$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: BT6nSUX66zqxPR0Yab/ow/OgtH225YwjFrsBgnBBkK8= Subject key identifier: 34:B1:DC:0B:24:6A:3D:47:63:91:15:2A:4B:D9:72:9C:67:8C:A6:FE Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 5B96A58E6C20E345C2A89EE39FE9F160DB7564D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 031D Signing time: Wed 25 Mar 2026 12:52:30 +0000 Manifest this update: Wed 25 Mar 2026 12:47:30 +0000 Manifest next update: Sat 28 Mar 2026 18:43:30 +0000 Files and hashes: 1: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: rEf6YjuFCaTZqlCkAFbC2RNVpcLc80nNFxOAo8YH62o=) 2: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: audNLou8WkSNI41O6Bj42zTe5yNLL3IkDF/evFV7jOs=) 3: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: HdMEaKkRmV4PARMSxcIzB8IIxzpLKv/iS31wiWgTaAM=) 4: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: QmqD13kfOzAiZyHcZjIjJj35uqLOpSh+or3CygrdRkU=) 5: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: eRLttmDRe4S/HXjiFUVifbleZv0UdgB6j9QBQFrEFVw=) 6: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: ie2aVkcGBvpyHvTZRIvr00IO8XIdu6Ng+9HehgFo7MQ=) 7: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: e/2G8Cbvzg0J07eep0ZBOJL7Iat2J09djGHNrLt/GAo=) 8: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: +nlrtI9AN/zzRQRbSnxtN71LuVqGUhlVEh4O5UiaJPQ=) 9: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=) 10: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: b5FyLXJvwHGEGWwekDTqeQDenx7rZLagZD5M467u+1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:96:a5:8e:6c:20:e3:45:c2:a8:9e:e3:9f:e9:f1:60:db:75:64:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Mar 25 12:47:30 2026 GMT Not After : Mar 28 18:43:30 2026 GMT Subject: CN=34B1DC0B246A3D476391152A4BD9729C678CA6FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:55:3c:92:a4:36:ae:17:ca:e8:46:de:ee: f4:1f:62:eb:72:99:af:19:5b:e8:80:46:1f:be:d5: 96:1d:2f:b7:6c:c0:52:41:c6:e0:97:f9:21:13:9b: 34:8e:f2:0e:d7:94:f4:2f:90:7c:16:03:e0:7a:20: ff:8f:3a:08:23:71:6b:4d:10:03:0e:52:cb:9c:c7: 96:d4:f3:4c:63:1b:60:4c:8f:8b:90:e3:76:52:e3: 87:f0:cd:9a:f3:3a:49:b0:50:de:1b:e5:1d:a8:ef: a6:9d:1f:0c:3a:7f:dd:1a:d0:47:a4:20:01:58:ef: 31:9a:9c:12:aa:83:78:3b:84:70:24:65:07:6f:c8: b0:c8:c5:83:9c:63:12:3b:b5:ec:6d:9a:9c:69:fa: 02:b0:fa:90:25:58:48:7e:df:f3:39:3c:9c:f9:2e: 7a:61:e3:bd:6a:dc:c9:ac:1d:71:09:86:5a:c0:5d: f2:e8:69:ef:b1:43:02:be:b7:0e:97:dc:e1:4f:b8: f8:35:23:41:4e:47:9e:c4:a8:85:8d:b5:17:2f:37: 55:57:15:b9:c8:ee:6c:54:b7:d5:28:99:60:80:71: 83:97:5c:8b:53:d3:fd:6c:0b:5d:be:4e:6d:5a:d2: d0:87:f0:23:fa:ce:af:1a:1c:6f:72:6f:5f:41:5a: 71:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B1:DC:0B:24:6A:3D:47:63:91:15:2A:4B:D9:72:9C:67:8C:A6:FE X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ca:6c:12:cd:7b:57:b5:cf:56:93:d8:d9:ef:86:dc:31:e1: 35:2c:55:2f:3c:3d:b1:fe:c9:89:1d:cc:40:bf:51:07:24:97: 65:96:d7:97:c6:fb:25:84:6b:ec:a6:83:c1:8b:3c:40:c0:9c: 73:de:65:cc:3a:81:74:80:bd:6e:99:73:3d:fe:63:ab:be:0c: 54:63:3c:22:48:59:3d:0c:63:15:e7:15:5b:06:1f:17:fd:d3: a7:56:c5:82:f8:f4:57:39:8c:6f:f2:b9:7b:82:4c:2c:e9:4a: 13:5d:d6:b9:17:67:f6:87:fe:1a:eb:28:0c:e9:c3:8e:5b:8d: a4:63:84:aa:ca:04:1a:fe:11:2a:30:be:a3:7d:b4:cd:21:67: 3d:df:e3:f1:e0:27:5b:ef:14:1c:7d:21:05:5e:64:50:16:d3: 9b:6b:f3:0c:0d:26:cb:7e:c0:17:85:34:66:a0:86:3d:6d:e6: 71:2e:2a:e1:06:68:e7:47:38:d5:3d:cb:1b:cc:ef:7e:ed:0f: 1f:6f:9e:e7:c7:bd:9c:ca:13:5c:e3:46:5f:a4:17:6f:84:82: f2:c5:78:cb:24:d1:73:0f:c9:06:82:92:16:89:c5:1a:c3:99: 2c:98:4d:7f:6c:70:6f:74:2f:47:13:21:0e:9c:26:2c:4e:20: 51:c5:ad:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5aljmwg40XCqJ7jn+nxYNt1ZNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNjAzMjUxMjQ3MzBaFw0yNjAzMjgxODQzMzBaMDMxMTAvBgNV BAMTKDM0QjFEQzBCMjQ2QTNENDc2MzkxMTUyQTRCRDk3MjlDNjc4Q0E2RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3FU8kqQ2rhfK6Ebe7vQfYuty ma8ZW+iARh++1ZYdL7dswFJBxuCX+SETmzSO8g7XlPQvkHwWA+B6IP+POggjcWtN EAMOUsucx5bU80xjG2BMj4uQ43ZS44fwzZrzOkmwUN4b5R2o76adHww6f90a0Eek IAFY7zGanBKqg3g7hHAkZQdvyLDIxYOcYxI7textmpxp+gKw+pAlWEh+3/M5PJz5 Lnph471q3MmsHXEJhlrAXfLoae+xQwK+tw6X3OFPuPg1I0FOR57EqIWNtRcvN1VX FbnI7mxUt9UomWCAcYOXXItT0/1sC12+Tm1a0tCH8CP6zq8aHG9yb19BWnHTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNLHcCyRqPUdjkRUqS9lynGeMpv4wHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDKbBLNe1e1z1aT2Nnvhtwx4TUsVS88PbH+ yYkdzEC/UQckl2WW15fG+yWEa+ymg8GLPEDAnHPeZcw6gXSAvW6Zcz3+Y6u+DFRj PCJIWT0MYxXnFVsGHxf906dWxYL49Fc5jG/yuXuCTCzpShNd1rkXZ/aH/hrrKAzp w45bjaRjhKrKBBr+ESowvqN9tM0hZz3f4/HgJ1vvFBx9IQVeZFAW05tr8wwNJst+ wBeFNGaghj1t5nEuKuEGaOdHONU9yxvM737tDx9vnufHvZzKE1zjRl+kF2+EgvLF eMsk0XMPyQaCkhaJxRrDmSyYTX9scG90L0cTIQ6cJixOIFHFra8= -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:22 2026 by rpki-client