$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: DHCHyoV0VAHBmom6motodJGRKjpBpk21AlwggS7EbuU= Subject key identifier: 21:93:30:32:F4:D0:12:1A:84:54:B6:89:E3:32:07:45:9D:55:23:17 Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 69630F644C40683A6CF44B0EC5A8A9A17DDB6DEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 01BE Signing time: Thu 16 Apr 2026 09:10:57 +0000 Manifest this update: Thu 16 Apr 2026 09:05:57 +0000 Manifest next update: Sun 19 Apr 2026 16:16:57 +0000 Files and hashes: 1: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) 2: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: K3uesYWcXsl3C55dohjZ6bGlLqjdOEc2KnN3rbD2rjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:63:0f:64:4c:40:68:3a:6c:f4:4b:0e:c5:a8:a9:a1:7d:db:6d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Apr 16 09:05:57 2026 GMT Not After : Apr 19 16:16:57 2026 GMT Subject: CN=21933032F4D0121A8454B689E33207459D552317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:6e:68:ff:86:aa:fd:99:f1:3a:42:2c:bb: 8e:4b:4f:2a:48:f2:c9:80:5d:b5:13:36:8c:28:50: 10:96:0e:78:b5:5c:d8:be:84:22:57:ae:ae:99:95: b1:41:72:e2:98:0e:83:26:81:bb:4e:79:07:17:21: 5a:2f:b8:dc:09:9c:a8:15:8f:0a:37:58:ae:ee:2d: 30:d1:85:48:75:6d:6e:fa:d3:2d:80:2a:5e:ba:1c: 10:97:70:f1:39:1a:ed:78:c9:ff:49:d8:2f:b1:be: 93:2b:c8:20:82:58:df:de:e3:8d:bd:f3:b1:de:df: 0c:b3:b7:73:ff:80:bf:e7:1b:5f:4a:c6:d2:89:da: df:72:2b:e3:37:dd:ac:c6:51:2e:39:ef:dc:bd:81: fc:44:9d:7d:ae:57:47:00:4e:bf:ee:b3:21:be:56: 93:40:2b:09:b6:81:09:4e:90:2d:af:80:3d:85:77: b7:70:b4:21:0a:cb:1e:a0:24:5b:11:54:6a:06:10: bd:ce:70:cb:9e:db:ad:48:01:58:2c:46:ce:e1:43: cc:3d:3e:c6:cb:92:dd:51:ab:f1:72:80:40:32:c2: 5e:41:bc:7d:a9:97:fa:cd:fd:2e:34:1c:5e:2a:e8: c4:02:b8:a9:2c:36:99:f4:e0:68:0f:f6:b7:90:4e: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:93:30:32:F4:D0:12:1A:84:54:B6:89:E3:32:07:45:9D:55:23:17 X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f6:bd:f5:87:8e:09:cc:cd:40:3c:5c:0d:9d:47:b3:cb:03: e9:fd:54:7c:88:7e:7f:04:c8:78:d3:d8:69:3e:56:1b:ab:5e: 8a:1a:cb:a1:96:51:97:ff:f8:26:cc:dc:14:4c:7e:5c:c9:69: bc:a9:ac:cf:c6:3b:e9:e2:37:47:b7:4c:83:ff:ea:52:4b:24: c8:8c:91:c1:61:c9:9c:a6:84:b5:68:a2:ce:56:23:81:71:0b: 55:b0:79:47:a1:1f:f5:0a:a2:a5:9b:a9:9c:a3:c3:44:98:c1: 36:02:45:1d:05:7c:51:df:10:bb:1e:74:98:0d:95:f1:76:f8: 5a:4d:7f:43:91:d2:8b:14:e8:0a:d4:84:86:7b:ba:b4:90:37: 76:70:8d:1c:23:ee:37:5d:15:50:39:ff:83:80:4a:bc:de:f9: 83:8b:ba:c9:b3:a8:f7:30:7a:b8:48:64:58:03:ba:eb:08:93: d0:38:90:0d:3f:59:6e:e5:ba:f6:e2:2f:6b:94:4b:45:fc:4e: d3:58:ea:6e:d0:4a:17:d9:0d:a4:b0:45:55:1c:01:a9:82:80: 30:e0:27:48:d9:02:d4:19:6c:73:4d:77:5f:70:7a:f2:87:5c: 03:f4:2b:ce:79:10:fe:6e:45:3d:be:4e:a1:81:1d:48:c5:dd: c3:c2:78:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWMPZExAaDps9EsOxaipoX3bbewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNjA0MTYwOTA1NTdaFw0yNjA0MTkxNjE2NTdaMDMxMTAvBgNV BAMTKDIxOTMzMDMyRjREMDEyMUE4NDU0QjY4OUUzMzIwNzQ1OUQ1NTIzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYzG5o/4aq/ZnxOkIsu45LTypI 8smAXbUTNowoUBCWDni1XNi+hCJXrq6ZlbFBcuKYDoMmgbtOeQcXIVovuNwJnKgV jwo3WK7uLTDRhUh1bW760y2AKl66HBCXcPE5Gu14yf9J2C+xvpMryCCCWN/e4429 87He3wyzt3P/gL/nG19KxtKJ2t9yK+M33azGUS4579y9gfxEnX2uV0cATr/usyG+ VpNAKwm2gQlOkC2vgD2Fd7dwtCEKyx6gJFsRVGoGEL3OcMue261IAVgsRs7hQ8w9 PsbLkt1Rq/FygEAywl5BvH2pl/rN/S40HF4q6MQCuKksNpn04GgP9reQTtH1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIZMwMvTQEhqEVLaJ4zIHRZ1VIxcwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADb2vfWHjgnMzUA8XA2dR7PLA+n9VHyIfn8E yHjT2Gk+VhurXooay6GWUZf/+CbM3BRMflzJabyprM/GO+niN0e3TIP/6lJLJMiM kcFhyZymhLVoos5WI4FxC1WweUehH/UKoqWbqZyjw0SYwTYCRR0FfFHfELsedJgN lfF2+FpNf0OR0osU6ArUhIZ7urSQN3ZwjRwj7jddFVA5/4OASrze+YOLusmzqPcw erhIZFgDuusIk9A4kA0/WW7luvbiL2uUS0X8TtNY6m7QShfZDaSwRVUcAamCgDDg J0jZAtQZbHNNd19wevKHXAP0K855EP5uRT2+TqGBHUjF3cPCeGM= -----END CERTIFICATE-----Generated at Sat Apr 18 01:43:16 2026 by rpki-client