$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft (raw, json) Hash identifier: OGUCVXCtJkOUqce49gFYwzlpCldokb4euDYQs0szVxs= Subject key identifier: 15:B0:39:4E:EE:84:A4:C2:13:21:90:DA:AF:C8:3C:9A:D4:D9:C7:73 Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Certificate serial: 4C307BAFDC0E54A0DB03B91A10C9453EB2FD1CAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft Manifest number: 0213 Signing time: Sat 18 Apr 2026 06:02:37 +0000 Manifest this update: Sat 18 Apr 2026 05:57:37 +0000 Manifest next update: Tue 21 Apr 2026 14:21:37 +0000 Files and hashes: 1: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl (hash: SOMRW7jGHWYuyTlmezAi2LASWz4Djm7yzVe81spmvQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 14:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:30:7b:af:dc:0e:54:a0:db:03:b9:1a:10:c9:45:3e:b2:fd:1c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Validity Not Before: Apr 18 05:57:37 2026 GMT Not After : Apr 21 14:21:37 2026 GMT Subject: CN=15B0394EEE84A4C2132190DAAFC83C9AD4D9C773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:62:5d:ca:4d:26:93:5c:28:b9:da:e4:b3: 46:b4:b0:53:1a:5d:ed:fe:6b:db:cf:9d:b6:0d:92: 29:bd:fa:91:19:55:cd:37:32:e5:03:ad:38:c5:45: f2:e9:a4:8b:6d:e9:c4:f2:3e:72:64:fb:e8:db:6e: 0c:e5:5a:9a:4a:49:44:ac:0e:1e:3f:92:20:91:cc: 31:00:7e:dd:e2:24:74:10:b3:53:2a:92:af:b6:aa: 12:61:3a:7a:88:da:a8:b7:19:72:05:ba:d7:75:b7: c7:9d:92:8e:38:b2:39:e5:ef:4d:62:6d:3a:f2:30: f7:5a:0c:77:e9:ee:f6:f6:be:6a:bd:a4:f3:ee:9e: 47:c7:64:b3:d6:17:bf:ac:39:9b:65:6f:c1:0b:60: 71:bc:5f:68:98:bf:23:78:b5:09:f3:c3:0c:1c:15: d7:40:24:7c:b0:c3:c4:b3:9f:7e:0b:f2:4d:a8:21: 93:db:49:f3:f4:b6:2c:af:9e:ac:82:36:8c:e9:bd: 5d:4a:ae:e4:3f:a5:66:82:ad:fe:19:10:17:2b:72: 24:3e:1e:8a:23:5d:ca:d6:92:67:ba:d0:91:d6:f7: 6d:78:4a:48:d3:40:0d:c0:9e:36:7f:f0:53:31:69: 95:77:ff:e6:4f:ec:49:dc:67:94:76:00:77:26:ab: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B0:39:4E:EE:84:A4:C2:13:21:90:DA:AF:C8:3C:9A:D4:D9:C7:73 X509v3 Authority Key Identifier: keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:57:e0:af:99:47:f7:10:05:c4:48:1f:ec:27:71:76:c0:5b: a1:14:e1:9c:52:2f:80:84:1c:d2:15:d4:f0:15:85:15:92:69: 00:8f:59:63:0c:60:b5:f0:e6:e7:0c:69:f6:f6:aa:bd:bd:a0: 73:18:ff:df:26:85:37:1b:f3:77:4b:2f:ea:cc:a8:38:f8:0b: 3f:2d:79:40:67:07:ab:65:8f:9a:1b:b6:de:66:ec:f5:2d:4c: db:6c:13:cb:ac:8b:01:98:e8:85:db:94:b6:eb:70:fb:d2:5e: 01:b5:33:75:8b:a5:84:92:86:28:cd:a8:69:de:83:c1:06:b5: 71:f9:80:f5:5a:66:68:96:86:96:3d:88:df:c4:35:0a:c9:6c: e0:9e:ae:33:79:08:e6:26:d9:86:69:54:cd:dd:a0:42:78:88: aa:55:12:cd:91:e7:47:26:1d:89:e5:6a:3b:f8:fe:dd:ed:d5: 3c:b1:03:54:92:ee:24:b5:cc:af:36:81:2e:fb:2b:ec:2d:ec: 21:91:34:b0:5e:63:d3:bb:27:3a:34:28:77:13:7b:b6:2a:2c: 0b:7c:b3:e8:b5:71:ba:57:be:76:41:59:f1:90:92:fe:11:bc: 79:d5:d3:fb:1f:68:c6:eb:45:3e:e9:82:97:70:7d:a2:2b:8f: ea:ac:75:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDB7r9wOVKDbA7kaEMlFPrL9HK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4 NjE4OUIwQzAeFw0yNjA0MTgwNTU3MzdaFw0yNjA0MjExNDIxMzdaMDMxMTAvBgNV BAMTKDE1QjAzOTRFRUU4NEE0QzIxMzIxOTBEQUFGQzgzQzlBRDREOUM3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnGJdyk0mk1woudrks0a0sFMa Xe3+a9vPnbYNkim9+pEZVc03MuUDrTjFRfLppItt6cTyPnJk++jbbgzlWppKSUSs Dh4/kiCRzDEAft3iJHQQs1Mqkq+2qhJhOnqI2qi3GXIFutd1t8edko44sjnl701i bTryMPdaDHfp7vb2vmq9pPPunkfHZLPWF7+sOZtlb8ELYHG8X2iYvyN4tQnzwwwc FddAJHyww8Szn34L8k2oIZPbSfP0tiyvnqyCNozpvV1KruQ/pWaCrf4ZEBcrciQ+ HoojXcrWkme60JHW9214SkjTQA3AnjZ/8FMxaZV3/+ZP7EncZ5R2AHcmq+kxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFbA5Tu6EpMITIZDar8g8mtTZx3MwHwYDVR0j BBgwFoAUcApG8MSOeE6MvLp7J+RHT4YYmwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMC83MDBBNDZGMEM0 OEU3ODRFOENCQ0JBN0IyN0U0NDc0Rjg2MTg5QjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4NjE4 OUIwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3 NEY4NjE4OUIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhX4K+ZR/cQBcRIH+wncXbAW6EU4ZxSL4CE HNIV1PAVhRWSaQCPWWMMYLXw5ucMafb2qr29oHMY/98mhTcb83dLL+rMqDj4Cz8t eUBnB6tlj5obtt5m7PUtTNtsE8usiwGY6IXblLbrcPvSXgG1M3WLpYSShijNqGne g8EGtXH5gPVaZmiWhpY9iN/ENQrJbOCerjN5COYm2YZpVM3doEJ4iKpVEs2R50cm HYnlajv4/t3t1TyxA1SS7iS1zK82gS77K+wt7CGRNLBeY9O7Jzo0KHcTe7YqLAt8 s+i1cbpXvnZBWfGQkv4RvHnV0/sfaMbrRT7pgpdwfaIrj+qsdR4= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:54 2026 by rpki-client