$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: 7WIvSSH7XNeP6w4ZhYYPunw5HPfJ3pGg4LYYGcAxwIM= Subject key identifier: CC:B0:74:C8:4C:34:94:99:34:27:C5:E2:E9:56:ED:BD:35:F5:FA:04 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 73861D75BFF90312A44DE842E75E04384690552E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 01EF Signing time: Wed 25 Mar 2026 13:20:51 +0000 Manifest this update: Wed 25 Mar 2026 13:15:51 +0000 Manifest next update: Sun 29 Mar 2026 00:07:51 +0000 Files and hashes: 1: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: XWHKWl1bl7orQ2vAhEeH2m+P668uWWue/l7jGZqhA9o=) 2: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: 0vX5pTZnsirf9upd8mIbR8m4tXSmKWmptqm/IEt1U7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:86:1d:75:bf:f9:03:12:a4:4d:e8:42:e7:5e:04:38:46:90:55:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Mar 25 13:15:51 2026 GMT Not After : Mar 29 00:07:51 2026 GMT Subject: CN=CCB074C84C3494993427C5E2E956EDBD35F5FA04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7e:31:b7:79:08:f7:bc:ae:ef:8a:33:04:68: f7:da:4f:a5:36:37:5b:d5:71:77:bf:5f:63:d3:07: 67:06:f8:0a:7c:ad:d2:a5:f8:06:33:f9:32:4a:6b: 11:1c:51:18:40:08:a5:b6:11:f3:18:d0:f3:c5:a0: e3:88:9b:2a:f8:47:e1:20:31:98:74:21:39:7b:b0: 64:a2:4d:20:17:8e:b1:69:f4:88:0d:a8:6a:69:d8: c4:03:db:38:f6:f0:47:6f:a0:ac:01:27:0c:ca:f6: 8c:47:92:65:06:c0:db:f1:c0:85:ae:9f:5c:4e:d3: 12:9d:75:21:13:da:d4:b1:83:ea:92:6f:46:fc:90: f4:31:a4:20:f0:73:29:71:2f:f1:11:78:9b:4a:74: 10:f7:31:1c:e4:a0:af:70:b6:94:14:d7:d5:8c:ac: f7:5a:b4:ff:bf:21:49:1d:86:a1:d6:82:94:67:3d: 7a:c2:1a:37:8e:57:cc:15:ad:5d:d0:48:3b:c5:0a: 8b:0b:93:55:d6:f7:ce:dc:05:d2:d5:ef:97:7d:d6: e7:77:3c:8e:00:1d:73:3e:e7:c9:46:f6:03:c7:07: 76:3f:b9:fb:d1:7e:f6:17:f9:63:c9:64:e0:ef:c6: 07:59:19:e9:a7:f8:92:e1:5c:b9:55:a3:5e:e8:77: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B0:74:C8:4C:34:94:99:34:27:C5:E2:E9:56:ED:BD:35:F5:FA:04 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a4:b3:b6:36:62:92:51:90:7d:04:95:cb:d5:c3:df:3e:5c: 1d:5d:41:47:50:ea:61:e3:4a:05:a2:19:36:a8:fa:b2:de:6b: 21:99:bf:01:12:ae:e1:ba:c6:0b:fc:e7:a3:96:db:78:ce:73: 4d:6a:4f:88:7d:4b:78:4c:8b:bb:32:c1:8e:63:85:35:ac:1e: d5:f6:b5:ee:cb:03:bf:f9:df:c5:0a:7d:60:a8:82:ab:76:71: d0:2b:cf:5e:e8:7a:67:ee:c4:28:9c:55:1e:78:64:66:ec:f2: e9:88:1f:33:48:e3:e0:8c:63:2b:61:43:f5:ec:c3:e1:3a:5e: db:e6:62:d6:0d:88:13:97:41:03:ae:64:ce:6c:57:6a:c4:31: d0:e7:f3:43:0e:a6:9a:6a:e3:d8:1e:ae:6a:1d:6f:6c:f7:18: e4:05:b3:21:6c:4c:e1:bb:a4:3b:b1:e0:a2:1d:31:54:54:01: 48:9e:4d:6d:d7:d0:ac:b4:bf:fb:0c:79:4d:be:7c:83:ba:43: 8a:e6:d4:4a:55:3e:c3:76:e7:e7:ca:de:65:2a:6c:98:8a:69: 19:e0:ec:31:67:42:a7:64:48:fb:63:91:9e:6e:a0:8a:80:49: c9:f9:f2:ef:b9:de:e9:58:d3:7a:df:af:90:5a:65:b2:fc:d7: e1:26:88:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc4Yddb/5AxKkTehC514EOEaQVS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNjAzMjUxMzE1NTFaFw0yNjAzMjkwMDA3NTFaMDMxMTAvBgNV BAMTKENDQjA3NEM4NEMzNDk0OTkzNDI3QzVFMkU5NTZFREJEMzVGNUZBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrfjG3eQj3vK7vijMEaPfaT6U2 N1vVcXe/X2PTB2cG+Ap8rdKl+AYz+TJKaxEcURhACKW2EfMY0PPFoOOImyr4R+Eg MZh0ITl7sGSiTSAXjrFp9IgNqGpp2MQD2zj28EdvoKwBJwzK9oxHkmUGwNvxwIWu n1xO0xKddSET2tSxg+qSb0b8kPQxpCDwcylxL/EReJtKdBD3MRzkoK9wtpQU19WM rPdatP+/IUkdhqHWgpRnPXrCGjeOV8wVrV3QSDvFCosLk1XW987cBdLV75d91ud3 PI4AHXM+58lG9gPHB3Y/ufvRfvYX+WPJZODvxgdZGemn+JLhXLlVo17od5CjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzLB0yEw0lJk0J8Xi6VbtvTX1+gQwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuks7Y2YpJRkH0ElcvVw98+XB1dQUdQ6mHj SgWiGTao+rLeayGZvwESruG6xgv856OW23jOc01qT4h9S3hMi7sywY5jhTWsHtX2 te7LA7/538UKfWCogqt2cdArz17oemfuxCicVR54ZGbs8umIHzNI4+CMYythQ/Xs w+E6XtvmYtYNiBOXQQOuZM5sV2rEMdDn80MOpppq49germodb2z3GOQFsyFsTOG7 pDux4KIdMVRUAUieTW3X0Ky0v/sMeU2+fIO6Q4rm1EpVPsN25+fK3mUqbJiKaRng 7DFnQqdkSPtjkZ5uoIqAScn58u+53ulY03rfr5BaZbL81+EmiLk= -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:45 2026 by rpki-client