
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
File: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft (raw, json)
Hash identifier: rGH2dL7MKlyfqzFGxoj3Q95G2GAaODUGhYfplrhA3bs=
Subject key identifier: 2C:4D:34:D9:77:EA:8E:7A:A0:7C:52:92:BB:08:1E:D3:68:DC:AD:BE
Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Certificate serial: 7A992DA45FBF3BDC159BB3EC2B61E82DAD03DB6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
Manifest number: D1
Signing time: Mon 28 Sep 2026 11:03:32 +0000
Manifest this update: Mon 28 Sep 2026 10:58:32 +0000
Manifest next update: Tue 29 Sep 2026 11:54:32 +0000
Files and hashes: 1: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl (hash: z+BsqnSK/Z4XE/hGUVDU5KNSaM51hTcSlh8z8PLT+tE=)
2: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 1pB/Nqd7vJqSwm7DTejyzXpeJQSOjzzPkrlOSeZoqb4=)
3: 3130332e3231332e3133312e302f32342d3234203d3e203535373031.roa (hash: vzgewcG3oAbC7AbL8VbFC07s+SgG6tK6AAtDNUKrFRI=)
4: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: uVaL+tfCNM5zPaOPcfVzgSdj2M5cAqybg0t35qHDKfE=)
5: 3130332e3231332e3132392e302f32342d3234203d3e20313331373735.roa (hash: HY+aJPxaezirRr4NHeslZY3QFJWf9uO7z+CkSmEbtwg=)
6: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: pEjlBEcf4SMwhsnq2l8vEuSNRarcFG9m4tfJC8/w2lc=)
7: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: 7JThFy92/VpEXEDJA9kwrgcgGhSHAfaM/+d1+Zp5aK8=)
8: 3132332e3235332e3233322e302f32342d3234203d3e20313937353337.roa (hash: xAscsICyofL4lf/JlgWQbrEID5bG/l0KAfIP4/G7jFo=)
9: 3132332e3235332e3233342e302f32342d3234203d3e203137363730.roa (hash: cND9IkoYQx+CLaj+y6Gh0x9QJKJQc+ErI+RneqD6xKo=)
10: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: lCknCbn1e4JowaioeH82UQR3fwZeR46CsNwrligI+W0=)
11: 3132332e3235332e3233352e302f32342d3234203d3e203137363730.roa (hash: yikJb7rqENDrSWYcBrdRV/I5pxUbP3osYLhvy9m38sE=)
12: 3130332e3231332e3133302e302f32342d3234203d3e20313331373735.roa (hash: E4OuQve25g0RwEBZtMq76vR5kCBtJoV9ABMkUioQyWA=)
13: 3132332e3235332e3233332e302f32342d3234203d3e20313937353337.roa (hash: O5FLNbUlt0ivd4BC3VQEtKA8g1c9yRV5LDB8OAY9HXU=)
14: 3131302e35302e38322e302f32342d3234203d3e20313431383932.roa (hash: 38Va62FPSyr8Ygtpz8ja6Vo7jaIjqhcu6Gg/Q1NLZ1M=)
15: 3130332e3231332e3132382e302f32342d3234203d3e203137363730.roa (hash: h9ERyEefV9I1A5M4z4tK9bpFBxWOGmWoS5oxSOOg/AU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 11:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:99:2d:a4:5f:bf:3b:dc:15:9b:b3:ec:2b:61:e8:2d:ad:03:db:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Validity
Not Before: Sep 28 10:58:32 2026 GMT
Not After : Sep 29 11:54:32 2026 GMT
Subject: CN=2C4D34D977EA8E7AA07C5292BB081ED368DCADBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:5b:8b:07:5b:75:42:2d:9a:ec:cc:e4:52:
04:db:73:e3:da:d5:69:6c:49:c9:1a:f0:1e:90:a0:
7d:3d:07:92:e6:be:da:b1:5a:40:37:3a:84:95:aa:
6f:90:53:3c:6a:f1:6c:25:20:82:c8:6b:24:34:ad:
56:c3:58:78:23:d0:8e:3e:bb:62:b4:33:8d:23:7d:
b8:23:b7:af:74:97:ef:e2:3f:f6:91:cf:07:07:95:
a6:7a:d4:59:48:14:db:fa:7e:f6:aa:27:f8:c9:fc:
cc:60:fe:f0:aa:7d:c4:d0:f8:79:3f:6b:fa:20:8c:
6d:7e:0c:81:66:69:38:41:ad:84:9a:9b:6c:24:aa:
df:1d:6e:dc:e0:59:39:9d:4a:46:bf:0f:e0:29:1f:
63:72:6e:20:ca:fc:94:29:1e:21:e0:84:33:99:c5:
a3:f9:da:eb:b1:52:ec:87:fa:eb:42:67:49:12:3b:
c9:27:84:97:d9:a5:7b:50:d0:41:0d:c8:79:14:e7:
36:0b:47:1b:c3:10:ec:c3:17:45:a5:cd:22:c2:6d:
66:97:8c:38:76:6d:6a:17:36:6c:2d:2d:c5:8a:5c:
7a:25:b9:bf:1c:d0:e1:12:b2:c0:60:06:e3:cc:a8:
e0:31:3b:04:1e:a4:e4:49:27:5a:e5:8a:b9:fd:3c:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4D:34:D9:77:EA:8E:7A:A0:7C:52:92:BB:08:1E:D3:68:DC:AD:BE
X509v3 Authority Key Identifier:
keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:24:50:8c:c7:c3:9f:59:cc:f0:a7:95:83:69:a2:31:68:06:
1b:c2:d1:f9:b3:fa:de:85:92:d2:41:34:c8:1b:e3:d8:61:f1:
ea:d8:e9:e6:8d:b4:1e:28:c9:a2:77:3c:b3:df:5f:dc:3a:04:
c2:bd:43:b1:19:35:e9:f5:f1:97:2b:44:65:8e:b2:c3:ef:f5:
de:d7:0d:ba:ee:26:7a:dc:00:e0:9c:a0:03:da:82:d5:3f:a9:
0b:4c:bd:62:99:84:a7:c4:28:b7:42:c5:6a:e5:9a:b0:9e:37:
76:75:b2:a9:ce:16:6d:06:6b:0c:7a:20:7b:ab:68:3e:2e:8b:
1b:24:69:b0:5b:1e:06:a1:bf:dc:6c:83:98:2a:b0:62:4b:f8:
11:ea:0d:34:0f:ab:82:38:a0:ee:be:43:9d:b0:ae:ac:6c:18:
9d:7e:3b:3f:6d:b8:e4:1e:7e:cf:df:6e:0e:79:8d:1e:2e:8e:
64:33:f2:f9:72:c3:a1:96:b0:b8:e4:f2:25:9f:0c:6c:7b:20:
0f:a9:05:f7:6d:be:d8:b9:4c:b1:bc:36:74:82:03:5f:28:76:
e2:b5:2c:d4:fb:25:52:e7:d4:5b:1b:93:cb:19:27:92:60:55:
66:1f:d9:70:df:28:f5:6a:e4:d0:cb:61:c2:bb:0d:67:b5:5e:
42:4f:86:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:58:50 2026 by rpki-client