$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft File: C70A343932991281F91796DB87B011987603BBF4.mft (raw, json) Hash identifier: Dl8Cil7ORsyqTybF6LZEVvBFzrqNggWevzA/bL6gJTU= Subject key identifier: 11:0E:B5:C1:64:C4:CD:D2:32:79:B0:26:7D:89:B4:90:2A:39:07:5E Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 Certificate issuer: /CN=C70A343932991281F91796DB87B011987603BBF4 Certificate serial: 32CB0E7C33063AE35636CDF99A9DA24AAB2382C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft Manifest number: 0276 Signing time: Mon 02 Mar 2026 11:11:43 +0000 Manifest this update: Mon 02 Mar 2026 11:06:43 +0000 Manifest next update: Thu 05 Mar 2026 17:45:43 +0000 Files and hashes: 1: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: crc7GhKn9AnYAlLeRPgUvImKVvVRpJeq2KkcRuzsk7I=) 2: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: 8nVSKMfLnOq7H4iVikz3GDhFqGNUP7VsOtUfQqLc1tA=) 3: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: LB2GT5oCXXjegdmKuSVpDwI+w3SC+aDFAkzGg3DL2X4=) 4: C70A343932991281F91796DB87B011987603BBF4.crl (hash: Fhvek5VzQ8OV9Plh1UW/KDSvMG5Bhz+hW6Jx9sHctro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:cb:0e:7c:33:06:3a:e3:56:36:cd:f9:9a:9d:a2:4a:ab:23:82:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C70A343932991281F91796DB87B011987603BBF4 Validity Not Before: Mar 2 11:06:43 2026 GMT Not After : Mar 5 17:45:43 2026 GMT Subject: CN=110EB5C164C4CDD23279B0267D89B4902A39075E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:40:6f:19:95:d1:7c:6a:02:29:d4:ff:01: e9:17:c4:a9:67:fe:1b:67:d5:65:46:3b:e2:eb:0d: 7b:96:26:2c:94:3c:48:94:55:95:b0:d4:64:ae:de: 53:0c:78:45:2e:5b:af:47:f6:2c:9a:c0:44:13:ce: 0d:ad:a9:ae:b0:71:4b:09:67:14:c6:01:94:d1:4e: 60:5a:36:25:c3:55:aa:c2:4a:18:75:b3:29:0b:81: aa:54:1e:f5:75:39:53:54:de:5c:dd:0c:a7:3b:b7: b2:66:ba:fc:ec:6a:31:5f:db:bf:82:8a:67:54:ff: c7:59:a1:3a:d7:3d:58:9c:95:ea:6c:a4:b1:18:8b: c0:e9:7e:c0:80:1b:e3:1f:3f:fb:d8:a1:10:1c:65: 66:94:f3:89:b1:81:79:f4:dd:5a:82:d7:83:72:14: ce:5c:f9:6e:79:39:82:d1:65:7e:9b:49:8b:36:f2: 0a:c9:8a:06:8f:d6:4a:e4:e5:db:97:17:92:c8:32: ba:ff:46:07:d5:58:a5:13:90:07:0b:b5:44:e8:b5: c6:dc:ed:9c:3e:0d:35:15:b8:6e:a6:b1:13:e8:31: 56:47:56:1f:9d:d8:55:17:c1:d4:a6:dc:d2:a3:3f: 6f:78:df:79:0e:3b:53:63:e5:96:66:69:40:e7:7d: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0E:B5:C1:64:C4:CD:D2:32:79:B0:26:7D:89:B4:90:2A:39:07:5E X509v3 Authority Key Identifier: keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:45:49:7d:c1:f2:35:98:97:89:5b:9d:22:8d:d7:31:ab:bf: 7f:e8:8e:1a:b1:7c:84:50:7c:3e:d0:ff:61:3f:45:6c:d0:c3: 30:31:09:80:f5:c3:b0:4d:ff:1d:f4:be:9f:8f:06:e8:00:35: 39:cb:68:36:75:9b:88:05:f4:f9:6f:ef:e3:a6:71:a5:ae:8a: 5d:12:a5:da:bd:b8:93:56:e6:dd:da:21:f4:99:3c:f0:4c:5e: b1:1a:04:f1:9e:69:7f:d1:74:97:4b:00:05:15:97:ea:77:b6: 59:ef:ff:67:bf:b2:1b:41:13:93:1d:3d:a1:dc:c6:b1:2c:b4: 15:83:3d:fb:1f:8c:77:8d:da:ca:5e:30:1a:c9:73:5c:b4:df: f7:e5:9a:02:7a:3a:19:40:9a:51:dc:3e:ae:34:14:f5:85:f3: 20:5d:d2:b0:cf:7c:c3:d8:6d:cd:80:e2:ba:d3:df:26:6b:0b: fc:fd:7f:fd:2b:46:c8:e4:71:7a:b7:91:d0:8d:38:fb:37:83: bc:f4:33:43:0a:a9:5b:36:fc:2b:6e:c3:3c:23:58:f2:ad:42: 2c:97:0f:2f:5f:80:a1:8f:b6:ff:91:88:c4:aa:9f:f4:7b:8d: 40:c7:49:6f:ba:4e:77:f8:c4:de:d3:2b:fb:0b:75:10:32:48: 91:53:e3:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMssOfDMGOuNWNs35mp2iSqsjgsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3 NjAzQkJGNDAeFw0yNjAzMDIxMTA2NDNaFw0yNjAzMDUxNzQ1NDNaMDMxMTAvBgNV BAMTKDExMEVCNUMxNjRDNENERDIzMjc5QjAyNjdEODlCNDkwMkEzOTA3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2R0BvGZXRfGoCKdT/AekXxKln /htn1WVGO+LrDXuWJiyUPEiUVZWw1GSu3lMMeEUuW69H9iyawEQTzg2tqa6wcUsJ ZxTGAZTRTmBaNiXDVarCShh1sykLgapUHvV1OVNU3lzdDKc7t7JmuvzsajFf27+C imdU/8dZoTrXPViclepspLEYi8DpfsCAG+MfP/vYoRAcZWaU84mxgXn03VqC14Ny FM5c+W55OYLRZX6bSYs28grJigaP1krk5duXF5LIMrr/RgfVWKUTkAcLtUTotcbc 7Zw+DTUVuG6msRPoMVZHVh+d2FUXwdSm3NKjP29433kOO1Nj5ZZmaUDnfTyjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEQ61wWTEzdIyebAmfYm0kCo5B14wHwYDVR0j BBgwFoAUxwo0OTKZEoH5F5bbh7ARmHYDu/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmMxN2NjMi1mNGEyLTQxNWUtOGVhMi1mOWM0N2Y3NWM0Y2EvMC9DNzBBMzQzOTMy OTkxMjgxRjkxNzk2REI4N0IwMTE5ODc2MDNCQkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDExOTg3NjAz QkJGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQzcwQTM0MzkzMjk5MTI4MUY5MTc5NkRCODdCMDEx OTg3NjAzQkJGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNFSX3B8jWYl4lbnSKN1zGrv3/ojhqxfIRQ fD7Q/2E/RWzQwzAxCYD1w7BN/x30vp+PBugANTnLaDZ1m4gF9Plv7+OmcaWuil0S pdq9uJNW5t3aIfSZPPBMXrEaBPGeaX/RdJdLAAUVl+p3tlnv/2e/shtBE5MdPaHc xrEstBWDPfsfjHeN2speMBrJc1y03/flmgJ6OhlAmlHcPq40FPWF8yBd0rDPfMPY bc2A4rrT3yZrC/z9f/0rRsjkcXq3kdCNOPs3g7z0M0MKqVs2/CtuwzwjWPKtQiyX Dy9fgKGPtv+RiMSqn/R7jUDHSW+6Tnf4xN7TK/sLdRAySJFT4xg= -----END CERTIFICATE-----Generated at Mon Mar 2 15:52:48 2026 by rpki-client