$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: FZUvyEzNb6cT6XC1RyCQFVQ3TVc5KcEIdNcYCx/zxN4= Subject key identifier: 59:A3:40:78:1A:E9:4E:41:57:5A:9E:CE:FC:FE:77:EC:3C:0D:CB:4C Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 1467B4E2E7F2A732B29F48A2C00EBB67412F3C36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 0570 Signing time: Wed 15 Apr 2026 23:30:05 +0000 Manifest this update: Wed 15 Apr 2026 23:25:05 +0000 Manifest next update: Sun 19 Apr 2026 08:17:05 +0000 Files and hashes: 1: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: EuuA1q/mUuMlHpw7mV2lQERHdw4ig24Jt9gtGkZzuqw=) 2: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=) 3: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=) 4: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=) 5: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=) 6: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=) 7: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=) 8: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=) 9: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:67:b4:e2:e7:f2:a7:32:b2:9f:48:a2:c0:0e:bb:67:41:2f:3c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Apr 15 23:25:05 2026 GMT Not After : Apr 19 08:17:05 2026 GMT Subject: CN=59A340781AE94E41575A9ECEFCFE77EC3C0DCB4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:ef:c3:41:31:82:e0:e0:bc:ee:92:3d:c2: 57:08:bd:73:6d:a9:d9:a5:e2:58:2d:70:c9:3c:54: 7b:03:63:63:0f:70:0b:6b:a5:52:89:b1:63:a2:0a: e0:1c:ed:db:e0:6c:c8:97:a5:ea:78:de:dc:97:35: 38:61:dd:02:4a:89:c9:1f:86:7c:c1:d4:87:41:dd: f1:26:bc:87:a0:37:28:e6:e9:74:ab:89:e1:2e:59: cc:b3:09:fa:f1:81:f1:cb:62:d8:19:93:ec:33:05: 31:09:dc:19:df:52:07:22:5e:30:32:81:ad:0d:6a: d7:b1:1b:87:84:bb:19:49:8d:87:f4:39:2a:d0:9f: 17:e7:ca:a8:bb:d1:b8:1d:be:f0:ab:67:ae:e8:ca: ce:6b:40:83:81:15:03:1f:58:bb:c9:09:c7:94:a4: bf:90:73:27:c1:ff:0f:c9:7e:df:b6:13:4f:2c:58: 1f:17:06:c4:70:13:de:4b:ac:c1:02:98:9b:2a:7f: f8:1f:15:a8:0d:dc:12:83:8a:24:dd:10:98:fe:59: e6:6d:ee:e1:b9:43:37:00:e9:57:f3:e3:66:3c:77: 81:a1:22:12:d0:9b:62:e8:fb:af:d8:ca:a2:b1:05: ef:e1:a6:35:fa:8d:3d:5f:ba:8b:90:f6:fa:36:12: 5f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A3:40:78:1A:E9:4E:41:57:5A:9E:CE:FC:FE:77:EC:3C:0D:CB:4C X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:05:2b:8c:53:d1:d3:6b:a8:b3:e1:e9:2a:93:0c:99:91:ad: 02:fa:6b:2b:20:04:c6:6d:a6:12:b1:8a:33:2a:42:b2:7c:cc: 39:2c:56:45:45:75:8a:d8:9e:01:0b:fa:31:61:d5:4f:aa:ad: 26:42:76:c5:97:58:a6:5c:c2:93:18:e1:a4:ca:d0:f3:cb:c3: 0f:e2:32:63:77:22:0d:05:34:04:e8:96:1c:2c:64:35:f2:79: ef:04:14:b0:a0:a0:08:20:28:d6:71:ef:cd:68:ce:43:0e:ba: 29:7d:92:9f:5f:4c:b6:fd:09:41:79:2d:d4:5b:a0:3b:42:4a: bb:0d:ab:7c:bf:25:12:c4:a9:cd:fb:03:85:c6:22:7a:26:dd: d7:b8:39:36:89:0b:da:d3:0d:42:c7:ec:fa:2f:4e:29:1f:c0: f6:d1:8d:57:eb:e1:79:69:e9:f4:a6:20:42:93:49:08:ab:27: 6a:f9:aa:81:97:ae:b2:df:e2:d5:66:f3:10:52:ed:60:80:73: 46:ea:f7:0a:3f:28:ec:ab:b7:4a:9e:25:ee:69:59:7b:70:2c: ed:58:93:b4:18:c5:f6:ee:02:a6:60:c3:88:27:34:eb:64:cc: 79:41:e6:95:71:cd:28:63:d0:ef:a3:38:a4:5e:bf:f9:37:95: a7:a0:a8:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFGe04ufypzKyn0iiwA67Z0EvPDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNjA0MTUyMzI1MDVaFw0yNjA0MTkwODE3MDVaMDMxMTAvBgNV BAMTKDU5QTM0MDc4MUFFOTRFNDE1NzVBOUVDRUZDRkU3N0VDM0MwRENCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbx+/DQTGC4OC87pI9wlcIvXNt qdml4lgtcMk8VHsDY2MPcAtrpVKJsWOiCuAc7dvgbMiXpep43tyXNThh3QJKickf hnzB1IdB3fEmvIegNyjm6XSrieEuWcyzCfrxgfHLYtgZk+wzBTEJ3BnfUgciXjAy ga0NatexG4eEuxlJjYf0OSrQnxfnyqi70bgdvvCrZ67oys5rQIOBFQMfWLvJCceU pL+QcyfB/w/Jft+2E08sWB8XBsRwE95LrMECmJsqf/gfFagN3BKDiiTdEJj+WeZt 7uG5QzcA6Vfz42Y8d4GhIhLQm2Lo+6/YyqKxBe/hpjX6jT1fuouQ9vo2El+nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWaNAeBrpTkFXWp7O/P537DwNy0wwHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsFK4xT0dNrqLPh6SqTDJmRrQL6aysgBMZt phKxijMqQrJ8zDksVkVFdYrYngEL+jFh1U+qrSZCdsWXWKZcwpMY4aTK0PPLww/i MmN3Ig0FNATolhwsZDXyee8EFLCgoAggKNZx781ozkMOuil9kp9fTLb9CUF5LdRb oDtCSrsNq3y/JRLEqc37A4XGInom3de4OTaJC9rTDULH7PovTikfwPbRjVfr4Xlp 6fSmIEKTSQirJ2r5qoGXrrLf4tVm8xBS7WCAc0bq9wo/KOyrt0qeJe5pWXtwLO1Y k7QYxfbuAqZgw4gnNOtkzHlB5pVxzShj0O+jOKRev/k3laegqPM= -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:38 2026 by rpki-client