$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: c1sQuDD16nRcukTZXq39rvkE1mxLbwaOyqfVrrmKJgY= Subject key identifier: DA:6E:1B:BE:66:F4:B2:C1:03:EF:81:06:E2:1D:EB:32:84:FE:8A:B7 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 3B760FACBA4726DA708938D0CC564FAE855FB43C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 04D5 Signing time: Sat 28 Feb 2026 14:11:15 +0000 Manifest this update: Sat 28 Feb 2026 14:06:15 +0000 Manifest next update: Tue 03 Mar 2026 20:11:15 +0000 Files and hashes: 1: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=) 3: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: Ce2Q98xaXnCQpfsriMZww+gXpWSkdZIZ/LoGT6dVBEI=) 4: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: 1oRmxMWEmNWfiObwNq2iDBD7Utfj4IUiGgv5WjZ9wmA=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Fqgr+r9WG3m7zmpO3rSwg44QNE4blwlf0zSotQ3DNUo=) 6: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: DC1WzlYzoLRsGjbVoxuqgztNqkwtiD8GKj7bCCztmOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:76:0f:ac:ba:47:26:da:70:89:38:d0:cc:56:4f:ae:85:5f:b4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Feb 28 14:06:15 2026 GMT Not After : Mar 3 20:11:15 2026 GMT Subject: CN=DA6E1BBE66F4B2C103EF8106E21DEB3284FE8AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:83:c6:94:ee:14:87:11:63:ab:5f:7c:8d: 66:15:c0:31:9f:1c:8b:39:5e:b3:b8:b6:3e:17:2f: 3f:6a:c3:b6:64:c0:2d:c1:09:06:47:25:88:fd:ac: 30:9c:e4:38:7c:9f:a4:89:b6:64:cc:e0:3c:3f:3e: 3c:66:ca:dc:90:ae:16:f7:4e:26:a5:76:54:5a:b6: 26:20:f1:df:6c:ca:d5:79:4c:5c:c5:d7:dd:f1:e1: 7d:26:85:67:46:9f:f6:f2:0b:ba:7a:2c:8b:3d:bc: c0:c0:89:96:72:e5:70:f9:25:2b:89:7b:98:c2:b5: 87:cb:4a:0b:7f:e0:42:2f:d7:cc:97:61:7f:a8:7f: da:39:0e:f9:ec:64:ec:bf:13:37:6f:52:a1:15:b9: 5a:f9:73:a1:85:3c:e0:57:fd:e0:e5:2e:bb:89:12: a4:23:b1:c6:a1:c5:11:23:f5:e6:da:ad:d5:47:dd: 77:dd:21:92:df:11:6c:6a:cf:f9:d6:e3:18:3f:ff: bf:16:dd:eb:7e:24:8a:65:f6:ab:58:ac:e4:43:a6: 17:d0:dd:69:cf:1f:4d:e7:ea:98:ca:c2:c2:8e:9e: 78:33:6f:83:ea:14:d6:9e:62:6b:dd:05:fc:82:96: 1a:a7:96:ed:4b:ea:e5:31:6e:be:25:fb:79:f0:d4: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6E:1B:BE:66:F4:B2:C1:03:EF:81:06:E2:1D:EB:32:84:FE:8A:B7 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:8b:6d:ad:d0:cc:05:f0:65:fe:b0:30:d3:f6:67:22:99:e0: ba:d8:ba:15:93:5d:81:41:fb:12:79:87:b1:96:55:bb:57:b2: 63:fc:9f:b0:68:9b:a5:3b:53:3e:d8:2c:65:42:ef:d8:05:3f: 1c:bb:9a:ef:24:77:ad:64:15:aa:26:28:57:50:52:a8:2a:ab: 20:13:68:9d:c6:d4:e5:f1:55:81:8b:a6:a4:00:86:e8:37:1b: 78:f6:40:fe:c7:5a:31:4c:d9:9e:cc:c4:54:49:be:a9:d8:10: da:b0:84:cb:a1:90:00:2e:3b:77:4b:a0:21:4f:60:02:e6:af: ae:62:bf:21:cf:f8:13:a3:49:13:61:e0:48:99:f4:af:d6:fe: 18:57:08:51:0d:56:01:29:32:d0:fe:52:40:f4:39:dc:4c:4b: 3f:ca:96:98:06:ed:ad:88:d5:6e:48:72:83:56:b9:d7:a5:dd: 86:25:59:a8:11:42:84:1c:38:65:22:2e:ed:7b:57:a9:43:95: c2:8b:7d:11:66:be:19:16:7a:50:52:12:f1:2b:53:75:33:33: 1b:fb:b3:aa:1e:0f:51:ab:84:d9:54:82:c8:a2:a2:be:90:5c: 70:75:5d:ba:99:e4:72:90:01:c6:39:70:fe:31:3d:31:4f:5c: a3:88:30:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3YPrLpHJtpwiTjQzFZProVftDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNjAyMjgxNDA2MTVaFw0yNjAzMDMyMDExMTVaMDMxMTAvBgNV BAMTKERBNkUxQkJFNjZGNEIyQzEwM0VGODEwNkUyMURFQjMyODRGRThBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQYPGlO4UhxFjq198jWYVwDGf HIs5XrO4tj4XLz9qw7ZkwC3BCQZHJYj9rDCc5Dh8n6SJtmTM4Dw/PjxmytyQrhb3 TialdlRatiYg8d9sytV5TFzF193x4X0mhWdGn/byC7p6LIs9vMDAiZZy5XD5JSuJ e5jCtYfLSgt/4EIv18yXYX+of9o5DvnsZOy/EzdvUqEVuVr5c6GFPOBX/eDlLruJ EqQjscahxREj9ebardVH3XfdIZLfEWxqz/nW4xg//78W3et+JIpl9qtYrORDphfQ 3WnPH03n6pjKwsKOnngzb4PqFNaeYmvdBfyClhqnlu1L6uUxbr4l+3nw1I1tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2m4bvmb0ssED74EG4h3rMoT+ircwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOLba3QzAXwZf6wMNP2ZyKZ4LrYuhWTXYFB +xJ5h7GWVbtXsmP8n7Bom6U7Uz7YLGVC79gFPxy7mu8kd61kFaomKFdQUqgqqyAT aJ3G1OXxVYGLpqQAhug3G3j2QP7HWjFM2Z7MxFRJvqnYENqwhMuhkAAuO3dLoCFP YALmr65ivyHP+BOjSRNh4EiZ9K/W/hhXCFENVgEpMtD+UkD0OdxMSz/KlpgG7a2I 1W5IcoNWudel3YYlWagRQoQcOGUiLu17V6lDlcKLfRFmvhkWelBSEvErU3UzMxv7 s6oeD1GrhNlUgsiior6QXHB1XbqZ5HKQAcY5cP4xPTFPXKOIMCY= -----END CERTIFICATE-----Generated at Mon Mar 2 05:01:31 2026 by rpki-client