$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: P7eSHtHxFXYrnVnajMYu1tZSPNH0bWs9KFGk7WGTx94= Subject key identifier: 65:06:5B:D0:34:1B:B1:EF:85:13:53:28:AF:24:69:E6:BA:E8:18:A7 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 23B15BB24695BF11E5557C88865E7D958774F6C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 04EA Signing time: Fri 17 Apr 2026 01:31:18 +0000 Manifest this update: Fri 17 Apr 2026 01:26:18 +0000 Manifest next update: Mon 20 Apr 2026 10:28:18 +0000 Files and hashes: 1: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: 5TKZ2AMLn/NLYEZfXjmJmx+rTP1V4GSxgnDu4cyEdUU=) 2: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: 1oRmxMWEmNWfiObwNq2iDBD7Utfj4IUiGgv5WjZ9wmA=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Fqgr+r9WG3m7zmpO3rSwg44QNE4blwlf0zSotQ3DNUo=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: DC1WzlYzoLRsGjbVoxuqgztNqkwtiD8GKj7bCCztmOc=) 5: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=) 6: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=) 7: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b1:5b:b2:46:95:bf:11:e5:55:7c:88:86:5e:7d:95:87:74:f6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Apr 17 01:26:18 2026 GMT Not After : Apr 20 10:28:18 2026 GMT Subject: CN=65065BD0341BB1EF85135328AF2469E6BAE818A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:ed:1e:d5:75:ae:62:92:e5:d4:cc:fd:52: e3:01:2b:0d:72:6a:e8:f8:3e:f7:e7:18:58:fd:e3: 0c:9f:94:3f:96:13:5f:6e:db:52:c4:7f:5f:90:56: c8:9b:fb:dc:d1:3c:80:b0:8c:9e:b5:16:7e:f5:1d: e3:81:29:82:0b:f8:fb:e6:3c:bb:f2:15:2f:3a:a6: bb:ac:4b:6e:e5:3b:dd:db:c8:47:5b:f8:95:ea:1b: 46:3d:e9:a5:9f:56:fc:10:f6:12:5f:01:01:2e:13: 0c:76:55:a6:9a:ff:75:cb:9d:c7:61:85:6c:db:b0: 8c:75:b7:0d:82:3b:4b:13:c1:11:9d:93:95:32:ff: 82:33:a1:6e:d4:e1:9c:fd:10:d3:64:b5:2e:6f:69: 6d:9c:a3:1d:66:7e:0c:bc:3a:b3:3d:cb:ec:c3:39: 8a:f4:c4:9a:33:86:4d:6f:77:eb:c7:65:2f:06:7f: 13:3a:8d:8b:57:ed:65:df:b2:fa:b0:47:41:30:40: 03:ea:0c:17:7c:6d:35:33:ba:9b:ec:97:83:77:3f: ec:65:64:69:1d:c8:62:42:db:67:07:8d:59:c0:43: db:1b:37:cb:2f:1f:fd:ac:60:dc:88:cf:13:28:3c: f6:fa:58:74:5b:f3:02:94:ab:88:90:56:1f:80:7a: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:06:5B:D0:34:1B:B1:EF:85:13:53:28:AF:24:69:E6:BA:E8:18:A7 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:38:bf:9a:3c:6f:7d:12:b4:5b:b8:54:10:94:2a:e4:a5:86: 4f:ac:d1:e3:e5:ac:f5:c0:48:41:5b:75:8f:e7:36:8e:94:65: 67:41:3d:0d:87:db:8d:0d:79:18:c7:a2:5e:63:36:db:98:66: ca:7e:9f:5f:bd:af:31:32:c7:7a:55:34:be:c3:13:35:b6:68: 2c:10:cb:5b:bb:2e:46:1f:ce:59:39:6e:fc:71:63:1e:ce:a3: be:06:dd:a2:70:49:6e:a9:9b:57:52:4a:8b:a0:00:7b:dc:75: ac:d6:15:24:65:b2:29:91:fb:f1:87:6e:a2:46:58:5c:e5:0e: 8d:2c:df:7c:cf:80:5c:3c:4e:36:65:c1:7d:fe:ea:38:4c:3e: 5e:11:95:29:3f:22:8b:3c:56:85:72:6d:29:7b:c6:a7:25:6a: 18:80:20:1b:a7:de:5e:4b:b9:cb:96:55:0d:3b:7b:e4:ad:85: 17:21:38:f1:f5:20:2a:00:da:5b:6b:0a:62:5f:7b:5f:cf:6c: 89:f2:14:73:98:1a:e0:dd:6c:69:da:be:f3:d2:b5:95:0a:91: d6:0a:a7:14:27:55:74:d4:25:d1:f9:37:d8:11:45:16:2a:de: 52:e2:bb:6e:d7:66:57:fd:3e:d8:39:17:75:a2:02:28:53:33: ad:4e:78:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7FbskaVvxHlVXyIhl59lYd09sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNjA0MTcwMTI2MThaFw0yNjA0MjAxMDI4MThaMDMxMTAvBgNV BAMTKDY1MDY1QkQwMzQxQkIxRUY4NTEzNTMyOEFGMjQ2OUU2QkFFODE4QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0u0e1XWuYpLl1Mz9UuMBKw1y auj4PvfnGFj94wyflD+WE19u21LEf1+QVsib+9zRPICwjJ61Fn71HeOBKYIL+Pvm PLvyFS86prusS27lO93byEdb+JXqG0Y96aWfVvwQ9hJfAQEuEwx2Vaaa/3XLncdh hWzbsIx1tw2CO0sTwRGdk5Uy/4IzoW7U4Zz9ENNktS5vaW2cox1mfgy8OrM9y+zD OYr0xJozhk1vd+vHZS8GfxM6jYtX7WXfsvqwR0EwQAPqDBd8bTUzupvsl4N3P+xl ZGkdyGJC22cHjVnAQ9sbN8svH/2sYNyIzxMoPPb6WHRb8wKUq4iQVh+AevNDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZQZb0DQbse+FE1MoryRp5rroGKcwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABM4v5o8b30StFu4VBCUKuSlhk+s0ePlrPXA SEFbdY/nNo6UZWdBPQ2H240NeRjHol5jNtuYZsp+n1+9rzEyx3pVNL7DEzW2aCwQ y1u7LkYfzlk5bvxxYx7Oo74G3aJwSW6pm1dSSougAHvcdazWFSRlsimR+/GHbqJG WFzlDo0s33zPgFw8TjZlwX3+6jhMPl4RlSk/Ios8VoVybSl7xqclahiAIBun3l5L ucuWVQ07e+SthRchOPH1ICoA2ltrCmJfe1/PbInyFHOYGuDdbGnavvPStZUKkdYK pxQnVXTUJdH5N9gRRRYq3lLiu27XZlf9Ptg5F3WiAihTM61OeDw= -----END CERTIFICATE-----Generated at Fri Apr 17 20:28:01 2026 by rpki-client