$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: BydJXxucriCkCQMSHEomVz+IXqeldIKrTe3r4tfMtLs= Subject key identifier: EC:BD:5C:01:A5:2E:60:FE:20:4B:51:C4:64:71:FD:1F:1B:15:0F:11 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 1B40746725BCC93A8E19312B685E6AECAE67CF11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 04AD Signing time: Wed 25 Mar 2026 15:50:58 +0000 Manifest this update: Wed 25 Mar 2026 15:45:58 +0000 Manifest next update: Sat 28 Mar 2026 16:38:58 +0000 Files and hashes: 1: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: yPibvoj8h9RJ0GLdE7Y55+0vwm9XtVDLQI8fCsI5zGg=) 2: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: dyRpPVyxpt5OcOt1qjz/r/aBuuTbmTz4ZEEm4ISPrfQ=) 3: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: NacNr8tlzmpb4QfQ/myDM10o14kPPy00AmDGdwRiRcE=) 4: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: TlAHfis9k9OhMBttiZq0mSci/rJTU64geHe3MFRXMno=) 5: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: hL/G5kx82YBCvbiF0oPP1gPo6p46SnHQuMG9HUhh6Go=) 6: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: 4cA9blITWaGnf+nkl+PhUyn2mgMUfbwhbbX8hqlhuwc=) 7: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM=) 8: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: whajeEl8nBFK1Hik+aj8CuI5z46PiprE6Zt+K1qGkcA=) 9: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 2LZZVkt+5pgtlh+bN+Dr5svVCbc5hhi96q5bed9+mrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:40:74:67:25:bc:c9:3a:8e:19:31:2b:68:5e:6a:ec:ae:67:cf:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Mar 25 15:45:58 2026 GMT Not After : Mar 28 16:38:58 2026 GMT Subject: CN=ECBD5C01A52E60FE204B51C46471FD1F1B150F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:0b:8a:1d:a3:54:31:83:f5:52:c2:93:c2: 9a:c5:91:df:cf:79:ad:b2:a3:84:8d:ba:77:3e:ca: 21:2a:8a:7b:21:cd:ba:23:8e:a4:f5:03:a6:3b:d1: e3:03:dd:2f:fc:3b:7f:63:1a:03:d0:ab:67:20:ce: 6d:6c:08:56:75:ee:3d:aa:c2:d5:b2:35:ee:6b:7f: f0:64:ae:61:f5:56:8f:4a:7e:83:e9:4b:d9:8d:0e: ef:ba:ee:27:76:08:2a:9d:3e:b0:42:45:e5:e6:2c: ab:5a:25:6c:a6:4b:b4:18:8a:8c:d7:30:5c:85:31: 98:3e:be:d5:ec:ed:2a:9a:71:7f:cb:26:ed:06:4c: 5b:5e:2e:77:f8:1f:22:20:fa:ba:55:9d:7d:4d:bd: 58:2a:26:85:e1:54:83:d9:16:fc:48:cd:b4:34:ee: 65:a5:01:49:72:8a:12:58:74:6c:87:51:66:31:90: 9c:0b:38:e0:8d:ae:01:5d:b5:7a:4b:f9:93:31:13: 3f:22:31:a1:c2:df:38:a8:03:15:70:21:bd:53:53: 71:be:5e:44:2a:8b:c8:cb:4c:b7:f9:00:13:88:50: 2d:e0:12:57:dc:35:a8:9e:a3:f7:41:05:36:33:9f: af:cc:47:c6:fb:f1:99:64:07:05:61:27:65:fa:22: 28:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BD:5C:01:A5:2E:60:FE:20:4B:51:C4:64:71:FD:1F:1B:15:0F:11 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4d:bf:85:5f:53:66:0c:41:64:24:7f:63:1f:b5:85:96:08: 13:15:e2:5b:6f:95:d9:dd:0b:9b:90:12:79:46:f8:9b:91:ca: da:b4:26:ab:32:db:47:13:d3:b1:f2:39:6e:66:d0:1e:c0:14: 92:44:00:9c:59:04:9a:6b:bc:96:19:43:a1:04:d0:8e:51:e6: 83:79:bb:73:3f:ba:c1:98:77:92:af:f0:fd:9c:e5:aa:2f:37: 96:87:c9:65:da:8c:3f:76:fb:5a:4b:78:9e:e3:68:86:0a:58: 1f:49:33:ec:34:80:8e:4b:2a:0a:ac:6d:96:71:ab:62:c7:5d: 9a:ed:4e:b8:d9:a6:ea:e3:6e:81:b2:a3:18:42:59:d6:64:dc: 26:c0:07:28:78:ff:05:c2:07:a1:8e:43:31:03:38:b5:39:27: 9e:ea:0c:a6:3f:c5:50:68:92:65:82:ea:5a:40:1f:36:4c:0f: 27:e4:95:c8:79:ed:27:e9:d6:a8:8e:90:bb:fc:59:a1:05:dd: 09:1a:5d:36:f5:6a:08:88:ef:2c:ee:ca:bc:ce:64:89:87:64: c8:e6:9a:9d:ba:59:70:96:89:36:58:0f:d2:95:94:f6:63:e8: 34:dd:b3:37:01:46:c3:3f:27:fd:21:24:35:68:69:eb:2b:17: b6:bc:af:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0B0ZyW8yTqOGTEraF5q7K5nzxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNjAzMjUxNTQ1NThaFw0yNjAzMjgxNjM4NThaMDMxMTAvBgNV BAMTKEVDQkQ1QzAxQTUyRTYwRkUyMDRCNTFDNDY0NzFGRDFGMUIxNTBGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+guKHaNUMYP1UsKTwprFkd/P ea2yo4SNunc+yiEqinshzbojjqT1A6Y70eMD3S/8O39jGgPQq2cgzm1sCFZ17j2q wtWyNe5rf/BkrmH1Vo9KfoPpS9mNDu+67id2CCqdPrBCReXmLKtaJWymS7QYiozX MFyFMZg+vtXs7SqacX/LJu0GTFteLnf4HyIg+rpVnX1NvVgqJoXhVIPZFvxIzbQ0 7mWlAUlyihJYdGyHUWYxkJwLOOCNrgFdtXpL+ZMxEz8iMaHC3zioAxVwIb1TU3G+ XkQqi8jLTLf5ABOIUC3gElfcNaieo/dBBTYzn6/MR8b78ZlkBwVhJ2X6IijXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7L1cAaUuYP4gS1HEZHH9HxsVDxEwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlNv4VfU2YMQWQkf2MftYWWCBMV4ltvldnd C5uQEnlG+JuRytq0Jqsy20cT07HyOW5m0B7AFJJEAJxZBJprvJYZQ6EE0I5R5oN5 u3M/usGYd5Kv8P2c5aovN5aHyWXajD92+1pLeJ7jaIYKWB9JM+w0gI5LKgqsbZZx q2LHXZrtTrjZpurjboGyoxhCWdZk3CbAByh4/wXCB6GOQzEDOLU5J57qDKY/xVBo kmWC6lpAHzZMDyfklch57Sfp1qiOkLv8WaEF3QkaXTb1agiI7yzuyrzOZImHZMjm mp26WXCWiTZYD9KVlPZj6DTdszcBRsM/J/0hJDVoaesrF7a8rzY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:20 2026 by rpki-client