$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: 3YVvtjW1agbeYTA9E4v4rcdy5Sma1A/xor2bDbirujg= Subject key identifier: 9A:01:69:12:E2:9E:C2:CA:CA:F8:B7:CA:1F:F0:82:A1:47:88:87:95 Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 0FFA352965F4709456BE2D29DFAB1AFBCAE5BC8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: 011F Signing time: Thu 26 Mar 2026 04:12:21 +0000 Manifest this update: Thu 26 Mar 2026 04:07:21 +0000 Manifest next update: Sun 29 Mar 2026 09:07:21 +0000 Files and hashes: 1: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: J5gjDkNrmy2MKec25ZPFnTGD6sREUpwBpjQU3FJs80k=) 2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: jSEbOeozzsEZCSdGeWqpOPWmprMivxkyWYoadrFyhRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fa:35:29:65:f4:70:94:56:be:2d:29:df:ab:1a:fb:ca:e5:bc:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Mar 26 04:07:21 2026 GMT Not After : Mar 29 09:07:21 2026 GMT Subject: CN=9A016912E29EC2CACAF8B7CA1FF082A147888795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:f8:04:ec:ed:2c:62:f9:64:77:44:1e:cc: 2f:bf:36:61:af:0e:1f:c7:1e:f7:12:da:d8:e2:20: be:d8:03:0f:5b:5c:90:b6:b3:de:1a:2a:e7:0c:8e: 0f:36:f6:27:24:cb:e2:98:75:0f:67:92:81:f1:f8: 0e:0e:ab:e7:c8:01:49:45:5f:b3:d4:ff:c7:39:89: 9a:b9:14:21:2b:fd:26:25:d8:32:f7:9e:ef:4d:28: 93:cd:ea:65:5d:58:b1:c7:af:15:79:e7:15:21:1e: 68:8c:31:e5:6a:d1:a0:04:5b:dd:0b:57:a6:60:a0: 03:48:2d:c0:e5:c9:21:2f:15:94:e5:e8:08:ef:34: 0b:f4:8b:15:04:89:dd:09:9b:c6:a0:94:e0:57:03: ed:c2:6f:83:f9:d2:6c:d5:d2:7a:76:3c:00:0c:2a: 28:fa:55:a6:5a:28:14:9c:f4:0e:d2:d4:2b:07:57: 9b:31:4c:df:63:63:85:c0:91:79:74:d7:40:d6:24: af:f9:40:38:9f:c0:10:d5:81:65:17:c5:ac:c9:be: a3:1c:5d:df:04:5c:38:83:10:0e:d8:32:76:a0:5f: 01:a9:32:63:cc:c9:58:1e:6c:80:07:d0:fa:6e:b9: 3a:41:16:83:e6:00:ac:94:bd:16:28:c8:2e:0f:4e: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:01:69:12:E2:9E:C2:CA:CA:F8:B7:CA:1F:F0:82:A1:47:88:87:95 X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:2c:cd:37:d3:7b:79:11:7b:1e:ab:90:0b:61:80:e1:98:4f: a1:0f:54:50:b3:42:82:28:fd:17:ca:1b:57:4c:c0:d7:ea:10: 8a:14:e9:ae:c5:bc:93:04:15:c6:78:8c:87:7a:2a:d0:94:b9: 18:e4:e1:77:f0:f4:98:ad:81:68:8c:d2:0b:c0:5f:57:ec:0b: 1f:d9:c1:59:92:3a:51:0f:ae:d7:03:1f:bd:31:fa:f2:e5:10: e6:40:4b:b2:72:53:28:e9:61:c8:77:9a:ed:13:1c:27:76:27: 89:b2:ab:a3:e9:a0:06:0a:1a:cc:86:d2:b3:61:f3:c6:cb:59: a3:fe:21:0a:04:6b:45:2c:55:e7:99:32:ca:4c:26:7b:2c:b5: 5f:fa:20:2b:3d:e5:69:c7:d6:85:05:3d:25:ed:d0:a3:b1:94: 6e:a0:f6:b1:66:5d:e3:5f:3b:14:b8:80:24:2e:68:14:20:34: f8:07:d2:53:31:52:db:bc:c1:35:05:e1:87:14:68:b9:41:59: ee:df:e4:d6:9b:3a:57:d3:5c:c6:41:24:c9:e9:ec:8a:ec:3c: 16:39:e2:b5:d6:3f:90:0e:5d:ec:f6:9d:27:a4:7b:7c:3c:39: 6f:af:95:e0:1e:76:73:30:96:dd:05:75:c2:cd:9b:9d:45:7b: 87:f7:c6:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/o1KWX0cJRWvi0p36sa+8rlvI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNjAzMjYwNDA3MjFaFw0yNjAzMjkwOTA3MjFaMDMxMTAvBgNV BAMTKDlBMDE2OTEyRTI5RUMyQ0FDQUY4QjdDQTFGRjA4MkExNDc4ODg3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+PgE7O0sYvlkd0QezC+/NmGv Dh/HHvcS2tjiIL7YAw9bXJC2s94aKucMjg829icky+KYdQ9nkoHx+A4Oq+fIAUlF X7PU/8c5iZq5FCEr/SYl2DL3nu9NKJPN6mVdWLHHrxV55xUhHmiMMeVq0aAEW90L V6ZgoANILcDlySEvFZTl6AjvNAv0ixUEid0Jm8aglOBXA+3Cb4P50mzV0np2PAAM Kij6VaZaKBSc9A7S1CsHV5sxTN9jY4XAkXl010DWJK/5QDifwBDVgWUXxazJvqMc Xd8EXDiDEA7YMnagXwGpMmPMyVgebIAH0PpuuTpBFoPmAKyUvRYoyC4PTpRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmgFpEuKewsrK+LfKH/CCoUeIh5UwHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMszTfTe3kRex6rkAthgOGYT6EPVFCzQoIo /RfKG1dMwNfqEIoU6a7FvJMEFcZ4jId6KtCUuRjk4Xfw9JitgWiM0gvAX1fsCx/Z wVmSOlEPrtcDH70x+vLlEOZAS7JyUyjpYch3mu0THCd2J4myq6PpoAYKGsyG0rNh 88bLWaP+IQoEa0UsVeeZMspMJnsstV/6ICs95WnH1oUFPSXt0KOxlG6g9rFmXeNf OxS4gCQuaBQgNPgH0lMxUtu8wTUF4YcUaLlBWe7f5NabOlfTXMZBJMnp7IrsPBY5 4rXWP5AOXez2nSeke3w8OW+vleAednMwlt0FdcLNm51Fe4f3xnw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:13 2026 by rpki-client