$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json) Hash identifier: 4eGNw6ree0/tEidokaYn8o3zWMTUg9Jf/oZJ0dih3T4= Subject key identifier: E8:6A:20:5A:7A:4A:99:B0:77:C7:C2:9D:FE:A9:B5:51:A5:99:4B:28 Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 5F0D22510F2B5486814A9D516B1AFCAAFF37417F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft Manifest number: 01F5 Signing time: Thu 26 Mar 2026 03:30:42 +0000 Manifest this update: Thu 26 Mar 2026 03:25:42 +0000 Manifest next update: Sun 29 Mar 2026 08:55:42 +0000 Files and hashes: 1: 3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa (hash: BT2Xm6NvivpZW/A7KKYoT5JmNwNHRn5+Zp/CE2/KpUE=) 2: 3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa (hash: ls/qvCLTIAui00ibgj8c/dl69JxHxFEbZ+n3COlxeds=) 3: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: YSNiwKIXovG3Dpgm8YCvJHHF8h3+M9IFdVL12FWizoc=) 4: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: hdvyAhrcryql4wjEziksSVWRL82EleGS11GMyW3jyaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0d:22:51:0f:2b:54:86:81:4a:9d:51:6b:1a:fc:aa:ff:37:41:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Mar 26 03:25:42 2026 GMT Not After : Mar 29 08:55:42 2026 GMT Subject: CN=E86A205A7A4A99B077C7C29DFEA9B551A5994B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:af:f1:7c:79:0c:a0:74:c4:55:04:84:51:44: 75:47:26:01:92:e2:0b:c4:52:a4:b9:1f:9f:05:4c: a4:62:bb:43:45:82:bb:d8:a4:d3:d8:8c:8b:35:77: 37:c0:70:9a:9c:09:e0:ea:59:da:f7:97:03:59:35: be:eb:f0:99:55:f9:dc:d8:28:bc:a5:b6:1c:9f:bb: fc:d8:ae:7c:8e:c3:3d:60:da:6a:08:37:d5:d7:35: f3:20:e8:fa:67:26:62:8e:9d:17:4c:73:2d:6a:d0: 07:f8:87:97:f4:df:df:b3:bd:b5:f7:f1:f9:ac:9c: 05:39:9b:8b:fb:a8:25:f7:bb:d7:68:2e:e4:c0:e4: 3b:59:47:88:9e:03:84:14:b1:5c:21:8e:cc:27:c6: 7c:dc:98:a9:e4:72:01:6c:02:e9:c2:85:80:80:27: 0c:ad:e8:8a:2d:04:31:1d:f5:4a:d0:f2:83:77:fd: c0:e3:c0:52:3f:85:9b:dd:d4:97:66:13:d3:5c:44: f5:d3:73:eb:75:9c:7f:b0:0c:80:a8:bf:1a:ae:d2: e5:00:58:c6:a7:00:b6:5f:be:a0:08:b0:98:4b:48: 5c:42:6a:bf:18:02:78:26:5c:87:e9:35:78:b1:9c: 8b:63:f7:ff:ca:b0:2a:25:a6:27:dc:13:60:05:15: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6A:20:5A:7A:4A:99:B0:77:C7:C2:9D:FE:A9:B5:51:A5:99:4B:28 X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a7:3c:ff:65:12:43:c2:4a:0a:19:0b:51:3f:da:89:02:37: e5:30:66:26:63:4f:f7:88:16:a5:30:40:8f:85:bc:c6:75:40: 65:dd:53:27:ff:30:6d:8a:ce:24:17:2e:8d:bf:7b:de:f4:47: 6c:11:62:0a:83:ae:e9:a9:32:42:47:bc:ab:f4:fb:a5:35:b3: c4:89:3c:fb:e9:76:49:61:92:7c:7c:8f:bc:c9:be:69:a4:c5: b2:ce:f2:97:12:94:a4:dd:a7:2b:18:d7:2c:bf:bf:d4:18:89: e0:94:66:e2:77:64:4f:62:e7:67:49:fc:b1:0c:16:b1:12:e7: 0c:50:f9:74:72:49:f6:e0:04:3e:a6:9c:1a:ed:e1:b8:16:5f: 66:61:4d:b1:90:ea:47:2d:12:67:dd:c4:7e:29:53:45:b1:ba: 28:54:5b:40:b8:86:70:1f:17:7b:02:4f:c9:88:23:7e:af:3c: 65:8c:a7:c9:b4:52:06:2f:0c:d1:b5:67:e4:12:9c:cf:09:83: fb:c5:b0:e5:c9:ae:1e:e3:4b:7a:36:db:7e:73:cd:fc:82:71: 74:9b:25:20:e0:aa:8b:b5:df:36:31:a8:9a:c3:c4:fa:a5:15: 9f:56:93:dc:b9:9d:87:21:47:c4:a7:ae:53:09:f6:15:c8:dd: b4:13:7f:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXw0iUQ8rVIaBSp1Raxr8qv83QX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNjAzMjYwMzI1NDJaFw0yNjAzMjkwODU1NDJaMDMxMTAvBgNV BAMTKEU4NkEyMDVBN0E0QTk5QjA3N0M3QzI5REZFQTlCNTUxQTU5OTRCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0r/F8eQygdMRVBIRRRHVHJgGS 4gvEUqS5H58FTKRiu0NFgrvYpNPYjIs1dzfAcJqcCeDqWdr3lwNZNb7r8JlV+dzY KLylthyfu/zYrnyOwz1g2moIN9XXNfMg6PpnJmKOnRdMcy1q0Af4h5f039+zvbX3 8fmsnAU5m4v7qCX3u9doLuTA5DtZR4ieA4QUsVwhjswnxnzcmKnkcgFsAunChYCA Jwyt6IotBDEd9UrQ8oN3/cDjwFI/hZvd1JdmE9NcRPXTc+t1nH+wDICovxqu0uUA WManALZfvqAIsJhLSFxCar8YAngmXIfpNXixnItj9//KsColpifcE2AFFRUZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6GogWnpKmbB3x8Kd/qm1UaWZSygwHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEinPP9lEkPCSgoZC1E/2okCN+UwZiZjT/eI FqUwQI+FvMZ1QGXdUyf/MG2KziQXLo2/e970R2wRYgqDrumpMkJHvKv0+6U1s8SJ PPvpdklhknx8j7zJvmmkxbLO8pcSlKTdpysY1yy/v9QYieCUZuJ3ZE9i52dJ/LEM FrES5wxQ+XRySfbgBD6mnBrt4bgWX2ZhTbGQ6kctEmfdxH4pU0WxuihUW0C4hnAf F3sCT8mII36vPGWMp8m0UgYvDNG1Z+QSnM8Jg/vFsOXJrh7jS3o2235zzfyCcXSb JSDgqou13zYxqJrDxPqlFZ9Wk9y5nYchR8SnrlMJ9hXI3bQTf9I= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:49 2026 by rpki-client