$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft File: 70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json) Hash identifier: j05JFdOg6PIT8cGI+GWeSohHjdTR/FUKEHA9+0WAye4= Subject key identifier: AB:D5:E2:48:AE:15:79:44:13:D3:EC:A1:54:15:37:59:80:01:35:C5 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 1D3911123747D9DD7093C4AC628706366B8154DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft Manifest number: 0279 Signing time: Thu 30 Oct 2025 03:11:13 +0000 Manifest this update: Thu 30 Oct 2025 03:06:13 +0000 Manifest next update: Sun 02 Nov 2025 04:30:13 +0000 Files and hashes: 1: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: JVm7dGCd6lDALE+pkkZXeVJqJ9WAQzsQrwHFQdEqwS4=) 2: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: VpIKxGpnGG5kY+TxgaFm5MAMJ5OPwOweNd+seLyS58Q=) 3: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: gLStYnptht5TyqoGXBL5Rk0CVBS4ZoGmnO4HsnZPkL0=) 4: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Q5pvwdFKL1lgBG6fYcr2yl0tesQth6vA5guIwHg8TXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 04:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:39:11:12:37:47:d9:dd:70:93:c4:ac:62:87:06:36:6b:81:54:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Oct 30 03:06:13 2025 GMT Not After : Nov 2 04:30:13 2025 GMT Subject: CN=ABD5E248AE15794413D3ECA154153759800135C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:27:96:0c:92:04:8a:b9:3a:74:8d:25:75: 9c:ac:f6:d2:3e:4e:cb:74:eb:97:ad:b4:e3:37:e5: 18:5a:ff:dc:68:ff:b3:ce:4e:62:a6:96:34:9e:2b: 8f:3a:bf:6d:51:fb:93:6c:48:fd:40:12:35:16:02: b7:df:a4:40:6d:f1:ef:b4:c8:19:80:71:4a:7a:2e: ef:49:52:e0:a2:79:18:83:c3:e2:59:ef:6d:2b:ed: 8a:92:1c:a7:ef:5b:43:0d:24:7c:83:68:c6:2a:65: 52:dc:11:05:48:c7:c0:d9:08:8a:7f:d4:fa:d9:b1: 7d:39:9a:04:15:96:3c:a8:1f:98:de:a5:84:83:57: f5:57:5f:81:fe:68:14:9d:35:c1:4e:6f:e9:e7:b2: 0b:4c:9c:2b:a3:aa:9b:73:5f:59:23:da:e6:db:0d: cc:7f:3a:0b:05:cc:d9:7a:e9:5c:e2:3f:aa:57:b4: 31:26:ac:87:8b:8b:88:da:4f:c1:21:c6:75:1a:b4: e9:41:3d:6c:ef:2b:62:d5:a6:cd:1b:4a:ba:08:6d: e7:fb:14:7f:1f:d5:07:0d:91:ca:b2:f2:be:7a:f1: 5c:95:7a:0f:db:19:2e:70:54:bd:cb:14:7e:71:81: 30:48:5e:78:2f:56:6a:e0:17:f7:61:71:ad:44:fb: b5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D5:E2:48:AE:15:79:44:13:D3:EC:A1:54:15:37:59:80:01:35:C5 X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d4:bc:e9:92:57:2f:c2:bd:bc:71:ac:5b:8b:60:4b:43:87: e5:9c:5f:77:61:ad:13:3c:5f:f2:eb:ad:62:87:d5:ff:17:c7: 75:5d:f3:80:14:28:e4:a3:13:23:bf:b3:6e:89:2b:07:85:ba: da:03:8e:37:03:f8:33:5e:52:2f:46:e0:1c:69:25:85:54:8d: a2:6b:d2:20:b6:15:ab:53:d4:28:04:b9:dd:72:c7:27:c4:f2: e1:2b:5b:d4:f9:0e:0e:09:47:2d:b4:cc:c2:9f:e7:52:eb:f9: 98:8d:a9:f2:af:7d:a6:46:5e:8d:a0:18:4c:65:eb:d7:db:66: 19:53:03:01:04:bb:4c:76:07:85:be:20:57:16:38:16:43:0d: 19:f6:4f:57:1f:d9:8b:85:bc:4b:5c:9e:0e:a3:88:92:53:3c: 10:a6:63:86:1b:79:8a:a4:92:6d:b6:cc:c3:fd:b1:b7:d3:59: 65:5c:dd:40:8d:3e:9f:88:ab:62:a3:84:45:ba:a0:da:30:c0: e1:b7:ba:72:a4:57:3b:a3:3b:74:21:2e:9b:68:6f:31:49:ee: c9:1b:5c:3f:de:4b:4e:f0:af:b0:37:e2:90:ff:0e:f1:21:1d: 75:ad:ec:dc:96:9e:85:5e:17:3a:00:48:bb:5a:58:b1:a1:c2: 7b:67:83:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHTkREjdH2d1wk8SsYocGNmuBVNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTEwMzAwMzA2MTNaFw0yNTExMDIwNDMwMTNaMDMxMTAvBgNV BAMTKEFCRDVFMjQ4QUUxNTc5NDQxM0QzRUNBMTU0MTUzNzU5ODAwMTM1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgieWDJIEirk6dI0ldZys9tI+ Tst065ettOM35Rha/9xo/7POTmKmljSeK486v21R+5NsSP1AEjUWArffpEBt8e+0 yBmAcUp6Lu9JUuCieRiDw+JZ720r7YqSHKfvW0MNJHyDaMYqZVLcEQVIx8DZCIp/ 1PrZsX05mgQVljyoH5jepYSDV/VXX4H+aBSdNcFOb+nnsgtMnCujqptzX1kj2ubb Dcx/OgsFzNl66VziP6pXtDEmrIeLi4jaT8EhxnUatOlBPWzvK2LVps0bSroIbef7 FH8f1QcNkcqy8r568VyVeg/bGS5wVL3LFH5xgTBIXngvVmrgF/dhca1E+7XJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq9XiSK4VeUQT0+yhVBU3WYABNcUwHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4 Mzg0NDcyMjI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALUvOmSVy/CvbxxrFuLYEtDh+WcX3dhrRM8 X/LrrWKH1f8Xx3Vd84AUKOSjEyO/s26JKweFutoDjjcD+DNeUi9G4BxpJYVUjaJr 0iC2FatT1CgEud1yxyfE8uErW9T5Dg4JRy20zMKf51Lr+ZiNqfKvfaZGXo2gGExl 69fbZhlTAwEEu0x2B4W+IFcWOBZDDRn2T1cf2YuFvEtcng6jiJJTPBCmY4YbeYqk km22zMP9sbfTWWVc3UCNPp+Iq2KjhEW6oNowwOG3unKkVzujO3QhLptobzFJ7skb XD/eS07wr7A34pD/DvEhHXWt7NyWnoVeFzoASLtaWLGhwntngxU= -----END CERTIFICATE-----Generated at Thu Oct 30 14:56:53 2025 by rpki-client