E:10 X509v3 Authority Key Identifier: keyid:C7:0A:A2:7E:60:19:7D:02:F0:DC:CD:8E:79:24:FF:F9:C0:47:2B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/C70AA27E60197D02F0DCCD8E7924FFF9C0472B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f8:3a:a2:8d:23:e3:6d:48:72:e3:15:32:33:73:2c:e3:ff: d0:66:e5:e3:1c:e8:56:3b:4c:dd:a7:61:37:a8:69:8b:99:e6: cc:77:76:bf:32:b0:36:82:89:f3:8e:c2:f6:95:d7:73:18:5f: a1:62:ec:20:86:13:18:0c:4a:64:92:49:a9:53:2f:b8:69:b5: 45:05:ad:e9:24:24:f5:61:86:65:aa:4a:a4:4f:34:33:81:31: a3:3a:c0:40:d9:99:d2:37:28:f2:46:d6:4f:93:54:f6:7a:6f: 36:23:8b:9e:4e:d2:70:75:80:15:44:1a:35:2c:c7:2d:0e:0b: 27:f0:b3:3e:33:dd:9e:be:c3:9c:c2:8c:4b:be:dd:c4:d4:4f: 13:48:82:e8:ce:69:fb:f2:5c:58:f3:3d:2c:35:6a:08:c5:a9: cb:61:cb:63:d2:07:08:bf:77:ce:ea:3b:45:99:d7:78:4d:93: a1:c5:8a:5c:3d:77:c1:de:3c:a4:16:78:2a:b9:19:43:3d:23: ce:67:ef:fb:3c:f4:f4:7b:ec:25:1b:83:c9:37:06:7a:6d:60: 4e:36:5e:ad:73:d2:78:18:a5:16:3f:fe:ee:f6:37:b2:4c:ac: b2:05:a5:8c:35:d6:c5:54:ea:db:8f:c2:58:af:b3:d2:65:73: 4d:68:ae:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVmNxVGgvEyUU3KMVxuVFARMrbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlD MDQ3MkI1MDAeFw0yNjA2MTYxODA2MTBaFw0yNjA2MTcyMDE3MTBaMDMxMTAvBgNV BAMTKDQ2QUI5NjFFNTJDNTkzMUMxRTBFNTJBRTQ1NTFGOEYwQjM4NDVFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNxh4SppOFR4iH0+ZfLj/0rKXh AB/bqPf31WMZRACvVOcckv4dEnB1z35H/OFBa5s4T8pnnZxqF3q2sLd2Zic2Vzgl Wzw+AamaTWP6JnNyI5a4kQYHx0GtyR5YiL1kN5WIMSEHSm4mhxMUChr4jbOlKoj4 5+BbCMTSaD1s8qjmZgW1zYYnn3gLtBBGV7F9AU0jfvttd+vrCNMBv6BfuOXRAcRO LsNR7Ox/QY9yuujCpg1As/uhzuMxeefGW0uobmjbk6N6hgIa0rnxzQbKyU58XmvA gUBkvSJuUYqMlVURC2W4SANoj/i7q4ED9hNagS1JAJQ4AhPYayNz0iPgxO6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURquWHlLFkxweDlKuRVH48LOEXhAwHwYDVR0j BBgwFoAUxwqifmAZfQLw3M2OeST/+cBHK1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2FlODM2NzMtMDk2YS00NDBjLWIyN2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2 MDE5N0QwMkYwRENDRDhFNzkyNEZGRjlDMDQ3MkI1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzBBQTI3RTYwMTk3RDAyRjBEQ0NEOEU3OTI0RkZGOUMwNDcy QjUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvQzcwQUEyN0U2MDE5N0QwMkYwRENDRDhFNzkyNEZG RjlDMDQ3MkI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/4OqKNI+NtSHLjFTIzcyzj/9Bm5eMc6FY7 TN2nYTeoaYuZ5sx3dr8ysDaCifOOwvaV13MYX6Fi7CCGExgMSmSSSalTL7hptUUF rekkJPVhhmWqSqRPNDOBMaM6wEDZmdI3KPJG1k+TVPZ6bzYji55O0nB1gBVEGjUs xy0OCyfwsz4z3Z6+w5zCjEu+3cTUTxNIgujOafvyXFjzPSw1agjFqcthy2PSBwi/ d87qO0WZ13hNk6HFilw9d8HePKQWeCq5GUM9I85n7/s89PR77CUbg8k3BnptYE42 Xq1z0ngYpRY//u72N7JMrLIFpYw11sVU6tuPwlivs9Jlc01orjQ= -----END CERTIFICATE-----Generated at Wed Jun 17 12:18:35 2026 by rpki-client