$ rpki-client -vvf repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft File: 64285236074D6BC2BB384B2D544C7F545C16CF31.mft (raw, json) Hash identifier: lM/pbzgRuNdCgyQXwvJE1j3ysC29UhtPKesG1zx2F5E= Subject key identifier: E7:1A:81:65:B0:2D:1C:63:1E:FB:32:94:B6:28:53:29:80:22:55:B2 Authority key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 Certificate issuer: /CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Certificate serial: 44F71FC6E1C61C7A26FBA6F9E2A68463B5D985CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft Manifest number: 028A Signing time: Tue 24 Mar 2026 18:01:45 +0000 Manifest this update: Tue 24 Mar 2026 17:56:45 +0000 Manifest next update: Fri 27 Mar 2026 21:35:45 +0000 Files and hashes: 1: 64285236074D6BC2BB384B2D544C7F545C16CF31.crl (hash: gxltdykzz2EmD+tQhWdfN5G19W/VLbtZAtsA9rHiBY0=) 2: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: /15s98dVOwr+UQzpOBVke9bCzsrtogPhXVxOkWxYvhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f7:1f:c6:e1:c6:1c:7a:26:fb:a6:f9:e2:a6:84:63:b5:d9:85:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Validity Not Before: Mar 24 17:56:45 2026 GMT Not After : Mar 27 21:35:45 2026 GMT Subject: CN=E71A8165B02D1C631EFB3294B6285329802255B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:26:52:ff:cc:36:dd:ed:2d:44:9e:03:79: 0e:7e:8c:ae:a0:7b:85:da:f1:68:90:36:f4:3f:69: d2:83:50:8d:01:64:0e:63:d4:84:6a:42:37:aa:bb: 4d:17:3a:36:5a:63:9a:c5:0f:57:90:d6:de:21:d1: 4e:b5:da:d5:c5:ff:1e:bb:94:4e:e5:01:5e:69:22: 80:75:67:66:1a:fe:58:7c:77:1c:5b:52:fc:16:27: fc:76:6e:9b:10:19:8c:26:ea:06:d7:13:46:41:02: d9:56:22:e5:28:9c:0c:54:1b:20:18:f0:53:87:0c: 36:c8:11:a2:d4:00:45:4f:7d:50:89:b7:35:b0:bb: 02:c5:12:a0:b5:cc:32:bd:a1:fb:25:05:26:b0:4b: 19:78:db:e4:3b:ce:cb:3f:5f:a0:ef:c4:18:74:96: 8a:e1:5d:56:7c:ea:9c:d7:bf:ad:a4:81:df:e0:4e: e3:c2:53:96:a7:7a:4f:ac:7e:71:bf:c0:68:70:6e: b3:fe:1f:16:1a:56:30:31:91:19:90:15:2c:d0:3a: 60:f7:44:86:32:95:9c:f3:d2:cb:90:29:b0:ed:65: 61:9a:a6:26:92:4d:39:c8:b7:f9:cc:2b:b9:75:5f: 78:3e:b9:f1:f0:d3:8a:32:cd:53:a2:7d:c4:51:fb: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1A:81:65:B0:2D:1C:63:1E:FB:32:94:B6:28:53:29:80:22:55:B2 X509v3 Authority Key Identifier: keyid:64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9f:2d:71:bd:bb:e3:05:50:dc:fd:20:0b:48:8b:d6:30:26: 09:77:8f:2e:cc:a7:21:25:11:a7:5d:56:be:1f:04:f2:87:b0: 07:61:e7:b2:f7:fb:c9:93:28:61:f8:36:22:c5:d3:f0:1e:73: cb:23:6f:33:d6:95:8d:90:44:13:0d:92:8c:8f:44:65:82:a2: a1:2c:f4:11:c7:71:b5:b3:8c:fe:92:22:34:0e:b6:1f:6e:51: 58:18:d4:e6:10:98:70:a8:14:82:15:cb:0c:58:a1:b4:31:fe: 06:ac:99:c9:36:f6:1d:70:98:2e:99:0e:1b:a7:6c:63:18:cc: 90:3b:2d:b9:18:3c:8b:99:74:26:45:7a:e1:66:c9:cd:2c:ac: 8e:9f:df:2f:9a:3d:76:b1:30:17:5a:22:a3:70:42:5e:92:3a: f8:30:58:62:80:b0:48:2c:37:39:da:94:4b:cf:da:d0:12:39: bb:0a:c6:59:f7:7c:31:01:33:96:cb:aa:10:8f:e6:86:13:1d: e2:73:cb:80:27:07:b8:7f:c3:a3:e9:2b:59:97:84:bb:ea:4d: ad:46:07:33:c7:73:22:cb:01:ec:14:f2:c7:57:9f:4d:f6:5c: f7:8b:82:87:10:23:4f:0e:6b:b7:d7:f3:ee:13:73:67:04:0f: fa:d3:89:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPcfxuHGHHom+6b54qaEY7XZhc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1 QzE2Q0YzMTAeFw0yNjAzMjQxNzU2NDVaFw0yNjAzMjcyMTM1NDVaMDMxMTAvBgNV BAMTKEU3MUE4MTY1QjAyRDFDNjMxRUZCMzI5NEI2Mjg1MzI5ODAyMjU1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHiZS/8w23e0tRJ4DeQ5+jK6g e4Xa8WiQNvQ/adKDUI0BZA5j1IRqQjequ00XOjZaY5rFD1eQ1t4h0U612tXF/x67 lE7lAV5pIoB1Z2Ya/lh8dxxbUvwWJ/x2bpsQGYwm6gbXE0ZBAtlWIuUonAxUGyAY 8FOHDDbIEaLUAEVPfVCJtzWwuwLFEqC1zDK9ofslBSawSxl42+Q7zss/X6DvxBh0 lorhXVZ86pzXv62kgd/gTuPCU5anek+sfnG/wGhwbrP+HxYaVjAxkRmQFSzQOmD3 RIYylZzz0suQKbDtZWGapiaSTTnIt/nMK7l1X3g+ufHw04oyzVOifcRR+4yTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5xqBZbAtHGMe+zKUtihTKYAiVbIwHwYDVR0j BBgwFoAUZChSNgdNa8K7OEstVEx/VFwWzzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2MxOTdmOC00ZTJlLTQ2ZDktYmUyYi1lMzQ4YTEzM2RjNTcvMC82NDI4NTIzNjA3 NEQ2QkMyQkIzODRCMkQ1NDRDN0Y1NDVDMTZDRjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1QzE2 Q0YzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdG NTQ1QzE2Q0YzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2fLXG9u+MFUNz9IAtIi9YwJgl3jy7MpyEl EaddVr4fBPKHsAdh57L3+8mTKGH4NiLF0/Aec8sjbzPWlY2QRBMNkoyPRGWCoqEs 9BHHcbWzjP6SIjQOth9uUVgY1OYQmHCoFIIVywxYobQx/gasmck29h1wmC6ZDhun bGMYzJA7LbkYPIuZdCZFeuFmyc0srI6f3y+aPXaxMBdaIqNwQl6SOvgwWGKAsEgs NznalEvP2tASObsKxln3fDEBM5bLqhCP5oYTHeJzy4AnB7h/w6PpK1mXhLvqTa1G BzPHcyLLAewU8sdXn032XPeLgocQI08Oa7fX8+4Tc2cED/rTiWw= -----END CERTIFICATE-----Generated at Thu Mar 26 08:52:38 2026 by rpki-client