$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json) Hash identifier: zgQG68swXa1JN3l+mjZdh505LDU4koLSZJg5Wc563f4= Subject key identifier: 49:9D:C2:8A:A6:3F:97:70:1B:4D:C8:33:AE:31:17:C7:6E:5C:A4:0E Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 5AC455E23E0ADE2C38320AD7B179F9C81B079025 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft Manifest number: 01EC Signing time: Thu 05 Mar 2026 15:20:42 +0000 Manifest this update: Thu 05 Mar 2026 15:15:42 +0000 Manifest next update: Sun 08 Mar 2026 22:41:42 +0000 Files and hashes: 1: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: hdvyAhrcryql4wjEziksSVWRL82EleGS11GMyW3jyaU=) 2: 3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa (hash: ls/qvCLTIAui00ibgj8c/dl69JxHxFEbZ+n3COlxeds=) 3: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: VLhTSynzm9W1lsJ4/pEmaww8attTUH0nlBNhxXzR79A=) 4: 3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa (hash: BT2Xm6NvivpZW/A7KKYoT5JmNwNHRn5+Zp/CE2/KpUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c4:55:e2:3e:0a:de:2c:38:32:0a:d7:b1:79:f9:c8:1b:07:90:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Mar 5 15:15:42 2026 GMT Not After : Mar 8 22:41:42 2026 GMT Subject: CN=499DC28AA63F97701B4DC833AE3117C76E5CA40E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:79:f7:1e:ce:19:bc:ea:18:c1:93:ac:95: 7d:08:39:06:c5:e7:e7:85:81:bd:30:b4:3d:fb:bd: bd:ce:fc:bf:ed:6d:43:61:f0:29:c4:b1:4d:5f:6e: 58:ac:85:ed:b0:b8:dd:26:c5:d6:18:df:8a:40:93: 9d:bc:07:23:47:c1:2b:ee:46:f8:59:3d:ca:3d:88: 87:cb:7d:0b:34:4d:d9:ed:60:80:a1:dd:a4:1a:b6: 20:d1:d8:c4:1c:d5:c7:e2:4d:bc:c8:02:49:ef:84: 13:35:62:41:09:95:4a:8c:26:78:f4:a3:8d:a1:93: 8c:a3:f3:0f:77:66:09:41:a8:c6:6e:e7:5e:c0:6a: a4:58:fa:34:3c:8c:cc:e9:29:f7:86:c8:37:fa:7e: e6:54:e6:70:81:ae:4b:71:0f:76:90:50:a7:21:81: 90:6c:86:b2:5c:5c:90:2e:b3:3f:5d:f4:12:02:9e: 72:e5:f1:55:58:d5:53:b7:e6:43:6e:b3:05:af:26: 1f:79:ea:e5:03:85:0d:08:d7:61:ae:60:6a:66:4c: 9d:a8:39:c9:19:3c:55:94:ea:5d:2c:60:ac:a1:d7: 5c:5c:bd:36:72:5a:15:a4:50:7e:b1:6f:3a:d6:bb: 3e:13:f5:76:d3:a8:b6:3b:d2:3c:85:09:57:b2:29: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9D:C2:8A:A6:3F:97:70:1B:4D:C8:33:AE:31:17:C7:6E:5C:A4:0E X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6d:a3:8d:74:ee:7f:ba:10:c0:e5:38:bd:46:a5:79:c9:7e: c5:60:d9:39:d6:da:93:9c:48:4f:6e:2f:9a:a8:00:d1:06:f1: 83:9c:8d:b9:0c:5b:8d:d6:58:e6:2c:60:f9:06:df:48:aa:6f: af:7b:a2:4a:be:fd:30:57:b6:1a:3f:22:a8:e7:4a:73:75:f3: 1c:a9:9f:de:84:18:cf:6d:24:38:f1:c0:ea:7f:75:16:d6:1e: a5:f1:de:dc:3f:57:24:9f:31:2c:44:4e:ca:23:28:04:25:5b: 68:8b:bd:63:41:d0:b7:6d:d7:ae:7b:2f:3d:b9:82:71:3d:50: 6e:77:c2:2f:52:3f:a3:01:14:67:3a:07:a9:53:b0:59:ad:36: e0:0d:cf:1e:f0:89:f1:d2:ed:7e:be:9e:94:dd:57:a0:13:59: af:4e:67:5b:cd:b5:f0:04:43:5c:93:de:95:60:42:6c:11:15: 20:b5:98:f9:cc:e4:0b:0b:fd:97:be:93:0b:85:73:11:e5:07: fb:b0:69:0a:db:ea:3c:c1:9e:12:f4:69:02:05:96:d4:c9:5b: ff:79:96:fe:31:12:1d:0c:01:60:c3:17:55:46:c6:9d:db:52: e9:75:a5:fa:e5:13:73:54:12:0e:71:2d:e5:6d:cc:3f:d0:23: 16:c5:5c:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsRV4j4K3iw4MgrXsXn5yBsHkCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNjAzMDUxNTE1NDJaFw0yNjAzMDgyMjQxNDJaMDMxMTAvBgNV BAMTKDQ5OURDMjhBQTYzRjk3NzAxQjREQzgzM0FFMzExN0M3NkU1Q0E0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7YXn3Hs4ZvOoYwZOslX0IOQbF 5+eFgb0wtD37vb3O/L/tbUNh8CnEsU1fblishe2wuN0mxdYY34pAk528ByNHwSvu RvhZPco9iIfLfQs0TdntYICh3aQatiDR2MQc1cfiTbzIAknvhBM1YkEJlUqMJnj0 o42hk4yj8w93ZglBqMZu517AaqRY+jQ8jMzpKfeGyDf6fuZU5nCBrktxD3aQUKch gZBshrJcXJAusz9d9BICnnLl8VVY1VO35kNuswWvJh956uUDhQ0I12GuYGpmTJ2o OckZPFWU6l0sYKyh11xcvTZyWhWkUH6xbzrWuz4T9XbTqLY70jyFCVeyKc4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSZ3CiqY/l3AbTcgzrjEXx25cpA4wHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxto4107n+6EMDlOL1GpXnJfsVg2TnW2pOc SE9uL5qoANEG8YOcjbkMW43WWOYsYPkG30iqb697okq+/TBXtho/IqjnSnN18xyp n96EGM9tJDjxwOp/dRbWHqXx3tw/VySfMSxETsojKAQlW2iLvWNB0Ldt1657Lz25 gnE9UG53wi9SP6MBFGc6B6lTsFmtNuANzx7wifHS7X6+npTdV6ATWa9OZ1vNtfAE Q1yT3pVgQmwRFSC1mPnM5AsL/Ze+kwuFcxHlB/uwaQrb6jzBnhL0aQIFltTJW/95 lv4xEh0MAWDDF1VGxp3bUul1pfrlE3NUEg5xLeVtzD/QIxbFXGo= -----END CERTIFICATE-----Generated at Thu Mar 5 22:31:03 2026 by rpki-client