$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft File: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json) Hash identifier: 7c+kjFW9GiVLWB8taZb+sT5is1LLfcAH4OqyueZ8dGg= Subject key identifier: F6:F9:E4:27:A5:7B:D7:CB:F9:F5:1F:D4:88:9B:5D:50:96:3A:46:BD Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 59FF36CB1E23A3225524DF6A4BEE41E014840809 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft Manifest number: 02FB Signing time: Sun 05 Apr 2026 13:00:44 +0000 Manifest this update: Sun 05 Apr 2026 12:55:44 +0000 Manifest next update: Wed 08 Apr 2026 17:06:44 +0000 Files and hashes: 1: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: wrrmdd13ZK3sYVC6TnX/VNFFC7T44vCcywNBHvjgD/A=) 2: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: Hrip94cO74HpeyGLfnNJex6umgoDOwaX6F5+UX0Yo2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 17:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ff:36:cb:1e:23:a3:22:55:24:df:6a:4b:ee:41:e0:14:84:08:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Apr 5 12:55:44 2026 GMT Not After : Apr 8 17:06:44 2026 GMT Subject: CN=F6F9E427A57BD7CBF9F51FD4889B5D50963A46BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:7d:8f:08:5f:07:5c:07:dc:b9:af:5c:ad: 1d:df:41:77:7e:77:5d:b3:93:73:0c:47:c7:b2:dc: 41:52:38:5f:ad:e9:46:54:14:e9:48:c6:5c:ae:07: 97:c8:18:9b:1b:b0:12:34:60:58:88:0f:4f:3c:06: da:b4:e0:0c:de:18:76:34:d9:d3:e7:60:22:ff:3e: 9d:6c:d5:4b:19:74:3b:e4:78:8d:e1:e8:bb:60:fc: 67:d8:47:ec:74:98:26:2a:aa:b5:dc:2a:e9:71:c2: 15:21:ea:b8:ec:db:cc:f7:58:6d:10:cc:54:e6:29: d4:7d:01:b0:e8:85:14:47:9b:12:60:8a:d4:53:c1: 0c:07:80:69:ef:af:8b:f3:e3:d0:b6:ae:2b:e3:ad: b0:86:21:3f:b8:3b:08:5e:35:87:40:ae:4d:94:89: 1b:d5:26:e8:25:75:1e:b7:1f:49:00:89:a8:b9:c8: 21:5a:4b:b8:3a:95:81:b5:2b:56:5f:05:a8:87:f3: ad:30:6f:c2:2b:b0:e4:cd:76:6f:ee:66:26:ed:3d: d6:39:a3:c2:a8:ee:c3:fc:b8:a4:df:fe:34:06:8e: 0b:17:ff:ba:73:dd:21:56:65:bb:a8:b4:c4:95:57: 34:57:c8:d8:6c:3c:ac:63:d3:59:26:c2:37:8e:3c: 25:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F9:E4:27:A5:7B:D7:CB:F9:F5:1F:D4:88:9B:5D:50:96:3A:46:BD X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:53:22:54:51:75:f5:51:a2:eb:7d:ec:c8:d3:1e:9e:40:ef: 19:cc:06:fe:73:87:ac:a6:d1:50:a0:a1:c7:72:23:4c:d1:9f: f2:73:fb:74:7f:a3:16:d6:8e:6e:6b:d7:73:48:ce:fe:1c:21: e8:0e:16:0d:f6:3c:dc:5b:43:a4:80:9a:75:3f:25:d1:9b:bf: 55:7f:b8:57:45:63:4a:45:90:4b:89:81:14:c0:2a:f4:2b:c5: 88:be:9c:a7:55:50:68:8b:0e:59:79:9f:d2:c5:82:72:a1:2b: 41:44:5a:74:1d:9b:4d:e6:49:39:13:c7:b8:d7:3e:8a:c0:cb: ca:e1:2f:7a:81:92:0d:5b:f0:4e:b2:cf:31:83:c5:ce:cc:60: 0a:fa:a3:6d:4f:2f:11:45:56:15:92:8c:c9:ee:e1:b7:3b:c3: e5:c4:d9:4a:ae:c0:71:09:29:dd:1f:65:d5:57:2b:d0:88:fa: 0a:d4:7b:5a:eb:03:08:4b:48:b9:f7:34:fa:f5:9f:74:0c:1c: 45:76:2a:4d:84:a2:9c:04:d2:49:d9:e6:e2:9e:21:2c:5c:fb: 8b:cd:fd:83:71:7d:48:5e:5a:82:25:0c:e9:cb:26:b8:2f:e3: 24:21:ba:d5:03:66:a1:6e:2f:6f:56:a0:11:df:88:1b:1f:e4: 7d:2e:f0:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWf82yx4joyJVJN9qS+5B4BSECAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNjA0MDUxMjU1NDRaFw0yNjA0MDgxNzA2NDRaMDMxMTAvBgNV BAMTKEY2RjlFNDI3QTU3QkQ3Q0JGOUY1MUZENDg4OUI1RDUwOTYzQTQ2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrRX2PCF8HXAfcua9crR3fQXd+ d12zk3MMR8ey3EFSOF+t6UZUFOlIxlyuB5fIGJsbsBI0YFiID088Btq04AzeGHY0 2dPnYCL/Pp1s1UsZdDvkeI3h6Ltg/GfYR+x0mCYqqrXcKulxwhUh6rjs28z3WG0Q zFTmKdR9AbDohRRHmxJgitRTwQwHgGnvr4vz49C2rivjrbCGIT+4OwheNYdArk2U iRvVJugldR63H0kAiai5yCFaS7g6lYG1K1ZfBaiH860wb8IrsOTNdm/uZibtPdY5 o8Ko7sP8uKTf/jQGjgsX/7pz3SFWZbuotMSVVzRXyNhsPKxj01kmwjeOPCV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9vnkJ6V718v59R/UiJtdUJY6Rr0wHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY5ZmQ1YTEtNjAyNi00YmZhLWE2 NzEtZjI3NzFhZmUwMDdjLzAvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMw QzZEQkFDMTBBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdTIlRRdfVRout97MjTHp5A7xnMBv5zh6ym 0VCgocdyI0zRn/Jz+3R/oxbWjm5r13NIzv4cIegOFg32PNxbQ6SAmnU/JdGbv1V/ uFdFY0pFkEuJgRTAKvQrxYi+nKdVUGiLDll5n9LFgnKhK0FEWnQdm03mSTkTx7jX PorAy8rhL3qBkg1b8E6yzzGDxc7MYAr6o21PLxFFVhWSjMnu4bc7w+XE2UquwHEJ Kd0fZdVXK9CI+grUe1rrAwhLSLn3NPr1n3QMHEV2Kk2EopwE0knZ5uKeISxc+4vN /YNxfUheWoIlDOnLJrgv4yQhutUDZqFuL29WoBHfiBsf5H0u8Lk= -----END CERTIFICATE-----Generated at Mon Apr 6 14:55:46 2026 by rpki-client