
$ rpki-client -vvf rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft
File: B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft (raw, json)
Hash identifier: YVPcVCqzaePpi0pk2tH/aeN8dfch7XrSLf6CSPscFGI=
Subject key identifier: 95:93:CB:2C:0A:95:DC:01:A0:75:DE:A6:3F:A2:3B:D2:99:26:E5:03
Authority key identifier: B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28
Certificate issuer: /CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728
Certificate serial: 75E39952C506F89F3A6EFE91A85E939446714700
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 03:32:09 +0000
Manifest this update: Wed 17 Jun 2026 03:27:09 +0000
Manifest next update: Thu 18 Jun 2026 07:16:09 +0000
Files and hashes: 1: B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl (hash: jr1Cr7nqsJEPzFqsGjlmO/FmX3v2kCvKAoJIkAn9ne8=)
2: 3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (hash: ZLVGrLGxQp2e5Y2IzOOoMpl4wxPvjrD5ZWNyIr1u5Ho=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl
rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e3:99:52:c5:06:f8:9f:3a:6e:fe:91:a8:5e:93:94:46:71:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B70F840ADCB9F85171B073B951DAAAB8E06A9728
Validity
Not Before: Jun 17 03:27:09 2026 GMT
Not After : Jun 18 07:16:09 2026 GMT
Subject: CN=9593CB2C0A95DC01A075DEA63FA23BD29926E503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:33:d5:1e:48:40:63:49:a7:ec:1c:39:fa:
2f:e4:39:5b:3c:df:73:f5:c6:8a:38:aa:b8:e4:78:
7e:92:d4:cb:d5:3b:27:39:c1:6a:69:c8:40:1d:18:
8b:aa:9c:83:23:49:a3:11:0a:b2:cd:46:35:df:87:
73:43:d5:03:03:09:48:19:c2:4c:71:4a:4a:4a:cf:
2c:e1:e4:da:bf:fe:05:e8:44:fc:a9:78:12:55:75:
0f:83:a2:19:eb:7a:49:31:d6:91:c4:44:3a:41:93:
54:93:91:81:af:9c:cd:5b:85:0d:42:6c:14:b5:3e:
80:a2:66:bf:81:8f:c3:ca:fe:86:06:f1:25:c1:4c:
6a:23:81:a3:62:c7:80:1b:6c:e2:a7:c6:e8:a3:be:
01:3a:36:50:22:b1:40:00:c7:85:fd:88:41:02:56:
e8:f8:5d:74:1e:2f:e8:66:cd:e5:83:a5:48:f7:06:
c2:30:41:55:e4:05:fe:9c:00:0a:69:9f:28:6b:10:
5f:87:0a:43:89:66:09:19:da:97:ec:62:80:8c:95:
77:1a:3e:4e:6e:53:96:72:11:34:24:19:74:ef:a3:
c1:8e:89:aa:5f:c2:61:48:c4:33:2d:af:ca:3e:b7:
a6:e2:ee:8a:21:4e:0d:a9:e0:34:36:46:57:ad:18:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:CB:2C:0A:95:DC:01:A0:75:DE:A6:3F:A2:3B:D2:99:26:E5:03
X509v3 Authority Key Identifier:
keyid:B7:0F:84:0A:DC:B9:F8:51:71:B0:73:B9:51:DA:AA:B8:E0:6A:97:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B70F840ADCB9F85171B073B951DAAAB8E06A9728.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/B70F840ADCB9F85171B073B951DAAAB8E06A9728.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:08:7e:c2:21:b9:6b:c4:60:f2:7a:b8:41:c5:9b:73:f7:70:
01:d4:49:1a:e2:98:4c:e0:d9:81:46:d4:8b:fd:f3:fb:81:90:
7d:1b:28:c6:4b:f5:7d:6c:d4:e3:7a:70:2a:48:bb:f8:fa:4a:
7d:f2:99:ca:3f:ba:5c:83:c9:da:ca:e6:c0:da:78:4e:e5:cb:
35:4d:a0:06:c5:2b:1d:3f:fe:00:d3:a5:bc:60:82:9d:db:0f:
d2:dd:37:ae:62:cd:16:33:e3:51:af:2a:e8:0a:d4:d9:31:5b:
6d:75:11:6a:11:bb:20:5a:38:69:1e:23:ac:3d:ee:23:d9:17:
98:1c:ea:e8:a0:0a:d3:c6:a7:e9:40:e3:76:f5:8a:18:cd:a6:
c7:dc:fe:2e:41:2e:29:8c:8e:9a:ef:2e:51:49:ca:d3:ad:71:
4d:cf:c7:55:5c:d8:f5:e2:17:20:37:82:f4:a8:4b:f6:84:dc:
d4:81:b2:b6:ad:84:c4:d9:66:0d:fc:de:24:33:ff:54:84:98:
a4:de:6b:f4:81:b1:81:cf:3f:3c:a6:66:77:0f:86:78:13:7f:
da:2a:ac:6b:46:44:7f:d3:ec:7f:10:1f:9a:50:1f:84:61:a7:
c7:0e:d6:8d:60:ba:62:c8:5a:3b:5f:83:42:07:c7:09:1b:9e:
78:52:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:32:59 2026 by rpki-client