$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: Nxq+udxJ5MHmzcvnzS1du3idZawr9RYmXtBXxRKTSG8= Subject key identifier: 60:99:20:7C:AE:37:09:88:FF:7D:53:D9:31:3E:B6:FC:4D:F5:73:47 Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 315A250A3887ACB55AD76589A93BD47219293493 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 01B4 Signing time: Tue 24 Mar 2026 15:40:55 +0000 Manifest this update: Tue 24 Mar 2026 15:35:55 +0000 Manifest next update: Fri 27 Mar 2026 20:07:55 +0000 Files and hashes: 1: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: Cx50WDLVzIMhfmYti31x4z+fMqpdNUHNrg2ar3OGOvI=) 2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5a:25:0a:38:87:ac:b5:5a:d7:65:89:a9:3b:d4:72:19:29:34:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Mar 24 15:35:55 2026 GMT Not After : Mar 27 20:07:55 2026 GMT Subject: CN=6099207CAE370988FF7D53D9313EB6FC4DF57347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:58:8d:64:69:ba:ff:18:e2:20:e5:7c:77: 4b:ce:fb:75:80:1d:9c:46:ed:40:7e:d8:45:73:e7: 09:b4:4a:be:29:9f:8f:7b:2a:d1:67:30:85:9c:63: d9:d2:5c:61:94:8e:6b:62:96:4a:ba:7b:15:08:2b: 2e:a6:63:d4:ca:31:50:d2:d9:b9:72:3a:8f:4a:e7: 99:37:a4:33:5c:76:70:f5:46:2a:ba:b5:4d:0d:79: 0a:fd:98:18:e7:b9:0e:e1:17:52:20:3c:48:f8:30: bc:60:b9:23:3f:f0:51:24:ce:a7:23:f8:59:da:35: ad:de:ea:b1:3b:16:1d:0a:4c:10:c9:37:5b:29:f0: 8d:05:8f:21:ff:7d:a7:00:44:dc:23:6a:c3:c6:4d: c6:e6:0d:be:48:e6:f3:dc:14:cc:52:5d:1e:9f:21: 76:60:d1:55:3b:f0:88:87:5c:67:b5:ce:5b:e7:ef: 6d:29:2a:4b:05:0a:a6:8c:58:59:85:f9:be:24:fa: 37:0a:dd:3e:25:5b:26:80:5d:e0:e0:2e:6b:b8:72: fc:33:3c:5b:5d:9f:33:ba:86:5a:09:63:c5:4e:f2: d2:e4:f8:0c:b6:a7:c3:d2:8e:3a:65:1f:61:b3:3e: 72:99:ce:d6:58:4e:bd:de:15:8d:ff:52:18:53:1a: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:99:20:7C:AE:37:09:88:FF:7D:53:D9:31:3E:B6:FC:4D:F5:73:47 X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d1:d6:04:14:c8:39:da:eb:17:42:c0:cc:40:da:db:86:33: c1:84:47:cb:fe:53:54:98:4e:f8:99:74:74:97:46:f4:3c:e5: 26:3f:ac:b3:10:a8:a1:4e:d2:99:7e:dd:d3:00:dc:ec:30:01: f1:8e:21:cf:82:03:dd:f3:16:a5:0b:3a:3f:4f:c9:aa:41:f0: 18:43:29:73:8f:9c:5d:36:92:e5:5c:4d:f2:18:2f:a3:6a:23: 6f:4e:6c:ef:74:a6:b1:66:6a:8f:75:67:36:ba:6d:11:4f:49: 7c:5d:be:ec:d8:b8:a5:21:11:ea:67:79:1e:94:85:91:b4:ff: 6e:18:e7:1d:56:b5:cf:6e:fe:b3:af:7a:71:72:b0:91:75:7d: 91:99:39:fe:48:fd:5d:94:27:f9:f5:2a:13:ed:a7:91:56:6f: 35:0d:14:78:fc:c9:9c:cb:1e:c5:6b:0f:38:68:db:96:36:d1: e5:a3:66:d3:f3:1f:34:5f:01:1f:9c:9c:8b:98:82:bf:cf:f2: d6:1f:ea:fb:03:c2:9b:48:7e:1c:9f:9b:3b:69:27:e1:20:0f: 01:72:92:0f:a7:64:ee:33:49:da:ad:2d:b6:99:31:c2:1e:7a: 57:cc:3e:b1:59:dc:e2:76:e3:0f:32:68:1b:31:4f:25:6a:5b: 06:f9:b9:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMVolCjiHrLVa12WJqTvUchkpNJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNjAzMjQxNTM1NTVaFw0yNjAzMjcyMDA3NTVaMDMxMTAvBgNV BAMTKDYwOTkyMDdDQUUzNzA5ODhGRjdENTNEOTMxM0VCNkZDNERGNTczNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+91iNZGm6/xjiIOV8d0vO+3WA HZxG7UB+2EVz5wm0Sr4pn497KtFnMIWcY9nSXGGUjmtilkq6exUIKy6mY9TKMVDS 2blyOo9K55k3pDNcdnD1Riq6tU0NeQr9mBjnuQ7hF1IgPEj4MLxguSM/8FEkzqcj +FnaNa3e6rE7Fh0KTBDJN1sp8I0FjyH/facARNwjasPGTcbmDb5I5vPcFMxSXR6f IXZg0VU78IiHXGe1zlvn720pKksFCqaMWFmF+b4k+jcK3T4lWyaAXeDgLmu4cvwz PFtdnzO6hloJY8VO8tLk+Ay2p8PSjjplH2GzPnKZztZYTr3eFY3/UhhTGsBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYJkgfK43CYj/fVPZMT62/E31c0cwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjR1gQUyDna6xdCwMxA2tuGM8GER8v+U1SY TviZdHSXRvQ85SY/rLMQqKFO0pl+3dMA3OwwAfGOIc+CA93zFqULOj9PyapB8BhD KXOPnF02kuVcTfIYL6NqI29ObO90prFmao91Zza6bRFPSXxdvuzYuKUhEepneR6U hZG0/24Y5x1Wtc9u/rOvenFysJF1fZGZOf5I/V2UJ/n1KhPtp5FWbzUNFHj8yZzL HsVrDzho25Y20eWjZtPzHzRfAR+cnIuYgr/P8tYf6vsDwptIfhyfmztpJ+EgDwFy kg+nZO4zSdqtLbaZMcIeelfMPrFZ3OJ24w8yaBsxTyVqWwb5uW8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:48 2026 by rpki-client