$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft File: 601D123430DAF9288A7DFD628F892DB5691B88F3.mft (raw, json) Hash identifier: ojwy70iC59eEqbLG5cNklICkrE2HBSJDdYHtB/7uv6U= Subject key identifier: 2C:E6:45:04:0F:45:43:3F:9E:B9:97:0E:1C:A5:F1:55:79:CC:B7:66 Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Certificate serial: 4C63F66C9006E434E32CE0ED52F99F7663F1B2D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft Manifest number: 01EA Signing time: Tue 24 Mar 2026 13:50:44 +0000 Manifest this update: Tue 24 Mar 2026 13:45:44 +0000 Manifest next update: Fri 27 Mar 2026 20:35:44 +0000 Files and hashes: 1: 3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (hash: ItQ4yaHK0oJdabwYqYAR0lnERMhE/LKV2oMBDYLcbSg=) 2: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (hash: 3IuUvfgQ/fSDFjAbV/bWpFSL1cWNQrNqsIN58CdOTAo=) 3: 601D123430DAF9288A7DFD628F892DB5691B88F3.crl (hash: R/5n4tYezZIVQEfMp27q1/YlKU+VWhDvUgIurf0bqUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:63:f6:6c:90:06:e4:34:e3:2c:e0:ed:52:f9:9f:76:63:f1:b2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Validity Not Before: Mar 24 13:45:44 2026 GMT Not After : Mar 27 20:35:44 2026 GMT Subject: CN=2CE645040F45433F9EB9970E1CA5F15579CCB766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:f1:45:8c:a7:c2:a1:c1:93:de:de:e3:90: b4:cc:de:09:38:50:40:b1:70:ef:83:85:98:78:58: 46:e6:26:78:1b:a2:22:67:2a:37:42:1e:ae:6c:0e: 6f:92:8a:5e:80:cd:f9:61:74:e3:0a:21:b9:94:e9: 3a:15:2a:f1:8b:22:1d:f5:e6:a9:fb:39:40:06:e8: d2:6c:78:f6:8a:f5:10:be:f3:5e:a1:b3:65:ed:9a: c3:32:d3:aa:f6:4b:59:ec:23:da:f9:d6:ad:79:68: 10:28:fe:a9:89:c0:01:7b:87:cf:dc:54:82:80:ab: 0b:14:f7:2b:8b:f5:6c:ae:7c:3a:7c:4c:8c:19:57: 68:4b:cc:6c:4f:ea:27:87:29:c0:cc:90:ed:6d:fd: ff:cf:06:36:c1:11:fc:9c:64:8d:65:2c:d0:64:92: 4e:c8:50:63:d5:9d:e5:40:59:b5:7e:4f:8f:4a:a4: f4:79:8a:b1:54:1d:13:fe:52:4e:6f:ea:92:72:a8: 57:b1:04:8c:29:d3:b4:07:6c:80:ed:68:da:df:b0: 80:22:50:d5:6d:33:1b:df:c8:af:2b:fa:51:53:29: 5c:ea:77:78:89:ea:2c:24:fd:6f:aa:26:39:92:e2: 0b:8c:28:31:0d:6f:3e:9e:ff:0a:ec:77:d0:06:53: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E6:45:04:0F:45:43:3F:9E:B9:97:0E:1C:A5:F1:55:79:CC:B7:66 X509v3 Authority Key Identifier: keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:81:10:f4:50:f7:79:55:0f:81:76:85:45:02:fc:d7:05:d0: 79:57:5d:43:46:18:53:89:eb:ba:49:57:dc:3f:22:58:34:a9: 78:0b:34:d0:7c:1f:55:7b:eb:a8:7a:2f:e0:0d:68:28:60:f2: c5:44:3b:cc:00:30:9d:39:99:0c:49:d0:61:94:0a:ab:5c:60: 01:fe:d9:04:37:36:98:92:d7:ef:9d:98:5e:04:45:4c:4b:c5: aa:a0:0a:d7:67:40:f8:92:a7:12:cd:75:6e:14:fc:41:9e:e9: c3:9c:0f:15:95:cb:c8:ca:e5:07:78:22:0b:d5:2c:59:16:53: 7b:4f:6e:a4:4a:d2:19:e3:1c:6c:b7:e1:6d:30:84:54:f7:37: 8c:98:64:b4:3a:7d:55:d6:53:f6:0d:f0:83:ba:2a:df:70:30: 5b:6f:e2:e6:6f:c0:ff:3f:be:81:e0:d1:99:b1:70:2c:d0:cc: a7:52:d2:3a:50:f6:84:b7:69:c7:b7:08:01:85:51:2c:7a:2d: d9:aa:46:a8:ce:33:ee:e7:a9:19:5e:5e:06:45:cc:a7:56:3d: f2:5e:e5:ca:d7:85:1e:e3:06:43:e8:5d:14:d0:3c:28:bb:5e: f2:3a:7f:17:5e:eb:bd:9b:56:23:24:59:8a:94:5a:04:a1:25: dd:df:cd:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGP2bJAG5DTjLODtUvmfdmPxstEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2 OTFCODhGMzAeFw0yNjAzMjQxMzQ1NDRaFw0yNjAzMjcyMDM1NDRaMDMxMTAvBgNV BAMTKDJDRTY0NTA0MEY0NTQzM0Y5RUI5OTcwRTFDQTVGMTU1NzlDQ0I3NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7W/FFjKfCocGT3t7jkLTM3gk4 UECxcO+DhZh4WEbmJngboiJnKjdCHq5sDm+Sil6AzflhdOMKIbmU6ToVKvGLIh31 5qn7OUAG6NJsePaK9RC+816hs2XtmsMy06r2S1nsI9r51q15aBAo/qmJwAF7h8/c VIKAqwsU9yuL9WyufDp8TIwZV2hLzGxP6ieHKcDMkO1t/f/PBjbBEfycZI1lLNBk kk7IUGPVneVAWbV+T49KpPR5irFUHRP+Uk5v6pJyqFexBIwp07QHbIDtaNrfsIAi UNVtMxvfyK8r+lFTKVzqd3iJ6iwk/W+qJjmS4guMKDENbz6e/wrsd9AGU+ljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULOZFBA9FQz+euZcOHKXxVXnMt2YwHwYDVR0j BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC ODhGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRhYWUzZjAtOWM3MC00MmZjLWFl M2UtYmI1OTAwNDZiMGZlLzAvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJE QjU2OTFCODhGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyBEPRQ93lVD4F2hUUC/NcF0HlXXUNGGFOJ 67pJV9w/Ilg0qXgLNNB8H1V766h6L+ANaChg8sVEO8wAMJ05mQxJ0GGUCqtcYAH+ 2QQ3NpiS1++dmF4ERUxLxaqgCtdnQPiSpxLNdW4U/EGe6cOcDxWVy8jK5Qd4IgvV LFkWU3tPbqRK0hnjHGy34W0whFT3N4yYZLQ6fVXWU/YN8IO6Kt9wMFtv4uZvwP8/ voHg0ZmxcCzQzKdS0jpQ9oS3ace3CAGFUSx6LdmqRqjOM+7nqRleXgZFzKdWPfJe 5crXhR7jBkPoXRTQPCi7XvI6fxde672bViMkWYqUWgShJd3fzX0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:53:18 2026 by rpki-client