$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: q4ymw4v90j5rTzA2HVfcb3YzSZUp3O0oLwBl+pESm4E= Subject key identifier: 34:14:70:95:1B:DB:24:58:3E:FB:2C:A4:35:99:C1:D7:08:98:36:D7 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 186FCA30815ADFAAB15511FBB599013C8E369FB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 04E1 Signing time: Fri 27 Mar 2026 10:31:15 +0000 Manifest this update: Fri 27 Mar 2026 10:26:15 +0000 Manifest next update: Mon 30 Mar 2026 17:50:15 +0000 Files and hashes: 1: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: WoTLMhNBvxH13A8s5er9wb17ALtVLJCWGf8VUfebiaU=) 2: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: Fqgr+r9WG3m7zmpO3rSwg44QNE4blwlf0zSotQ3DNUo=) 3: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: VerBshfKSbDiG4ilBKzo2++FEnDv7+7VU/P4UtUMaSI=) 4: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: LFN1lWDxbZdPzNeB6sbVhDvJLLQcsJmGzjZZihSsn1w=) 5: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: 1oRmxMWEmNWfiObwNq2iDBD7Utfj4IUiGgv5WjZ9wmA=) 6: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: kpMxQvSYLU76Gm9LQAAGgZvfd3otWzRiAJhO9y4zBsk=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: DC1WzlYzoLRsGjbVoxuqgztNqkwtiD8GKj7bCCztmOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 17:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6f:ca:30:81:5a:df:aa:b1:55:11:fb:b5:99:01:3c:8e:36:9f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Mar 27 10:26:15 2026 GMT Not After : Mar 30 17:50:15 2026 GMT Subject: CN=341470951BDB24583EFB2CA43599C1D7089836D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:c1:1b:ed:3c:01:5a:fa:d5:25:bb:af:b3: e2:9a:56:ad:32:cf:e4:23:b9:db:81:0d:69:bb:72: fe:13:03:94:d2:0a:5e:0d:5b:7c:a6:9e:ff:45:7b: 8d:c9:ab:aa:3e:1a:04:f5:d8:8e:f4:90:a6:7f:6f: 5e:e9:31:86:d3:85:28:23:f0:e1:bd:16:02:b3:c0: 62:2d:a8:71:58:1d:1f:11:d3:bc:f4:2e:ee:3e:87: 28:aa:94:ab:3c:80:64:a4:34:e6:3a:46:da:61:e0: 73:f3:5b:93:82:f7:38:5e:c3:33:29:9b:bd:e0:af: 54:c9:08:4e:54:02:67:c7:e8:4e:c1:3c:95:07:bd: e5:8b:bc:03:b5:8d:d7:a2:dc:01:55:7f:eb:ad:b2: 88:4a:25:2d:4e:99:95:1e:da:e3:ce:6e:3c:64:a9: 58:fc:36:32:ea:e4:5a:96:ab:e9:03:ea:46:3d:16: 8f:83:8f:e7:17:dd:46:71:51:15:02:ed:a2:88:c0: 14:b1:7a:f4:31:b5:cf:1e:cc:64:3c:62:62:e4:0f: bf:63:d9:3e:14:ce:d7:09:ec:5c:32:14:ba:39:a0: 56:9f:52:a6:4f:50:47:86:8d:24:f9:fa:fe:7c:cd: d0:cc:e5:aa:d7:50:8f:49:51:3b:f9:36:65:39:fc: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:14:70:95:1B:DB:24:58:3E:FB:2C:A4:35:99:C1:D7:08:98:36:D7 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:90:89:c4:ad:d0:6f:d2:23:0d:8f:30:c5:33:bc:9b:2c:6d: 38:9c:b8:f7:c0:83:e2:92:f9:d8:1d:a4:f9:f4:71:78:20:0e: cd:ff:eb:43:f6:1b:0a:22:e0:f3:51:a5:69:89:55:8b:ae:f8: f9:19:c6:13:c0:10:45:26:57:0d:0f:aa:0b:42:26:ce:bd:d2: 34:df:b8:c1:c1:00:fb:45:c1:00:36:2a:7f:5e:35:b9:a1:a0: bd:a8:4d:f2:20:7b:d9:1c:ee:77:c6:78:a3:9e:38:03:47:ad: 8c:09:de:ea:b2:53:31:ce:ad:00:4f:a1:fe:7e:fa:ab:e0:5d: a1:ce:b3:44:7d:12:47:78:46:8e:06:17:01:36:b2:e9:77:47: 23:77:bd:6f:ce:ab:c9:1d:14:db:ea:19:71:1d:f1:e8:d5:62: 91:35:84:bd:40:92:13:91:f8:99:98:ee:08:e4:eb:ab:cf:d6: a8:be:cf:30:a2:fd:49:b5:2c:91:f4:a1:59:d7:75:3a:ea:98: 3f:4d:ff:4d:27:ba:fb:40:4c:12:67:8b:ef:75:e5:22:fd:07: 11:f4:aa:99:47:e8:4d:41:90:a4:3e:79:6f:61:ac:68:56:ea: 97:1f:f5:53:65:9b:12:c7:7b:3d:d5:bd:d0:68:7c:6d:00:17: f3:3d:b9:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGG/KMIFa36qxVRH7tZkBPI42n7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNjAzMjcxMDI2MTVaFw0yNjAzMzAxNzUwMTVaMDMxMTAvBgNV BAMTKDM0MTQ3MDk1MUJEQjI0NTgzRUZCMkNBNDM1OTlDMUQ3MDg5ODM2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcycEb7TwBWvrVJbuvs+KaVq0y z+QjuduBDWm7cv4TA5TSCl4NW3ymnv9Fe43Jq6o+GgT12I70kKZ/b17pMYbThSgj 8OG9FgKzwGItqHFYHR8R07z0Lu4+hyiqlKs8gGSkNOY6Rtph4HPzW5OC9zhewzMp m73gr1TJCE5UAmfH6E7BPJUHveWLvAO1jdei3AFVf+utsohKJS1OmZUe2uPObjxk qVj8NjLq5FqWq+kD6kY9Fo+Dj+cX3UZxURUC7aKIwBSxevQxtc8ezGQ8YmLkD79j 2T4UztcJ7FwyFLo5oFafUqZPUEeGjST5+v58zdDM5arXUI9JUTv5NmU5/F0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNBRwlRvbJFg++yykNZnB1wiYNtcwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6QicSt0G/SIw2PMMUzvJssbTicuPfAg+KS +dgdpPn0cXggDs3/60P2Gwoi4PNRpWmJVYuu+PkZxhPAEEUmVw0PqgtCJs690jTf uMHBAPtFwQA2Kn9eNbmhoL2oTfIge9kc7nfGeKOeOANHrYwJ3uqyUzHOrQBPof5+ +qvgXaHOs0R9Ekd4Ro4GFwE2sul3RyN3vW/Oq8kdFNvqGXEd8ejVYpE1hL1AkhOR +JmY7gjk66vP1qi+zzCi/Um1LJH0oVnXdTrqmD9N/00nuvtATBJni+915SL9BxH0 qplH6E1BkKQ+eW9hrGhW6pcf9VNlmxLHez3VvdBofG0AF/M9udI= -----END CERTIFICATE-----Generated at Sat Mar 28 06:50:40 2026 by rpki-client