$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: qkxP60VQUMHFZyIgxFhLKrWCKS2VdvLM9QToXSwjyYA= Subject key identifier: 10:3E:B6:80:DB:F2:90:4F:F0:CA:F9:54:9D:3A:D6:F8:56:AB:2D:3A Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 6D368C4ED3C327CF47D95868E8C17FD740831154 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: 0136 Signing time: Wed 25 Mar 2026 17:22:23 +0000 Manifest this update: Wed 25 Mar 2026 17:17:23 +0000 Manifest next update: Sat 28 Mar 2026 23:58:23 +0000 Files and hashes: 1: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: FOCno4gbHCAnLnmHobD1PWQDcUoK6xzxe9dzOJ2yOWg=) 2: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: 6FrYrWwT/6GYpLVlqYoL3gNZmv/23f6o2P/1ngCKpHM=) 3: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: 1t/YY4k/2f409jhOunWIVWLeQdkIptD7DDSdwQQxlp4=) 4: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: uCH/JrJsLPZexF0rUx1EEQxpnCx3s5VDJ8IscbtIU4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:36:8c:4e:d3:c3:27:cf:47:d9:58:68:e8:c1:7f:d7:40:83:11:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Mar 25 17:17:23 2026 GMT Not After : Mar 28 23:58:23 2026 GMT Subject: CN=103EB680DBF2904FF0CAF9549D3AD6F856AB2D3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3f:6f:72:f6:d6:1c:1c:46:a8:dd:ad:87:e6: f4:42:c3:7c:4c:5b:4d:27:d3:a2:88:cc:29:e9:fd: 17:f2:f3:11:5d:92:51:7e:d1:b2:69:5a:82:27:0d: e7:df:f8:0b:37:d2:49:4c:52:c7:63:c8:d8:a1:5b: 1e:4c:e4:b3:d0:fd:9a:04:be:26:e4:85:e3:e3:3a: 9b:3a:fb:c7:bf:2f:dd:7b:88:4b:7f:19:47:c1:4c: 71:f5:63:0b:bb:43:0c:57:1d:eb:14:26:ea:c0:f9: d5:72:2e:52:b8:2c:c2:20:16:df:bf:40:0f:e4:4f: 1d:d9:81:c2:2d:73:43:8b:43:d6:94:b4:6b:da:f2: 12:75:6e:11:9f:10:ab:6c:2f:4b:3e:eb:4c:34:7d: 3f:1e:d7:60:a4:ff:f4:02:39:5d:78:0b:c7:8e:89: 8b:0f:09:ee:2a:6b:57:cf:20:ea:da:31:af:02:d2: ef:cd:31:d9:0f:9b:6c:ad:67:3f:33:74:df:c5:d0: 40:fc:b0:00:a4:8d:a2:bd:7f:2b:7e:01:6b:02:18: c3:3a:40:7d:10:ad:b6:0f:d8:69:ec:68:84:a2:a9: 42:0f:77:11:bf:11:c7:22:f3:69:57:b5:b0:9a:5b: e0:3b:3f:4b:02:2a:d1:d5:c1:a1:d9:a1:d0:06:90: f4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3E:B6:80:DB:F2:90:4F:F0:CA:F9:54:9D:3A:D6:F8:56:AB:2D:3A X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b9:55:9d:b2:15:ae:f7:70:ba:43:09:b5:03:f0:a9:c9:88: 36:35:78:07:6f:41:e9:e9:b4:91:b3:3a:24:92:72:d6:6a:13: b4:c1:f4:95:ee:74:19:43:bf:50:86:df:64:7e:ce:d3:26:d9: 99:9f:7c:22:e9:bd:a3:29:d0:33:38:66:13:24:b5:28:0f:8f: cf:56:3d:c9:02:cc:db:34:89:d4:93:97:36:d6:ab:7b:27:37: 60:ea:21:3d:98:66:81:17:2e:bf:eb:53:a0:c1:ae:c2:e5:47: 33:3f:ca:5c:76:d9:77:0f:e8:93:eb:69:23:4b:dd:20:f9:0e: 6e:f6:d6:a6:d9:df:9e:d1:6d:05:b1:b5:fe:2f:34:9b:b8:ea: 07:7c:60:58:80:1b:d6:91:da:f8:1d:52:0b:da:98:d8:63:b9: 6b:74:a2:d0:ae:ab:b0:90:ea:5b:4f:4e:f8:18:ff:5d:e5:4f: 28:ee:47:ac:05:72:d6:f2:88:e5:4f:8e:65:7b:e6:6a:ba:d1: 29:81:0a:4a:c7:9f:42:bc:4a:d8:eb:9b:93:85:d8:ee:48:07: e7:68:46:a6:d2:68:6f:02:e4:8a:44:af:76:99:cb:5d:ba:fb: 2a:5b:2e:f7:68:d5:6f:32:91:5e:e8:11:2c:e4:14:c7:93:be: c4:d4:4a:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTaMTtPDJ89H2Vho6MF/10CDEVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNjAzMjUxNzE3MjNaFw0yNjAzMjgyMzU4MjNaMDMxMTAvBgNV BAMTKDEwM0VCNjgwREJGMjkwNEZGMENBRjk1NDlEM0FENkY4NTZBQjJEM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsP29y9tYcHEao3a2H5vRCw3xM W00n06KIzCnp/Rfy8xFdklF+0bJpWoInDeff+As30klMUsdjyNihWx5M5LPQ/ZoE vibkhePjOps6+8e/L917iEt/GUfBTHH1Ywu7QwxXHesUJurA+dVyLlK4LMIgFt+/ QA/kTx3ZgcItc0OLQ9aUtGva8hJ1bhGfEKtsL0s+60w0fT8e12Ck//QCOV14C8eO iYsPCe4qa1fPIOraMa8C0u/NMdkPm2ytZz8zdN/F0ED8sACkjaK9fyt+AWsCGMM6 QH0QrbYP2GnsaISiqUIPdxG/Ecci82lXtbCaW+A7P0sCKtHVwaHZodAGkPTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUED62gNvykE/wyvlUnTrW+FarLTowHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABi5VZ2yFa73cLpDCbUD8KnJiDY1eAdvQenp tJGzOiSSctZqE7TB9JXudBlDv1CG32R+ztMm2ZmffCLpvaMp0DM4ZhMktSgPj89W PckCzNs0idSTlzbWq3snN2DqIT2YZoEXLr/rU6DBrsLlRzM/ylx22XcP6JPraSNL 3SD5Dm721qbZ357RbQWxtf4vNJu46gd8YFiAG9aR2vgdUgvamNhjuWt0otCuq7CQ 6ltPTvgY/13lTyjuR6wFctbyiOVPjmV75mq60SmBCkrHn0K8Stjrm5OF2O5IB+do RqbSaG8C5IpEr3aZy126+ypbLvdo1W8ykV7oESzkFMeTvsTUSmk= -----END CERTIFICATE-----Generated at Thu Mar 26 12:16:23 2026 by rpki-client