$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: hQrTmkZT8vePfsjBsHfq4p8Z/am1q9Hska8c7IgikRA= Subject key identifier: 49:6A:14:2B:C6:14:A3:3A:EA:3E:75:D5:53:B7:9B:CB:C3:44:AC:E1 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 5B11CDA4CA977574D7B6F0D01CB21D5AFF60381C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 017E Signing time: Tue 24 Mar 2026 08:11:18 +0000 Manifest this update: Tue 24 Mar 2026 08:06:18 +0000 Manifest next update: Fri 27 Mar 2026 19:06:18 +0000 Files and hashes: 1: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: k4r6WzhxzBcS3VSCnW5AcBSPgRuHkdZqCOJR8VV2Nyw=) 2: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: aDszcp7S2eJDAV6de7DveWTET9pe78+g+ePUYXeZ0Rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:11:cd:a4:ca:97:75:74:d7:b6:f0:d0:1c:b2:1d:5a:ff:60:38:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Mar 24 08:06:18 2026 GMT Not After : Mar 27 19:06:18 2026 GMT Subject: CN=496A142BC614A33AEA3E75D553B79BCBC344ACE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:65:e2:d8:9c:76:5e:80:1f:b1:bc:11:74: cb:7b:8c:26:ec:23:73:19:83:53:68:66:f7:ba:e5: 5a:2f:5b:df:e6:06:a9:40:cc:c0:e7:9d:e0:7c:5d: 8a:f2:ee:ae:aa:37:86:3c:66:9f:1b:f2:36:9d:3d: ea:e5:a4:e8:77:4f:60:61:78:a7:80:d6:08:a5:b4: b5:50:09:3d:49:e6:f2:5f:74:db:f2:9a:5d:29:31: c5:4a:df:0d:88:4b:ca:88:7e:76:73:6f:fc:1e:67: e6:a2:13:dc:29:33:0c:b2:17:10:ab:56:5c:0b:e6: 2a:e4:16:09:1e:7f:82:71:69:78:68:e9:cf:4c:20: d2:76:e8:ec:0a:3d:60:33:6d:d4:45:b4:d9:59:2a: 63:6c:96:3f:6b:60:67:59:61:59:ba:b7:3b:3f:17: e9:0d:65:96:fb:7f:d8:b3:19:9a:9e:04:76:c1:f3: 6a:e1:7d:90:b9:ac:3d:9f:e6:76:b1:9b:6b:bd:a8: 7e:89:14:b9:72:25:51:f8:b4:06:a1:5e:fa:77:64: 62:f1:3e:1d:fc:a2:ed:e3:05:36:de:3f:55:2e:61: 97:0c:03:86:c5:79:67:b9:9e:1d:da:e4:83:41:a9: ed:dc:24:dd:db:f2:c5:e2:0a:6f:66:21:31:bc:f7: 8c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6A:14:2B:C6:14:A3:3A:EA:3E:75:D5:53:B7:9B:CB:C3:44:AC:E1 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:98:0e:15:e1:f4:92:e0:89:f6:9f:6f:3f:a5:3f:f8:90:1b: 9d:d8:86:79:f8:e0:ab:04:00:f8:b3:ec:c6:c6:fc:10:a1:dd: dd:fd:09:ee:9b:ed:ae:83:b0:8f:07:3f:65:e7:24:fd:02:3c: c5:23:c3:55:03:66:e4:55:8f:00:c4:31:3d:af:51:5b:f8:06: 9a:72:90:df:4b:36:0c:63:76:8b:83:a4:2f:2c:37:e0:6a:5c: a9:c1:b1:c8:ba:a1:7b:ae:d7:90:fe:ee:97:8e:3b:2e:69:40: 43:34:c4:18:86:a4:b1:4f:69:c7:dd:f4:d5:8e:cc:b8:e6:1a: eb:1f:a1:2b:f1:e6:4c:17:6f:a7:8e:d3:b2:e8:e7:a1:2d:f0: dd:0f:52:a6:99:1b:81:1b:f6:3d:8f:34:9a:c6:4e:d2:86:08: ba:2e:24:b7:d1:46:f5:f4:3f:8f:62:9d:3d:4c:30:7e:c1:0a: c5:2a:55:c0:8e:01:51:7b:36:3d:91:c5:93:9c:20:8a:45:ff: 47:34:fa:fa:c1:d2:d9:6c:39:54:37:a6:9e:9a:b7:e2:c1:df: 77:90:35:62:d6:a5:76:df:22:74:92:6a:14:c2:2b:7c:b0:77: a8:75:13:02:2f:b0:47:a5:69:c7:f9:22:18:2d:dd:72:5a:37: 65:c5:b8:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxHNpMqXdXTXtvDQHLIdWv9gOBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNjAzMjQwODA2MThaFw0yNjAzMjcxOTA2MThaMDMxMTAvBgNV BAMTKDQ5NkExNDJCQzYxNEEzM0FFQTNFNzVENTUzQjc5QkNCQzM0NEFDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBA2Xi2Jx2XoAfsbwRdMt7jCbs I3MZg1NoZve65VovW9/mBqlAzMDnneB8XYry7q6qN4Y8Zp8b8jadPerlpOh3T2Bh eKeA1giltLVQCT1J5vJfdNvyml0pMcVK3w2IS8qIfnZzb/weZ+aiE9wpMwyyFxCr VlwL5irkFgkef4JxaXho6c9MINJ26OwKPWAzbdRFtNlZKmNslj9rYGdZYVm6tzs/ F+kNZZb7f9izGZqeBHbB82rhfZC5rD2f5naxm2u9qH6JFLlyJVH4tAahXvp3ZGLx Ph38ou3jBTbeP1UuYZcMA4bFeWe5nh3a5INBqe3cJN3b8sXiCm9mITG894wBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSWoUK8YUozrqPnXVU7eby8NErOEwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSYDhXh9JLgifafbz+lP/iQG53Yhnn44KsE APiz7MbG/BCh3d39Ce6b7a6DsI8HP2XnJP0CPMUjw1UDZuRVjwDEMT2vUVv4Bppy kN9LNgxjdouDpC8sN+BqXKnBsci6oXuu15D+7peOOy5pQEM0xBiGpLFPacfd9NWO zLjmGusfoSvx5kwXb6eO07Lo56Et8N0PUqaZG4Eb9j2PNJrGTtKGCLouJLfRRvX0 P49inT1MMH7BCsUqVcCOAVF7Nj2RxZOcIIpF/0c0+vrB0tlsOVQ3pp6at+LB33eQ NWLWpXbfInSSahTCK3ywd6h1EwIvsEelacf5Ihgt3XJaN2XFuFU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:23:44 2026 by rpki-client