$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft File: 70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json) Hash identifier: iPrZyP+mk5HvrjHHkCe2C6ds7vjJkDvaLa/KaiWWzgc= Subject key identifier: 46:A5:65:74:B4:FC:ED:E1:23:DB:54:02:68:36:6F:5C:3E:CC:1D:C1 Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E Certificate issuer: /CN=70FE5658A7C2993DC505F75545A128384472227E Certificate serial: 45AE05B317F58B378351C15546FAC4C37CB960FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft Manifest number: 02B0 Signing time: Sun 01 Mar 2026 05:23:19 +0000 Manifest this update: Sun 01 Mar 2026 05:18:19 +0000 Manifest next update: Wed 04 Mar 2026 12:49:19 +0000 Files and hashes: 1: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: zAdZu3sKj1IO+OBWPFUZuVslFB9puJwwWRrQGDCcU8s=) 2: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: mFq2b38/RUkUkCh1MVybkTba/DYg5kwfb6uDHIQj6Gk=) 3: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: Ov8NRVnVqFMBFhQjGCU710LWI7k2FUziabpa7227XyA=) 4: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: +ZStO4qmRvdLYRUifxrnZ6iCCxDWhq1QC8uZT5sFhJk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ae:05:b3:17:f5:8b:37:83:51:c1:55:46:fa:c4:c3:7c:b9:60:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E Validity Not Before: Mar 1 05:18:19 2026 GMT Not After : Mar 4 12:49:19 2026 GMT Subject: CN=46A56574B4FCEDE123DB540268366F5C3ECC1DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:59:8a:65:28:fe:81:98:79:5a:2f:38:43: 2f:df:85:d7:bb:2b:92:05:49:fb:da:b1:7d:36:b8: 77:c6:1a:d9:4e:c5:ee:04:7d:54:36:ab:d2:aa:f8: de:11:29:a7:8f:5e:5c:5c:8b:09:01:16:74:07:d2: a6:51:13:e6:87:1a:8d:cf:a4:be:5a:e7:62:04:4d: 78:7d:ea:74:e2:bf:c8:6a:f4:bd:f4:f3:15:7c:95: d0:3c:a9:5c:9e:e9:a1:70:8c:d5:a5:4a:8b:ca:d6: 0d:e8:8d:70:4b:81:38:d0:f0:8b:fb:ca:43:c4:8c: 7d:0e:e5:ed:09:3d:fe:35:78:96:3f:2a:8e:55:b8: 42:b3:45:7a:c0:83:51:fd:7e:f7:82:d1:02:bf:28: 50:6b:78:dd:a6:d0:4c:9d:06:26:71:ae:6f:7e:16: 24:38:6c:1e:e3:d8:00:58:2c:6c:76:20:71:3f:71: 85:18:97:ac:49:56:27:fc:96:98:2e:4b:20:fb:53: 1a:84:fc:a8:13:36:2e:22:71:99:5d:49:a8:3f:2a: 9a:85:4a:70:90:61:4b:7e:d5:7e:29:8f:c0:d1:f7: 13:9f:2e:d2:86:06:80:75:cd:2e:d0:e7:4e:b4:e2: a0:84:9b:f4:ba:4d:b8:41:e3:47:c7:35:af:77:80: d8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A5:65:74:B4:FC:ED:E1:23:DB:54:02:68:36:6F:5C:3E:CC:1D:C1 X509v3 Authority Key Identifier: keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:28:04:cc:0a:3c:ee:8c:5a:33:15:27:65:81:4a:bf:87:90: 54:16:83:f6:57:fc:1c:13:5d:c6:25:05:d4:a7:9b:33:80:19: e5:2a:3e:c0:43:d6:a3:30:56:03:e4:1d:fc:be:b4:41:c7:49: 5a:58:3c:13:52:6f:ff:78:b1:e6:0f:46:0e:87:6b:bb:4a:65: 6b:a3:83:f2:2a:df:5c:2d:82:bf:e2:38:fc:82:5a:c2:57:7c: f4:e8:e7:57:4e:2c:36:a1:08:ed:09:0c:47:06:43:90:ff:4a: 8c:14:d8:68:98:9e:16:e9:b9:65:60:50:82:8c:5e:34:6e:95: f8:f6:31:80:a7:a1:47:a4:91:c6:3d:32:af:61:4d:c4:88:0d: 56:b2:68:b3:b5:1c:76:c0:a9:e8:ac:9a:11:3f:35:1a:44:8f: 4c:c9:90:a5:24:ab:cd:4e:62:f0:58:06:cf:0f:00:07:bb:8e: 87:2c:1e:43:d0:7c:6d:9c:34:e3:5c:44:a7:2c:65:e9:6d:dc: 86:d2:b3:23:2a:40:37:0e:4a:3f:90:12:79:18:98:9f:6c:3a: 42:f6:44:1b:f2:c6:d5:64:32:37:aa:35:6a:77:b6:48:29:19: b9:e9:d9:42:49:30:12:ab:6c:9d:69:c1:aa:cf:b5:d3:a2:57: 9f:4c:a0:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURa4Fsxf1izeDUcFVRvrEw3y5YP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0 NDcyMjI3RTAeFw0yNjAzMDEwNTE4MTlaFw0yNjAzMDQxMjQ5MTlaMDMxMTAvBgNV BAMTKDQ2QTU2NTc0QjRGQ0VERTEyM0RCNTQwMjY4MzY2RjVDM0VDQzFEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPI1mKZSj+gZh5Wi84Qy/fhde7 K5IFSfvasX02uHfGGtlOxe4EfVQ2q9Kq+N4RKaePXlxciwkBFnQH0qZRE+aHGo3P pL5a52IETXh96nTiv8hq9L308xV8ldA8qVye6aFwjNWlSovK1g3ojXBLgTjQ8Iv7 ykPEjH0O5e0JPf41eJY/Ko5VuEKzRXrAg1H9fveC0QK/KFBreN2m0EydBiZxrm9+ FiQ4bB7j2ABYLGx2IHE/cYUYl6xJVif8lpguSyD7UxqE/KgTNi4icZldSag/KpqF SnCQYUt+1X4pj8DR9xOfLtKGBoB1zS7Q50604qCEm/S6TbhB40fHNa93gNizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURqVldLT87eEj21QCaDZvXD7MHcEwHwYDVR0j BBgwFoAUcP5WWKfCmT3FBfdVRaEoOERyIn4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC83MEZFNTY1OEE3 QzI5OTNEQzUwNUY3NTU0NUExMjgzODQ0NzIyMjdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0NDcy MjI3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4 Mzg0NDcyMjI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEoBMwKPO6MWjMVJ2WBSr+HkFQWg/ZX/BwT XcYlBdSnmzOAGeUqPsBD1qMwVgPkHfy+tEHHSVpYPBNSb/94seYPRg6Ha7tKZWuj g/Iq31wtgr/iOPyCWsJXfPTo51dOLDahCO0JDEcGQ5D/SowU2GiYnhbpuWVgUIKM XjRulfj2MYCnoUekkcY9Mq9hTcSIDVayaLO1HHbAqeismhE/NRpEj0zJkKUkq81O YvBYBs8PAAe7jocsHkPQfG2cNONcRKcsZelt3IbSsyMqQDcOSj+QEnkYmJ9sOkL2 RBvyxtVkMjeqNWp3tkgpGbnp2UJJMBKrbJ1pwarPtdOiV59MoHg= -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:27 2026 by rpki-client