$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: gzANBePWWtMr52uXuLfPPM5twJ/4xorQ7Haf6+UR8D0= Subject key identifier: F6:62:62:2C:D2:4D:33:94:13:8D:4A:15:FF:A8:42:AA:DF:7F:17:DE Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 1AB97A7C97086A6A4F1BD68C573945BB5F03D9DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 0567 Signing time: Thu 26 Mar 2026 12:10:05 +0000 Manifest this update: Thu 26 Mar 2026 12:05:05 +0000 Manifest next update: Sun 29 Mar 2026 21:39:05 +0000 Files and hashes: 1: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=) 2: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=) 3: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=) 4: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=) 5: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=) 6: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=) 7: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: ouA/pwKyyOWfqcHdruz4VesQ0uNxCFTvdau0JnJIHis=) 8: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=) 9: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b9:7a:7c:97:08:6a:6a:4f:1b:d6:8c:57:39:45:bb:5f:03:d9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Mar 26 12:05:05 2026 GMT Not After : Mar 29 21:39:05 2026 GMT Subject: CN=F662622CD24D3394138D4A15FFA842AADF7F17DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:55:aa:37:46:21:a9:95:aa:29:12:aa:67: 19:4e:18:e9:44:70:1f:65:50:f4:5a:fb:da:04:49: 04:bc:ed:d0:6f:f1:91:56:ad:de:73:40:95:db:52: 48:06:10:c9:6a:f7:78:57:34:fb:11:6f:30:ae:7e: 9e:d8:90:7b:40:98:6a:e5:2c:83:02:51:90:5e:f4: a8:48:dc:43:5e:39:c9:92:d0:4f:32:2c:5b:64:8e: 40:d6:d1:a9:00:bd:9d:56:a2:89:82:20:8d:6f:3f: 7f:37:7e:f9:c6:6e:dd:f5:4c:c2:9a:96:69:bf:40: a7:db:04:9f:12:89:1b:a6:97:e7:9a:67:ad:5d:83: 24:af:c8:79:ab:94:00:56:93:d3:64:89:be:83:2f: d4:06:09:81:11:81:da:e2:df:78:1e:e5:9e:d3:d3: d2:41:0b:4d:71:92:b0:80:fc:1d:75:50:43:d2:43: dd:44:8c:5f:a1:a1:a1:eb:a7:b6:24:9f:14:14:9b: ba:f5:6e:fe:60:5f:74:e4:d5:c2:40:82:c0:d0:69: d0:c5:f1:9c:51:55:0c:f3:07:28:18:04:1a:2d:ef: b6:b9:65:07:29:2c:fe:70:74:41:d0:30:be:fb:11: bb:0c:53:12:5a:ad:f7:09:ee:9c:34:f4:23:6b:fb: 17:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:62:62:2C:D2:4D:33:94:13:8D:4A:15:FF:A8:42:AA:DF:7F:17:DE X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:18:0b:2c:3f:41:ab:56:6f:84:a1:b3:59:be:6e:8d:d1:7b: 72:73:0c:73:e7:18:b1:6c:2d:21:fa:39:fd:24:b5:55:39:51: 2f:83:1f:19:64:b6:bf:be:68:f3:f5:02:72:d0:15:1e:15:b2: c2:01:af:b4:d5:46:d4:dd:19:79:99:68:7d:98:02:8f:c9:8c: d3:58:d1:9b:b1:f3:f0:cf:65:33:d0:2e:44:1d:af:48:8d:03: e9:27:35:d6:08:60:9c:21:aa:07:8d:65:ce:a4:a9:3b:f4:0e: c3:87:c1:16:2e:1d:38:a6:61:72:b6:b3:aa:1e:97:ec:82:83: 2b:34:e6:56:67:b0:7a:2a:90:72:a9:57:11:0b:98:eb:f6:3d: 24:a3:ec:9e:bf:02:70:21:e2:96:e5:ee:c3:3b:00:0c:6a:19: f2:48:53:d0:82:74:ac:78:da:e8:3d:46:49:a7:70:27:d8:e6: a0:86:3f:ad:9e:3f:38:2b:15:aa:0f:22:d7:77:5a:2e:e8:7f: 1b:c1:b4:de:42:55:9b:6d:74:1e:02:d5:22:70:8d:db:43:23: b2:62:9e:80:ce:9b:79:9a:bc:02:1c:a5:a6:1a:89:c4:45:db: 54:dd:7d:54:55:f5:de:e7:80:9a:2b:0b:67:e3:8e:9d:d5:da: a8:c1:78:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGrl6fJcIampPG9aMVzlFu18D2dwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNjAzMjYxMjA1MDVaFw0yNjAzMjkyMTM5MDVaMDMxMTAvBgNV BAMTKEY2NjI2MjJDRDI0RDMzOTQxMzhENEExNUZGQTg0MkFBREY3RjE3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7glWqN0YhqZWqKRKqZxlOGOlE cB9lUPRa+9oESQS87dBv8ZFWrd5zQJXbUkgGEMlq93hXNPsRbzCufp7YkHtAmGrl LIMCUZBe9KhI3ENeOcmS0E8yLFtkjkDW0akAvZ1WoomCII1vP383fvnGbt31TMKa lmm/QKfbBJ8SiRuml+eaZ61dgySvyHmrlABWk9Nkib6DL9QGCYERgdri33ge5Z7T 09JBC01xkrCA/B11UEPSQ91EjF+hoaHrp7YknxQUm7r1bv5gX3Tk1cJAgsDQadDF 8ZxRVQzzBygYBBot77a5ZQcpLP5wdEHQML77EbsMUxJarfcJ7pw09CNr+xeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9mJiLNJNM5QTjUoV/6hCqt9/F94wHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoYCyw/QatWb4Shs1m+bo3Re3JzDHPnGLFs LSH6Of0ktVU5US+DHxlktr++aPP1AnLQFR4VssIBr7TVRtTdGXmZaH2YAo/JjNNY 0Zux8/DPZTPQLkQdr0iNA+knNdYIYJwhqgeNZc6kqTv0DsOHwRYuHTimYXK2s6oe l+yCgys05lZnsHoqkHKpVxELmOv2PSSj7J6/AnAh4pbl7sM7AAxqGfJIU9CCdKx4 2ug9RkmncCfY5qCGP62ePzgrFaoPItd3Wi7ofxvBtN5CVZttdB4C1SJwjdtDI7Ji noDOm3mavAIcpaYaicRF21TdfVRV9d7ngJorC2fjjp3V2qjBeGw= -----END CERTIFICATE-----Generated at Thu Mar 26 20:36:35 2026 by rpki-client