$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: X1FVoVrDQBqj//ppHA/oPYJJc4row6yAwzqs2V/+IYs= Subject key identifier: AF:41:C7:86:18:A8:CB:F2:95:89:AA:28:52:A2:A6:A5:5E:BA:39:A3 Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 39CF5D88F05D3762E0790E3B64EE15D402A7E837 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 055C Signing time: Mon 02 Mar 2026 03:20:05 +0000 Manifest this update: Mon 02 Mar 2026 03:15:05 +0000 Manifest next update: Thu 05 Mar 2026 08:04:05 +0000 Files and hashes: 1: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=) 2: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=) 3: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=) 4: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=) 5: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=) 6: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=) 7: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: K0EP9983nqJ2W5mV6vNBcmrAzSdKsQgwtpAPUbR4zqw=) 8: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: tZJdaYJ4K7yW2v2tBg39Lb9tz4r7Kf6sn+VE2gvdsHw=) 9: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: NtqkwrlUwIEQ1zhmOPelG6/o7YZq6aMqPrp+f2CJ/tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cf:5d:88:f0:5d:37:62:e0:79:0e:3b:64:ee:15:d4:02:a7:e8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Mar 2 03:15:05 2026 GMT Not After : Mar 5 08:04:05 2026 GMT Subject: CN=AF41C78618A8CBF29589AA2852A2A6A55EBA39A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4f:ad:49:b3:92:10:69:0e:0f:3e:42:10:dc: b2:33:55:e9:da:21:36:1d:8e:1b:e2:80:29:cc:89: 6e:90:b8:89:65:c5:47:93:6a:50:ab:57:ed:44:34: 01:85:e6:87:0f:2a:21:4b:38:9e:b7:c6:cc:64:65: 6d:fd:15:a4:7e:20:8c:58:a0:c4:7d:18:6f:41:b8: 45:49:ea:5f:02:73:76:6d:03:a6:7e:95:e4:5b:ce: c0:a3:37:58:e3:0b:24:30:aa:1e:4b:ad:10:46:45: 38:5f:02:ba:39:5c:48:62:78:f2:3d:19:85:0f:f1: 10:42:89:d3:2f:dc:1f:b7:57:9d:91:39:ab:3f:8f: ee:a6:99:2f:a1:c1:11:45:4a:a2:fc:98:3d:3b:4e: a3:3a:7a:40:b4:2b:2d:2e:96:5b:b7:76:1a:f6:9e: e4:40:9d:bc:2f:86:1d:6e:5a:0b:f6:4d:5b:7b:2c: 92:4a:7c:b3:42:b2:d4:47:98:54:97:25:c1:da:0f: a9:55:79:b3:bc:40:d4:f5:f0:29:95:16:97:0d:26: 5d:71:5a:a7:1a:35:4b:43:18:0f:f6:f8:45:19:8a: d1:34:dc:c4:4b:1e:4a:a8:91:a0:7e:e2:26:da:1d: 81:b0:b5:22:cc:60:0a:38:ad:a8:79:fc:8f:35:b1: d5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:41:C7:86:18:A8:CB:F2:95:89:AA:28:52:A2:A6:A5:5E:BA:39:A3 X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:69:c2:16:13:4b:12:b4:78:8b:86:db:95:21:17:29:9b:a0: 86:8e:de:df:03:b2:7f:00:61:98:4d:00:5d:06:c0:f4:10:68: d8:6d:fe:c9:66:84:c5:55:2e:a9:eb:78:62:e4:37:77:79:c8: 56:84:3e:a8:f9:26:63:70:2e:a6:49:e2:db:fb:cc:81:8a:4c: bc:20:dd:0c:35:38:58:70:08:be:91:af:65:b8:4c:48:be:85: 51:a7:57:9c:6c:38:f1:6f:35:09:d7:33:14:aa:5a:a0:76:96: 3b:f0:97:b9:cb:15:20:75:7a:b9:dc:7f:3b:86:e8:11:cf:55: dc:73:77:eb:c9:37:ad:25:40:51:88:e7:3f:5d:28:0a:c5:6d: 61:1a:71:97:cc:33:b7:c6:a4:87:9f:ba:5f:e9:c6:ae:86:99: c7:37:04:7e:e9:2d:15:42:fc:f9:14:ed:c3:cc:9c:9e:13:cb: 88:cd:9c:6d:bd:91:9a:11:a0:eb:c8:38:db:b7:25:7f:fa:c2: c8:15:08:5b:a5:ed:9b:99:ed:89:38:68:51:8f:49:0e:1c:74: 4b:91:76:a9:b4:10:21:ad:cc:6d:13:ea:c9:a0:a1:b7:3c:2d: cb:33:04:d7:d6:e3:50:3c:c6:f4:ca:64:dd:9c:5b:d9:7a:7a: 5a:30:da:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOc9diPBdN2LgeQ47ZO4V1AKn6DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNjAzMDIwMzE1MDVaFw0yNjAzMDUwODA0MDVaMDMxMTAvBgNV BAMTKEFGNDFDNzg2MThBOENCRjI5NTg5QUEyODUyQTJBNkE1NUVCQTM5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3T61Js5IQaQ4PPkIQ3LIzVena ITYdjhvigCnMiW6QuIllxUeTalCrV+1ENAGF5ocPKiFLOJ63xsxkZW39FaR+IIxY oMR9GG9BuEVJ6l8Cc3ZtA6Z+leRbzsCjN1jjCyQwqh5LrRBGRThfAro5XEhiePI9 GYUP8RBCidMv3B+3V52ROas/j+6mmS+hwRFFSqL8mD07TqM6ekC0Ky0ullu3dhr2 nuRAnbwvhh1uWgv2TVt7LJJKfLNCstRHmFSXJcHaD6lVebO8QNT18CmVFpcNJl1x WqcaNUtDGA/2+EUZitE03MRLHkqokaB+4ibaHYGwtSLMYAo4rah5/I81sdU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr0HHhhioy/KViaooUqKmpV66OaMwHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxpwhYTSxK0eIuG25UhFymboIaO3t8Dsn8A YZhNAF0GwPQQaNht/slmhMVVLqnreGLkN3d5yFaEPqj5JmNwLqZJ4tv7zIGKTLwg 3Qw1OFhwCL6Rr2W4TEi+hVGnV5xsOPFvNQnXMxSqWqB2ljvwl7nLFSB1erncfzuG 6BHPVdxzd+vJN60lQFGI5z9dKArFbWEacZfMM7fGpIeful/pxq6Gmcc3BH7pLRVC /PkU7cPMnJ4Ty4jNnG29kZoRoOvIONu3JX/6wsgVCFul7ZuZ7Yk4aFGPSQ4cdEuR dqm0ECGtzG0T6smgobc8LcszBNfW41A8xvTKZN2cW9l6elow2nM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:23 2026 by rpki-client