$ rpki-client -vvf repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft File: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft (raw, json) Hash identifier: 1cMLsK0nxuZhhVQLyjB6KsHfLRIYBpUH4zCo9VE9szc= Subject key identifier: E3:AE:B6:18:A9:DA:3A:22:AA:90:DE:2B:A7:AD:AB:B2:1A:4D:8C:10 Authority key identifier: 70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 Certificate issuer: /CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Certificate serial: 7395A4BCEADFDDA3B5D89C3F37DAE41195DEF647 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft Manifest number: 035C Signing time: Wed 25 Mar 2026 00:22:03 +0000 Manifest this update: Wed 25 Mar 2026 00:17:03 +0000 Manifest next update: Sat 28 Mar 2026 01:28:03 +0000 Files and hashes: 1: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: pDYNyQPy9+qJb0nXEhgW9usosth8XXlKTG8zEx7l7ik=) 2: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl (hash: B46CDoqiRKVnoPGO9qAPEtb3nU/od5Ymz3I5mJItXRE=) 3: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: HkdEC8K8+4wdSCshXjogdBtnn9p7RHZgPqc+KEcGBcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:95:a4:bc:ea:df:dd:a3:b5:d8:9c:3f:37:da:e4:11:95:de:f6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Validity Not Before: Mar 25 00:17:03 2026 GMT Not After : Mar 28 01:28:03 2026 GMT Subject: CN=E3AEB618A9DA3A22AA90DE2BA7ADABB21A4D8C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:5c:4b:69:1e:3b:5c:5b:e4:f2:23:0e:39: e2:c4:c9:7e:69:63:01:27:18:c1:c7:b0:46:c1:0c: 54:5c:26:f9:23:bf:6d:50:06:45:85:a5:61:82:6c: 5e:a0:8e:fe:43:25:af:fb:07:a2:19:55:f4:2b:82: 9c:7c:3e:ca:3c:4b:93:13:a9:8e:c9:a7:5d:6f:d9: 2a:e5:0c:fe:5e:fe:0c:ff:ba:bc:86:90:85:37:14: 2c:fd:ee:c8:33:b7:fb:df:ce:f9:31:cf:d1:c9:a8: 84:10:bb:9e:03:e3:7c:9c:77:eb:c1:1c:4a:ed:59: b9:8a:9e:8c:c3:5f:dc:1e:bd:90:34:de:6f:0c:b4: f6:b6:0e:b1:e8:76:7c:1d:19:18:d8:f3:b5:7e:2f: 76:a6:37:26:9d:fb:32:f8:4c:28:4d:b4:57:12:07: f6:e7:7a:c9:32:23:2b:44:e2:d5:e4:86:b3:a7:3f: 83:19:c5:25:b3:c0:ba:62:16:3f:76:30:4a:d5:ef: 90:d1:73:95:ed:0b:1f:e6:3c:fc:c2:2c:27:1a:fb: 76:d5:91:e7:b2:9f:55:a1:99:fe:03:6a:bb:c5:cb: 71:38:ab:ab:98:82:f9:09:f8:a1:d2:73:bf:08:a2: cc:b3:fc:a1:bc:e0:38:ab:28:0a:dc:07:be:ab:b4: 57:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AE:B6:18:A9:DA:3A:22:AA:90:DE:2B:A7:AD:AB:B2:1A:4D:8C:10 X509v3 Authority Key Identifier: keyid:70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:7f:13:27:9c:3e:f9:b1:08:1d:af:33:31:49:ee:c2:f7:40: dd:1e:24:24:c1:85:10:c5:54:94:71:95:98:cb:91:08:07:dc: 82:5b:7c:49:3d:15:ee:fd:91:07:4e:28:a9:f2:8f:fe:2c:e4: 9f:ea:65:aa:3d:be:d2:2a:8d:6d:aa:b4:89:a1:fb:7d:f5:09: 4a:d6:73:85:8b:4a:59:45:c8:54:73:9f:f2:46:4a:92:d1:4e: 91:15:a1:f1:8f:5f:1a:a9:c7:37:4a:51:10:76:26:5a:4d:bc: e8:56:db:49:64:98:18:db:8b:06:f5:a1:ab:d4:eb:ac:5d:5e: 99:b2:43:5b:17:e5:00:49:40:a0:d4:7e:44:20:f1:c4:ff:eb: c3:51:15:3b:8f:fd:23:fe:10:ef:b8:30:5b:87:5c:13:b0:3d: d9:a1:fb:45:01:51:2c:65:20:63:d3:b4:a8:e2:48:b5:49:96: 79:55:b9:bd:4d:99:6e:86:74:5d:39:de:36:3c:a1:4d:8b:c8: 60:59:d0:5e:51:51:2b:c5:b2:fc:a7:09:99:95:51:ae:1e:89: 58:a5:99:61:ae:01:ba:9e:28:87:6b:61:9d:69:c4:66:d4:b7: 82:7f:86:e2:ba:2d:42:81:f1:fb:b0:a7:e9:7a:59:42:b3:2a: 87:71:6b:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5WkvOrf3aO12Jw/N9rkEZXe9kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4 NDZBMkQ2NDAeFw0yNjAzMjUwMDE3MDNaFw0yNjAzMjgwMTI4MDNaMDMxMTAvBgNV BAMTKEUzQUVCNjE4QTlEQTNBMjJBQTkwREUyQkE3QURBQkIyMUE0RDhDMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCud1xLaR47XFvk8iMOOeLEyX5p YwEnGMHHsEbBDFRcJvkjv21QBkWFpWGCbF6gjv5DJa/7B6IZVfQrgpx8Pso8S5MT qY7Jp11v2SrlDP5e/gz/uryGkIU3FCz97sgzt/vfzvkxz9HJqIQQu54D43ycd+vB HErtWbmKnozDX9wevZA03m8MtPa2DrHodnwdGRjY87V+L3amNyad+zL4TChNtFcS B/bneskyIytE4tXkhrOnP4MZxSWzwLpiFj92MErV75DRc5XtCx/mPPzCLCca+3bV keeyn1Whmf4DarvFy3E4q6uYgvkJ+KHSc78Iosyz/KG84DirKArcB76rtFf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4662GKnaOiKqkN4rp62rshpNjBAwHwYDVR0j BBgwFoAUcAuVh8TPp/Kx2ffJLLCw24RqLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODMyODIzNy03NTBmLTQwMjItYjhiMi1kYmE3M2I2NzEzZWMvMC83MDBCOTU4N0M0 Q0ZBN0YyQjFEOUY3QzkyQ0IwQjBEQjg0NkEyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4NDZB MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIw REI4NDZBMkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEN/EyecPvmxCB2vMzFJ7sL3QN0eJCTBhRDF VJRxlZjLkQgH3IJbfEk9Fe79kQdOKKnyj/4s5J/qZao9vtIqjW2qtImh+331CUrW c4WLSllFyFRzn/JGSpLRTpEVofGPXxqpxzdKURB2JlpNvOhW20lkmBjbiwb1oavU 66xdXpmyQ1sX5QBJQKDUfkQg8cT/68NRFTuP/SP+EO+4MFuHXBOwPdmh+0UBUSxl IGPTtKjiSLVJlnlVub1NmW6GdF053jY8oU2LyGBZ0F5RUSvFsvynCZmVUa4eiVil mWGuAbqeKIdrYZ1pxGbUt4J/huK6LUKB8fuwp+l6WUKzKodxa8k= -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:57 2026 by rpki-client