$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json) Hash identifier: OuzjHO+co7AqH0/vC2p8HVkd3xjRMhGcNIq9HJctEA0= Subject key identifier: 11:90:8B:54:7B:84:50:3B:81:40:E7:B7:20:63:85:38:43:F2:11:A7 Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 3702D830F0F52FF727ECA3683DC0199A839E3B59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft Manifest number: 0508 Signing time: Sun 19 Apr 2026 01:52:04 +0000 Manifest this update: Sun 19 Apr 2026 01:47:04 +0000 Manifest next update: Wed 22 Apr 2026 02:45:04 +0000 Files and hashes: 1: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: M5kYtIJlB/FVKaCzFTb3UEF+uNc8zK0UcUdZf3I/Ohw=) 2: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: Ygp8V6ySgNlfzeAzxcG8tV45vBV3m6RFvl0r9jM7VeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 02:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:02:d8:30:f0:f5:2f:f7:27:ec:a3:68:3d:c0:19:9a:83:9e:3b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Apr 19 01:47:04 2026 GMT Not After : Apr 22 02:45:04 2026 GMT Subject: CN=11908B547B84503B8140E7B72063853843F211A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:a3:6e:2e:11:61:a7:e6:29:b5:08:91:e2: d6:fb:b3:8a:d8:81:34:b4:63:c5:47:d8:ce:1c:e3: 45:0b:97:de:11:44:ad:e8:d9:f5:ab:47:4a:e7:d9: b2:26:26:2a:5b:38:b0:5d:85:04:2a:a0:7b:74:1d: e2:f1:d4:31:d5:01:e3:07:95:1e:dd:1d:9b:99:47: 7f:c9:86:96:84:aa:a4:69:e0:5d:d7:1d:5d:ca:c0: c0:8e:68:9b:76:e1:b9:9a:42:91:d9:30:89:f8:07: ed:7b:d0:22:c3:f6:70:1b:d6:99:07:d0:97:e2:4d: db:d4:10:53:c4:52:9b:08:a0:ac:c1:d3:53:67:b2: 75:0c:5b:c4:c3:de:d5:ca:ba:08:79:d0:d2:51:a1: 1a:11:17:77:3b:92:a4:17:ec:ca:c9:42:1d:a9:68: c5:22:36:bf:cb:5d:fc:97:e4:51:45:be:68:98:ef: f9:cc:ab:53:8c:65:7a:d0:96:2b:1b:5d:b5:9b:eb: 26:90:54:ed:f4:e6:85:ae:a1:e0:26:f9:8d:69:9d: 74:50:62:e2:ac:f4:80:f1:7f:20:1c:38:e8:f0:91: e9:d4:9d:c5:2b:d4:09:5d:ab:64:1c:86:e3:2e:7b: 85:1f:17:78:44:2b:e8:5d:a2:83:89:1e:b5:5b:81: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:90:8B:54:7B:84:50:3B:81:40:E7:B7:20:63:85:38:43:F2:11:A7 X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:64:0a:f8:1b:56:5f:91:d5:f3:aa:3d:f0:e6:db:f3:0d:c1: 9c:4c:e7:d0:8a:8f:d5:da:61:f2:2f:b4:6a:75:cc:81:8b:64: 71:78:46:e5:b6:89:8a:b2:34:14:24:93:79:a0:cf:97:7a:46: 57:82:b7:a5:54:2d:fe:88:d9:a8:21:75:05:58:19:7c:ee:58: a4:90:a9:50:a2:68:88:90:5c:04:5f:a8:5b:85:50:1a:59:26: e0:39:7f:18:1d:3c:8a:b0:03:55:48:18:a7:e0:3a:e1:f8:e5: b4:03:b3:79:62:3b:da:1b:62:cc:cb:ae:e8:25:4a:5b:7e:96: 2a:0e:48:96:10:43:d9:a2:16:96:b9:8e:d5:d4:dc:a4:f2:de: 44:97:06:87:80:c8:fc:7b:3d:7e:17:e8:c2:d8:02:71:62:95: 18:05:39:12:8b:ed:0f:d8:14:77:4e:f7:6b:1b:5d:05:3c:02: 79:bb:0f:b7:64:2e:62:3b:68:7c:de:9a:ff:85:6d:75:ac:fc: 14:c0:c3:87:86:3c:78:83:59:c1:b3:03:6b:49:70:68:57:7f: d1:82:7d:54:17:b7:61:3a:3d:17:16:4b:f4:b3:45:6e:43:85: a2:dc:d6:d4:50:84:b3:da:6b:f6:ea:d6:46:51:5b:d9:18:e7: 5d:c3:64:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwLYMPD1L/cn7KNoPcAZmoOeO1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNjA0MTkwMTQ3MDRaFw0yNjA0MjIwMjQ1MDRaMDMxMTAvBgNV BAMTKDExOTA4QjU0N0I4NDUwM0I4MTQwRTdCNzIwNjM4NTM4NDNGMjExQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWqNuLhFhp+YptQiR4tb7s4rY gTS0Y8VH2M4c40ULl94RRK3o2fWrR0rn2bImJipbOLBdhQQqoHt0HeLx1DHVAeMH lR7dHZuZR3/JhpaEqqRp4F3XHV3KwMCOaJt24bmaQpHZMIn4B+170CLD9nAb1pkH 0JfiTdvUEFPEUpsIoKzB01NnsnUMW8TD3tXKugh50NJRoRoRF3c7kqQX7MrJQh2p aMUiNr/LXfyX5FFFvmiY7/nMq1OMZXrQlisbXbWb6yaQVO305oWuoeAm+Y1pnXRQ YuKs9IDxfyAcOOjwkenUncUr1Aldq2QchuMue4UfF3hEK+hdooOJHrVbgSxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEZCLVHuEUDuBQOe3IGOFOEPyEacwHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0 OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxkCvgbVl+R1fOqPfDm2/MNwZxM59CKj9Xa YfIvtGp1zIGLZHF4RuW2iYqyNBQkk3mgz5d6RleCt6VULf6I2aghdQVYGXzuWKSQ qVCiaIiQXARfqFuFUBpZJuA5fxgdPIqwA1VIGKfgOuH45bQDs3liO9obYszLrugl Slt+lioOSJYQQ9miFpa5jtXU3KTy3kSXBoeAyPx7PX4X6MLYAnFilRgFORKL7Q/Y FHdO92sbXQU8Anm7D7dkLmI7aHzemv+FbXWs/BTAw4eGPHiDWcGzA2tJcGhXf9GC fVQXt2E6PRcWS/SzRW5DhaLc1tRQhLPaa/bq1kZRW9kY513DZFw= -----END CERTIFICATE-----Generated at Sun Apr 19 14:20:24 2026 by rpki-client