$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json) Hash identifier: eFppWuZnuQi9chaLeT67SPXNB8WXBthFxTEyTJppAyI= Subject key identifier: C3:29:04:8A:66:1F:8C:FA:EC:41:65:0A:C7:ED:E2:A7:97:8A:9D:BA Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 6F7D439D4070A09E34E13D502EBCDD3F047615B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft Manifest number: 01B4 Signing time: Mon 03 Nov 2025 12:50:37 +0000 Manifest this update: Mon 03 Nov 2025 12:45:37 +0000 Manifest next update: Thu 06 Nov 2025 21:32:37 +0000 Files and hashes: 1: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: w0/6adBfakQrfOXNO07P0YRRCI42Xn8zJsc20taQMbc=) 2: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: viVk0fd1IGRahaA9QHSNJwt9tQb5HRy/oD87hvRQStY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7d:43:9d:40:70:a0:9e:34:e1:3d:50:2e:bc:dd:3f:04:76:15:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Nov 3 12:45:37 2025 GMT Not After : Nov 6 21:32:37 2025 GMT Subject: CN=C329048A661F8CFAEC41650AC7EDE2A7978A9DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:28:b6:81:c0:e0:83:f7:a4:1e:82:d8:22:09: 4c:bc:4f:85:80:97:b0:80:7e:9a:43:11:18:2f:49: 73:c3:d8:c1:db:f3:2b:e1:9c:b2:31:66:48:38:4e: 8c:64:09:bb:9c:9e:ed:71:d0:08:51:b4:dc:91:71: bc:5d:a9:14:99:36:5f:79:7a:d5:50:40:71:cb:6a: 8e:33:5c:b3:86:5f:c4:7f:bb:83:0f:58:14:83:ad: e4:e6:ab:ca:32:70:29:e7:ad:e9:a3:e0:36:5f:4c: 04:d2:cb:5f:f0:94:37:c2:0f:bc:f7:42:a7:d1:3f: af:75:82:3b:98:63:a8:87:eb:4e:23:09:45:42:11: 02:ae:97:78:72:cf:e6:cf:97:f3:4f:ad:f3:97:38: 1f:01:cc:6b:27:a9:55:b5:97:30:b9:a1:b8:e7:ad: 5a:d6:a5:cb:a2:65:5c:6f:66:f7:e8:9d:6d:67:37: 2b:2a:a1:fc:51:86:d9:db:97:24:55:0e:ff:f1:f1: c2:85:a3:ae:71:eb:bb:88:64:9d:42:88:0d:26:b3: 7c:58:ce:f2:a2:85:98:24:62:56:9a:58:78:12:ae: 11:37:bc:55:ca:c7:ca:a0:fb:44:06:7e:af:6f:c5: 3f:f8:e3:1f:9a:03:16:35:47:7d:40:66:58:4c:8c: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:29:04:8A:66:1F:8C:FA:EC:41:65:0A:C7:ED:E2:A7:97:8A:9D:BA X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b2:7a:77:f7:94:b5:5f:56:f3:70:40:9e:cf:e7:21:27:1a: 93:01:4f:d2:0b:63:90:e2:60:1c:40:43:eb:81:35:19:e2:98: 8c:38:95:c9:05:3b:8c:fd:1b:34:ae:c6:8b:6e:d5:f8:9f:5a: 3f:9d:fc:fe:f0:75:63:de:18:37:cc:cd:22:05:5a:eb:35:82: 48:99:c4:e7:be:5c:45:d6:24:01:e1:4f:47:f0:e8:f1:a5:f2: 0d:57:57:73:6b:ea:1d:77:5d:38:77:5f:c3:3e:7d:78:b5:47: ae:80:f4:c4:c0:12:b1:15:d0:ae:41:fa:ce:6a:82:5c:81:8f: 4f:30:7b:83:db:1d:4e:9b:e3:d5:58:9b:39:2b:6e:d4:25:5f: 45:87:f3:01:50:b8:7d:d1:cb:c4:0a:c2:93:12:0c:32:0a:30: 80:1f:14:00:d5:ce:67:cc:fa:4a:9f:82:27:4c:07:69:b7:31: a2:82:e4:7a:c6:74:29:43:b5:ad:1b:af:6e:20:ff:0f:9d:cd: f5:a9:78:e2:e8:58:73:a4:b5:b0:c9:fe:55:ea:1e:c7:3f:96: 9f:72:02:fd:28:84:e4:3e:1c:2a:12:d0:6d:77:41:23:68:db: f6:7a:77:68:12:6e:d0:cb:1e:39:c8:3c:f0:fe:8c:47:f1:f5: 2c:82:95:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb31DnUBwoJ404T1QLrzdPwR2FbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNTExMDMxMjQ1MzdaFw0yNTExMDYyMTMyMzdaMDMxMTAvBgNV BAMTKEMzMjkwNDhBNjYxRjhDRkFFQzQxNjUwQUM3RURFMkE3OTc4QTlEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKLaBwOCD96QegtgiCUy8T4WA l7CAfppDERgvSXPD2MHb8yvhnLIxZkg4ToxkCbucnu1x0AhRtNyRcbxdqRSZNl95 etVQQHHLao4zXLOGX8R/u4MPWBSDreTmq8oycCnnremj4DZfTATSy1/wlDfCD7z3 QqfRP691gjuYY6iH604jCUVCEQKul3hyz+bPl/NPrfOXOB8BzGsnqVW1lzC5objn rVrWpcuiZVxvZvfonW1nNysqofxRhtnblyRVDv/x8cKFo65x67uIZJ1CiA0ms3xY zvKihZgkYlaaWHgSrhE3vFXKx8qg+0QGfq9vxT/44x+aAxY1R31AZlhMjIBpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwykEimYfjPrsQWUKx+3ip5eKnbowHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOyenf3lLVfVvNwQJ7P5yEnGpMBT9ILY5Di YBxAQ+uBNRnimIw4lckFO4z9GzSuxotu1fifWj+d/P7wdWPeGDfMzSIFWus1gkiZ xOe+XEXWJAHhT0fw6PGl8g1XV3Nr6h13XTh3X8M+fXi1R66A9MTAErEV0K5B+s5q glyBj08we4PbHU6b49VYmzkrbtQlX0WH8wFQuH3Ry8QKwpMSDDIKMIAfFADVzmfM +kqfgidMB2m3MaKC5HrGdClDta0br24g/w+dzfWpeOLoWHOktbDJ/lXqHsc/lp9y Av0ohOQ+HCoS0G13QSNo2/Z6d2gSbtDLHjnIPPD+jEfx9SyClRY= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:51 2025 by rpki-client