$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft File: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft (raw, json) Hash identifier: vL7/lccwsGVMLwlQpSxYNipV2fOnXud6ER6VmxJybWM= Subject key identifier: 19:9C:51:D0:6D:71:C6:71:D2:1D:60:C4:04:C3:75:AD:2B:D3:6F:20 Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 32DAF497AD2218A0D502A6DBC14377207F08EDFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft Manifest number: 04F2 Signing time: Sat 28 Feb 2026 15:42:02 +0000 Manifest this update: Sat 28 Feb 2026 15:37:02 +0000 Manifest next update: Wed 04 Mar 2026 02:06:02 +0000 Files and hashes: 1: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (hash: Ygp8V6ySgNlfzeAzxcG8tV45vBV3m6RFvl0r9jM7VeY=) 2: B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl (hash: 0Ca8eQgxvgBAdzPHhgaQ2k4EV3ygp+5d8ccy/TCDQxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:da:f4:97:ad:22:18:a0:d5:02:a6:db:c1:43:77:20:7f:08:ed:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Feb 28 15:37:02 2026 GMT Not After : Mar 4 02:06:02 2026 GMT Subject: CN=199C51D06D71C671D21D60C404C375AD2BD36F20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:65:d3:08:82:a5:ca:80:00:37:d2:ef:c4:9e: e4:d2:cd:7b:6a:d4:24:71:92:fa:06:ad:39:12:fc: 7b:64:1f:87:94:51:2c:6b:3b:8f:44:6e:f6:4a:bd: 73:96:b9:e9:28:dd:89:7d:a7:e0:2a:3d:ec:b2:37: 3c:09:2c:ac:cf:6f:b5:4d:7b:9a:3f:bc:c1:0c:f3: c8:cb:a2:d8:8f:a8:0f:a6:a8:ba:cf:3b:b7:e2:0d: 98:cf:62:0d:36:cf:05:3c:39:60:1c:10:c0:5b:8e: 1d:7a:b0:95:73:16:30:18:96:5b:1a:50:f3:27:07: 48:8c:e7:36:c5:aa:c4:15:10:92:de:ff:93:d0:54: 44:76:1a:c5:1f:54:83:bb:06:f1:3f:68:a7:b0:17: 89:da:83:8c:91:cf:aa:da:0e:9f:29:bb:33:2d:d2: a2:1a:0b:42:85:a6:ba:9e:47:28:51:fd:0e:cc:28: db:aa:bb:e6:5f:cd:81:1b:e3:f1:96:ef:78:57:85: d0:9c:f0:5d:04:7e:13:e5:72:16:0e:7a:af:84:71: 51:5c:c3:d4:33:5f:08:f4:d4:00:d4:17:01:67:6b: 8e:70:6e:3d:90:1e:97:6c:83:96:02:92:14:58:f4: 4b:0e:08:c8:e7:b4:62:1b:3a:44:0d:51:d2:d2:5c: 17:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9C:51:D0:6D:71:C6:71:D2:1D:60:C4:04:C3:75:AD:2B:D3:6F:20 X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8b:7a:fc:32:1c:b3:ec:93:6d:e9:60:02:5f:a0:10:55:ea: 42:c8:d5:90:59:40:23:11:9a:21:ed:7a:b0:e0:1e:a1:5f:b3: d7:9f:31:ae:1e:6a:d5:61:01:9c:a6:8a:f4:9c:23:d7:ea:c6: 81:6f:ca:93:51:cd:8b:9b:53:d4:72:23:4a:8d:64:5a:e7:25: db:db:b9:fe:e4:5f:46:86:32:cd:9d:e6:b3:fb:a8:dc:08:d5: 86:7f:23:f2:dc:6f:23:67:d1:44:6e:74:76:ac:93:1d:3a:4d: 4f:88:61:dd:a6:23:25:11:5b:16:63:6e:7e:9b:86:c5:b2:c7: f2:e5:e5:4e:48:49:aa:58:c1:7a:38:d7:ac:fa:45:66:72:ca: 26:72:2d:88:d8:20:57:cb:47:4f:1a:19:e4:2a:06:4f:12:46: ca:77:54:60:e5:44:b8:78:78:b2:a4:fb:a9:ab:1d:81:01:e3: 84:a9:7d:a0:4d:9a:77:6b:c7:84:b8:c6:79:cc:82:fa:80:ac: 9d:ce:36:93:fd:47:cd:08:64:19:2a:a2:8e:44:a2:65:29:db: 0c:7c:a1:48:7a:fe:61:3c:10:7b:3f:dd:08:4a:52:50:a0:46: f2:6f:b7:22:54:5a:8f:74:cc:a6:b3:b0:1a:cd:92:11:f9:f0: 15:24:f5:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtr0l60iGKDVAqbbwUN3IH8I7fowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNjAyMjgxNTM3MDJaFw0yNjAzMDQwMjA2MDJaMDMxMTAvBgNV BAMTKDE5OUM1MUQwNkQ3MUM2NzFEMjFENjBDNDA0QzM3NUFEMkJEMzZGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzZdMIgqXKgAA30u/EnuTSzXtq 1CRxkvoGrTkS/HtkH4eUUSxrO49EbvZKvXOWueko3Yl9p+AqPeyyNzwJLKzPb7VN e5o/vMEM88jLotiPqA+mqLrPO7fiDZjPYg02zwU8OWAcEMBbjh16sJVzFjAYllsa UPMnB0iM5zbFqsQVEJLe/5PQVER2GsUfVIO7BvE/aKewF4nag4yRz6raDp8puzMt 0qIaC0KFprqeRyhR/Q7MKNuqu+ZfzYEb4/GW73hXhdCc8F0EfhPlchYOeq+EcVFc w9QzXwj01ADUFwFna45wbj2QHpdsg5YCkhRY9EsOCMjntGIbOkQNUdLSXBcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGZxR0G1xxnHSHWDEBMN1rSvTbyAwHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiOTM2ODctMmIyMC00MWM5LWJm YmItMDA1ZjY3ZTk2YThjLzAvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0 OEE0QzQyQkY4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKLevwyHLPsk23pYAJfoBBV6kLI1ZBZQCMR miHterDgHqFfs9efMa4eatVhAZymivScI9fqxoFvypNRzYubU9RyI0qNZFrnJdvb uf7kX0aGMs2d5rP7qNwI1YZ/I/LcbyNn0URudHaskx06TU+IYd2mIyURWxZjbn6b hsWyx/Ll5U5ISapYwXo416z6RWZyyiZyLYjYIFfLR08aGeQqBk8SRsp3VGDlRLh4 eLKk+6mrHYEB44SpfaBNmndrx4S4xnnMgvqArJ3ONpP9R80IZBkqoo5EomUp2wx8 oUh6/mE8EHs/3QhKUlCgRvJvtyJUWo90zKazsBrNkhH58BUk9YI= -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:55 2026 by rpki-client