$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft File: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft (raw, json) Hash identifier: yN8fReZ8Vr4WnVece554N4gfDDktH8ewOTUl/T3rIUU= Subject key identifier: A5:11:DE:72:81:5D:74:00:23:CF:A0:FE:C8:A0:66:C8:55:96:99:20 Authority key identifier: 2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 Certificate issuer: /CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Certificate serial: 788ABF38C18FC03C620D9BB782B913A8A1B34872 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 14:57:22 +0000 Manifest this update: Tue 16 Jun 2026 14:52:22 +0000 Manifest next update: Wed 17 Jun 2026 17:47:22 +0000 Files and hashes: 1: 2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl (hash: 9XFW6vdPSjFbyITLq/ixswtsQBnfvy1La/kOpoPm85c=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: 6hdyf5UyF+Tqhlq/rEWrqEwjd98p7rc0NoOyzHNtasM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8a:bf:38:c1:8f:c0:3c:62:0d:9b:b7:82:b9:13:a8:a1:b3:48:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77 Validity Not Before: Jun 16 14:52:22 2026 GMT Not After : Jun 17 17:47:22 2026 GMT Subject: CN=A511DE72815D740023CFA0FEC8A066C855969920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:e9:20:05:51:a8:e7:34:d7:18:93:32:af: 5d:4f:0d:5c:3a:bd:66:22:b6:b7:98:75:66:45:03: 68:5c:0f:7b:a2:09:fb:d0:a0:8e:e3:11:5e:13:ab: 0f:e4:e9:b2:60:7d:73:76:e5:cc:e1:20:14:d6:3d: 5c:68:42:75:d7:93:88:86:7a:4f:a6:84:8a:9b:15: 18:61:86:45:54:dd:40:c5:fa:ca:30:b2:20:47:5b: 09:86:f4:95:7b:18:45:cf:9b:69:ac:cf:1c:d4:96: c2:38:63:f8:c0:3e:ed:02:b9:b6:bc:3b:f5:53:fe: 26:29:0c:96:36:fe:09:a0:3b:b5:04:b3:a7:87:c0: 0b:6e:15:f8:ea:99:21:8e:5f:b9:88:d4:5a:31:97: ff:49:6e:0c:5b:72:58:b9:6e:77:d5:98:4f:1b:77: db:28:b8:95:7d:b6:9e:10:00:6d:57:75:5c:f7:96: 31:b0:b8:cb:c3:fc:97:ba:29:e5:f6:c0:3f:fd:d0: c0:c1:d0:b2:04:7e:cb:85:5c:aa:76:33:b8:4f:70: 1f:87:df:33:5b:05:ea:be:f1:6b:00:97:99:08:c8: 17:57:9c:c3:cc:0f:55:17:fb:20:cd:2c:38:c7:ff: ed:f1:83:6c:39:3c:b6:b0:08:fd:81:7f:6d:fd:37: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:11:DE:72:81:5D:74:00:23:CF:A0:FE:C8:A0:66:C8:55:96:99:20 X509v3 Authority Key Identifier: keyid:2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d6:5c:3e:05:d3:04:90:89:63:b3:b1:e3:db:35:ca:57:b2: 7a:52:e7:6f:b7:c5:fb:78:8c:1f:b9:a8:48:4f:6a:d6:d2:50: 5d:8f:3a:76:f0:3b:b7:4f:1e:9d:c5:d0:2c:75:47:d5:75:94: e6:36:1a:82:10:f6:43:98:fb:cf:15:a0:15:80:b1:70:75:72: 46:b5:0c:28:8b:ab:98:31:11:bf:01:37:9e:07:36:1a:ef:13: 84:63:11:9f:08:ee:31:13:7d:a1:2a:9f:04:7c:2d:ef:18:59: 13:27:ce:fd:ca:db:8f:4c:dd:4f:10:4f:03:b6:01:e2:33:92: d4:f1:c6:42:4d:21:bd:e3:00:48:ae:13:df:57:e8:de:3b:61: b3:e3:93:6f:35:84:9e:ab:23:14:fa:b6:39:7b:20:d8:05:e9: 48:c2:11:42:cb:8b:0a:01:49:9d:ca:cf:6a:8d:c8:b8:a5:b4: 9d:aa:41:55:b6:8f:54:86:89:26:89:f8:93:c4:3e:43:9e:cf: 48:e3:25:12:ac:e0:f8:c7:16:80:9c:5e:11:13:15:b0:ea:54: 4d:af:a1:94:b9:4e:72:4c:48:2c:e7:38:57:58:7d:2b:9b:af: 0c:0d:23:c3:d8:29:62:2d:ff:d4:75:bc:63:2d:6b:a0:79:30: 42:1f:d1:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIq/OMGPwDxiDZu3grkTqKGzSHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFB MjRBNUY3NzAeFw0yNjA2MTYxNDUyMjJaFw0yNjA2MTcxNzQ3MjJaMDMxMTAvBgNV BAMTKEE1MTFERTcyODE1RDc0MDAyM0NGQTBGRUM4QTA2NkM4NTU5Njk5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jOkgBVGo5zTXGJMyr11PDVw6 vWYitreYdWZFA2hcD3uiCfvQoI7jEV4Tqw/k6bJgfXN25czhIBTWPVxoQnXXk4iG ek+mhIqbFRhhhkVU3UDF+sowsiBHWwmG9JV7GEXPm2mszxzUlsI4Y/jAPu0Cuba8 O/VT/iYpDJY2/gmgO7UEs6eHwAtuFfjqmSGOX7mI1Foxl/9Jbgxbcli5bnfVmE8b d9souJV9tp4QAG1XdVz3ljGwuMvD/Je6KeX2wD/90MDB0LIEfsuFXKp2M7hPcB+H 3zNbBeq+8WsAl5kIyBdXnMPMD1UX+yDNLDjH/+3xg2w5PLawCP2Bf239N8i/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpRHecoFddAAjz6D+yKBmyFWWmSAwHwYDVR0j BBgwFoAUL3CrNfGqii4Yq+Or8Y5G4aJKX3cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ0OGJiODgtYTc1OC00NDNmLWI3MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVG MUFBOEEyRTE4QUJFM0FCRjE4RTQ2RTFBMjRBNUY3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yRjcwQUIzNUYxQUE4QTJFMThBQkUzQUJGMThFNDZFMUEyNEE1 Rjc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvMkY3MEFCMzVGMUFBOEEyRTE4QUJFM0FCRjE4RTQ2 RTFBMjRBNUY3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLWXD4F0wSQiWOzsePbNcpXsnpS52+3xft4 jB+5qEhPatbSUF2POnbwO7dPHp3F0Cx1R9V1lOY2GoIQ9kOY+88VoBWAsXB1cka1 DCiLq5gxEb8BN54HNhrvE4RjEZ8I7jETfaEqnwR8Le8YWRMnzv3K249M3U8QTwO2 AeIzktTxxkJNIb3jAEiuE99X6N47YbPjk281hJ6rIxT6tjl7INgF6UjCEULLiwoB SZ3Kz2qNyLiltJ2qQVW2j1SGiSaJ+JPEPkOez0jjJRKs4PjHFoCcXhETFbDqVE2v oZS5TnJMSCznOFdYfSubrwwNI8PYKWIt/9R1vGMta6B5MEIf0Wk= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:33 2026 by rpki-client