$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: DoSm5VRQycDKQZ05qqmAkgl/lV0spfONZagZ2YnW2mU= Subject key identifier: 77:80:82:B6:38:80:52:1F:11:80:24:95:30:CA:CE:D0:C4:08:DC:9C Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 497DB9CF3BE1079E9648057DE778A39E90C302EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 01E7 Signing time: Mon 23 Mar 2026 21:42:37 +0000 Manifest this update: Mon 23 Mar 2026 21:37:37 +0000 Manifest next update: Fri 27 Mar 2026 09:12:37 +0000 Files and hashes: 1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: wuC9It04ITcPHxZPL2vghCkOowjbKvKqo261ljFGDF4=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: yZ/MChZHB5tDzBnd1w3tnaq3ghVO7uYw0Z7Ua0KxMJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7d:b9:cf:3b:e1:07:9e:96:48:05:7d:e7:78:a3:9e:90:c3:02:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Mar 23 21:37:37 2026 GMT Not After : Mar 27 09:12:37 2026 GMT Subject: CN=778082B63880521F1180249530CACED0C408DC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:da:ad:7a:3a:59:7a:40:1d:7b:37:48:1c:9f: 72:53:e8:59:8d:5c:84:7f:66:da:a9:3b:5a:82:4c: 2a:19:77:37:ca:cb:0d:0f:9c:ce:0c:60:cf:80:f8: 66:75:7f:c5:6b:7c:a1:85:c0:d3:ff:81:68:6e:03: f9:9a:eb:5a:00:bc:4d:e6:d4:de:c3:63:7b:1b:b2: 44:6a:92:c5:ca:93:61:59:5c:b8:24:b8:39:05:80: 38:d2:71:6d:33:b0:eb:1e:eb:7f:ec:b9:3c:a3:b8: 70:af:eb:37:66:3b:b3:d5:97:f0:6c:81:6f:03:2b: 90:f6:b9:e9:81:c4:bc:20:4f:8a:4f:0c:67:af:75: 80:3a:88:17:b2:52:ed:6f:36:a9:ca:24:25:5a:43: 4a:57:aa:4d:8c:2a:d5:47:29:d6:96:90:19:9f:eb: c1:77:37:e8:ab:91:e7:bd:0c:fc:6f:1a:e7:68:02: e1:da:96:19:a4:ff:35:ef:da:01:13:91:3e:e5:fa: b6:a6:58:49:2f:4f:50:f5:43:58:96:64:64:f8:35: 36:5d:c1:8b:4e:ea:53:dc:3f:68:04:cd:93:23:a6: 4f:4e:4c:f5:e6:4d:be:60:d8:0b:50:c3:b7:76:34: e2:bb:ce:f8:d5:df:44:07:dc:72:a9:a4:cb:0c:dc: c7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:80:82:B6:38:80:52:1F:11:80:24:95:30:CA:CE:D0:C4:08:DC:9C X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b5:0b:0f:bf:16:d0:1f:63:d7:ec:cb:df:23:36:e9:3b:1b: 38:7c:0c:33:0e:76:56:ea:86:c8:2b:02:3a:d1:7b:cb:a6:53: 7b:16:d6:b1:76:6c:4b:43:dc:4d:16:69:cc:75:24:e6:d0:e3: 02:4a:f7:36:3f:6d:ab:b9:f2:c3:41:6b:68:8c:1a:0f:5d:a2: f5:c3:7e:5a:79:2f:92:4c:48:03:e4:f7:b7:d7:30:95:46:c0: fa:47:e4:58:12:aa:0a:db:82:10:6d:5b:4f:c5:4a:a8:47:b8: b2:32:37:3b:bc:1a:3a:6b:dc:04:1c:b6:4e:24:29:51:90:db: 64:e5:59:11:8c:ca:1d:6a:68:ad:13:b7:22:a2:a1:b4:cc:b9: 80:8f:58:91:44:32:00:7b:58:c0:8f:dd:7b:74:66:88:8c:e2: 55:72:5f:c8:08:ef:9a:be:79:e0:70:58:3f:0b:6b:22:f4:d8: 78:0f:f8:1c:b4:5b:49:ff:27:32:c6:74:b5:6b:5b:5c:f4:b4: e6:07:9c:f3:d0:dd:d9:8d:b3:36:a2:40:c0:de:75:72:24:33: 8c:3e:f5:79:89:7d:04:ed:27:2e:ff:69:dc:0a:a4:e1:a4:56: 06:c9:7d:01:53:40:15:d6:29:3a:ea:ae:7d:12:61:ad:af:8a: 09:96:51:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSX25zzvhB56WSAV953ijnpDDAuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNjAzMjMyMTM3MzdaFw0yNjAzMjcwOTEyMzdaMDMxMTAvBgNV BAMTKDc3ODA4MkI2Mzg4MDUyMUYxMTgwMjQ5NTMwQ0FDRUQwQzQwOERDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt2q16Oll6QB17N0gcn3JT6FmN XIR/ZtqpO1qCTCoZdzfKyw0PnM4MYM+A+GZ1f8VrfKGFwNP/gWhuA/ma61oAvE3m 1N7DY3sbskRqksXKk2FZXLgkuDkFgDjScW0zsOse63/suTyjuHCv6zdmO7PVl/Bs gW8DK5D2uemBxLwgT4pPDGevdYA6iBeyUu1vNqnKJCVaQ0pXqk2MKtVHKdaWkBmf 68F3N+irkee9DPxvGudoAuHalhmk/zXv2gETkT7l+ramWEkvT1D1Q1iWZGT4NTZd wYtO6lPcP2gEzZMjpk9OTPXmTb5g2AtQw7d2NOK7zvjV30QH3HKppMsM3McVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd4CCtjiAUh8RgCSVMMrO0MQI3JwwHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHi1Cw+/FtAfY9fsy98jNuk7Gzh8DDMOdlbq hsgrAjrRe8umU3sW1rF2bEtD3E0Wacx1JObQ4wJK9zY/bau58sNBa2iMGg9dovXD flp5L5JMSAPk97fXMJVGwPpH5FgSqgrbghBtW0/FSqhHuLIyNzu8Gjpr3AQctk4k KVGQ22TlWRGMyh1qaK0TtyKiobTMuYCPWJFEMgB7WMCP3Xt0ZoiM4lVyX8gI75q+ eeBwWD8LayL02HgP+By0W0n/JzLGdLVrW1z0tOYHnPPQ3dmNszaiQMDedXIkM4w+ 9XmJfQTtJy7/adwKpOGkVgbJfQFTQBXWKTrqrn0SYa2vigmWUSU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:06 2026 by rpki-client