$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: nColJYMqo36s1lj3QO+HwtcDejBolIf8FI1Yct5T+5A= Subject key identifier: 40:5B:5C:30:83:8A:9C:73:D0:82:40:6D:1B:44:B4:F4:B9:6E:79:14 Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 3C85D12B7F1EAC780F9CCF3023F627EEE6333E7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 01D4 Signing time: Thu 26 Mar 2026 07:42:18 +0000 Manifest this update: Thu 26 Mar 2026 07:37:18 +0000 Manifest next update: Sun 29 Mar 2026 19:14:18 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: a+85n+xY/d/Kktuppb1aZPF1dbd9aMn1df7PH5efD38=) 2: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: nWDYLytH9X1a3k9npQu110E3yHqFNHcF0K/zWFBZjwg=) 3: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: dfvTwA9g0PoiQuic92FFcarIIGy4IM2yPjpH4fTFWWk=) 4: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: ZuMX9SaCjlNMqVoVen3mC19Gd4hCWZ8Hgeihng1O4Rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:85:d1:2b:7f:1e:ac:78:0f:9c:cf:30:23:f6:27:ee:e6:33:3e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Mar 26 07:37:18 2026 GMT Not After : Mar 29 19:14:18 2026 GMT Subject: CN=405B5C30838A9C73D082406D1B44B4F4B96E7914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:39:ef:a7:b0:a8:33:6a:ac:e4:2b:05:c2: 2e:17:3a:24:4e:25:e5:fc:89:28:10:15:d4:df:30: 15:2c:37:62:b3:db:91:34:8a:3c:1f:e5:96:c6:42: cb:47:61:f0:26:5a:d1:63:35:c7:07:0c:26:d8:40: 46:7e:a2:55:6c:c2:57:90:f7:3c:1f:b8:ad:41:0c: 06:f4:53:03:60:04:56:52:08:fe:4f:47:c8:64:41: 8d:ad:b1:8b:2a:23:2a:2e:8e:5e:7e:43:7c:fe:8b: 71:30:21:83:c6:01:57:8c:4e:6c:4b:1c:e0:4c:61: f3:7c:f1:12:fe:c2:22:0d:2f:bb:b2:da:d6:d3:62: c0:24:69:92:e4:73:3c:20:fb:5c:52:0b:ee:ae:68: 77:20:bd:85:37:85:26:a7:ce:cb:e5:ed:c4:87:2e: f2:9c:61:40:a1:24:40:ec:53:88:1c:0d:8f:0f:71: 9f:af:05:94:6c:07:a6:a3:95:06:68:9f:4d:6d:33: 38:16:ae:17:3c:dd:ad:20:59:33:94:62:2a:89:26: 75:3b:0a:c7:23:a1:91:0f:0f:61:db:0f:06:e8:45: 1c:6d:43:8b:06:57:76:18:bc:90:92:2e:ff:51:a4: 52:c6:03:be:b7:d7:bf:c5:7f:26:88:4e:ad:f4:f4: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5B:5C:30:83:8A:9C:73:D0:82:40:6D:1B:44:B4:F4:B9:6E:79:14 X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:15:1b:b5:f3:23:bf:86:b1:1d:e6:72:48:4b:a8:73:bd:d7: 84:48:20:35:59:74:13:3c:52:24:39:2c:ee:b5:d1:b2:a5:c6: fc:55:70:fe:a2:e5:8c:bf:b9:ad:26:f2:ec:31:9e:59:5a:80: aa:81:df:f8:3a:40:0e:ae:c0:3e:ae:9c:b9:33:8c:1d:c2:ee: a1:db:81:70:f0:8a:c4:61:ca:bf:c4:67:7e:a4:34:a5:18:4b: 76:82:78:1a:63:1e:21:8a:85:90:c0:28:b3:86:04:2a:4e:38: 1d:c6:7c:94:5f:6b:cd:42:f1:38:99:15:75:21:75:6d:26:7b: 69:2d:06:fd:90:50:33:9a:87:5b:05:d2:6c:15:15:c8:cf:c5: 45:93:59:be:15:a0:94:27:fa:d9:e5:2a:68:8f:80:1b:e3:4e: ff:ff:af:fa:87:79:54:b1:09:c1:1f:ee:1f:5f:40:be:28:db: 36:69:c9:88:8d:7f:80:83:07:be:76:4e:76:47:e8:ad:2e:f9: ea:e1:11:b4:78:32:49:b1:38:c3:f7:bb:5c:72:43:a6:79:54: 60:e2:f6:0b:0b:df:1f:2c:d0:f7:5d:7e:21:63:55:b0:10:d6: 81:30:47:27:18:42:6d:fa:78:b5:db:aa:e2:e1:e2:e9:f1:a9: 55:c7:42:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIXRK38erHgPnM8wI/Yn7uYzPnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNjAzMjYwNzM3MThaFw0yNjAzMjkxOTE0MThaMDMxMTAvBgNV BAMTKDQwNUI1QzMwODM4QTlDNzNEMDgyNDA2RDFCNDRCNEY0Qjk2RTc5MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVuznvp7CoM2qs5CsFwi4XOiRO JeX8iSgQFdTfMBUsN2Kz25E0ijwf5ZbGQstHYfAmWtFjNccHDCbYQEZ+olVswleQ 9zwfuK1BDAb0UwNgBFZSCP5PR8hkQY2tsYsqIyoujl5+Q3z+i3EwIYPGAVeMTmxL HOBMYfN88RL+wiINL7uy2tbTYsAkaZLkczwg+1xSC+6uaHcgvYU3hSanzsvl7cSH LvKcYUChJEDsU4gcDY8PcZ+vBZRsB6ajlQZon01tMzgWrhc83a0gWTOUYiqJJnU7 CscjoZEPD2HbDwboRRxtQ4sGV3YYvJCSLv9RpFLGA76317/FfyaITq309NKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQFtcMIOKnHPQgkBtG0S09LlueRQwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkVG7XzI7+GsR3mckhLqHO914RIIDVZdBM8 UiQ5LO610bKlxvxVcP6i5Yy/ua0m8uwxnllagKqB3/g6QA6uwD6unLkzjB3C7qHb gXDwisRhyr/EZ36kNKUYS3aCeBpjHiGKhZDAKLOGBCpOOB3GfJRfa81C8TiZFXUh dW0me2ktBv2QUDOah1sF0mwVFcjPxUWTWb4VoJQn+tnlKmiPgBvjTv//r/qHeVSx CcEf7h9fQL4o2zZpyYiNf4CDB752TnZH6K0u+erhEbR4MkmxOMP3u1xyQ6Z5VGDi 9gsL3x8s0PddfiFjVbAQ1oEwRycYQm36eLXbquLh4unxqVXHQpQ= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:08 2026 by rpki-client