$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: 9mQ9r9T3n12SAGm4LXlmFc1XDMuyaJTrRuZKoJUXbMk= Subject key identifier: 04:9D:A9:A5:2C:74:16:AB:D2:4C:97:8A:34:AE:CD:0C:62:98:7D:57 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 488B9A53F8AEE5F0B0D511DC0ACEE10D6C8CFC9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 04B2 Signing time: Sun 05 Apr 2026 09:20:58 +0000 Manifest this update: Sun 05 Apr 2026 09:15:58 +0000 Manifest next update: Wed 08 Apr 2026 18:54:58 +0000 Files and hashes: 1: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: whajeEl8nBFK1Hik+aj8CuI5z46PiprE6Zt+K1qGkcA=) 2: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: TlAHfis9k9OhMBttiZq0mSci/rJTU64geHe3MFRXMno=) 3: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: 2LZZVkt+5pgtlh+bN+Dr5svVCbc5hhi96q5bed9+mrg=) 4: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: hL/G5kx82YBCvbiF0oPP1gPo6p46SnHQuMG9HUhh6Go=) 5: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: NacNr8tlzmpb4QfQ/myDM10o14kPPy00AmDGdwRiRcE=) 6: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: qT2jtb7JPCRiexf4yXxoTK+tjmi0EfDVwxQsfSzSn/0=) 7: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: yPibvoj8h9RJ0GLdE7Y55+0vwm9XtVDLQI8fCsI5zGg=) 8: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: 4cA9blITWaGnf+nkl+PhUyn2mgMUfbwhbbX8hqlhuwc=) 9: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: 28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Apr 2026 18:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8b:9a:53:f8:ae:e5:f0:b0:d5:11:dc:0a:ce:e1:0d:6c:8c:fc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Apr 5 09:15:58 2026 GMT Not After : Apr 8 18:54:58 2026 GMT Subject: CN=049DA9A52C7416ABD24C978A34AECD0C62987D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:86:dc:dc:a1:1e:73:8f:99:4f:3a:1d:37: 07:32:76:51:0c:9f:48:65:79:9a:f2:38:0e:8a:0f: 38:31:de:db:e6:26:4f:14:b5:cf:fa:fb:8e:85:b9: 76:ba:66:67:39:d9:d0:0a:47:69:32:28:bb:6f:02: ab:55:58:9c:8f:1e:d4:20:8d:56:97:79:4f:a8:c9: a1:8d:80:0e:3f:8b:2b:db:2b:f7:54:fd:29:96:f7: a7:07:31:0a:50:4b:33:ca:81:25:ae:c9:63:6a:63: c7:62:a8:dc:15:9c:46:e9:57:a8:61:b4:4a:1b:43: 80:72:bc:d0:59:51:09:ef:a4:c1:67:f4:d7:3b:36: cb:1f:2a:7c:13:c1:e9:6d:1b:04:a8:a2:7b:e6:39: 30:89:76:81:86:27:37:10:d8:24:8c:96:68:32:bd: 99:fb:8a:48:90:fc:34:b3:2b:9e:f2:18:67:e5:9e: a7:0f:13:5b:e2:65:c5:36:26:0b:f4:3a:dd:4e:c7: 0f:f7:81:9e:9e:43:dc:fe:52:f0:96:45:50:f2:43: 92:8c:0f:b5:f1:58:ec:b2:d4:af:d2:3a:7c:4e:03: 2a:11:df:7e:38:65:fd:c7:dc:27:d6:94:75:9a:f1: 7e:2c:ef:9c:7b:a6:e0:f3:19:82:60:e0:17:12:74: 31:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9D:A9:A5:2C:74:16:AB:D2:4C:97:8A:34:AE:CD:0C:62:98:7D:57 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:cb:62:ef:c2:d6:18:0e:d2:74:e3:51:64:f6:c9:5c:21:21: d8:25:8a:5f:e8:65:79:4e:1a:f4:d5:43:5c:5c:3b:c8:fc:57: 2c:b4:3b:d9:74:f9:ad:da:9d:5e:0a:be:b9:1f:5d:6b:32:1b: 4f:82:8e:88:95:85:99:1a:2a:c0:1e:64:39:8c:1f:78:62:0a: 03:d7:b2:4f:4e:85:d4:d7:e0:09:c6:4a:8d:c1:de:d5:50:5f: ce:26:08:b8:b0:79:99:ab:90:8a:85:91:4f:81:0c:71:5a:0c: 04:de:a5:2f:47:7f:ff:13:4a:2a:86:54:c8:3b:ac:25:f3:9b: 51:4e:10:e4:7d:67:50:82:86:3f:da:a5:45:b6:8c:be:be:a4: 93:4c:f8:9d:df:d6:38:ba:5c:be:79:7d:0a:b5:d1:bf:5f:16: b6:b9:b3:f3:0e:dd:a3:81:1e:19:a4:fa:7d:aa:99:4a:18:fb: 8b:ab:c2:fb:be:6a:34:2f:fd:c6:3b:d4:ff:2b:c4:d6:52:b1: e4:ca:44:64:da:3c:2a:2e:71:7d:0e:22:36:0b:7f:6f:ac:1d: ec:f5:7a:c8:48:d5:cf:8e:25:76:5a:2f:8e:2a:fd:0b:51:5d: 1d:12:db:80:81:46:e1:ea:87:76:ce:d0:73:21:e8:8a:05:2f: b7:e2:5f:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIuaU/iu5fCw1RHcCs7hDWyM/J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNjA0MDUwOTE1NThaFw0yNjA0MDgxODU0NThaMDMxMTAvBgNV BAMTKDA0OURBOUE1MkM3NDE2QUJEMjRDOTc4QTM0QUVDRDBDNjI5ODdENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fobc3KEec4+ZTzodNwcydlEM n0hleZryOA6KDzgx3tvmJk8Utc/6+46FuXa6Zmc52dAKR2kyKLtvAqtVWJyPHtQg jVaXeU+oyaGNgA4/iyvbK/dU/SmW96cHMQpQSzPKgSWuyWNqY8diqNwVnEbpV6hh tEobQ4ByvNBZUQnvpMFn9Nc7NssfKnwTweltGwSoonvmOTCJdoGGJzcQ2CSMlmgy vZn7ikiQ/DSzK57yGGflnqcPE1viZcU2Jgv0Ot1Oxw/3gZ6eQ9z+UvCWRVDyQ5KM D7XxWOyy1K/SOnxOAyoR3344Zf3H3CfWlHWa8X4s75x7puDzGYJg4BcSdDFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJ2ppSx0FqvSTJeKNK7NDGKYfVcwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzLYu/C1hgO0nTjUWT2yVwhIdglil/oZXlO GvTVQ1xcO8j8Vyy0O9l0+a3anV4KvrkfXWsyG0+CjoiVhZkaKsAeZDmMH3hiCgPX sk9OhdTX4AnGSo3B3tVQX84mCLiweZmrkIqFkU+BDHFaDATepS9Hf/8TSiqGVMg7 rCXzm1FOEOR9Z1CChj/apUW2jL6+pJNM+J3f1ji6XL55fQq10b9fFra5s/MO3aOB Hhmk+n2qmUoY+4urwvu+ajQv/cY71P8rxNZSseTKRGTaPCoucX0OIjYLf2+sHez1 eshI1c+OJXZaL44q/QtRXR0S24CBRuHqh3bO0HMh6IoFL7fiX/Q= -----END CERTIFICATE-----Generated at Mon Apr 6 14:02:47 2026 by rpki-client