$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft File: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft (raw, json) Hash identifier: CM7+f3CZZvpenkQ2LGc6q3y1tEIoa8CAgixwogqQ6JA= Subject key identifier: 65:91:57:2B:93:7F:E4:DE:E2:59:65:A3:73:37:F6:C4:63:90:53:7C Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 Certificate issuer: /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Certificate serial: 1476561AB8A98D03593E22BD6A417284B7E7C519 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft Manifest number: 0560 Signing time: Wed 25 Mar 2026 19:12:24 +0000 Manifest this update: Wed 25 Mar 2026 19:07:24 +0000 Manifest next update: Sun 29 Mar 2026 01:34:24 +0000 Files and hashes: 1: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl (hash: mQJuUeEf0TTvZo3xjzkxPmsdfAP7TBlc4uM22O8eaG4=) 2: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: NFm2BuROSXEUux226kkrY22nGhWfXy6Nzi8qa9TvywQ=) 3: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: 6uaz9H2C0Zmi7+Kl7mXUqp61Tn9wAvtzejcx5d8BSvE=) 4: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: 9iKS8p7Xao18ldzefre+pP4jboQ9AAl4Hg0B9pQyQbE=) 5: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: n0pHhF58CPylB9y5w46zbjaPBFWjrRvur8ZNb3WIRks=) 6: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: nzLKnI/D3cwy5mjROOKEojLaE+IM3VD8CZS+m6prGYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:76:56:1a:b8:a9:8d:03:59:3e:22:bd:6a:41:72:84:b7:e7:c5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Validity Not Before: Mar 25 19:07:24 2026 GMT Not After : Mar 29 01:34:24 2026 GMT Subject: CN=6591572B937FE4DEE25965A37337F6C46390537C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:8d:92:d9:8b:18:7c:a4:2b:36:1b:8f:01: 40:ea:f4:13:59:a0:d0:c2:79:31:ef:fb:10:91:bc: d2:9e:e6:bf:11:f6:be:d8:a6:8f:57:04:c5:d1:09: 2d:11:c2:76:49:da:5d:bd:98:2a:24:b2:a0:df:a2: 47:52:76:e0:92:5b:43:a8:6c:66:58:e4:03:27:65: 37:fe:a0:43:0e:3b:6b:d7:13:06:ee:84:68:3e:df: 47:b3:f5:e9:c7:8b:cc:ee:4a:e2:54:9d:32:26:e8: 34:53:ed:86:0b:20:70:21:17:55:b9:9d:50:bf:ca: 07:e2:87:ad:7e:92:b7:5a:d2:21:88:c5:4f:c1:48: 57:32:3f:0f:b9:0b:d1:47:0d:01:a9:71:2d:c4:d6: 14:3d:24:0e:7a:5b:0f:ce:7c:5e:80:85:17:07:54: c4:f3:85:50:cb:e9:0d:62:98:20:92:56:a3:00:c9: ae:0e:d8:cc:02:77:4a:78:f3:06:2b:35:3c:1a:f0: 8b:3b:10:6a:79:d2:22:fb:51:61:f2:68:88:ae:2d: c4:c4:02:96:fb:44:38:ca:8c:b3:a7:e7:9b:70:b3: 76:cf:0a:7d:03:a6:82:dd:7e:78:9b:65:e9:ec:66: 82:ff:23:b9:8f:e9:cc:9c:ca:00:d4:56:78:91:f4: 7f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:91:57:2B:93:7F:E4:DE:E2:59:65:A3:73:37:F6:C4:63:90:53:7C X509v3 Authority Key Identifier: keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a2:a1:5d:ec:cb:ea:32:db:ba:f1:98:74:2f:37:49:94:0a: da:b0:5d:8c:12:e5:58:97:47:7e:4c:0a:b5:46:76:39:76:35: 47:5c:a1:cf:74:5f:7b:c1:d7:e9:e2:01:5c:14:e5:03:b3:13: 40:fd:5c:8c:6f:fa:c3:7f:f2:d5:19:1b:70:ba:10:36:c5:f7: e3:b8:ec:e1:a5:cd:7b:98:8e:a0:ce:c9:94:55:d6:6b:5e:a3: 3e:d2:35:2d:9b:ed:6f:d7:bd:55:d7:f6:7b:75:95:37:0b:fa: d4:d5:5d:1d:02:e4:34:0d:f7:5d:e3:af:82:67:1b:b5:a5:26: 0f:31:81:3a:b7:92:33:b5:46:e9:c1:59:65:6c:53:3a:70:2f: 5f:65:e4:d6:ec:d1:b9:f5:c4:fb:bc:f3:01:8e:5f:f0:c1:bc: ce:12:f2:2a:fe:fa:a7:4f:0c:fc:1d:fb:3f:ad:cb:e3:ae:bc: fa:6a:f3:dc:0d:9a:aa:8c:01:5d:e9:ed:5b:b6:ce:97:e0:1d: 1a:5e:e2:bd:97:71:36:5a:ba:e4:94:fd:27:cc:e5:8b:8f:13: 5c:1f:c1:0a:6c:0c:64:73:f2:e9:94:04:d1:9b:d8:93:5b:fe: dc:b2:a4:ab:1c:62:80:dd:68:5b:b1:1f:87:a5:db:8c:c0:f2: 4b:9d:5e:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHZWGripjQNZPiK9akFyhLfnxRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEz N0M4M0E4NjAeFw0yNjAzMjUxOTA3MjRaFw0yNjAzMjkwMTM0MjRaMDMxMTAvBgNV BAMTKDY1OTE1NzJCOTM3RkU0REVFMjU5NjVBMzczMzdGNkM0NjM5MDUzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDTo2S2YsYfKQrNhuPAUDq9BNZ oNDCeTHv+xCRvNKe5r8R9r7Ypo9XBMXRCS0RwnZJ2l29mCoksqDfokdSduCSW0Oo bGZY5AMnZTf+oEMOO2vXEwbuhGg+30ez9enHi8zuSuJUnTIm6DRT7YYLIHAhF1W5 nVC/ygfih61+krda0iGIxU/BSFcyPw+5C9FHDQGpcS3E1hQ9JA56Ww/OfF6AhRcH VMTzhVDL6Q1imCCSVqMAya4O2MwCd0p48wYrNTwa8Is7EGp50iL7UWHyaIiuLcTE Apb7RDjKjLOn55tws3bPCn0DpoLdfnibZensZoL/I7mP6cycygDUVniR9H8hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZZFXK5N/5N7iWWWjczf2xGOQU3wwHwYDVR0j BBgwFoAUtgXXH+taHb5Wds+ss5SrujfIOoYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NWRmZjliMy05MDQxLTRkZDYtYjdhYi0wMjA2MGQ2NWQwOWEvMC9CNjA1RDcxRkVC NUExREJFNTY3NkNGQUNCMzk0QUJCQTM3QzgzQTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEzN0M4 M0E4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFC QkEzN0M4M0E4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGioV3sy+oy27rxmHQvN0mUCtqwXYwS5ViX R35MCrVGdjl2NUdcoc90X3vB1+niAVwU5QOzE0D9XIxv+sN/8tUZG3C6EDbF9+O4 7OGlzXuYjqDOyZRV1mteoz7SNS2b7W/XvVXX9nt1lTcL+tTVXR0C5DQN913jr4Jn G7WlJg8xgTq3kjO1RunBWWVsUzpwL19l5Nbs0bn1xPu88wGOX/DBvM4S8ir++qdP DPwd+z+ty+OuvPpq89wNmqqMAV3p7Vu2zpfgHRpe4r2XcTZauuSU/SfM5YuPE1wf wQpsDGRz8umUBNGb2JNb/tyypKscYoDdaFuxH4el24zA8kudXic= -----END CERTIFICATE-----Generated at Thu Mar 26 13:25:35 2026 by rpki-client