$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: ssv9DLK1CqszBu7YN2E6d2uQFVVtMEyvc89lYyvZCuk= Subject key identifier: 40:AB:C8:BF:66:72:62:EA:17:F5:41:13:5F:7E:A0:33:60:BB:E0:7E Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 2562DE348C6BEC486FFB210C47B50FB74618A42C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: 0114 Signing time: Sun 01 Mar 2026 15:02:16 +0000 Manifest this update: Sun 01 Mar 2026 14:57:16 +0000 Manifest next update: Wed 04 Mar 2026 15:59:16 +0000 Files and hashes: 1: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: jSEbOeozzsEZCSdGeWqpOPWmprMivxkyWYoadrFyhRg=) 2: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: jilI8OMhFJgT5smUXQC3bFk+x6H10cyNRoitbJq0/Bk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:62:de:34:8c:6b:ec:48:6f:fb:21:0c:47:b5:0f:b7:46:18:a4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Mar 1 14:57:16 2026 GMT Not After : Mar 4 15:59:16 2026 GMT Subject: CN=40ABC8BF667262EA17F541135F7EA03360BBE07E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d5:a8:7d:74:f3:7b:a8:57:24:1c:55:a5:57: ae:94:ec:ca:bf:47:0c:eb:14:f2:5c:ba:12:4f:d9: e6:f7:47:bd:39:b6:73:47:05:31:5b:f7:a7:36:d6: a5:31:91:3b:4d:b3:d3:34:19:1a:70:5b:2f:5a:b3: ba:e9:63:81:61:6e:ad:10:8a:34:13:a9:99:99:64: 95:b6:7d:2e:5c:69:d0:54:a2:6f:77:94:65:3c:53: 04:9e:64:e0:fc:ef:f5:fb:00:a9:89:a4:83:ba:44: d4:4d:04:e0:8f:36:62:0e:2c:29:ed:1d:c9:d2:05: 08:2f:38:15:04:7b:da:3a:4c:b0:43:f9:8d:3e:0f: 26:d8:98:ac:66:ba:89:d5:a6:7d:5c:0d:62:52:16: 5d:07:71:66:28:c0:29:7d:57:40:8b:37:a6:fd:ba: 7f:63:c8:46:00:47:e2:c6:bb:80:e1:7d:d0:af:47: 88:fc:1f:9c:87:a9:06:ff:0f:8f:1c:59:35:1e:f8: ec:c5:32:79:3b:1f:dd:11:66:cf:b2:af:f0:75:b9: f0:2f:45:59:4d:71:c6:a5:c4:75:06:81:0b:9d:af: e7:25:c4:13:fa:19:89:2a:63:84:3c:fd:08:62:ec: bc:eb:0d:bd:25:e6:78:28:ba:b8:21:8c:f4:f4:1d: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AB:C8:BF:66:72:62:EA:17:F5:41:13:5F:7E:A0:33:60:BB:E0:7E X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:99:9f:ec:b3:d3:37:b1:19:4d:74:67:d7:06:2c:cf:48:b2: b8:27:73:38:f1:c4:5a:66:e4:fd:27:f8:df:5b:97:65:27:5e: 18:28:db:71:a6:02:71:db:bb:df:f8:28:4a:77:8f:96:bd:4c: 9f:27:67:e6:db:43:0c:4f:0a:14:bd:f8:63:0f:a1:62:96:05: 2e:23:a7:54:5a:ce:60:04:6d:6a:32:e3:26:52:83:35:60:76: 62:38:c1:a2:75:35:2e:46:f6:e2:db:40:32:1b:64:2f:47:be: 8d:e8:8e:b4:3a:8a:f2:58:97:ed:9b:33:ce:7f:ae:3f:e1:0c: 55:a3:c1:db:76:24:dd:e6:35:5e:fd:db:f7:4e:4d:1a:3a:e9: 68:40:cd:8e:21:30:7f:89:6f:af:e1:90:49:a2:42:de:42:55: 14:77:be:88:69:0c:82:b5:4d:9a:e0:5b:4e:da:48:89:4e:1f: f9:7e:2a:f9:09:d8:6b:e3:ef:26:cd:6a:53:6a:cc:9d:9d:3e: 55:5d:eb:64:67:c7:3a:e6:05:b6:ec:4a:9a:33:a0:d1:e2:73: 3d:55:a6:be:5d:d1:16:2d:fd:7e:a5:87:93:d4:fa:d0:6c:c5: f6:db:58:68:e4:47:8b:70:12:b4:df:fb:26:0a:7b:5f:1f:28: da:8b:04:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWLeNIxr7Ehv+yEMR7UPt0YYpCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNjAzMDExNDU3MTZaFw0yNjAzMDQxNTU5MTZaMDMxMTAvBgNV BAMTKDQwQUJDOEJGNjY3MjYyRUExN0Y1NDExMzVGN0VBMDMzNjBCQkUwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD21ah9dPN7qFckHFWlV66U7Mq/ RwzrFPJcuhJP2eb3R705tnNHBTFb96c21qUxkTtNs9M0GRpwWy9as7rpY4Fhbq0Q ijQTqZmZZJW2fS5cadBUom93lGU8UwSeZOD87/X7AKmJpIO6RNRNBOCPNmIOLCnt HcnSBQgvOBUEe9o6TLBD+Y0+DybYmKxmuonVpn1cDWJSFl0HcWYowCl9V0CLN6b9 un9jyEYAR+LGu4DhfdCvR4j8H5yHqQb/D48cWTUe+OzFMnk7H90RZs+yr/B1ufAv RVlNccalxHUGgQudr+clxBP6GYkqY4Q8/Qhi7LzrDb0l5ngourghjPT0HddVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKvIv2ZyYuoX9UETX36gM2C74H4wHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGZn+yz0zexGU10Z9cGLM9IsrgnczjxxFpm 5P0n+N9bl2UnXhgo23GmAnHbu9/4KEp3j5a9TJ8nZ+bbQwxPChS9+GMPoWKWBS4j p1RazmAEbWoy4yZSgzVgdmI4waJ1NS5G9uLbQDIbZC9Hvo3ojrQ6ivJYl+2bM85/ rj/hDFWjwdt2JN3mNV792/dOTRo66WhAzY4hMH+Jb6/hkEmiQt5CVRR3vohpDIK1 TZrgW07aSIlOH/l+KvkJ2Gvj7ybNalNqzJ2dPlVd62RnxzrmBbbsSpozoNHicz1V pr5d0RYt/X6lh5PU+tBsxfbbWGjkR4twErTf+yYKe18fKNqLBOM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:11 2026 by rpki-client