$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json) Hash identifier: nCqNGCjcqJOR2dy/R+bTXZ8pUVb+3aZpA623U7VfDOw= Subject key identifier: 34:D4:06:25:A7:B5:BB:DA:1A:05:F7:F6:69:48:59:A9:07:92:A6:95 Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 5F5428FE18CC3314985FE8A446FCCCF2E328EFFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft Manifest number: 01FE Signing time: Wed 15 Apr 2026 10:30:43 +0000 Manifest this update: Wed 15 Apr 2026 10:25:42 +0000 Manifest next update: Sat 18 Apr 2026 19:48:42 +0000 Files and hashes: 1: 3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa (hash: ls/qvCLTIAui00ibgj8c/dl69JxHxFEbZ+n3COlxeds=) 2: 3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa (hash: BT2Xm6NvivpZW/A7KKYoT5JmNwNHRn5+Zp/CE2/KpUE=) 3: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: kn7ywlbTTTn1893HZHDnkoDv4p0SPR6WgRTeod8/eMI=) 4: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: hdvyAhrcryql4wjEziksSVWRL82EleGS11GMyW3jyaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 19:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:54:28:fe:18:cc:33:14:98:5f:e8:a4:46:fc:cc:f2:e3:28:ef:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Apr 15 10:25:42 2026 GMT Not After : Apr 18 19:48:42 2026 GMT Subject: CN=34D40625A7B5BBDA1A05F7F6694859A90792A695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:11:e1:5a:ea:87:8e:6f:bb:7e:18:e1:f7:54: 00:f1:20:a6:0b:27:72:89:92:f7:3a:0a:d8:8d:30: 9e:76:f4:e7:9b:5c:92:72:3f:e7:e5:cb:a5:1f:2c: 74:c2:95:66:82:e7:13:02:a0:6a:b6:56:77:cd:7e: a7:09:27:f9:bc:68:18:b8:43:c0:5f:d2:fd:c7:e6: 2a:65:53:34:8b:a1:26:d3:37:d4:9d:76:c3:d7:85: 26:01:84:c3:09:cb:b3:54:b1:93:90:11:9b:ba:de: 17:1c:93:1d:b3:ae:5d:f8:d7:45:cd:95:52:6a:46: eb:1a:f3:9f:84:da:e8:a3:db:ce:e5:8a:41:f2:8e: 63:97:bf:3c:25:de:e8:5d:a1:92:62:a4:bf:8a:fd: e3:ef:08:99:e5:d6:92:39:41:2a:13:b0:8d:99:6b: 40:6c:03:0e:b9:03:12:ea:52:5f:90:b5:aa:58:78: 4e:38:74:23:88:dd:d6:da:a5:2a:d6:71:cb:e6:f5: 9b:a2:55:fe:d6:7e:eb:cc:7a:c4:dd:a0:c1:94:9f: 86:cb:c6:38:b1:39:2c:e2:b5:21:2d:2d:17:de:68: 6e:63:fc:89:8a:bb:a5:19:7c:a2:a8:8b:bc:06:2f: 6e:5c:dc:9d:78:28:3c:cc:9f:06:e7:50:82:9c:27: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D4:06:25:A7:B5:BB:DA:1A:05:F7:F6:69:48:59:A9:07:92:A6:95 X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:30:ca:31:bc:dc:ce:9c:2d:3f:f8:54:0c:9a:c1:6b:36:f4: 94:24:82:1e:02:7a:b2:70:f9:40:8f:20:ec:3c:53:c9:43:12: 31:8b:25:6a:41:b3:f1:4e:02:f2:69:59:33:0e:85:51:63:58: b8:de:9f:25:6d:e7:75:ca:4c:b7:4d:7e:e4:d6:14:30:80:6c: 72:01:0c:82:89:0d:81:c6:5b:c8:fc:d1:bb:a5:69:82:28:6c: be:70:43:7f:6d:eb:95:82:82:e6:af:93:f5:ce:78:80:00:ff: ea:b5:ce:d6:89:18:bc:78:e6:9b:88:cc:ae:31:73:75:e9:0a: 7b:f0:9b:39:4a:a1:b5:25:72:e3:81:7e:63:27:3b:7b:7a:cf: 17:7e:e9:9a:13:de:87:f5:49:1d:80:21:69:57:37:5d:dc:9e: 1a:51:9d:da:a1:44:71:fc:e1:08:67:70:c1:ec:38:70:50:9f: a0:42:51:ac:f7:ad:a0:63:bb:52:8a:e0:70:e9:62:7d:e6:b8: 40:08:f5:65:e5:b9:2b:76:66:c0:a2:26:00:82:76:29:d3:0d: 79:34:7c:00:dc:ad:cf:d3:81:58:2f:3d:0d:ef:fd:71:bb:16: 3e:43:14:a4:a3:0c:91:6a:14:5e:18:e4:05:71:b0:c2:99:01: 80:28:ef:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX1Qo/hjMMxSYX+ikRvzM8uMo7/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNjA0MTUxMDI1NDJaFw0yNjA0MTgxOTQ4NDJaMDMxMTAvBgNV BAMTKDM0RDQwNjI1QTdCNUJCREExQTA1RjdGNjY5NDg1OUE5MDc5MkE2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlEeFa6oeOb7t+GOH3VADxIKYL J3KJkvc6CtiNMJ529OebXJJyP+fly6UfLHTClWaC5xMCoGq2VnfNfqcJJ/m8aBi4 Q8Bf0v3H5iplUzSLoSbTN9SddsPXhSYBhMMJy7NUsZOQEZu63hcckx2zrl3410XN lVJqRusa85+E2uij287likHyjmOXvzwl3uhdoZJipL+K/ePvCJnl1pI5QSoTsI2Z a0BsAw65AxLqUl+QtapYeE44dCOI3dbapSrWccvm9ZuiVf7WfuvMesTdoMGUn4bL xjixOSzitSEtLRfeaG5j/ImKu6UZfKKoi7wGL25c3J14KDzMnwbnUIKcJ+7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNNQGJae1u9oaBff2aUhZqQeSppUwHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYwyjG83M6cLT/4VAyawWs29JQkgh4CerJw +UCPIOw8U8lDEjGLJWpBs/FOAvJpWTMOhVFjWLjenyVt53XKTLdNfuTWFDCAbHIB DIKJDYHGW8j80bulaYIobL5wQ39t65WCguavk/XOeIAA/+q1ztaJGLx45puIzK4x c3XpCnvwmzlKobUlcuOBfmMnO3t6zxd+6ZoT3of1SR2AIWlXN13cnhpRndqhRHH8 4QhncMHsOHBQn6BCUaz3raBju1KK4HDpYn3muEAI9WXluSt2ZsCiJgCCdinTDXk0 fADcrc/TgVgvPQ3v/XG7Fj5DFKSjDJFqFF4Y5AVxsMKZAYAo7wk= -----END CERTIFICATE-----Generated at Fri Apr 17 12:31:03 2026 by rpki-client