$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json) Hash identifier: ePvQDiA0prMgrhIGmSGRl4j6g+lAvkTdRG1+Vzg/+aI= Subject key identifier: F2:25:D7:D3:34:23:B2:5D:86:A3:1E:C6:4D:D1:67:9E:21:69:23:39 Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 3F49836154002EAA3FC6812521A59E2E30443151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft Manifest number: 0564 Signing time: Tue 24 Mar 2026 20:21:55 +0000 Manifest this update: Tue 24 Mar 2026 20:16:55 +0000 Manifest next update: Sat 28 Mar 2026 02:00:55 +0000 Files and hashes: 1: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: UVW9pjMMh6nTzzAse0pe198GDDypk+vSUVBxDpcZFG8=) 2: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: ZpF/KGxPbErqJ8VSz1WkiCybrFY70jeXAIswB/bXwuI=) 3: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: kVt5AplIi2tCio95fGZq/cPfVyltnVVl2G0ZCHPdgRg=) 4: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: KII5650hF6mmxLQ/rbgTb8PaRw7N913WBuqCn/GKGRI=) 5: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: m7OkafERqVVvhMCiLTafrQp3kX/ttd/Jd4KhpXFST5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:49:83:61:54:00:2e:aa:3f:c6:81:25:21:a5:9e:2e:30:44:31:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: Mar 24 20:16:55 2026 GMT Not After : Mar 28 02:00:55 2026 GMT Subject: CN=F225D7D33423B25D86A31EC64DD1679E21692339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8d:3e:00:38:e0:85:9f:ed:44:85:c7:5a:81: d8:53:8a:c9:5a:30:09:9e:44:63:4e:7f:b6:44:c9: 92:10:ac:58:de:27:aa:59:ae:17:ad:47:94:ca:ef: b6:71:a2:d1:f9:c6:ae:30:83:fc:4e:71:20:37:c4: b7:41:e3:63:de:8f:6d:88:98:44:f8:99:cd:89:33: ef:42:25:5b:db:f1:71:bd:da:78:b5:eb:64:2e:83: f4:17:94:b8:03:f0:65:8d:30:2b:d7:dd:d7:c9:2d: 70:5c:c0:14:0a:43:0c:9e:ad:4c:7a:7f:78:c6:7f: d3:43:e6:29:01:31:fe:17:92:01:12:82:4f:92:b8: 0c:63:4c:85:e0:09:e6:ad:93:cd:df:ee:07:e8:a9: cf:7f:5e:40:9c:12:bc:dc:a4:9d:be:f5:6f:f4:7d: 03:e8:15:27:84:13:00:39:5f:d9:f4:29:f2:b6:66: 07:b5:0f:47:b4:0d:e1:3a:f8:69:2e:d9:6c:59:09: 77:e5:1f:88:a6:7a:c7:e7:57:31:a3:71:a0:ce:01: 97:64:40:ad:b6:09:6b:90:0e:a6:e1:79:8c:a9:96: f4:16:8b:ac:f9:4d:b5:b3:47:30:42:fc:b2:6d:1f: a4:37:32:71:45:0e:68:64:a2:09:13:e5:56:8e:a0: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:25:D7:D3:34:23:B2:5D:86:A3:1E:C6:4D:D1:67:9E:21:69:23:39 X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:23:0c:71:47:2c:52:9a:6b:3c:84:2c:c6:c0:df:7d:ba:e1: d5:aa:f2:f3:82:f4:c0:32:cb:78:5e:29:dd:15:c9:7a:5a:bf: 9d:a2:5f:4a:a7:ce:ae:c7:1a:29:c6:cf:4f:1d:89:e4:ef:76: 9e:0f:d9:a2:27:88:41:8f:db:6a:60:15:33:9e:3f:72:93:49: fd:8b:b8:35:82:f3:88:cd:7a:45:00:cd:d3:b7:d9:e6:ce:a1: 3e:e4:e4:9c:1a:23:19:bb:f8:8d:15:fc:71:fd:30:26:cf:4a: 3b:4d:25:c1:4a:0f:ba:4b:bf:59:37:18:27:ab:da:3d:87:fc: 42:64:7c:6a:7b:42:df:ee:d0:bd:a7:53:8c:76:9f:bd:d9:0b: 94:95:7a:00:f1:52:6a:a4:74:42:b1:7b:3c:ac:91:7c:1c:64: 05:a8:88:ed:04:04:c1:16:b4:be:d9:d4:c7:2e:dd:64:da:f4: 43:df:26:26:82:4b:c1:d8:10:73:90:c8:2e:75:5e:6c:d3:0a: c6:b4:9c:db:40:83:98:91:43:e0:fd:ca:4d:61:1d:56:e1:16: 5c:e8:9f:25:6a:c9:2a:81:56:4b:d0:15:a7:64:21:50:a1:72: 7a:a7:84:bc:36:9a:52:09:2e:ca:16:c5:cd:f3:d7:bb:2b:7d: 18:43:d0:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0mDYVQALqo/xoElIaWeLjBEMVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNjAzMjQyMDE2NTVaFw0yNjAzMjgwMjAwNTVaMDMxMTAvBgNV BAMTKEYyMjVEN0QzMzQyM0IyNUQ4NkEzMUVDNjRERDE2NzlFMjE2OTIzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVjT4AOOCFn+1EhcdagdhTisla MAmeRGNOf7ZEyZIQrFjeJ6pZrhetR5TK77ZxotH5xq4wg/xOcSA3xLdB42Pej22I mET4mc2JM+9CJVvb8XG92ni162Qug/QXlLgD8GWNMCvX3dfJLXBcwBQKQwyerUx6 f3jGf9ND5ikBMf4XkgESgk+SuAxjTIXgCeatk83f7gfoqc9/XkCcErzcpJ2+9W/0 fQPoFSeEEwA5X9n0KfK2Zge1D0e0DeE6+Gku2WxZCXflH4imesfnVzGjcaDOAZdk QK22CWuQDqbheYyplvQWi6z5TbWzRzBC/LJtH6Q3MnFFDmhkogkT5VaOoPk7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8iXX0zQjsl2Gox7GTdFnniFpIzkwHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZB M0Y1M0YzNDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACojDHFHLFKaazyELMbA33264dWq8vOC9MAy y3heKd0VyXpav52iX0qnzq7HGinGz08dieTvdp4P2aIniEGP22pgFTOeP3KTSf2L uDWC84jNekUAzdO32ebOoT7k5JwaIxm7+I0V/HH9MCbPSjtNJcFKD7pLv1k3GCer 2j2H/EJkfGp7Qt/u0L2nU4x2n73ZC5SVegDxUmqkdEKxezyskXwcZAWoiO0EBMEW tL7Z1Mcu3WTa9EPfJiaCS8HYEHOQyC51XmzTCsa0nNtAg5iRQ+D9yk1hHVbhFlzo nyVqySqBVkvQFadkIVChcnqnhLw2mlIJLsoWxc3z17srfRhD0Hw= -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:55 2026 by rpki-client