$ rpki-client -vvf repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft File: 708351A7D650085780AA7D6B77F317953F16F999.mft (raw, json) Hash identifier: za1TrYgf87PngvjoURRBpHuvbZR1iZIPEpHYbXiRagg= Subject key identifier: 53:51:04:19:F3:DD:F7:F4:99:99:76:D3:60:F1:E0:ED:0B:09:CB:D9 Authority key identifier: 70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 Certificate issuer: /CN=708351A7D650085780AA7D6B77F317953F16F999 Certificate serial: 2578AC2689DFB0D52B6902B389D960AA2A3AB32D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft Manifest number: 01E4 Signing time: Sun 01 Mar 2026 07:40:50 +0000 Manifest this update: Sun 01 Mar 2026 07:35:50 +0000 Manifest next update: Wed 04 Mar 2026 14:21:50 +0000 Files and hashes: 1: 3130332e3139362e3135362e302f32342d3234203d3e20313530393531.roa (hash: XWHKWl1bl7orQ2vAhEeH2m+P668uWWue/l7jGZqhA9o=) 2: 708351A7D650085780AA7D6B77F317953F16F999.crl (hash: doxPApggEFeEvNUJ3LN9FE9HOiIRDTulTWLL+7MEZ5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:78:ac:26:89:df:b0:d5:2b:69:02:b3:89:d9:60:aa:2a:3a:b3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708351A7D650085780AA7D6B77F317953F16F999 Validity Not Before: Mar 1 07:35:50 2026 GMT Not After : Mar 4 14:21:50 2026 GMT Subject: CN=53510419F3DDF7F4999976D360F1E0ED0B09CBD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:ef:a3:07:d5:27:df:b3:8b:ec:91:f4:52: a4:e6:71:94:14:70:e4:3a:7d:3c:4c:8a:9a:cb:93: 9b:32:df:d8:db:f2:d7:09:ff:31:ad:46:bf:0e:98: 9d:9a:9d:37:fa:1f:b2:3c:2b:64:70:da:5c:64:fd: d1:3a:d2:37:04:fb:dd:e7:92:8b:66:7c:58:af:93: 41:62:6f:ef:6b:0e:7a:49:bd:f4:13:c6:1e:d0:66: 4f:ac:dd:2c:91:da:9a:28:4e:27:7e:44:0c:ea:c6: 39:d7:7a:27:b3:d1:c8:e6:70:fe:a5:72:90:61:f6: 5b:9c:4d:9e:0d:6b:87:bf:28:4a:39:2b:ba:4f:7f: d1:21:a1:13:0c:01:81:ba:6f:c6:8d:66:b2:c4:1b: b3:03:e4:48:49:f6:01:59:8d:f4:61:ee:8a:6f:6a: bc:73:bb:fe:6a:26:1d:3f:89:f7:87:e0:b8:cd:60: 9b:49:22:e4:21:f6:be:56:d3:06:0e:93:5c:dc:d7: 2e:b1:5d:78:26:59:be:8b:12:69:24:d3:28:c3:6f: 40:6e:ce:7a:25:d7:93:9b:97:2f:e5:98:0e:94:ff: f9:b3:91:56:30:a5:ab:c9:6e:ca:e2:1b:91:4f:9a: c2:9d:1f:0e:51:1d:08:13:d3:7e:76:6a:c2:76:b7: 7c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:51:04:19:F3:DD:F7:F4:99:99:76:D3:60:F1:E0:ED:0B:09:CB:D9 X509v3 Authority Key Identifier: keyid:70:83:51:A7:D6:50:08:57:80:AA:7D:6B:77:F3:17:95:3F:16:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708351A7D650085780AA7D6B77F317953F16F999.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91e0d17c-edd1-4202-b736-3b527efa6ba2/0/708351A7D650085780AA7D6B77F317953F16F999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6b:91:c2:44:e6:c6:71:10:da:11:a7:05:f2:8f:d6:9f:37: 3f:99:0f:32:4e:2e:e7:25:12:fe:35:1b:4c:4a:0f:e5:8a:b1: b6:a3:9c:d4:d8:32:7e:e1:77:e4:6d:ae:81:70:d6:74:0b:3d: 9f:a8:0b:63:45:26:83:3e:fc:02:77:8d:2d:06:79:1a:01:b5: 0f:6e:8b:bb:39:32:db:71:cc:aa:50:ba:67:f2:e5:a8:5f:92: 91:44:91:cc:f7:51:e4:44:05:89:52:58:ba:af:00:c1:cb:dd: 32:e5:a5:4f:7f:f1:64:79:9f:9d:20:0b:66:de:ba:49:1b:8e: b8:0a:89:7a:28:0a:a9:5b:77:68:a4:96:4e:a4:4c:67:c7:71: 68:21:30:6f:14:9b:1a:4c:bf:0f:4e:07:76:38:f1:8b:11:da: ba:54:0a:47:2c:c4:41:1a:10:cb:5d:e0:a7:7c:dc:b8:b7:84: 05:32:54:a7:7f:91:7f:3f:37:b2:13:07:8e:3d:b4:22:56:c6: 5b:6d:34:7a:53:69:6d:28:37:01:8d:6c:a7:ca:a3:2c:fd:21: 70:b3:9a:e1:75:0a:db:33:a1:58:ab:ef:d3:d8:aa:8c:bf:4c: 9b:df:f7:aa:75:a5:50:c0:82:cb:8d:61:c1:d5:d1:f6:d1:45: 7b:66:da:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXisJonfsNUraQKzidlgqio6sy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUz RjE2Rjk5OTAeFw0yNjAzMDEwNzM1NTBaFw0yNjAzMDQxNDIxNTBaMDMxMTAvBgNV BAMTKDUzNTEwNDE5RjNEREY3RjQ5OTk5NzZEMzYwRjFFMEVEMEIwOUNCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8++jB9Un37OL7JH0UqTmcZQU cOQ6fTxMiprLk5sy39jb8tcJ/zGtRr8OmJ2anTf6H7I8K2Rw2lxk/dE60jcE+93n kotmfFivk0Fib+9rDnpJvfQTxh7QZk+s3SyR2pooTid+RAzqxjnXeiez0cjmcP6l cpBh9lucTZ4Na4e/KEo5K7pPf9EhoRMMAYG6b8aNZrLEG7MD5EhJ9gFZjfRh7opv arxzu/5qJh0/ifeH4LjNYJtJIuQh9r5W0wYOk1zc1y6xXXgmWb6LEmkk0yjDb0Bu znol15Obly/lmA6U//mzkVYwpavJbsriG5FPmsKdHw5RHQgT0352asJ2t3xXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU1EEGfPd9/SZmXbTYPHg7QsJy9kwHwYDVR0j BBgwFoAUcINRp9ZQCFeAqn1rd/MXlT8W+ZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWUwZDE3Yy1lZGQxLTQyMDItYjczNi0zYjUyN2VmYTZiYTIvMC83MDgzNTFBN0Q2 NTAwODU3ODBBQTdENkI3N0YzMTc5NTNGMTZGOTk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3OTUzRjE2 Rjk5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFlMGQxN2MtZWRkMS00MjAyLWI3 MzYtM2I1MjdlZmE2YmEyLzAvNzA4MzUxQTdENjUwMDg1NzgwQUE3RDZCNzdGMzE3 OTUzRjE2Rjk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRrkcJE5sZxENoRpwXyj9afNz+ZDzJOLucl Ev41G0xKD+WKsbajnNTYMn7hd+RtroFw1nQLPZ+oC2NFJoM+/AJ3jS0GeRoBtQ9u i7s5MttxzKpQumfy5ahfkpFEkcz3UeREBYlSWLqvAMHL3TLlpU9/8WR5n50gC2be ukkbjrgKiXooCqlbd2iklk6kTGfHcWghMG8UmxpMvw9OB3Y48YsR2rpUCkcsxEEa EMtd4Kd83Li3hAUyVKd/kX8/N7ITB449tCJWxlttNHpTaW0oNwGNbKfKoyz9IXCz muF1CtszoVir79PYqoy/TJvf96p1pVDAgsuNYcHV0fbRRXtm2ps= -----END CERTIFICATE-----Generated at Mon Mar 2 08:04:44 2026 by rpki-client