$ rpki-client -vvf repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft File: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft (raw, json) Hash identifier: hee3KsOysnfk28jn+Nyi9t3j7R70zm2yURLlb7fzlnA= Subject key identifier: E0:D8:41:E3:3B:46:6C:A4:DD:5F:0A:69:5C:7B:AD:ED:A6:AD:10:63 Authority key identifier: 70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 Certificate issuer: /CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Certificate serial: 19D09E4A53231C502683778CF1AB8A584A4EB174 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft Manifest number: 036B Signing time: Mon 27 Apr 2026 16:22:02 +0000 Manifest this update: Mon 27 Apr 2026 16:17:02 +0000 Manifest next update: Fri 01 May 2026 04:06:02 +0000 Files and hashes: 1: 700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl (hash: DUgafRD3eXzZa+CAJG5wnSY4ZA6MavS3ifp7gzNGo58=) 2: 3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (hash: HkdEC8K8+4wdSCshXjogdBtnn9p7RHZgPqc+KEcGBcE=) 3: 3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (hash: pDYNyQPy9+qJb0nXEhgW9usosth8XXlKTG8zEx7l7ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 17:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d0:9e:4a:53:23:1c:50:26:83:77:8c:f1:ab:8a:58:4a:4e:b1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64 Validity Not Before: Apr 27 16:17:02 2026 GMT Not After : May 1 04:06:02 2026 GMT Subject: CN=E0D841E33B466CA4DD5F0A695C7BADEDA6AD1063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:a7:fc:ba:60:d0:86:84:ee:81:4c:fd:21: 0c:37:55:7a:31:9e:8d:7a:cf:42:d8:c7:7c:b7:c0: 33:85:9d:1d:23:62:c5:17:e6:cc:ca:86:de:ba:ea: 27:ea:3c:f6:64:ef:6f:c7:4f:7c:5d:39:b5:bc:fb: 73:80:3b:c1:ea:c9:93:71:11:01:d9:9c:47:37:af: 46:89:b3:ef:53:66:1a:64:f1:b5:de:50:a1:e4:b4: b9:ba:c9:fd:18:f9:72:14:aa:72:99:ae:37:7c:d6: 58:57:bb:ed:fa:0e:3b:a3:ea:f8:f6:0a:85:a9:74: 89:30:f3:bd:0e:3a:2d:31:14:ff:ee:ee:a7:1c:14: 27:73:4c:84:14:61:cc:45:44:70:4c:82:c4:71:66: 1d:4b:76:fc:43:3b:c4:8b:1b:74:70:17:95:5e:08: e6:56:99:0a:d6:dc:c4:74:20:27:2f:93:5e:18:78: 38:ce:2a:0d:2e:c1:4c:0f:70:42:60:a6:9a:e6:7f: a5:7e:6d:3f:56:b5:0c:39:71:87:a0:55:61:4e:78: 6c:d3:96:d3:e6:99:17:82:e2:ad:a3:e7:65:52:11: 87:da:cb:82:f1:1f:d5:be:b8:73:17:de:e1:97:0d: 37:be:5b:9b:b6:37:fe:a1:b4:f3:ac:b3:ea:b4:22: ef:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D8:41:E3:3B:46:6C:A4:DD:5F:0A:69:5C:7B:AD:ED:A6:AD:10:63 X509v3 Authority Key Identifier: keyid:70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:40:97:51:69:85:c0:69:b9:00:79:22:71:1b:53:1e:79:ba: 77:34:7a:74:cc:69:f7:ee:18:d4:19:cb:30:89:b2:e3:77:16: e8:d9:e0:76:bc:d0:69:40:6d:fe:91:0b:53:27:b9:c9:7f:0e: 76:dc:c9:29:e2:ff:1b:5c:b8:74:9f:b1:e2:de:71:58:49:d0: 00:d0:cc:de:99:9a:1f:8f:d6:8d:fa:89:b1:e3:c8:2d:60:cb: 23:2d:f1:e6:35:7d:38:0f:78:9f:45:ea:b0:cf:f5:6e:c9:2d: 83:14:e7:a3:6d:28:d6:d8:f1:19:ad:d3:9c:b0:43:59:a1:2e: a3:c7:94:7b:54:c4:1b:63:a9:37:cd:fa:8a:59:e2:4d:54:d2: a2:08:16:6f:79:4c:28:c1:5b:9d:eb:3f:76:f7:6b:5a:25:d8: 82:60:5a:e7:58:3d:fe:53:d9:fd:fb:1b:72:21:d9:76:d7:b7: 1b:58:ce:d2:32:12:3d:58:84:73:c6:81:c2:6d:43:2d:30:5e: 1b:ac:5e:45:77:a0:7f:98:f5:56:65:b4:7b:c0:9f:2e:bb:13: dc:e3:03:61:c7:09:df:c1:55:a0:14:a3:2f:e7:19:d7:f0:27: 8d:bf:f1:72:e4:e7:ce:68:a5:77:53:c0:93:ef:a8:a1:d2:98: 16:59:c1:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdCeSlMjHFAmg3eM8auKWEpOsXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4 NDZBMkQ2NDAeFw0yNjA0MjcxNjE3MDJaFw0yNjA1MDEwNDA2MDJaMDMxMTAvBgNV BAMTKEUwRDg0MUUzM0I0NjZDQTRERDVGMEE2OTVDN0JBREVEQTZBRDEwNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Faf8umDQhoTugUz9IQw3VXox no16z0LYx3y3wDOFnR0jYsUX5szKht666ifqPPZk72/HT3xdObW8+3OAO8HqyZNx EQHZnEc3r0aJs+9TZhpk8bXeUKHktLm6yf0Y+XIUqnKZrjd81lhXu+36Djuj6vj2 CoWpdIkw870OOi0xFP/u7qccFCdzTIQUYcxFRHBMgsRxZh1LdvxDO8SLG3RwF5Ve COZWmQrW3MR0ICcvk14YeDjOKg0uwUwPcEJgpprmf6V+bT9WtQw5cYegVWFOeGzT ltPmmReC4q2j52VSEYfay4LxH9W+uHMX3uGXDTe+W5u2N/6htPOss+q0Iu/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4NhB4ztGbKTdXwppXHut7aatEGMwHwYDVR0j BBgwFoAUcAuVh8TPp/Kx2ffJLLCw24RqLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODMyODIzNy03NTBmLTQwMjItYjhiMi1kYmE3M2I2NzEzZWMvMC83MDBCOTU4N0M0 Q0ZBN0YyQjFEOUY3QzkyQ0IwQjBEQjg0NkEyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIwREI4NDZB MkQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTgzMjgyMzctNzUwZi00MDIyLWI4 YjItZGJhNzNiNjcxM2VjLzAvNzAwQjk1ODdDNENGQTdGMkIxRDlGN0M5MkNCMEIw REI4NDZBMkQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJAl1FphcBpuQB5InEbUx55unc0enTMaffu GNQZyzCJsuN3FujZ4Ha80GlAbf6RC1Mnucl/DnbcySni/xtcuHSfseLecVhJ0ADQ zN6Zmh+P1o36ibHjyC1gyyMt8eY1fTgPeJ9F6rDP9W7JLYMU56NtKNbY8Rmt05yw Q1mhLqPHlHtUxBtjqTfN+opZ4k1U0qIIFm95TCjBW53rP3b3a1ol2IJgWudYPf5T 2f37G3Ih2XbXtxtYztIyEj1YhHPGgcJtQy0wXhusXkV3oH+Y9VZltHvAny67E9zj A2HHCd/BVaAUoy/nGdfwJ42/8XLk585opXdTwJPvqKHSmBZZwbE= -----END CERTIFICATE-----Generated at Mon Apr 27 18:36:49 2026 by rpki-client