$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json) Hash identifier: YK9a5VHhEf0uSD1V1zggptfSEwkNt4AHC4/jtxpq+W4= Subject key identifier: D4:BB:EC:9C:9C:C3:9D:AB:89:07:98:31:28:F2:B2:94:90:CA:15:2C Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 0D515DF6AF3369BDED9A59B4519B8B304F4A3663 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft Manifest number: 02CB Signing time: Wed 25 Mar 2026 16:02:43 +0000 Manifest this update: Wed 25 Mar 2026 15:57:43 +0000 Manifest next update: Sat 28 Mar 2026 21:15:43 +0000 Files and hashes: 1: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: Hub7rZ2q+AdvyEruoWB8nsArXPAxnFiXXAQjsmifcPA=) 2: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: BPIPbiXwV5spItWtv2cV0wpxlVhPQgMTdoZgVR8M/hY=) 3: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: ILoC7SZWlYY8tT8nCMj2qTfJpiM1Y89EAaEhPrCEnXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:51:5d:f6:af:33:69:bd:ed:9a:59:b4:51:9b:8b:30:4f:4a:36:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: Mar 25 15:57:43 2026 GMT Not After : Mar 28 21:15:43 2026 GMT Subject: CN=D4BBEC9C9CC39DAB8907983128F2B29490CA152C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:47:1a:4f:bf:54:a4:bc:40:80:ad:6b:4b: 39:d4:e2:a3:e2:f3:c2:07:66:f7:3a:71:84:be:91: e2:b9:a1:7a:76:97:19:a5:aa:fc:8f:27:98:19:f6: 66:92:8f:4b:51:54:e2:5f:3c:e9:26:81:d9:35:c8: 99:7b:7e:b2:1a:1d:25:ff:b6:16:7a:12:e5:b1:4b: a7:16:f6:25:ae:99:5b:7b:76:25:82:71:c8:45:73: 81:fa:10:1d:05:6a:fd:33:8a:08:93:61:47:2b:ff: e8:73:df:43:75:c0:7e:ee:41:1d:d5:6d:a7:0c:f4: d5:15:31:69:32:c7:d7:71:b0:ca:c6:03:d9:20:1a: 3b:2c:62:bd:6e:4f:55:82:44:e1:40:5e:84:fa:08: 03:33:6e:1b:9c:7c:d6:b4:18:20:f9:04:ae:e5:07: 4e:2f:0a:fb:37:95:95:62:04:fa:cd:97:40:ef:4a: f4:ce:78:e9:b4:67:c2:e1:aa:4e:ff:95:58:09:a8: 0f:28:c5:46:9d:fc:df:81:e0:8c:ce:9f:a0:f9:ff: 9b:05:d9:7e:dd:b5:97:9d:b5:35:18:dd:03:ac:bf: b4:3b:1b:a8:de:3f:11:f8:37:f6:53:7f:f2:5d:de: e9:4f:81:81:55:2b:8d:67:e6:62:7e:af:03:cd:37: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BB:EC:9C:9C:C3:9D:AB:89:07:98:31:28:F2:B2:94:90:CA:15:2C X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:5b:75:e6:7c:8e:8b:61:21:55:1a:10:e8:9a:fb:55:43:54: c7:c7:21:9f:db:4c:89:af:01:a6:1b:37:19:34:c7:1e:87:10: f6:b5:f8:c0:d3:29:38:e2:47:5d:7a:4a:95:fb:21:0c:e8:9f: 09:3b:1d:eb:f9:a9:f7:e0:44:6b:bc:39:34:81:6f:23:ee:07: aa:3c:28:82:51:f0:1c:90:3c:f0:6d:31:e9:4c:ec:1e:d8:2a: 9e:64:69:55:a8:37:dd:94:af:2d:14:53:96:1a:34:54:7a:57: 94:e9:e9:d3:56:bd:64:80:3d:33:86:e9:4a:6e:bd:b6:a9:99: ba:85:80:56:7b:7e:47:e1:4e:31:e5:0b:1e:2c:44:6f:48:8f: 34:b5:f3:ae:20:fb:d9:3b:d7:d3:f4:cd:30:d8:5c:36:ea:25: 5c:c3:04:75:9f:bf:01:d2:f4:04:71:70:ec:3a:1c:2a:81:cb: b0:41:75:60:0e:92:bf:47:06:37:2f:24:dc:58:41:72:49:a6: d3:13:cd:62:6e:d4:ea:b9:06:f5:c5:eb:d8:b5:35:8b:55:77: e6:4f:0a:40:b6:d6:14:bd:7c:2c:1c:f4:8e:95:14:96:d7:67: 18:d1:3a:cc:3f:12:d4:00:82:7e:14:63:3a:0c:fb:49:3c:5d: cd:1d:94:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDVFd9q8zab3tmlm0UZuLME9KNmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNjAzMjUxNTU3NDNaFw0yNjAzMjgyMTE1NDNaMDMxMTAvBgNV BAMTKEQ0QkJFQzlDOUNDMzlEQUI4OTA3OTgzMTI4RjJCMjk0OTBDQTE1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChqkcaT79UpLxAgK1rSznU4qPi 88IHZvc6cYS+keK5oXp2lxmlqvyPJ5gZ9maSj0tRVOJfPOkmgdk1yJl7frIaHSX/ thZ6EuWxS6cW9iWumVt7diWCcchFc4H6EB0Fav0zigiTYUcr/+hz30N1wH7uQR3V bacM9NUVMWkyx9dxsMrGA9kgGjssYr1uT1WCROFAXoT6CAMzbhucfNa0GCD5BK7l B04vCvs3lZViBPrNl0DvSvTOeOm0Z8Lhqk7/lVgJqA8oxUad/N+B4IzOn6D5/5sF 2X7dtZedtTUY3QOsv7Q7G6jePxH4N/ZTf/Jd3ulPgYFVK41n5mJ+rwPNN1VbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1LvsnJzDnauJB5gxKPKylJDKFSwwHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClbdeZ8jothIVUaEOia+1VDVMfHIZ/bTImv AaYbNxk0xx6HEPa1+MDTKTjiR116SpX7IQzonwk7Hev5qffgRGu8OTSBbyPuB6o8 KIJR8ByQPPBtMelM7B7YKp5kaVWoN92Ury0UU5YaNFR6V5Tp6dNWvWSAPTOG6Upu vbapmbqFgFZ7fkfhTjHlCx4sRG9IjzS1864g+9k719P0zTDYXDbqJVzDBHWfvwHS 9ARxcOw6HCqBy7BBdWAOkr9HBjcvJNxYQXJJptMTzWJu1Oq5BvXF69i1NYtVd+ZP CkC21hS9fCwc9I6VFJbXZxjROsw/EtQAgn4UYzoM+0k8Xc0dlK4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:43 2026 by rpki-client