$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft File: 70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json) Hash identifier: Ubc2QV817dSh5OAYQVLO9GCfn5VrA/wnRr3O8m01cvI= Subject key identifier: B7:EA:12:08:E4:A4:A4:69:57:F6:5F:6F:DA:F3:6B:05:75:98:AE:69 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 770E5E01DD72406D4299CCF2E47C5270BF0A2D3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft Manifest number: 027B Signing time: Mon 03 Nov 2025 11:51:14 +0000 Manifest this update: Mon 03 Nov 2025 11:46:14 +0000 Manifest next update: Thu 06 Nov 2025 17:35:14 +0000 Files and hashes: 1: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Q5pvwdFKL1lgBG6fYcr2yl0tesQth6vA5guIwHg8TXM=) 2: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: V25IqzqLPu++IV0AcN5EniFV+KY5asHeITYpHLNa724=) 3: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: gLStYnptht5TyqoGXBL5Rk0CVBS4ZoGmnO4HsnZPkL0=) 4: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: VpIKxGpnGG5kY+TxgaFm5MAMJ5OPwOweNd+seLyS58Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0e:5e:01:dd:72:40:6d:42:99:cc:f2:e4:7c:52:70:bf:0a:2d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Nov 3 11:46:14 2025 GMT Not After : Nov 6 17:35:14 2025 GMT Subject: CN=B7EA1208E4A4A46957F65F6FDAF36B057598AE69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:b8:3f:fa:8a:24:9f:bc:32:4a:03:9e:9a: b3:fb:8d:a8:e1:1f:44:0e:8e:df:c5:d8:e4:90:73: 11:78:5e:99:b5:e1:ca:85:46:fd:19:66:de:70:ab: 45:03:49:af:5f:91:a6:ad:31:fc:bc:1d:e5:08:31: 48:f1:6f:11:ee:bd:75:5d:35:34:25:cc:e8:9d:29: 1f:f3:4e:1c:df:eb:a9:56:c6:84:53:1e:00:b8:68: 7d:c9:fd:db:5b:92:7f:87:8e:98:ef:f1:ca:59:2b: 48:91:9e:96:6f:58:29:ac:4c:fe:84:09:64:72:a7: 4e:42:e3:48:b0:36:74:4a:24:18:1f:fc:d7:80:5b: 19:55:06:f7:0e:5d:a1:b7:79:e6:af:08:69:6d:7a: 1e:b8:a6:05:ce:a0:27:6f:d2:01:c1:50:c7:f6:03: 0a:b4:8d:54:66:45:26:1f:12:94:20:2a:35:56:37: 51:84:a3:67:e6:8e:d4:c2:76:34:96:da:6b:0a:cd: d7:5f:9e:80:97:3b:41:4e:d1:94:be:b8:79:17:5c: 20:a7:54:81:df:25:95:bc:ee:15:b4:48:99:0e:55: ac:ca:e9:13:7f:a1:e7:8a:01:65:b6:e8:9e:82:a7: e8:2e:70:ee:a7:55:9c:ce:2a:1c:9a:99:be:b9:50: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EA:12:08:E4:A4:A4:69:57:F6:5F:6F:DA:F3:6B:05:75:98:AE:69 X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b5:d4:b7:f8:5a:e8:82:13:bb:70:a4:b9:68:8c:d4:7c:9c: 5a:1b:37:92:e3:82:59:d3:8f:17:76:83:d8:a3:a9:6a:b8:d0: 6c:a5:a3:d5:39:18:82:c6:05:a1:41:93:6d:ce:16:28:78:f4: b2:49:2a:a3:29:a3:ea:6c:5a:f8:21:cc:04:2d:dc:4f:ab:30: 63:90:96:77:cf:59:b9:f9:27:39:85:44:00:f4:3f:72:b4:fe: 5a:dd:81:2d:89:18:81:64:f4:14:7e:12:a7:b3:42:0c:66:79: 3e:23:1e:8d:ce:0e:2f:8b:a1:f5:8e:7c:38:99:69:ba:82:39: b1:79:48:d4:d4:75:2e:1e:41:5e:44:6c:56:ec:67:07:0d:88: 37:03:d0:65:b8:51:f0:0a:1b:0b:a1:aa:9d:53:59:67:76:5c: a6:13:5e:7e:7c:a6:7a:4f:03:8f:08:ad:5d:c5:5f:93:01:9d: e4:25:96:54:fc:2c:43:90:fc:fe:52:dd:3b:c6:3a:71:b2:77: 30:aa:2f:f9:63:e3:7e:4e:01:36:a3:d9:64:03:83:3a:c8:fe: 9c:ec:a9:f8:f6:1f:2a:db:1a:2d:f4:2e:a2:a0:79:b0:e2:3d: 02:68:bd:08:9e:11:69:21:65:4c:fd:9a:b1:09:7b:a9:f7:51: 98:6b:be:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdw5eAd1yQG1Cmczy5HxScL8KLT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNTExMDMxMTQ2MTRaFw0yNTExMDYxNzM1MTRaMDMxMTAvBgNV BAMTKEI3RUExMjA4RTRBNEE0Njk1N0Y2NUY2RkRBRjM2QjA1NzU5OEFFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzy7g/+ookn7wySgOemrP7jajh H0QOjt/F2OSQcxF4Xpm14cqFRv0ZZt5wq0UDSa9fkaatMfy8HeUIMUjxbxHuvXVd NTQlzOidKR/zThzf66lWxoRTHgC4aH3J/dtbkn+Hjpjv8cpZK0iRnpZvWCmsTP6E CWRyp05C40iwNnRKJBgf/NeAWxlVBvcOXaG3eeavCGlteh64pgXOoCdv0gHBUMf2 Awq0jVRmRSYfEpQgKjVWN1GEo2fmjtTCdjSW2msKzddfnoCXO0FO0ZS+uHkXXCCn VIHfJZW87hW0SJkOVazK6RN/oeeKAWW26J6Cp+gucO6nVZzOKhyamb65UOuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt+oSCOSkpGlX9l9v2vNrBXWYrmkwHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4 Mzg0NDcyMjI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGy11Lf4WuiCE7twpLlojNR8nFobN5LjglnT jxd2g9ijqWq40Gylo9U5GILGBaFBk23OFih49LJJKqMpo+psWvghzAQt3E+rMGOQ lnfPWbn5JzmFRAD0P3K0/lrdgS2JGIFk9BR+EqezQgxmeT4jHo3ODi+LofWOfDiZ abqCObF5SNTUdS4eQV5EbFbsZwcNiDcD0GW4UfAKGwuhqp1TWWd2XKYTXn58pnpP A48IrV3FX5MBneQlllT8LEOQ/P5S3TvGOnGydzCqL/lj435OATaj2WQDgzrI/pzs qfj2HyrbGi30LqKgebDiPQJovQieEWkhZUz9mrEJe6n3UZhrvpU= -----END CERTIFICATE-----Generated at Wed Nov 5 04:25:10 2025 by rpki-client