$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: 3zxzFdh6sm241yueEdtofNWUhWCkL7M7J5RpnCd3lP8= Subject key identifier: 40:8F:89:E8:30:00:76:D5:06:F7:5D:8C:0D:DC:F1:B0:74:17:77:AA Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 7516F7816B82F34809ABA034AA45EDD9AF161371 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: 0129 Signing time: Fri 17 Apr 2026 12:52:21 +0000 Manifest this update: Fri 17 Apr 2026 12:47:21 +0000 Manifest next update: Mon 20 Apr 2026 20:24:21 +0000 Files and hashes: 1: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: jSEbOeozzsEZCSdGeWqpOPWmprMivxkyWYoadrFyhRg=) 2: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: bbn8VZme2SFOpgKyRKAoH/uBV+YPLmWrxI79m6prmiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:16:f7:81:6b:82:f3:48:09:ab:a0:34:aa:45:ed:d9:af:16:13:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Apr 17 12:47:21 2026 GMT Not After : Apr 20 20:24:21 2026 GMT Subject: CN=408F89E8300076D506F75D8C0DDCF1B0741777AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:67:bd:40:dd:b6:52:1a:91:5f:1c:8c:e7:f9: f5:d9:ab:4a:78:cf:f0:45:99:07:6c:5f:82:c7:4f: af:7d:59:17:a5:ac:b4:ad:f2:85:38:98:86:5a:2e: 62:77:05:73:76:36:7d:50:06:5e:33:bf:3c:ea:06: cb:dd:4a:67:71:de:41:0c:78:f1:a6:cd:1b:6b:24: 42:3d:23:b9:ea:36:df:ef:f5:42:56:ac:c7:31:85: 6d:a2:61:00:84:1e:5b:c5:7c:58:44:e0:52:84:10: 97:19:69:7c:d3:33:73:d7:28:b1:3d:3c:1e:a4:2e: 2b:ca:d8:2a:8a:aa:99:0b:99:5f:b3:50:f7:1b:0e: f3:55:9a:4f:84:bd:02:33:d3:0b:80:7b:8c:9b:10: 25:82:2b:9e:cb:bc:64:cc:59:84:69:8d:6e:5c:4a: 5b:0f:35:ff:02:e1:35:32:16:41:a8:33:eb:eb:48: a0:1c:a6:47:8e:d0:49:ca:ae:58:90:27:d9:ba:42: 0f:22:d9:3b:d9:ed:b7:15:73:e0:b1:d6:c6:e4:e0: 31:c8:6f:58:ac:0e:4c:2f:e0:35:16:f3:c5:64:71: b5:c9:24:84:e6:1e:6f:8f:07:0e:49:52:6f:c3:90: aa:19:4a:9c:e1:f8:e7:dc:0e:1f:3d:c7:e8:08:b9: 49:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8F:89:E8:30:00:76:D5:06:F7:5D:8C:0D:DC:F1:B0:74:17:77:AA X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:08:1f:e5:e0:05:47:05:c3:2a:16:8c:fe:5d:18:37:cf:15: aa:5b:00:9b:78:72:1c:24:0b:57:88:25:0b:c1:37:3f:97:ab: 15:57:68:35:fd:49:aa:33:d8:18:fa:d1:3b:ea:ed:b0:20:77: 82:d0:7a:a6:12:60:ce:9f:b2:a3:03:b8:20:3a:df:65:2d:a2: f8:68:93:98:1f:84:8a:d1:b3:b2:56:22:f6:5d:15:5b:64:20: 12:ba:27:e9:c2:82:9b:1b:67:25:87:bb:cd:55:db:f7:cd:1a: e7:a3:8f:80:26:46:7b:cb:a6:20:80:6b:9e:b6:aa:c8:86:f7: b2:89:61:69:1b:31:78:62:5e:ff:14:51:97:16:06:cd:be:1a: 0d:2e:fd:fb:d0:c9:92:d5:46:06:c5:c5:c9:8b:2b:31:e6:7b: 57:5a:0d:34:ad:5e:c4:03:01:a8:7b:aa:b7:88:f1:c1:0b:e6: ae:bd:fa:4d:fb:88:0a:9c:c1:8e:7e:f3:19:f3:6e:49:cb:9b: 79:65:cc:20:c3:64:15:24:3a:a7:55:ec:12:ea:6a:54:51:d3: 4f:a2:3a:27:b8:bd:98:99:20:04:f1:59:a0:12:a6:01:9b:3f: 10:e8:6c:8e:9e:1e:24:28:bf:4d:e3:24:ea:69:ce:40:4c:e8: e4:fe:65:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdRb3gWuC80gJq6A0qkXt2a8WE3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNjA0MTcxMjQ3MjFaFw0yNjA0MjAyMDI0MjFaMDMxMTAvBgNV BAMTKDQwOEY4OUU4MzAwMDc2RDUwNkY3NUQ4QzBERENGMUIwNzQxNzc3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZ71A3bZSGpFfHIzn+fXZq0p4 z/BFmQdsX4LHT699WRelrLSt8oU4mIZaLmJ3BXN2Nn1QBl4zvzzqBsvdSmdx3kEM ePGmzRtrJEI9I7nqNt/v9UJWrMcxhW2iYQCEHlvFfFhE4FKEEJcZaXzTM3PXKLE9 PB6kLivK2CqKqpkLmV+zUPcbDvNVmk+EvQIz0wuAe4ybECWCK57LvGTMWYRpjW5c SlsPNf8C4TUyFkGoM+vrSKAcpkeO0EnKrliQJ9m6Qg8i2TvZ7bcVc+Cx1sbk4DHI b1isDkwv4DUW88VkcbXJJITmHm+PBw5JUm/DkKoZSpzh+OfcDh89x+gIuUl1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQI+J6DAAdtUG912MDdzxsHQXd6owHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEIH+XgBUcFwyoWjP5dGDfPFapbAJt4chwk C1eIJQvBNz+XqxVXaDX9Saoz2Bj60Tvq7bAgd4LQeqYSYM6fsqMDuCA632Utovho k5gfhIrRs7JWIvZdFVtkIBK6J+nCgpsbZyWHu81V2/fNGuejj4AmRnvLpiCAa562 qsiG97KJYWkbMXhiXv8UUZcWBs2+Gg0u/fvQyZLVRgbFxcmLKzHme1daDTStXsQD Aah7qreI8cEL5q69+k37iAqcwY5+8xnzbknLm3llzCDDZBUkOqdV7BLqalRR00+i Oie4vZiZIATxWaASpgGbPxDobI6eHiQov03jJOppzkBM6OT+ZUM= -----END CERTIFICATE-----Generated at Sat Apr 18 03:32:33 2026 by rpki-client