$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json) Hash identifier: LSZZBvYkoZLa7ZHCUTxHdF9ue/aKyC+8OTyvY6VZdjE= Subject key identifier: 86:8D:6C:C8:C9:78:1A:66:A7:E4:2C:1B:82:3C:B8:C9:83:FC:E2:B7 Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 434900B25A3071C229A3DC5B7F8A45AEF3DEE697 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft Manifest number: 01FF Signing time: Fri 17 Apr 2026 19:50:42 +0000 Manifest this update: Fri 17 Apr 2026 19:45:42 +0000 Manifest next update: Tue 21 Apr 2026 07:46:42 +0000 Files and hashes: 1: 3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa (hash: BT2Xm6NvivpZW/A7KKYoT5JmNwNHRn5+Zp/CE2/KpUE=) 2: 3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa (hash: ls/qvCLTIAui00ibgj8c/dl69JxHxFEbZ+n3COlxeds=) 3: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: hdvyAhrcryql4wjEziksSVWRL82EleGS11GMyW3jyaU=) 4: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: zYNmKcitTg2mlT8XFiR9TvnihvRmQG9tMtS1k/CcHII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 07:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:49:00:b2:5a:30:71:c2:29:a3:dc:5b:7f:8a:45:ae:f3:de:e6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Apr 17 19:45:42 2026 GMT Not After : Apr 21 07:46:42 2026 GMT Subject: CN=868D6CC8C9781A66A7E42C1B823CB8C983FCE2B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c5:fb:3d:c5:3f:ef:25:40:49:3a:66:91:86: a7:5b:df:8e:a3:14:75:67:c2:9d:e2:7c:87:22:a9: 72:ce:eb:00:f1:ec:e4:78:2c:d7:4a:e0:23:b8:57: c2:45:0c:12:96:c0:d8:14:7f:49:ad:db:b3:12:bd: 1c:a9:c5:f1:55:14:67:98:6d:a1:c0:ef:e4:77:65: 0f:2c:ae:c8:af:0b:a9:40:64:f1:b0:c2:61:6f:8c: fa:a4:d8:10:75:2a:64:97:10:d6:68:fd:32:bf:a4: c4:49:1a:b2:22:6d:f2:93:94:0d:1c:64:81:7e:be: d5:6f:ca:3b:4d:70:90:8d:c0:04:24:91:e3:4a:2d: 5f:73:87:15:06:a6:05:50:50:b0:f3:82:3c:27:e9: 32:70:94:bc:d7:9e:c9:6a:7e:cc:fc:7c:62:23:24: 68:42:2d:49:dd:5a:33:e7:26:24:62:06:13:b3:6a: e3:b5:f7:13:b4:a6:76:10:49:12:12:1a:26:62:de: d5:9c:bb:f9:d1:89:36:e9:33:7c:14:0d:81:fc:a5: 56:db:ac:86:00:66:ba:47:9e:54:08:8d:c5:9f:b9: 25:30:0d:47:40:00:ed:02:5d:d1:83:af:47:e5:23: de:7f:1b:63:77:e0:77:1d:a7:71:e3:66:da:76:b0: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8D:6C:C8:C9:78:1A:66:A7:E4:2C:1B:82:3C:B8:C9:83:FC:E2:B7 X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:93:1a:a1:b4:a8:3f:f2:70:4b:ab:c6:19:9e:cd:1f:37:0a: 4c:7e:47:04:8c:b9:24:76:74:03:42:a7:26:71:6d:23:1e:bc: cd:00:03:a5:20:c8:4b:ca:66:48:9d:91:9d:f2:06:98:db:62: b6:23:d4:54:7e:a9:59:4e:39:e2:b3:19:bb:55:f2:cb:1e:d9: c0:2c:b6:49:fe:17:29:eb:bc:f8:6a:79:ae:51:d6:a3:d6:c1: df:9b:36:6c:f1:48:9f:01:93:e2:58:38:d5:1e:6b:56:bc:9a: 6b:5b:cc:a5:88:52:09:79:1a:dc:dd:e0:23:a5:4b:62:56:bd: 78:0d:1a:fc:45:b0:b2:93:ef:bc:34:81:8a:a2:58:75:c7:ac: ac:20:7c:9d:13:fe:1b:8d:8c:54:a6:8d:a4:90:a0:41:88:2f: 74:c7:03:3f:57:de:7b:85:66:7b:53:44:b2:a5:6e:bf:4c:dc: e7:2d:52:ea:92:87:72:4e:b8:c1:cd:87:db:46:be:56:6a:1f: dc:a0:d8:2b:8e:4b:f6:ff:06:4a:a1:e0:39:95:a1:f5:f1:62: 04:ff:c0:b9:b8:d6:8d:74:57:11:ba:76:26:b7:75:17:ca:2a: c8:59:86:ad:fa:93:8d:99:6c:ae:1b:66:86:7e:86:1f:2e:8b: 59:cf:25:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0kAslowccIpo9xbf4pFrvPe5pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNjA0MTcxOTQ1NDJaFw0yNjA0MjEwNzQ2NDJaMDMxMTAvBgNV BAMTKDg2OEQ2Q0M4Qzk3ODFBNjZBN0U0MkMxQjgyM0NCOEM5ODNGQ0UyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxfs9xT/vJUBJOmaRhqdb346j FHVnwp3ifIciqXLO6wDx7OR4LNdK4CO4V8JFDBKWwNgUf0mt27MSvRypxfFVFGeY baHA7+R3ZQ8srsivC6lAZPGwwmFvjPqk2BB1KmSXENZo/TK/pMRJGrIibfKTlA0c ZIF+vtVvyjtNcJCNwAQkkeNKLV9zhxUGpgVQULDzgjwn6TJwlLzXnslqfsz8fGIj JGhCLUndWjPnJiRiBhOzauO19xO0pnYQSRISGiZi3tWcu/nRiTbpM3wUDYH8pVbb rIYAZrpHnlQIjcWfuSUwDUdAAO0CXdGDr0flI95/G2N34Hcdp3HjZtp2sCN7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUho1syMl4Gman5Cwbgjy4yYP84rcwHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+TGqG0qD/ycEurxhmezR83Ckx+RwSMuSR2 dANCpyZxbSMevM0AA6UgyEvKZkidkZ3yBpjbYrYj1FR+qVlOOeKzGbtV8sse2cAs tkn+FynrvPhqea5R1qPWwd+bNmzxSJ8Bk+JYONUea1a8mmtbzKWIUgl5Gtzd4COl S2JWvXgNGvxFsLKT77w0gYqiWHXHrKwgfJ0T/huNjFSmjaSQoEGIL3THAz9X3nuF ZntTRLKlbr9M3OctUuqSh3JOuMHNh9tGvlZqH9yg2CuOS/b/Bkqh4DmVofXxYgT/ wLm41o10VxG6dia3dRfKKshZhq36k42ZbK4bZoZ+hh8ui1nPJfM= -----END CERTIFICATE-----Generated at Mon Apr 20 03:26:58 2026 by rpki-client