$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft (raw, json) Hash identifier: rAVtZwzR5KBunzbcYfiRT6v4wgll448hrjZ4ll4nGPc= Subject key identifier: 76:56:BA:2A:00:87:92:4B:CC:EE:BA:25:68:42:5F:9E:39:36:AE:BB Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Certificate serial: 0D7FB55D34778EB944B3B177F9398629DC3BEFB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft Manifest number: 0208 Signing time: Tue 24 Mar 2026 19:42:39 +0000 Manifest this update: Tue 24 Mar 2026 19:37:39 +0000 Manifest next update: Fri 27 Mar 2026 23:10:39 +0000 Files and hashes: 1: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl (hash: RSLRCm/VIaaprysWu5JFaJfT5iexGTW9JXT+pwv76OU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7f:b5:5d:34:77:8e:b9:44:b3:b1:77:f9:39:86:29:dc:3b:ef:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Validity Not Before: Mar 24 19:37:39 2026 GMT Not After : Mar 27 23:10:39 2026 GMT Subject: CN=7656BA2A0087924BCCEEBA2568425F9E3936AEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7e:d8:8f:91:10:d2:89:64:c5:c2:97:bc:5a: b3:21:c2:30:07:6e:cd:49:ff:b5:19:89:c6:5a:2b: a5:d6:72:2d:95:36:46:62:b0:3f:9d:7e:b6:ee:d5: 66:07:39:c2:b5:ef:d5:51:68:d0:a4:89:7d:3a:cd: a8:25:67:85:82:8c:ec:ca:a2:cf:70:53:42:33:70: d9:d8:55:86:51:38:15:10:3f:35:1b:57:78:95:dc: 4d:ea:95:c8:af:a4:22:ba:89:62:8d:da:60:4a:81: 3a:14:86:42:60:f0:6b:c0:f3:12:c0:d8:21:94:48: 74:41:a5:19:06:7a:5a:ef:29:59:e3:a2:d5:80:c8: 76:0c:94:c5:36:00:f6:8d:b0:07:1a:5e:43:36:2f: 57:2c:c0:f3:ad:d6:5f:85:b8:80:08:3d:09:5a:43: dc:13:fa:8e:90:92:40:ec:1a:f4:df:0f:43:4e:96: d6:9d:b4:9f:0c:09:32:c0:48:3c:5f:fe:a7:5d:71: aa:35:25:89:3f:4f:06:f4:85:b2:0d:a9:c4:01:c4: 32:11:2d:c3:e9:d6:aa:04:f7:0c:25:35:63:79:94: 9e:b4:b1:92:d7:fc:2a:a3:90:b9:2c:7b:5d:e4:ba: 30:71:c6:5b:94:17:7f:88:0b:0a:43:52:d9:f5:5e: b4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:56:BA:2A:00:87:92:4B:CC:EE:BA:25:68:42:5F:9E:39:36:AE:BB X509v3 Authority Key Identifier: keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d0:bc:7c:de:b1:b3:f9:e8:50:c5:ab:c5:03:61:b0:81:5a: 6a:27:86:04:7f:ac:01:ba:8d:4c:0c:a2:ed:2d:76:48:3f:64: 42:1c:22:2c:c0:bc:a6:c9:1a:d6:59:e2:25:29:98:f8:de:17: 3a:dd:af:a8:11:0a:74:4f:f3:8d:a9:86:6d:fc:f0:a8:06:a2: 2f:c9:da:b7:f8:ea:16:3a:6d:f7:71:74:31:0c:9d:3d:eb:49: b7:46:f0:50:72:12:61:90:1f:8f:8d:2b:a4:4e:5d:ed:a1:86: 99:1b:df:6f:d1:2b:35:00:1b:dc:d0:af:13:fd:5e:6e:03:50: ad:b5:ef:4c:9d:1c:91:91:b8:22:3f:09:47:d1:8a:c6:43:f4: eb:c3:b0:f0:5d:26:4e:33:ca:58:bc:d4:3d:84:72:63:0a:4a: c2:17:43:db:6c:9c:c0:82:5a:74:f8:95:69:bd:34:08:e2:46: ac:98:57:10:28:d6:ba:61:2a:28:24:b6:eb:ce:d9:21:44:d9: 7d:49:4f:c8:2f:f1:e9:aa:8a:78:0d:10:8b:13:e0:f2:98:03: 52:f9:13:df:2f:d3:de:85:8f:78:ee:2c:c0:2d:de:0e:01:d7: 4f:7e:0f:e0:2b:d1:64:c3:da:9c:37:ac:c0:89:7e:4f:65:56: 76:03:43:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDX+1XTR3jrlEs7F3+TmGKdw777MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4 NjE4OUIwQzAeFw0yNjAzMjQxOTM3MzlaFw0yNjAzMjcyMzEwMzlaMDMxMTAvBgNV BAMTKDc2NTZCQTJBMDA4NzkyNEJDQ0VFQkEyNTY4NDI1RjlFMzkzNkFFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOftiPkRDSiWTFwpe8WrMhwjAH bs1J/7UZicZaK6XWci2VNkZisD+dfrbu1WYHOcK179VRaNCkiX06zaglZ4WCjOzK os9wU0IzcNnYVYZROBUQPzUbV3iV3E3qlcivpCK6iWKN2mBKgToUhkJg8GvA8xLA 2CGUSHRBpRkGelrvKVnjotWAyHYMlMU2APaNsAcaXkM2L1cswPOt1l+FuIAIPQla Q9wT+o6QkkDsGvTfD0NOltadtJ8MCTLASDxf/qddcao1JYk/Twb0hbINqcQBxDIR LcPp1qoE9wwlNWN5lJ60sZLX/CqjkLkse13kujBxxluUF3+ICwpDUtn1XrSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdla6KgCHkkvM7rolaEJfnjk2rrswHwYDVR0j BBgwFoAUcApG8MSOeE6MvLp7J+RHT4YYmwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMC83MDBBNDZGMEM0 OEU3ODRFOENCQ0JBN0IyN0U0NDc0Rjg2MTg5QjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4NjE4 OUIwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3 NEY4NjE4OUIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzQvHzesbP56FDFq8UDYbCBWmonhgR/rAG6 jUwMou0tdkg/ZEIcIizAvKbJGtZZ4iUpmPjeFzrdr6gRCnRP842phm388KgGoi/J 2rf46hY6bfdxdDEMnT3rSbdG8FByEmGQH4+NK6ROXe2hhpkb32/RKzUAG9zQrxP9 Xm4DUK2170ydHJGRuCI/CUfRisZD9OvDsPBdJk4zyli81D2EcmMKSsIXQ9tsnMCC WnT4lWm9NAjiRqyYVxAo1rphKigktuvO2SFE2X1JT8gv8emqingNEIsT4PKYA1L5 E98v096Fj3juLMAt3g4B109+D+Ar0WTD2pw3rMCJfk9lVnYDQ9E= -----END CERTIFICATE-----Generated at Thu Mar 26 13:26:26 2026 by rpki-client