
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
File: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft (raw, json)
Hash identifier: lRDCcU6kcGqlcYNW99Sd1nU6K4ETPreFSywoUNubb24=
Subject key identifier: CF:C6:A4:7C:E0:4E:5C:97:95:55:BE:B3:DA:49:25:CD:B4:B6:B5:6E
Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Certificate serial: 09C237AAC055216D80D914182864E92D5DD3FD06
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 01:49:57 +0000
Manifest this update: Wed 17 Jun 2026 01:44:57 +0000
Manifest next update: Thu 18 Jun 2026 01:59:57 +0000
Files and hashes: 1: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: CRQfQvukFddl9vchPsTgKBPY7+BHd3EPebDgJxEISnw=)
2: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: pEjlBEcf4SMwhsnq2l8vEuSNRarcFG9m4tfJC8/w2lc=)
3: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: uVaL+tfCNM5zPaOPcfVzgSdj2M5cAqybg0t35qHDKfE=)
4: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: lCknCbn1e4JowaioeH82UQR3fwZeR46CsNwrligI+W0=)
5: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: 7JThFy92/VpEXEDJA9kwrgcgGhSHAfaM/+d1+Zp5aK8=)
6: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: 1pB/Nqd7vJqSwm7DTejyzXpeJQSOjzzPkrlOSeZoqb4=)
7: 70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl (hash: R/XwvShkxPMTu+tT13I7Y8BDlKqHUkG6uMn1QdBtR/E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c2:37:aa:c0:55:21:6d:80:d9:14:18:28:64:e9:2d:5d:d3:fd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Validity
Not Before: Jun 17 01:44:57 2026 GMT
Not After : Jun 18 01:59:57 2026 GMT
Subject: CN=CFC6A47CE04E5C979555BEB3DA4925CDB4B6B56E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:dc:0d:37:9e:cc:97:01:10:47:38:66:4c:
9a:50:d1:cf:1b:61:3b:51:6d:23:1d:17:64:2f:e8:
1c:c1:9d:cc:ba:32:59:0e:73:93:4d:ae:38:12:13:
15:a4:64:e4:63:44:0e:12:b1:09:3d:ee:61:92:65:
86:03:23:d3:50:d2:a7:58:e0:b7:46:5e:ac:9e:cb:
55:0f:54:52:6e:a0:19:d3:37:8e:c7:dd:f9:f5:f1:
2c:b8:79:e2:4e:1f:8a:64:56:0c:48:11:0f:b3:75:
91:b7:86:cf:3e:01:f1:c3:a4:f0:58:6a:af:68:0d:
d9:a0:8d:86:9c:3a:2f:6a:89:18:d3:c8:75:88:f9:
bc:07:de:39:f8:a1:7b:21:a4:b2:09:f3:40:cc:f3:
82:ab:52:9f:9f:0e:af:5a:a2:10:a7:1b:36:3f:ba:
9e:35:81:25:a3:d1:df:f4:40:f3:97:6b:ab:50:bc:
7e:47:e1:a8:9f:7e:3e:69:ca:52:0e:f0:55:65:99:
68:db:75:13:f2:e4:e6:95:60:95:ad:ec:c1:df:53:
17:17:ce:5d:8b:25:31:13:b2:9c:e7:0e:33:a7:dc:
2e:2f:bf:2f:67:13:8b:e3:12:f8:87:f1:96:c5:e2:
3b:3a:17:e4:9a:5b:75:ea:0a:c3:91:cb:3a:65:1c:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C6:A4:7C:E0:4E:5C:97:95:55:BE:B3:DA:49:25:CD:B4:B6:B5:6E
X509v3 Authority Key Identifier:
keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6a:e3:25:39:0f:58:cf:40:a9:e0:78:29:a8:7b:8a:dc:8c:
2c:bf:ba:41:74:56:b1:41:15:d7:56:4b:2a:7c:73:e3:06:f7:
70:78:ed:97:26:a4:ed:38:36:7d:c7:35:20:26:db:f4:c0:de:
51:78:cc:31:ac:8f:ba:59:f3:f9:79:07:c1:15:41:58:33:6c:
87:19:ef:5e:d4:47:a1:c7:cc:d3:5a:e8:16:25:e0:b3:2a:dc:
14:2b:a3:5a:f5:f7:23:eb:fb:73:98:ec:c9:8a:7a:c5:00:dc:
8e:63:f9:2b:c4:57:a2:44:95:7c:05:3e:10:b7:19:44:a7:5f:
cf:18:96:08:9e:7d:b2:04:ca:4f:30:3b:64:cf:b8:ed:c0:5c:
f7:7b:a5:8f:1d:3b:db:96:33:93:6b:2e:c0:37:a0:19:03:7f:
70:c6:d6:2d:8c:9d:de:8d:29:3e:b9:ea:62:4b:25:45:5d:2d:
a8:52:14:25:3a:6f:03:5d:77:c9:f6:48:d4:32:61:83:bc:c7:
b2:ca:e0:16:38:5f:fe:3a:ec:5b:37:8a:30:f1:44:f0:b9:5a:
c0:c1:68:c5:97:19:d2:a4:39:40:03:da:25:8b:10:33:a9:68:
80:94:20:32:47:5f:10:0f:f7:68:01:20:3a:2d:4c:f9:93:21:
b9:76:34:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:14:43 2026 by rpki-client