$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: eIPROe7RoEByp8OpCjmqWaEYOCsMWAYj4csiAIhUBRw= Subject key identifier: AF:F9:3D:CA:63:51:53:B6:BD:92:19:C5:C8:99:0B:3F:C7:0B:01:59 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 0B841C1B3437A85E210EE0B2C571A10859C91118 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: 0174 Signing time: Sun 01 Mar 2026 17:51:07 +0000 Manifest this update: Sun 01 Mar 2026 17:46:07 +0000 Manifest next update: Thu 05 Mar 2026 03:38:07 +0000 Files and hashes: 1: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: k4r6WzhxzBcS3VSCnW5AcBSPgRuHkdZqCOJR8VV2Nyw=) 2: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: gFN+RqaVYAHljIpGVyE3DHLjjPegDP1q3XcX0pRNuf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:84:1c:1b:34:37:a8:5e:21:0e:e0:b2:c5:71:a1:08:59:c9:11:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Mar 1 17:46:07 2026 GMT Not After : Mar 5 03:38:07 2026 GMT Subject: CN=AFF93DCA635153B6BD9219C5C8990B3FC70B0159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a2:09:50:ab:c6:06:6c:e1:ed:be:0d:42:dd: 2c:9d:32:f4:d6:28:8b:78:74:87:df:94:1b:a3:cd: 5e:18:d1:32:5d:ad:56:c8:9a:c0:6c:81:e2:8f:64: bb:18:67:17:c6:c1:87:f8:a4:af:c2:36:5b:2a:e2: e0:0e:08:b9:f7:1e:6f:69:a8:e3:3f:bd:1b:2c:db: 48:dc:a9:35:7f:9f:00:64:83:de:f3:a0:7f:86:eb: d2:70:33:f8:d6:3b:07:5c:a0:94:2b:8f:21:c3:74: d4:3e:7b:12:17:34:8c:0a:eb:df:d2:d8:66:85:84: 59:48:ba:84:42:3d:2b:db:d3:0f:69:37:1b:0f:8a: 48:aa:42:ee:fb:70:98:f4:7a:7c:46:09:d2:b9:6c: 7e:dc:c8:a5:1c:53:00:61:b9:1f:2d:94:f0:4f:5c: 6e:19:c1:a8:a0:3d:d9:3f:51:78:88:61:2a:46:4e: 1d:b1:af:74:bb:71:da:45:06:9b:b2:72:06:9a:63: bd:1d:65:22:73:b5:0b:a2:40:9b:34:00:b9:52:b9: 52:31:4f:22:ac:4f:d0:09:77:e3:5b:e2:f6:f2:b6: 65:74:1c:69:4b:84:8d:01:27:59:c2:b1:cb:e3:75: 40:7c:67:cf:3d:ea:0b:1c:44:d7:15:50:fa:55:95: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F9:3D:CA:63:51:53:B6:BD:92:19:C5:C8:99:0B:3F:C7:0B:01:59 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f7:e8:ca:68:b6:92:6b:39:29:e2:04:90:ce:f0:b2:7e:0f: d1:5a:e2:ab:f2:99:7b:69:dc:cf:a0:62:f1:84:d1:35:8a:e9: 26:20:36:0c:00:d4:3c:7d:dd:80:bb:b5:61:ea:89:c1:3b:03: ed:f0:26:57:1b:af:29:02:2f:03:99:1a:a9:4e:10:e4:90:70: 8f:d0:9a:22:ee:d1:6c:2c:54:5c:ba:29:5a:cd:13:fd:e0:48: 01:de:34:d2:d8:94:ef:52:11:9e:30:e1:d4:82:e8:70:f4:49: c9:2f:0a:b5:b9:1a:83:3f:61:82:4a:00:3e:62:2f:b3:25:ea: 63:12:c4:9e:e9:63:97:ab:62:f2:a1:e1:f7:a2:a7:2e:2d:1b: 91:be:53:fd:1e:22:d8:87:3d:e2:78:bc:8b:8f:f1:16:1c:41: fa:0f:e1:e4:04:32:88:ea:da:89:d0:9f:d5:83:37:4d:c4:39: 36:b1:e8:5f:48:60:44:61:34:63:c1:43:1e:31:32:83:e5:b8: 48:b0:0a:4b:c3:a1:d2:1f:bc:53:8f:d7:5e:8c:15:6b:45:2f: 71:7b:6a:39:e6:b4:90:86:84:21:2a:5a:9a:83:19:6d:64:d5: 3c:01:ca:eb:25:29:41:80:79:d7:0a:4b:08:91:ca:cc:a5:19: 8a:39:a6:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4QcGzQ3qF4hDuCyxXGhCFnJERgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNjAzMDExNzQ2MDdaFw0yNjAzMDUwMzM4MDdaMDMxMTAvBgNV BAMTKEFGRjkzRENBNjM1MTUzQjZCRDkyMTlDNUM4OTkwQjNGQzcwQjAxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0oglQq8YGbOHtvg1C3SydMvTW KIt4dIfflBujzV4Y0TJdrVbImsBsgeKPZLsYZxfGwYf4pK/CNlsq4uAOCLn3Hm9p qOM/vRss20jcqTV/nwBkg97zoH+G69JwM/jWOwdcoJQrjyHDdNQ+exIXNIwK69/S 2GaFhFlIuoRCPSvb0w9pNxsPikiqQu77cJj0enxGCdK5bH7cyKUcUwBhuR8tlPBP XG4ZwaigPdk/UXiIYSpGTh2xr3S7cdpFBpuycgaaY70dZSJztQuiQJs0ALlSuVIx TyKsT9AJd+Nb4vbytmV0HGlLhI0BJ1nCscvjdUB8Z8896gscRNcVUPpVlbsFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr/k9ymNRU7a9khnFyJkLP8cLAVkwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJr36MpotpJrOSniBJDO8LJ+D9Fa4qvymXtp 3M+gYvGE0TWK6SYgNgwA1Dx93YC7tWHqicE7A+3wJlcbrykCLwOZGqlOEOSQcI/Q miLu0WwsVFy6KVrNE/3gSAHeNNLYlO9SEZ4w4dSC6HD0SckvCrW5GoM/YYJKAD5i L7Ml6mMSxJ7pY5erYvKh4feipy4tG5G+U/0eItiHPeJ4vIuP8RYcQfoP4eQEMojq 2onQn9WDN03EOTax6F9IYERhNGPBQx4xMoPluEiwCkvDodIfvFOP116MFWtFL3F7 ajnmtJCGhCEqWpqDGW1k1TwByuslKUGAedcKSwiRysylGYo5pr4= -----END CERTIFICATE-----Generated at Tue Mar 3 02:43:17 2026 by rpki-client