
$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft
File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json)
Hash identifier: ARmzgVNsNP1PLwBZYjEcOhgEuRsL/vLUwGu4e1zhPS8=
Subject key identifier: 2E:35:65:9C:53:1A:0E:E0:5A:F5:0E:35:92:1F:F9:BA:00:DB:70:5C
Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4
Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4
Certificate serial: 77732B0E9795713A3FD8B2EDDEDBE3366802008F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft
Manifest number: 01EA
Signing time: Sun 01 Mar 2026 10:30:41 +0000
Manifest this update: Sun 01 Mar 2026 10:25:41 +0000
Manifest next update: Wed 04 Mar 2026 13:21:41 +0000
Files and hashes: 1: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: O8PTNd18t5FG6lNjtS271e4t+3GBTSK06VWjdyAzXTk=)
2: 3130332e3133312e32382e302f32342d3234203d3e20313534343130.roa (hash: BT2Xm6NvivpZW/A7KKYoT5JmNwNHRn5+Zp/CE2/KpUE=)
3: 3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa (hash: ls/qvCLTIAui00ibgj8c/dl69JxHxFEbZ+n3COlxeds=)
4: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: hdvyAhrcryql4wjEziksSVWRL82EleGS11GMyW3jyaU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl
rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 13:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:73:2b:0e:97:95:71:3a:3f:d8:b2:ed:de:db:e3:36:68:02:00:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4
Validity
Not Before: Mar 1 10:25:41 2026 GMT
Not After : Mar 4 13:21:41 2026 GMT
Subject: CN=2E35659C531A0EE05AF50E35921FF9BA00DB705C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:9f:ce:af:21:90:24:ac:9e:d2:2c:d3:58:
07:bf:5b:54:f1:18:1c:7e:b8:d2:75:0f:5d:83:77:
dd:01:5c:f0:30:fe:2c:c4:66:61:b7:0c:47:7f:b5:
a9:1e:d9:87:1c:d8:65:54:6a:f8:7a:e5:4e:42:21:
be:3a:cd:4b:58:70:90:c2:fe:20:26:cc:ef:0f:32:
29:1c:53:b3:ea:49:85:bf:5a:27:5c:80:ba:10:ca:
0f:0a:45:a8:38:61:c6:a5:e9:bd:52:16:88:7a:13:
45:44:f8:8c:60:2f:21:0f:9d:f3:42:78:31:71:ca:
76:e7:e5:0a:95:a8:f2:db:3b:f9:dd:60:3b:ba:ab:
e1:bb:d8:62:7d:ed:09:40:03:e7:93:32:0b:aa:5e:
df:78:d1:81:de:2e:37:f5:13:1e:b2:64:12:82:bb:
4f:b9:7d:11:c0:bb:3b:f9:00:ec:d5:e9:a6:b8:00:
03:f1:52:44:f9:6e:f4:ff:95:e5:d3:e6:c9:2f:1f:
85:19:73:40:f2:43:9d:9e:04:37:49:35:0a:6d:ae:
b5:11:72:74:26:63:0f:4e:d6:bb:0c:98:09:b7:df:
32:2a:5d:6f:bb:33:0f:4b:68:42:c9:05:88:89:79:
60:58:99:51:1c:bb:84:8b:73:29:99:0e:11:e1:cd:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:35:65:9C:53:1A:0E:E0:5A:F5:0E:35:92:1F:F9:BA:00:DB:70:5C
X509v3 Authority Key Identifier:
keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:da:27:ce:db:86:41:76:f4:70:0f:70:96:aa:cb:67:3c:cc:
30:c1:2c:97:16:17:43:89:3f:fa:e2:3f:d4:88:50:3b:2b:2d:
04:ee:a5:9a:9a:39:86:31:bb:9c:87:0b:63:cd:9d:c5:8f:7f:
91:60:34:2d:d6:58:8e:26:dd:23:e1:2d:8e:18:1d:d2:23:8a:
99:4a:da:5b:e8:60:42:f6:06:55:3b:f1:68:16:77:c9:67:fb:
93:7a:74:4b:d4:64:0c:2e:d4:b4:05:a5:27:a1:7e:4d:01:32:
8b:4c:cb:98:43:4f:bc:16:cd:88:9b:93:2f:d9:92:81:33:2b:
4b:82:8b:31:e4:80:52:05:a2:bb:6d:bc:13:75:52:95:23:2a:
bc:a0:e1:f6:7b:89:24:8d:3f:8d:40:31:46:91:6c:44:64:3a:
6e:e7:da:0a:b2:ab:5b:2b:5e:c9:fd:4e:f3:22:d6:72:06:87:
27:31:14:71:39:4a:6c:ce:e1:99:0f:e3:19:72:e7:1c:e8:1a:
24:b8:e9:81:33:25:93:8c:8b:dc:29:21:23:51:40:31:85:ff:
44:1a:56:05:e9:46:59:0c:b8:c8:97:80:fa:01:9e:73:aa:80:
05:aa:b5:5c:c0:b0:5c:08:d9:6e:dd:b4:2d:7d:5a:b9:2c:8a:
d5:5e:de:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUd3MrDpeVcTo/2LLt3tvjNmgCAI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2
OThCRERENDAeFw0yNjAzMDExMDI1NDFaFw0yNjAzMDQxMzIxNDFaMDMxMTAvBgNV
BAMTKDJFMzU2NTlDNTMxQTBFRTA1QUY1MEUzNTkyMUZGOUJBMDBEQjcwNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFr5/OryGQJKye0izTWAe/W1Tx
GBx+uNJ1D12Dd90BXPAw/izEZmG3DEd/take2Ycc2GVUavh65U5CIb46zUtYcJDC
/iAmzO8PMikcU7PqSYW/WidcgLoQyg8KRag4Ycal6b1SFoh6E0VE+IxgLyEPnfNC
eDFxynbn5QqVqPLbO/ndYDu6q+G72GJ97QlAA+eTMguqXt940YHeLjf1Ex6yZBKC
u0+5fRHAuzv5AOzV6aa4AAPxUkT5bvT/leXT5skvH4UZc0DyQ52eBDdJNQptrrUR
cnQmYw9O1rsMmAm33zIqXW+7Mw9LaELJBYiJeWBYmVEcu4SLcymZDhHhzTJZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULjVlnFMaDuBa9Q41kh/5ugDbcFwwHwYDVR0j
BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1
ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC
RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3
OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF
M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACDaJ87bhkF29HAPcJaqy2c8zDDBLJcWF0OJ
P/riP9SIUDsrLQTupZqaOYYxu5yHC2PNncWPf5FgNC3WWI4m3SPhLY4YHdIjiplK
2lvoYEL2BlU78WgWd8ln+5N6dEvUZAwu1LQFpSehfk0BMotMy5hDT7wWzYibky/Z
koEzK0uCizHkgFIForttvBN1UpUjKryg4fZ7iSSNP41AMUaRbERkOm7n2gqyq1sr
Xsn9TvMi1nIGhycxFHE5SmzO4ZkP4xly5xzoGiS46YEzJZOMi9wpISNRQDGF/0Qa
VgXpRlkMuMiXgPoBnnOqgAWqtVzAsFwI2W7dtC19WrksitVe3p0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:37 2026 by rpki-client