$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: D9K7ECI22fx/mzep7Ot9t7GprClvTQZWMtQstM2PbFQ= Subject key identifier: 8E:F8:1C:BF:55:42:77:16:A7:34:76:83:E5:AB:7C:45:E4:01:AA:6B Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 2B81D77D0D35CD9899326FA966B59C46897F7263 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 01C0 Signing time: Mon 20 Apr 2026 18:20:55 +0000 Manifest this update: Mon 20 Apr 2026 18:15:55 +0000 Manifest next update: Fri 24 Apr 2026 06:10:55 +0000 Files and hashes: 1: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: p+aBbjU4W3llYzTnPWpibuUOylz2CwTrPXwPDRq5zxU=) 2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:81:d7:7d:0d:35:cd:98:99:32:6f:a9:66:b5:9c:46:89:7f:72:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Apr 20 18:15:55 2026 GMT Not After : Apr 24 06:10:55 2026 GMT Subject: CN=8EF81CBF55427716A7347683E5AB7C45E401AA6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d8:ea:5f:93:53:d7:cc:24:bd:a1:65:48:09: 94:bf:9b:16:f5:74:9f:7f:51:d8:98:1d:fb:fe:25: 17:b4:c2:46:a0:5a:de:5f:3d:9d:19:b8:7b:d1:6b: 8f:b8:62:20:42:b9:45:ad:bf:dc:b2:02:6a:b9:dc: 60:c8:bc:1f:66:be:e3:94:00:54:7f:55:54:00:52: 33:df:35:52:09:49:91:80:64:c7:4f:bf:d8:17:8d: cb:72:80:c9:42:1b:0d:be:a1:b2:48:8a:43:b4:a2: 62:50:73:b4:b4:c2:e6:94:a9:6a:5c:83:0d:7a:49: 6b:0f:5f:b1:98:32:6e:cb:0a:03:c3:ba:56:e3:d0: 84:d6:c3:39:c7:db:df:c3:5c:4c:cf:3f:0d:ac:20: 69:2e:28:06:14:59:04:91:1b:9c:e4:e4:1b:3f:87: 3a:c4:d2:4a:80:1e:37:88:55:81:3b:0e:d2:2c:f5: 4e:70:39:3c:e8:24:c9:10:bd:01:e0:ac:ed:1b:9e: 90:10:c9:9b:20:68:5d:ef:c7:3e:c6:91:20:fa:1f: 9e:88:5b:17:8c:62:f3:56:3f:f2:3f:13:41:c3:32: d6:d5:b9:25:6b:df:7d:8e:8d:af:85:f9:ef:6a:67: 09:59:59:49:2f:fd:8f:40:4c:7c:cb:1b:2f:25:55: d6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F8:1C:BF:55:42:77:16:A7:34:76:83:E5:AB:7C:45:E4:01:AA:6B X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:57:b9:f5:03:eb:13:89:95:ad:e8:88:9b:40:38:ce:27:ea: 91:53:6c:9b:06:4c:4a:92:d8:5b:f7:39:06:aa:55:22:b6:97: e8:d5:e9:bb:f2:b6:ae:52:ff:55:02:d2:82:ee:fd:5c:ab:32: 95:96:ec:69:cc:60:bf:35:91:04:c1:4f:6d:c4:6c:0e:a5:84: 5f:cd:4d:3a:9c:ff:bc:59:de:fc:5e:4c:30:6f:f5:13:73:8e: 6c:1a:52:95:61:72:08:c4:44:9a:7b:3a:f7:5a:a7:3e:c9:3e: 49:2a:b3:5d:b4:2b:bb:a1:45:a7:3d:10:84:91:93:28:d0:f9: a9:2c:5e:61:da:cc:71:98:eb:61:3e:51:fe:6c:73:9c:3d:b0: fb:9b:d8:d5:31:18:a5:0a:bc:7f:51:7f:76:a0:13:c9:5f:b7: 92:8a:df:ac:0e:1f:a7:3b:cb:8f:ff:37:69:ff:ac:56:c1:c0: dc:d0:72:ba:a2:3b:61:f6:3f:74:d7:8f:97:06:10:b8:59:2c: d1:e6:e3:bd:4d:cd:f2:b0:8a:3a:59:86:04:f3:7a:91:e7:92: 61:e5:61:31:98:72:b8:78:26:63:04:99:94:28:ba:32:58:44: d3:0b:18:54:8f:f7:39:fc:c9:7d:ac:d8:46:2d:ef:d0:41:3d: ff:f2:46:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4HXfQ01zZiZMm+pZrWcRol/cmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNjA0MjAxODE1NTVaFw0yNjA0MjQwNjEwNTVaMDMxMTAvBgNV BAMTKDhFRjgxQ0JGNTU0Mjc3MTZBNzM0NzY4M0U1QUI3QzQ1RTQwMUFBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2Opfk1PXzCS9oWVICZS/mxb1 dJ9/UdiYHfv+JRe0wkagWt5fPZ0ZuHvRa4+4YiBCuUWtv9yyAmq53GDIvB9mvuOU AFR/VVQAUjPfNVIJSZGAZMdPv9gXjctygMlCGw2+obJIikO0omJQc7S0wuaUqWpc gw16SWsPX7GYMm7LCgPDulbj0ITWwznH29/DXEzPPw2sIGkuKAYUWQSRG5zk5Bs/ hzrE0kqAHjeIVYE7DtIs9U5wOTzoJMkQvQHgrO0bnpAQyZsgaF3vxz7GkSD6H56I WxeMYvNWP/I/E0HDMtbVuSVr332Oja+F+e9qZwlZWUkv/Y9ATHzLGy8lVdazAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjvgcv1VCdxanNHaD5at8ReQBqmswHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhXufUD6xOJla3oiJtAOM4n6pFTbJsGTEqS 2Fv3OQaqVSK2l+jV6bvytq5S/1UC0oLu/VyrMpWW7GnMYL81kQTBT23EbA6lhF/N TTqc/7xZ3vxeTDBv9RNzjmwaUpVhcgjERJp7Ovdapz7JPkkqs120K7uhRac9EISR kyjQ+aksXmHazHGY62E+Uf5sc5w9sPub2NUxGKUKvH9Rf3agE8lft5KK36wOH6c7 y4//N2n/rFbBwNzQcrqiO2H2P3TXj5cGELhZLNHm471NzfKwijpZhgTzepHnkmHl YTGYcrh4JmMEmZQoujJYRNMLGFSP9zn8yX2s2EYt79BBPf/yRlU= -----END CERTIFICATE-----Generated at Wed Apr 22 08:53:44 2026 by rpki-client