$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft (raw, json) Hash identifier: c8ewffCUBWGZZ84TPISyT3PJfVMsrD+YDAg1EzvWdwk= Subject key identifier: 33:BA:F2:4A:0C:3A:02:E0:96:C6:06:7A:8A:DE:1B:21:99:DB:59:08 Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Certificate serial: 3359EE1F3DE1FBC93ED8888C37195AAEC334D8FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft Manifest number: 025B Signing time: Tue 24 Mar 2026 13:21:52 +0000 Manifest this update: Tue 24 Mar 2026 13:16:52 +0000 Manifest next update: Fri 27 Mar 2026 17:30:52 +0000 Files and hashes: 1: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: cu+gkkkTCuwJj0tPWyI4oDjIIQe1JqfFTuFCDD6tSKw=) 2: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl (hash: aJWLD12jP/4xp5OTsYN/9ICMi5ZldSEhk48Un+iJn7c=) 3: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: fQYP6KBmK43mZ1BOpBi0K6IbkEvJhG31/o2xXC40uG8=) 4: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: Mc8Ea5+5WJ6GF7G0KNR6Ybiy7ufabhA8F83CYeyA+z0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:59:ee:1f:3d:e1:fb:c9:3e:d8:88:8c:37:19:5a:ae:c3:34:d8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Validity Not Before: Mar 24 13:16:52 2026 GMT Not After : Mar 27 17:30:52 2026 GMT Subject: CN=33BAF24A0C3A02E096C6067A8ADE1B2199DB5908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:e5:5c:d7:1a:3f:1b:0b:53:d7:64:9c:61: 02:01:a1:c8:0f:01:dd:70:c7:31:79:c4:ca:d8:37: ec:ea:4f:7b:ac:d4:de:4c:9c:ac:df:73:f2:98:52: 69:b6:09:34:a3:e6:71:82:6b:df:88:1a:d5:01:40: e8:27:fa:fd:f9:24:8b:b6:cf:a2:5a:80:37:02:f3: e5:89:8f:b9:61:d4:82:6c:36:0c:cf:d7:ca:55:d2: e6:32:23:b7:45:bc:fd:95:a9:86:03:dc:71:e2:1d: 7d:d4:1e:8d:40:1a:12:2e:b5:8e:3e:9e:c0:0a:7f: df:6e:fd:0d:77:05:be:5f:8c:fc:fd:9c:18:30:80: 4a:6e:1c:85:5a:5f:58:6a:97:3f:c2:fe:32:85:81: 7e:a3:13:89:9e:cc:fa:db:b3:07:3e:6c:9e:3a:69: 22:0d:d6:a8:67:5a:2c:43:e8:0d:48:53:2a:6a:b6: f1:fe:bd:97:7e:3e:3e:76:19:a8:94:d9:56:17:84: af:8d:30:e1:7c:2f:5e:03:70:3e:0e:37:ec:aa:c3: 72:4f:b9:6d:5e:14:78:ce:a7:93:2a:0a:ca:78:02: 27:48:9f:00:35:ac:2a:d8:2d:7c:f6:6c:2c:0f:05: 10:b8:56:70:62:f4:14:78:9b:5b:04:64:75:79:5c: 85:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BA:F2:4A:0C:3A:02:E0:96:C6:06:7A:8A:DE:1B:21:99:DB:59:08 X509v3 Authority Key Identifier: keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a7:5d:37:f1:30:23:f9:7e:1b:5c:be:3a:28:1a:16:da:f5: 24:19:d6:60:ec:4c:2f:3f:22:c4:18:4c:be:a3:c5:18:35:07: 44:d7:32:16:42:2c:a2:c3:72:d8:31:43:52:b2:cc:51:6c:fe: 93:5c:0a:29:9c:04:60:cd:f2:ee:41:f3:8e:8e:2b:0e:8a:27: ed:78:54:e7:de:5d:ff:f9:80:2d:3a:c0:78:d5:95:6f:38:6b: fd:eb:f1:d5:8a:09:bc:1a:d4:7b:29:3e:5d:33:7f:d8:85:79: 38:c6:3d:21:5d:a3:0e:77:71:2e:6d:6d:2d:06:e2:8b:45:ce: ee:5f:f4:a1:b1:ff:2c:e1:dc:b7:3b:49:52:c3:ef:7a:80:26: b9:aa:09:9f:23:ab:1f:e7:38:e5:ec:02:ef:e0:ce:2b:9b:a8: 15:3e:3a:0d:db:ef:9e:df:36:76:bf:b7:0e:ba:b3:35:a1:87: 1e:18:52:82:4a:12:5f:42:b8:68:b3:47:f0:3d:d4:74:95:41: 6d:4e:69:de:9a:48:d7:f3:49:aa:e6:63:70:76:a9:ef:a2:d1: f2:1e:40:88:fe:31:68:d9:4b:89:4f:f4:61:6f:e5:69:e6:dd: 19:ef:bd:c7:c2:b4:f1:6a:b0:b9:7d:d5:80:66:e0:e0:09:a4: 1d:6b:6c:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1nuHz3h+8k+2IiMNxlarsM02PwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZF RUYxNURCNjAeFw0yNjAzMjQxMzE2NTJaFw0yNjAzMjcxNzMwNTJaMDMxMTAvBgNV BAMTKDMzQkFGMjRBMEMzQTAyRTA5NkM2MDY3QThBREUxQjIxOTlEQjU5MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvU+Vc1xo/GwtT12ScYQIBocgP Ad1wxzF5xMrYN+zqT3us1N5MnKzfc/KYUmm2CTSj5nGCa9+IGtUBQOgn+v35JIu2 z6JagDcC8+WJj7lh1IJsNgzP18pV0uYyI7dFvP2VqYYD3HHiHX3UHo1AGhIutY4+ nsAKf99u/Q13Bb5fjPz9nBgwgEpuHIVaX1hqlz/C/jKFgX6jE4mezPrbswc+bJ46 aSIN1qhnWixD6A1IUypqtvH+vZd+Pj52GaiU2VYXhK+NMOF8L14DcD4ON+yqw3JP uW1eFHjOp5MqCsp4AidInwA1rCrYLXz2bCwPBRC4VnBi9BR4m1sEZHV5XIWzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7rySgw6AuCWxgZ6it4bIZnbWQgwHwYDVR0j BBgwFoAUZLRmUdewx1fkrt4BaR8GL+7xXbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTcwNTkyNy1lYzY0LTQ0ZjUtOWM5ZS1jOWE1NWE1MjNiNjQvMC82NEI0NjY1MUQ3 QjBDNzU3RTRBRURFMDE2OTFGMDYyRkVFRjE1REI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZFRUYx NURCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj OWUtYzlhNTVhNTIzYjY0LzAvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2 MkZFRUYxNURCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGnXTfxMCP5fhtcvjooGhba9SQZ1mDsTC8/ IsQYTL6jxRg1B0TXMhZCLKLDctgxQ1KyzFFs/pNcCimcBGDN8u5B846OKw6KJ+14 VOfeXf/5gC06wHjVlW84a/3r8dWKCbwa1HspPl0zf9iFeTjGPSFdow53cS5tbS0G 4otFzu5f9KGx/yzh3Lc7SVLD73qAJrmqCZ8jqx/nOOXsAu/gziubqBU+Og3b757f Nna/tw66szWhhx4YUoJKEl9CuGizR/A91HSVQW1Oad6aSNfzSarmY3B2qe+i0fIe QIj+MWjZS4lP9GFv5Wnm3RnvvcfCtPFqsLl91YBm4OAJpB1rbE0= -----END CERTIFICATE-----Generated at Thu Mar 26 05:46:35 2026 by rpki-client