$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: QTc2eJ/UUzf537FjNaHCKiKfKwedvm3kRgHxKgNuzc4= Subject key identifier: B9:04:81:A3:39:AF:71:F7:9E:F8:EE:B6:A7:47:BF:C5:7A:2F:B7:A9 Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 56472E1F89498E216380B8D389DB446CADD9E76A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: 011D Signing time: Sat 21 Mar 2026 20:22:25 +0000 Manifest this update: Sat 21 Mar 2026 20:17:25 +0000 Manifest next update: Wed 25 Mar 2026 03:41:25 +0000 Files and hashes: 1: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (hash: jSEbOeozzsEZCSdGeWqpOPWmprMivxkyWYoadrFyhRg=) 2: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: 0W1fhVgXj6CuKjmkUi+HIC1u8j5HhxZW8OHs/374cFw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:47:2e:1f:89:49:8e:21:63:80:b8:d3:89:db:44:6c:ad:d9:e7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Mar 21 20:17:25 2026 GMT Not After : Mar 25 03:41:25 2026 GMT Subject: CN=B90481A339AF71F79EF8EEB6A747BFC57A2FB7A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4f:4d:02:2d:c2:48:f0:56:4c:11:b9:6d:a5: 46:4e:34:c8:f4:95:e6:7f:ca:db:66:ae:e7:86:15: 84:f0:d3:b4:dc:96:9d:ae:45:7d:f7:96:3c:be:c5: da:32:12:de:3b:df:0e:06:4b:63:3b:d6:97:2b:1a: d0:91:3c:6b:11:3e:13:84:f5:7d:e7:b7:e7:d8:96: 1b:9d:54:49:bb:07:8a:38:62:e8:61:fc:d2:15:c8: 33:f3:a7:f3:db:03:79:e3:2e:3c:86:ab:a4:e7:cf: 03:11:90:b5:2d:fa:d2:13:21:2c:4e:5d:32:6e:64: ed:cd:db:72:b0:69:2f:95:0c:ae:1d:76:ed:3c:b5: ca:3d:b8:24:02:8f:f1:25:59:c1:8e:c6:bc:cd:4f: a7:d3:01:82:dc:7b:5d:8d:ad:2e:02:fa:fc:f1:fc: af:0c:ed:f5:5f:93:4b:7d:38:3b:6f:38:f1:95:66: 45:5c:ff:17:a1:5c:63:09:92:f2:ac:21:d1:5e:d7: 0b:27:24:4a:f0:53:37:5f:ea:68:6a:d5:34:0a:69: 12:d6:0c:8e:59:dc:59:1c:4a:85:c3:69:aa:2b:c5: ee:d0:09:b9:93:85:cc:8c:65:ed:bc:3a:21:dc:c0: ef:ab:10:cd:99:59:e7:69:be:53:45:37:d4:bd:99: 07:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:04:81:A3:39:AF:71:F7:9E:F8:EE:B6:A7:47:BF:C5:7A:2F:B7:A9 X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e4:db:20:be:f5:a4:e7:62:b5:92:63:19:e9:5d:19:25:69: d5:cf:f0:34:34:4f:57:66:9f:fe:84:eb:32:b6:fc:8a:c2:92: 1b:75:bf:a7:f6:33:9a:50:d4:8c:fb:66:df:69:e4:6c:e6:0c: e9:89:c4:64:9e:86:89:2e:a5:38:51:c2:94:03:bc:f7:21:8b: ab:98:56:20:79:c7:e2:2c:71:cb:75:2b:94:9a:d1:40:bc:75: 07:e2:9d:41:64:1e:c0:d1:8d:93:07:40:15:55:2e:f1:96:14: 9a:ad:4d:cc:7f:8e:22:73:27:2e:f0:7b:1f:18:cf:11:d9:a7: 52:23:64:7f:2e:06:23:62:ac:fd:86:ec:1e:b6:eb:e8:bc:23: c5:28:df:61:f9:03:8c:e3:99:58:20:d3:82:9a:be:f0:b2:de: 28:af:7f:d8:20:64:e5:5a:32:92:57:5a:1d:03:b2:c0:b3:d3: 64:9b:9b:01:20:6e:d8:6b:5d:71:13:f2:42:54:16:0e:bb:29: cd:7a:2b:62:1b:c8:f0:a3:62:57:f8:9c:11:e5:02:24:66:87: 51:b8:b4:bc:7c:c6:18:7a:fe:bc:20:31:d5:75:b6:46:9e:ac: c4:ae:78:0a:48:54:34:3f:54:45:8e:64:93:8d:56:18:bb:f4: 8d:8c:61:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkcuH4lJjiFjgLjTidtEbK3Z52owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNjAzMjEyMDE3MjVaFw0yNjAzMjUwMzQxMjVaMDMxMTAvBgNV BAMTKEI5MDQ4MUEzMzlBRjcxRjc5RUY4RUVCNkE3NDdCRkM1N0EyRkI3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyT00CLcJI8FZMEbltpUZONMj0 leZ/yttmrueGFYTw07Tclp2uRX33ljy+xdoyEt473w4GS2M71pcrGtCRPGsRPhOE 9X3nt+fYlhudVEm7B4o4Yuhh/NIVyDPzp/PbA3njLjyGq6TnzwMRkLUt+tITISxO XTJuZO3N23KwaS+VDK4ddu08tco9uCQCj/ElWcGOxrzNT6fTAYLce12NrS4C+vzx /K8M7fVfk0t9ODtvOPGVZkVc/xehXGMJkvKsIdFe1wsnJErwUzdf6mhq1TQKaRLW DI5Z3FkcSoXDaaorxe7QCbmThcyMZe28OiHcwO+rEM2ZWedpvlNFN9S9mQfvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuQSBozmvcfee+O62p0e/xXovt6kwHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHk2yC+9aTnYrWSYxnpXRkladXP8DQ0T1dm n/6E6zK2/IrCkht1v6f2M5pQ1Iz7Zt9p5GzmDOmJxGSehokupThRwpQDvPchi6uY ViB5x+Iscct1K5Sa0UC8dQfinUFkHsDRjZMHQBVVLvGWFJqtTcx/jiJzJy7wex8Y zxHZp1IjZH8uBiNirP2G7B626+i8I8Uo32H5A4zjmVgg04KavvCy3iivf9ggZOVa MpJXWh0DssCz02SbmwEgbthrXXET8kJUFg67Kc16K2IbyPCjYlf4nBHlAiRmh1G4 tLx8xhh6/rwgMdV1tkaerMSueApIVDQ/VEWOZJONVhi79I2MYbA= -----END CERTIFICATE-----Generated at Sun Mar 22 09:34:03 2026 by rpki-client