$ rpki-client -vvf repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft File: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft (raw, json) Hash identifier: 2BLbltd5ZXjjlF5qYgb/Ohz/OaiqH7Yc3wTdsjXvS9c= Subject key identifier: A8:06:B0:58:FD:FE:B4:28:B1:42:D9:95:C1:BF:3B:DE:F7:24:BB:15 Authority key identifier: 70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 Certificate issuer: /CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Certificate serial: 4041843D2930198ACDD03A02FA4E466EAA0D0EDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft Manifest number: 0351 Signing time: Sat 28 Feb 2026 17:42:00 +0000 Manifest this update: Sat 28 Feb 2026 17:37:00 +0000 Manifest next update: Tue 03 Mar 2026 21:14:00 +0000 Files and hashes: 1: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl (hash: NH/3BIvFruD88oslJX647bjJw6MN7387dKvVr9LbkcU=) 2: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: pDYNyQPy9+qJb0nXEhgW9usosth8XXlKTG8zEx7l7ik=) 3: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: HkdEC8K8+4wdSCshXjogdBtnn9p7RHZgPqc+KEcGBcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:41:84:3d:29:30:19:8a:cd:d0:3a:02:fa:4e:46:6e:aa:0d:0e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Validity Not Before: Feb 28 17:37:00 2026 GMT Not After : Mar 3 21:14:00 2026 GMT Subject: CN=A806B058FDFEB428B142D995C1BF3BDEF724BB15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5c:19:76:97:e5:ce:72:21:b7:a4:aa:1d:dc: 15:dd:9f:25:29:4b:cb:12:6e:5c:9e:2f:c1:04:d6: b4:71:e1:eb:d4:a5:33:ec:98:c2:9a:ad:3e:bb:32: 77:9b:24:b5:ed:ca:d6:38:19:0a:2a:84:be:1f:b7: 54:5b:1b:c6:67:a2:58:1c:32:b2:41:2b:69:22:ba: dc:14:8c:5e:77:3c:07:cb:74:26:47:5a:9a:a5:7e: f7:5c:15:80:cf:58:34:63:e1:77:96:69:39:d3:57: 09:8b:f8:a3:03:bf:da:8f:dc:f2:1d:b3:5e:6f:4a: 40:ff:51:e1:55:ae:69:62:d2:63:87:2a:50:9d:43: d2:1b:13:36:2b:62:f3:7b:57:b5:80:21:50:d7:4a: dc:8a:e4:ce:24:43:45:9b:72:28:8f:17:8e:db:b2: b0:18:73:73:37:8e:d3:91:b7:c6:ed:92:19:d6:4c: 87:2e:93:e7:36:5f:3c:af:26:fd:5e:59:41:f6:50: 22:21:40:93:87:cf:cd:e4:77:bb:a1:0d:32:45:f7: 0a:d6:d2:25:75:36:ee:1f:93:d6:0d:2d:48:24:63: 0d:77:d3:3d:3f:5c:f3:be:27:0b:7e:5c:0d:25:e8: 8c:a9:fd:ea:1a:e2:bd:05:61:2e:6d:6c:18:f4:51: 7e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:06:B0:58:FD:FE:B4:28:B1:42:D9:95:C1:BF:3B:DE:F7:24:BB:15 X509v3 Authority Key Identifier: keyid:70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:44:c4:76:b3:e7:f1:89:4f:21:9e:9a:22:da:ff:f5:d3:79: 9c:60:4c:fd:3c:0b:07:7a:38:ca:86:88:e3:24:df:55:08:b5: 3e:ba:b5:eb:c9:c0:1d:33:2b:a1:e6:e5:3f:17:8a:ae:4a:f6: 24:74:ac:b5:f6:d0:69:7f:92:23:06:e6:c0:85:0c:fd:f2:69: 61:a2:f5:5b:97:66:84:bb:b8:ef:40:b7:f6:23:ca:90:79:25: 0c:7a:4c:ec:fc:e4:79:ba:9f:f3:b0:1e:9a:d8:f7:ff:cd:af: 53:79:4c:21:ef:6a:e7:c8:42:9c:40:f5:82:50:2a:d1:fa:49: e6:5c:2e:97:17:c5:51:57:6f:b1:a4:1b:ae:0a:37:c2:82:2e: ee:a2:37:ea:18:68:26:26:5d:b9:0d:12:b5:3d:97:4b:cb:22: 09:57:30:dd:9e:6b:84:ca:b9:21:71:91:42:76:10:f4:d0:ec: db:3c:c8:54:88:4b:da:66:98:06:63:89:ba:42:12:0a:28:81: f6:65:b3:3d:27:44:10:35:fe:e6:ca:be:a9:11:8b:28:6c:c9: 68:f0:eb:d9:5d:06:4e:c1:92:98:ec:dc:42:0b:eb:bb:5b:28: 78:b5:a1:51:06:f3:4f:0a:ba:f3:b9:32:0c:cd:45:b6:92:ea: d5:52:26:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEGEPSkwGYrN0DoC+k5GbqoNDt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4 NDZBMkQ2NDAeFw0yNjAyMjgxNzM3MDBaFw0yNjAzMDMyMTE0MDBaMDMxMTAvBgNV BAMTKEE4MDZCMDU4RkRGRUI0MjhCMTQyRDk5NUMxQkYzQkRFRjcyNEJCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChXBl2l+XOciG3pKod3BXdnyUp S8sSblyeL8EE1rRx4evUpTPsmMKarT67MnebJLXtytY4GQoqhL4ft1RbG8Znolgc MrJBK2kiutwUjF53PAfLdCZHWpqlfvdcFYDPWDRj4XeWaTnTVwmL+KMDv9qP3PId s15vSkD/UeFVrmli0mOHKlCdQ9IbEzYrYvN7V7WAIVDXStyK5M4kQ0WbciiPF47b srAYc3M3jtORt8btkhnWTIcuk+c2XzyvJv1eWUH2UCIhQJOHz83kd7uhDTJF9wrW 0iV1Nu4fk9YNLUgkYw130z0/XPO+Jwt+XA0l6Iyp/eoa4r0FYS5tbBj0UX7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqAawWP3+tCixQtmVwb873vckuxUwHwYDVR0j BBgwFoAUcAuVh8TPp/Kx2ffJLLCw24RqLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODMyODIzNy03NTBmLTQwMjItYjhiMi1kYmE3M2I2NzEzZWMvMC83MDBCOTU4N0M0 Q0ZBN0YyQjFEOUY3QzkyQ0IwQjBEQjg0NkEyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4NDZB MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIw REI4NDZBMkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBExHaz5/GJTyGemiLa//XTeZxgTP08Cwd6 OMqGiOMk31UItT66tevJwB0zK6Hm5T8Xiq5K9iR0rLX20Gl/kiMG5sCFDP3yaWGi 9VuXZoS7uO9At/YjypB5JQx6TOz85Hm6n/OwHprY9//Nr1N5TCHvaufIQpxA9YJQ KtH6SeZcLpcXxVFXb7GkG64KN8KCLu6iN+oYaCYmXbkNErU9l0vLIglXMN2ea4TK uSFxkUJ2EPTQ7Ns8yFSIS9pmmAZjibpCEgoogfZlsz0nRBA1/ubKvqkRiyhsyWjw 69ldBk7Bkpjs3EIL67tbKHi1oVEG808KuvO5MgzNRbaS6tVSJkk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:03 2026 by rpki-client