$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: OVK/BDaYv3GKQ/CBJ+qI4mX37aZHazGUbzZ0sd34sOs= Subject key identifier: 2B:77:73:2B:B5:7C:64:53:FC:B2:AF:40:3A:D2:93:5A:2D:D9:0B:10 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 084C6D6033EE57B1AEFC699C096202261B9A001A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 04E0 Signing time: Wed 25 Mar 2026 09:51:15 +0000 Manifest this update: Wed 25 Mar 2026 09:46:15 +0000 Manifest next update: Sat 28 Mar 2026 10:25:15 +0000 Files and hashes: 1: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Fqgr+r9WG3m7zmpO3rSwg44QNE4blwlf0zSotQ3DNUo=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: 1oRmxMWEmNWfiObwNq2iDBD7Utfj4IUiGgv5WjZ9wmA=) 3: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: jRtLmzXKFWp4b7q82frMXeQrM7BhrhR95z3NtDmTxPw=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=) 6: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: DC1WzlYzoLRsGjbVoxuqgztNqkwtiD8GKj7bCCztmOc=) 7: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4c:6d:60:33:ee:57:b1:ae:fc:69:9c:09:62:02:26:1b:9a:00:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Mar 25 09:46:15 2026 GMT Not After : Mar 28 10:25:15 2026 GMT Subject: CN=2B77732BB57C6453FCB2AF403AD2935A2DD90B10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:f5:67:78:70:68:d0:f3:9e:ae:96:4c:10: 11:cf:11:12:89:96:97:f9:a9:ed:ba:2b:87:27:0e: 81:f4:f2:e8:92:a5:0e:c9:9d:d7:a4:8b:65:17:12: 65:1c:a8:0f:75:7c:f5:a4:25:83:15:2c:ce:21:b9: 92:a5:b8:52:a2:cf:11:c7:c4:8f:fb:53:ca:4b:f0: bf:9a:54:eb:24:03:f4:b1:8f:53:1a:eb:a6:d8:b1: 1a:3f:19:da:5b:c4:15:dd:7e:77:5a:e2:bb:4f:f6: 4c:7f:f5:dd:48:f0:d5:40:e1:a3:2b:b6:da:00:f0: 31:db:f9:a4:fa:e3:cd:6b:dd:ad:a7:e4:70:a8:84: 94:85:fb:11:04:db:84:04:c7:f6:b7:0f:f3:f2:74: 09:cd:da:9a:bb:54:2b:b8:bc:33:d7:84:49:36:0e: 4f:8d:e0:92:f2:3d:40:71:00:7b:dd:8b:e0:e4:de: 01:c2:59:21:9c:c8:ca:b1:a9:ac:25:99:be:4b:dc: d6:02:38:dc:e7:40:7a:85:14:00:3d:2d:24:7e:35: 48:66:04:4b:36:77:74:05:76:82:68:f6:1f:aa:e6: 51:b0:de:76:39:1b:e9:a8:4a:60:03:c4:e7:3f:f9: 2b:a9:6d:bf:c4:f8:32:f1:32:f2:d3:90:26:ad:8c: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:77:73:2B:B5:7C:64:53:FC:B2:AF:40:3A:D2:93:5A:2D:D9:0B:10 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ca:20:ce:0f:52:16:8d:08:ae:27:ec:cd:2f:a2:fa:29:40: 1e:fc:7d:46:dc:88:64:ce:87:14:82:14:ed:ca:f8:20:e2:2a: 2e:2b:36:84:52:e9:6f:79:4b:f8:11:70:62:28:e7:b4:28:53: 3f:c0:c7:b8:3f:fb:11:3b:bc:0f:a7:b3:96:da:0a:3f:23:c6: 4f:6e:de:62:ee:a8:25:51:d2:72:34:18:82:3a:df:94:8b:28: 08:66:33:89:eb:8f:5a:ff:f9:6d:47:45:96:a4:46:fb:ff:dd: d7:67:6a:51:3b:0b:5a:51:8f:1c:67:c3:1b:ea:9d:2b:60:5e: 6e:61:4d:4f:02:ec:16:e4:d3:fb:56:09:ff:c4:85:8c:8a:e7: bc:3c:61:14:f5:fc:b2:ef:b4:d8:05:87:1c:25:f8:ff:14:e7: 25:95:f5:f3:be:7e:a3:e0:d6:f8:32:4f:39:8c:65:f2:a8:a2: 0b:d5:36:18:89:c0:df:c4:4b:2e:69:25:65:bf:1b:d2:a3:0b: 4b:99:06:64:b7:6c:72:95:7a:f4:43:b2:26:f5:f0:a0:8d:cf: 9f:fb:ee:ee:26:d3:1e:33:41:2b:d1:73:62:4b:15:92:a4:5c: 8a:de:e5:1f:07:30:22:3f:d2:00:89:0c:84:6a:97:ec:c2:d1: b2:fe:ba:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCExtYDPuV7Gu/GmcCWICJhuaABowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNjAzMjUwOTQ2MTVaFw0yNjAzMjgxMDI1MTVaMDMxMTAvBgNV BAMTKDJCNzc3MzJCQjU3QzY0NTNGQ0IyQUY0MDNBRDI5MzVBMkREOTBCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGmvVneHBo0POerpZMEBHPERKJ lpf5qe26K4cnDoH08uiSpQ7Jndeki2UXEmUcqA91fPWkJYMVLM4huZKluFKizxHH xI/7U8pL8L+aVOskA/Sxj1Ma66bYsRo/GdpbxBXdfnda4rtP9kx/9d1I8NVA4aMr ttoA8DHb+aT6481r3a2n5HCohJSF+xEE24QEx/a3D/PydAnN2pq7VCu4vDPXhEk2 Dk+N4JLyPUBxAHvdi+Dk3gHCWSGcyMqxqawlmb5L3NYCONznQHqFFAA9LSR+NUhm BEs2d3QFdoJo9h+q5lGw3nY5G+moSmADxOc/+Supbb/E+DLxMvLTkCatjC0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK3dzK7V8ZFP8sq9AOtKTWi3ZCxAwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjKIM4PUhaNCK4n7M0vovopQB78fUbciGTO hxSCFO3K+CDiKi4rNoRS6W95S/gRcGIo57QoUz/Ax7g/+xE7vA+ns5baCj8jxk9u 3mLuqCVR0nI0GII635SLKAhmM4nrj1r/+W1HRZakRvv/3ddnalE7C1pRjxxnwxvq nStgXm5hTU8C7Bbk0/tWCf/EhYyK57w8YRT1/LLvtNgFhxwl+P8U5yWV9fO+fqPg 1vgyTzmMZfKoogvVNhiJwN/ESy5pJWW/G9KjC0uZBmS3bHKVevRDsib18KCNz5/7 7u4m0x4zQSvRc2JLFZKkXIre5R8HMCI/0gCJDIRql+zC0bL+ukA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:42 2026 by rpki-client