$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: sXt/MIhWq62O3Ds8eIZM5jMGu1uqR/RLWbN2eQyYhPI= Subject key identifier: F7:07:99:E8:52:D5:53:9C:72:39:8D:48:38:A3:2E:72:D5:97:37:14 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 31F4851CA151B2C310788EEF1B684418500DCACC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 01F8 Signing time: Wed 15 Apr 2026 10:30:51 +0000 Manifest this update: Wed 15 Apr 2026 10:25:51 +0000 Manifest next update: Sat 18 Apr 2026 21:11:51 +0000 Files and hashes: 1: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: GgmAec+qPqQx9xm3wppDLZth/E05L3b3tMWxZGySuoE=) 2: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: XWHKWl1bl7orQ2vAhEeH2m+P668uWWue/l7jGZqhA9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 21:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f4:85:1c:a1:51:b2:c3:10:78:8e:ef:1b:68:44:18:50:0d:ca:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Apr 15 10:25:51 2026 GMT Not After : Apr 18 21:11:51 2026 GMT Subject: CN=F70799E852D5539C72398D4838A32E72D5973714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:5c:4a:73:ab:70:62:02:1b:a0:f7:32:f4: 5d:83:e7:49:d2:1d:6f:fa:52:6f:15:31:93:92:a8: 5a:de:ba:16:53:13:cf:f0:b5:19:ff:dd:15:94:a8: 9f:8b:00:91:b7:b9:cf:09:87:6b:9d:75:f8:41:b4: 7e:33:3e:f7:e5:76:99:56:cd:e1:5f:59:ad:dd:9a: 59:c4:86:87:88:23:c4:e6:0c:b2:3f:7c:e9:9f:3a: 3e:48:bc:93:1b:4b:9e:d5:29:31:67:80:86:26:50: 2f:50:4e:db:71:96:90:89:be:02:b3:54:cf:28:b2: 0d:7c:7d:3e:28:7d:57:0e:fd:79:fc:4c:7b:e8:b8: c9:0e:6d:c9:f8:77:78:05:d8:d9:f8:af:dd:88:e7: 1d:b8:14:99:26:ed:1e:8c:61:ee:ea:d6:94:61:9b: a2:f2:9a:29:14:44:71:8b:09:3a:af:e1:51:49:f3: 5d:b2:a6:c6:df:34:41:18:b1:f8:3a:e6:16:50:25: ea:93:fe:24:e1:12:bd:1b:2a:8b:26:e8:09:f5:75: c5:9a:14:ad:d5:96:37:f9:ef:2b:82:14:1f:ad:53: 78:cd:92:56:c7:7a:74:05:f3:f3:58:f0:f4:3c:ad: 0b:ef:2e:cb:1f:1e:72:bf:c3:68:e5:45:34:fa:ab: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:07:99:E8:52:D5:53:9C:72:39:8D:48:38:A3:2E:72:D5:97:37:14 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:58:88:4c:ff:da:9d:8c:e4:8f:41:c4:59:0c:a2:32:62:a9: 64:58:2f:f9:e8:ba:be:cc:c9:2c:cc:0f:b9:88:37:6d:be:3c: b0:8a:91:0e:ff:3a:39:db:ba:23:8f:11:aa:94:a6:21:cf:c7: f9:ad:26:41:b0:b7:73:ea:ef:a3:c0:01:95:2c:9f:f2:83:7e: c2:fd:21:a5:7c:07:cd:39:db:d6:15:95:ea:ad:72:57:f6:ae: 19:f6:a8:f4:4c:01:d6:e1:32:38:23:41:a1:87:40:c8:1f:c0: 68:f6:98:37:f0:6c:35:ab:16:41:33:ce:2b:4c:90:e9:5f:2f: c5:74:ac:c7:82:ca:29:18:18:e4:06:0b:04:0f:c3:b7:cd:70: c1:ce:91:c7:f5:13:26:58:3d:50:ff:c3:a3:bb:c3:14:fd:ee: 13:99:0d:86:a1:8a:17:6c:eb:f0:6d:42:4d:8b:86:90:5b:25: 64:f9:df:7a:eb:54:db:91:b4:d2:d7:88:aa:35:b2:66:25:76: 8e:da:ab:6d:e9:f3:33:c9:09:9b:5c:84:aa:c7:5f:75:bc:3f: 4c:55:57:90:ff:b3:a8:78:9d:27:0a:51:bd:69:7a:79:c6:74: 25:77:0e:2e:36:82:e6:c5:df:51:3b:a0:42:b9:50:e8:9f:8b: 5d:c9:27:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfSFHKFRssMQeI7vG2hEGFANyswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNjA0MTUxMDI1NTFaFw0yNjA0MTgyMTExNTFaMDMxMTAvBgNV BAMTKEY3MDc5OUU4NTJENTUzOUM3MjM5OEQ0ODM4QTMyRTcyRDU5NzM3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB21xKc6twYgIboPcy9F2D50nS HW/6Um8VMZOSqFreuhZTE8/wtRn/3RWUqJ+LAJG3uc8Jh2uddfhBtH4zPvfldplW zeFfWa3dmlnEhoeII8TmDLI/fOmfOj5IvJMbS57VKTFngIYmUC9QTttxlpCJvgKz VM8osg18fT4ofVcO/Xn8THvouMkObcn4d3gF2Nn4r92I5x24FJkm7R6MYe7q1pRh m6LymikURHGLCTqv4VFJ812ypsbfNEEYsfg65hZQJeqT/iThEr0bKosm6An1dcWa FK3Vljf57yuCFB+tU3jNklbHenQF8/NY8PQ8rQvvLssfHnK/w2jlRTT6q2fxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9weZ6FLVU5xyOY1IOKMuctWXNxQwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxYiEz/2p2M5I9BxFkMojJiqWRYL/nour7M ySzMD7mIN22+PLCKkQ7/OjnbuiOPEaqUpiHPx/mtJkGwt3Pq76PAAZUsn/KDfsL9 IaV8B80529YVleqtclf2rhn2qPRMAdbhMjgjQaGHQMgfwGj2mDfwbDWrFkEzzitM kOlfL8V0rMeCyikYGOQGCwQPw7fNcMHOkcf1EyZYPVD/w6O7wxT97hOZDYahihds 6/BtQk2LhpBbJWT533rrVNuRtNLXiKo1smYldo7aq23p8zPJCZtchKrHX3W8P0xV V5D/s6h4nScKUb1pennGdCV3Di42gubF31E7oEK5UOifi13JJ0I= -----END CERTIFICATE-----Generated at Fri Apr 17 14:16:10 2026 by rpki-client