
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
File: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft (raw, json)
Hash identifier: PM7pLeGLYZQ+SLFAgfgy14mkh3oma4Yowj9QBABZh0Y=
Subject key identifier: 74:E1:F2:76:75:11:6D:2F:B6:C2:08:1F:3D:2E:E8:16:04:EB:93:94
Authority key identifier: 70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19
Certificate issuer: /CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619
Certificate serial: 0931A6F5D59388C431CE3637813794CF6408C856
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
Manifest number: 75
Signing time: Tue 28 Jul 2026 16:52:33 +0000
Manifest this update: Tue 28 Jul 2026 16:47:33 +0000
Manifest next update: Wed 29 Jul 2026 19:31:33 +0000
Files and hashes: 1: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: EtnUTjZ94OuTXPQ8oodtLlh2y5zeN5ozbISTk51v5C4=)
2: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: 4MzusLkn8wvWUBvFiEkops16kBYmlHHlayjI7RCIrok=)
3: 70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl (hash: oy21CVQOCDrOfdZi48eo2NYMSYqPShGyjS+qQqvXnOs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl
rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:31:a6:f5:d5:93:88:c4:31:ce:36:37:81:37:94:cf:64:08:c8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619
Validity
Not Before: Jul 28 16:47:33 2026 GMT
Not After : Jul 29 19:31:33 2026 GMT
Subject: CN=74E1F27675116D2FB6C2081F3D2EE81604EB9394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:29:7d:9f:db:32:e5:ab:71:9a:6d:e2:f8:
94:fe:fe:1d:ba:25:ab:5c:18:d9:54:16:9c:9d:c3:
6e:cf:27:a2:90:26:ea:3d:00:2f:4b:5f:63:61:ae:
3a:b7:08:f4:57:cd:f0:52:fc:b3:52:61:de:f6:3c:
c7:2a:2e:1e:d9:bc:f0:5b:4a:ce:33:ae:9e:38:a9:
30:d3:8b:1c:9a:14:e7:db:75:ae:30:61:a4:9a:68:
2d:ad:82:ed:6f:fd:f9:78:2f:e7:dd:a2:30:55:e1:
3e:76:9a:49:05:8d:66:ad:91:46:c1:7e:83:37:91:
7d:f7:42:cc:e9:3c:b3:81:ed:ab:a1:e4:e5:fc:04:
a2:6d:8b:68:1a:c0:92:5a:21:1b:a0:45:cd:2a:ba:
2f:b1:dd:2b:1e:86:9a:36:d8:4d:f9:e5:6d:3b:5f:
d5:69:9e:c6:f4:c4:36:c2:b1:80:95:e8:85:21:2a:
2a:bd:00:99:9a:8c:99:2d:2f:87:43:76:eb:ab:75:
ae:15:2a:cb:d8:12:80:e5:03:19:3f:c5:b5:9c:63:
0f:92:6d:6b:6f:93:2d:d5:68:3e:ee:90:61:e6:d2:
99:ae:58:9c:70:e3:13:9e:72:90:25:f4:2b:b7:24:
8e:5a:3d:05:a7:28:64:2c:26:fc:57:cd:bf:dc:84:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:F2:76:75:11:6D:2F:B6:C2:08:1F:3D:2E:E8:16:04:EB:93:94
X509v3 Authority Key Identifier:
keyid:70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f1:9b:17:43:82:82:38:90:95:8c:a1:69:77:aa:60:33:df:
8b:e4:5a:b9:8a:53:9d:a5:fa:63:6b:c6:b8:69:56:a2:90:b1:
bc:0c:1c:5d:d5:76:de:56:4f:8b:37:5c:0a:70:87:f8:b1:5b:
a9:a4:86:a5:15:58:c8:04:33:a8:43:fd:9f:72:43:6a:9d:3a:
24:69:c3:a5:2f:78:dd:db:e5:e3:63:19:65:ae:49:4e:7f:ee:
a2:95:3d:b9:75:74:6d:a6:a5:78:29:b4:e5:61:ee:73:da:89:
d7:d2:40:ef:13:3f:2c:a8:65:e7:50:29:ff:f8:c8:43:2e:b7:
f6:14:63:a3:f0:a5:7a:20:48:1f:6e:94:64:4b:e6:79:45:a3:
c9:93:96:4b:80:55:22:c2:60:da:a4:3c:0d:2e:cf:2d:67:bb:
c0:5d:83:95:91:b9:4a:4f:82:78:c3:da:6c:ab:2c:a4:6a:2f:
54:35:0a:e7:6a:03:9a:a7:04:50:23:2f:5c:7d:6b:2e:a9:b4:
2c:1b:89:b9:82:89:cd:91:fa:2f:a3:42:f1:58:0a:64:0f:d6:
d2:9c:96:03:2b:27:e7:7c:4f:eb:8c:7b:ad:ea:a6:61:ed:60:
1f:0b:2a:9a:3f:f0:8f:99:54:0f:a6:91:e6:d4:3a:79:56:c9:
18:cd:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:06:14 2026 by rpki-client