$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json) Hash identifier: UfrbqEQBqZR7ODMuomp4plhYSCltfYX+XYGgVMplpVk= Subject key identifier: 1D:E9:0F:A6:B1:0C:C1:36:C8:CC:C9:1B:8F:36:B0:0C:9E:84:69:39 Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Certificate serial: 641F5D0DBF87497763A544B045B2CF89781B898D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft Manifest number: 0568 Signing time: Sun 19 Apr 2026 10:31:15 +0000 Manifest this update: Sun 19 Apr 2026 10:26:15 +0000 Manifest next update: Wed 22 Apr 2026 12:40:15 +0000 Files and hashes: 1: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: nFTgph+YloLgW+6sxuKRYCRq1ouvahd5GZWPN5dkEg0=) 2: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: we5EK/sttJWHNYJQrQFBX1O29JFDeTtTJqr6j5pZZsI=) 3: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: BnRp094CwKD0wwlckS4UWOO+QLVyTBF/UCeVs1CPJ7o=) 4: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: nDJsXQF4hqhJpcR0lg3wt+EWX7mJLFJQ/flot1hEV/U=) 5: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: ToIgM0jAxY4WS16atQIWn5JwGnfQgFyIoACDw/eMgWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 12:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1f:5d:0d:bf:87:49:77:63:a5:44:b0:45:b2:cf:89:78:1b:89:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Validity Not Before: Apr 19 10:26:15 2026 GMT Not After : Apr 22 12:40:15 2026 GMT Subject: CN=1DE90FA6B10CC136C8CCC91B8F36B00C9E846939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:14:6b:df:65:0f:cf:84:2c:a4:b4:9e:e4:74: 77:c1:fa:60:61:15:73:9f:11:d2:14:56:19:df:df: f3:1c:a7:b7:73:f2:ac:24:c2:bd:40:02:0e:3e:e6: ff:95:06:9c:9b:28:6b:94:e6:b5:a6:31:8e:6b:5f: 8c:f8:91:e0:7d:85:2f:fb:00:c8:7b:88:16:ad:c2: d4:e5:60:61:04:94:5b:ee:77:e8:83:df:4e:10:29: 10:ab:aa:28:ad:f5:c2:12:08:a3:8c:27:4f:a6:dd: 7b:e2:0e:bf:5c:ce:4d:3b:1f:b2:40:34:e5:b7:3c: ef:55:0a:31:96:fd:f4:47:03:e1:50:99:88:a1:b6: 93:23:5f:08:67:d4:f8:51:2d:19:97:46:d7:47:ad: 4b:a3:43:7e:ad:51:cb:57:36:dc:cb:31:a9:ae:0b: f3:08:df:e7:d8:0b:7b:67:dc:8f:7e:d8:3b:38:e2: 0e:56:53:57:01:f4:d9:1b:60:46:67:eb:cf:81:14: 6e:25:87:d7:f0:c4:8e:3d:a2:6c:1e:c2:73:38:4c: ba:7b:c0:eb:0a:cc:94:cf:0f:bc:b6:86:9a:ff:cf: 0a:e7:eb:54:08:b3:fa:27:62:50:0c:e9:e5:68:a1: 56:32:53:1d:0a:45:20:70:1a:da:16:b0:eb:31:b6: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E9:0F:A6:B1:0C:C1:36:C8:CC:C9:1B:8F:36:B0:0C:9E:84:69:39 X509v3 Authority Key Identifier: keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e0:b8:54:b9:3c:c0:dd:16:f6:26:9f:f3:2d:85:d4:be:df: d7:16:52:bf:4c:5d:e7:f4:7f:92:75:c6:98:e7:2e:58:d2:bc: d5:c4:01:95:57:69:af:7e:f1:f9:2e:a5:ab:97:ae:82:eb:4b: f2:41:9f:9c:2e:48:33:ea:f9:92:19:a0:42:4d:fe:6e:53:64: 64:ff:b4:24:65:ec:9e:1b:8a:ab:61:fc:3d:dd:f6:87:d7:c5: b0:00:60:e6:96:6e:93:52:3b:24:60:7b:be:22:53:91:53:a4: ba:dd:21:fb:9c:30:23:21:36:13:74:43:aa:8d:7f:fe:55:5a: 5c:d2:d6:9e:dc:2a:cb:eb:02:0e:3e:db:69:2e:1c:0d:d6:5b: 49:dd:58:93:da:ca:a7:52:41:de:e6:0c:26:4f:7e:65:fd:b2: ed:78:82:26:7f:eb:5b:0e:61:4d:b5:f7:e5:73:71:b4:d0:a8: bd:06:59:32:70:57:12:35:88:b9:ef:53:e1:9a:2d:1e:72:85: 54:8b:b4:b2:c6:62:be:cc:ae:9a:d9:a2:ce:1b:e0:bf:f2:03: ed:8d:d0:da:5e:00:10:3c:f2:bb:d7:5b:b9:df:77:29:ba:47: 68:72:11:27:88:da:77:72:c0:5f:0b:55:b9:aa:ce:35:0a:bf: ab:e0:bd:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZB9dDb+HSXdjpUSwRbLPiXgbiY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUy ODJEMTRCMDAeFw0yNjA0MTkxMDI2MTVaFw0yNjA0MjIxMjQwMTVaMDMxMTAvBgNV BAMTKDFERTkwRkE2QjEwQ0MxMzZDOENDQzkxQjhGMzZCMDBDOUU4NDY5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtFGvfZQ/PhCyktJ7kdHfB+mBh FXOfEdIUVhnf3/Mcp7dz8qwkwr1AAg4+5v+VBpybKGuU5rWmMY5rX4z4keB9hS/7 AMh7iBatwtTlYGEElFvud+iD304QKRCrqiit9cISCKOMJ0+m3XviDr9czk07H7JA NOW3PO9VCjGW/fRHA+FQmYihtpMjXwhn1PhRLRmXRtdHrUujQ36tUctXNtzLMamu C/MI3+fYC3tn3I9+2Ds44g5WU1cB9NkbYEZn68+BFG4lh9fwxI49omwewnM4TLp7 wOsKzJTPD7y2hpr/zwrn61QIs/onYlAM6eVooVYyUx0KRSBwGtoWsOsxtuf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHekPprEMwTbIzMkbjzawDJ6EaTkwHwYDVR0j BBgwFoAUtl0UYKz8jZEYM4HcZOUtLigtFLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjZjZjI4ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9CNjVEMTQ2MEFD RkM4RDkxMTgzMzgxREM2NEU1MkQyRTI4MkQxNEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUyODJE MTRCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2Y2YyOGQtZmZjNy00MzUxLWE4 Y2ItMjVkMTlmYzQzMTc3LzAvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJE MkUyODJEMTRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7guFS5PMDdFvYmn/MthdS+39cWUr9MXef0 f5J1xpjnLljSvNXEAZVXaa9+8fkupauXroLrS/JBn5wuSDPq+ZIZoEJN/m5TZGT/ tCRl7J4biqth/D3d9ofXxbAAYOaWbpNSOyRge74iU5FTpLrdIfucMCMhNhN0Q6qN f/5VWlzS1p7cKsvrAg4+22kuHA3WW0ndWJPayqdSQd7mDCZPfmX9su14giZ/61sO YU219+VzcbTQqL0GWTJwVxI1iLnvU+GaLR5yhVSLtLLGYr7MrprZos4b4L/yA+2N 0NpeABA88rvXW7nfdym6R2hyESeI2ndywF8LVbmqzjUKv6vgvZ4= -----END CERTIFICATE-----Generated at Mon Apr 20 07:52:09 2026 by rpki-client