$ rpki-client -vvf repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft File: 63003FFDD063104898793061BDB2DB8D0788745D.mft (raw, json) Hash identifier: rA9BaEsjdJwa7/8gnfAJMxpvSApVjn5n+fCMjqq+7Ts= Subject key identifier: E7:73:0E:2B:EA:5D:D7:45:B5:1A:9E:A3:56:E7:15:16:59:DB:F3:E9 Authority key identifier: 63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D Certificate issuer: /CN=63003FFDD063104898793061BDB2DB8D0788745D Certificate serial: 6AAE231885971691FA9B9CC8A6C0F47DC0833AB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft Manifest number: 0525 Signing time: Tue 24 Mar 2026 19:31:56 +0000 Manifest this update: Tue 24 Mar 2026 19:26:56 +0000 Manifest next update: Sat 28 Mar 2026 05:16:56 +0000 Files and hashes: 1: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: uBYWq9KOdocMUKkuJh410FmbT/FJLpr3pkzLuhHu42c=) 2: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: 8ngGpaw5U41sV4BmmrJGa5VA7KiMpIyW6XxofkOK1bo=) 3: 63003FFDD063104898793061BDB2DB8D0788745D.crl (hash: ze/Hr1kAGGmEL2ny5FB7yU1rchdo8JqMn1NOG6SZncQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ae:23:18:85:97:16:91:fa:9b:9c:c8:a6:c0:f4:7d:c0:83:3a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63003FFDD063104898793061BDB2DB8D0788745D Validity Not Before: Mar 24 19:26:56 2026 GMT Not After : Mar 28 05:16:56 2026 GMT Subject: CN=E7730E2BEA5DD745B51A9EA356E7151659DBF3E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e9:75:a8:a8:86:47:cc:82:04:90:23:5f:b3: 45:31:90:f0:a8:c6:0d:cb:cd:3c:28:c8:b8:7a:e5: fe:28:e1:fd:ce:97:24:66:bf:e3:f9:20:74:51:ee: 3f:bf:c4:5d:69:aa:49:34:97:75:6c:10:96:3e:56: b8:31:51:4f:53:de:c3:69:42:04:38:17:71:9c:1d: 2c:fb:f8:d4:98:56:4d:00:90:4e:a2:54:c9:df:c5: df:4a:4a:16:1f:6f:41:cb:ff:d4:12:d6:17:a2:b8: a3:0b:0c:db:9c:f1:85:15:31:36:84:03:b6:35:a5: 7c:8c:a4:3e:63:f3:4d:f4:f9:91:bb:96:6e:b4:0a: e4:3d:36:f8:53:61:da:48:c7:6d:04:fa:49:0d:6e: 51:79:a4:95:be:e7:f1:32:b0:17:96:8d:b1:92:06: 39:5a:c2:18:d3:ef:9a:44:d5:27:cd:40:8a:0c:92: 15:36:18:9d:65:59:6c:a3:c7:b0:97:78:f4:c6:4f: a2:84:46:a6:6e:d8:3c:3a:9b:f8:09:58:c8:db:ca: 24:f5:1b:8e:2d:59:13:97:8f:50:e3:13:5d:3a:39: 6e:8b:e2:4f:21:70:a9:75:c5:87:c1:a4:6c:2c:68: 41:2f:92:bf:a9:1c:41:0a:99:53:b3:91:3a:de:c0: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:73:0E:2B:EA:5D:D7:45:B5:1A:9E:A3:56:E7:15:16:59:DB:F3:E9 X509v3 Authority Key Identifier: keyid:63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:3d:0c:a6:13:98:87:7f:42:75:e5:b4:a2:1b:f4:48:a3:f8: 53:29:0f:e0:8f:ba:f3:f5:d5:87:bb:35:c6:ae:52:b4:ca:6d: 18:f4:bc:c6:e1:6b:5b:c0:82:10:1d:9b:83:9d:87:a8:f8:f8: 2b:8e:88:88:bb:9e:d5:6b:82:f4:e5:55:2a:06:44:d8:d6:5d: ba:b5:dc:28:3b:9c:0a:7f:87:14:aa:18:5b:6b:16:76:f0:4d: a6:ca:2d:30:52:d6:33:70:89:86:38:25:17:54:14:dd:2e:77: 8e:e7:7e:23:65:38:00:63:1f:d4:20:5d:4a:74:5a:b7:e9:80: 95:a3:bf:4b:0c:22:dd:32:2c:4d:d7:6d:25:26:48:7a:8c:d1: 82:9f:6f:7d:ea:6c:d4:11:5c:0a:c1:c4:7b:07:10:cb:c5:dc: 2f:42:f4:c6:e4:c9:62:fb:b2:83:78:02:5e:21:4d:b1:ba:30: 02:01:9b:d9:95:58:0b:a7:3a:8a:f1:b1:71:39:39:a6:22:87: 61:2a:c6:d4:42:16:9a:2c:00:26:0a:bd:12:f3:6b:fc:e9:5e: 50:80:b3:24:21:25:44:42:91:c1:37:dc:bd:b5:8c:ff:1f:d1: 11:7b:57:1e:fd:e2:57:ce:4a:8d:87:6b:28:64:ef:a9:29:13: 25:34:9b:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaq4jGIWXFpH6m5zIpsD0fcCDOrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQw Nzg4NzQ1RDAeFw0yNjAzMjQxOTI2NTZaFw0yNjAzMjgwNTE2NTZaMDMxMTAvBgNV BAMTKEU3NzMwRTJCRUE1REQ3NDVCNTFBOUVBMzU2RTcxNTE2NTlEQkYzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS6XWoqIZHzIIEkCNfs0UxkPCo xg3LzTwoyLh65f4o4f3OlyRmv+P5IHRR7j+/xF1pqkk0l3VsEJY+VrgxUU9T3sNp QgQ4F3GcHSz7+NSYVk0AkE6iVMnfxd9KShYfb0HL/9QS1heiuKMLDNuc8YUVMTaE A7Y1pXyMpD5j8030+ZG7lm60CuQ9NvhTYdpIx20E+kkNblF5pJW+5/EysBeWjbGS BjlawhjT75pE1SfNQIoMkhU2GJ1lWWyjx7CXePTGT6KERqZu2Dw6m/gJWMjbyiT1 G44tWROXj1DjE106OW6L4k8hcKl1xYfBpGwsaEEvkr+pHEEKmVOzkTrewHS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU53MOK+pd10W1Gp6jVucVFlnb8+kwHwYDVR0j BBgwFoAUYwA//dBjEEiYeTBhvbLbjQeIdF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDE3YjgyOC0xN2ZhLTQ4YTItYTExMy0xNDlmOTQ2N2EzMjgvMC82MzAwM0ZGREQw NjMxMDQ4OTg3OTMwNjFCREIyREI4RDA3ODg3NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRCOEQwNzg4 NzQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTAxN2I4MjgtMTdmYS00OGEyLWEx MTMtMTQ5Zjk0NjdhMzI4LzAvNjMwMDNGRkREMDYzMTA0ODk4NzkzMDYxQkRCMkRC OEQwNzg4NzQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALA9DKYTmId/QnXltKIb9Eij+FMpD+CPuvP1 1Ye7NcauUrTKbRj0vMbha1vAghAdm4Odh6j4+CuOiIi7ntVrgvTlVSoGRNjWXbq1 3Cg7nAp/hxSqGFtrFnbwTabKLTBS1jNwiYY4JRdUFN0ud47nfiNlOABjH9QgXUp0 WrfpgJWjv0sMIt0yLE3XbSUmSHqM0YKfb33qbNQRXArBxHsHEMvF3C9C9MbkyWL7 soN4Al4hTbG6MAIBm9mVWAunOorxsXE5OaYih2EqxtRCFposACYKvRLza/zpXlCA syQhJURCkcE33L21jP8f0RF7Vx794lfOSo2Hayhk76kpEyU0m30= -----END CERTIFICATE-----Generated at Thu Mar 26 10:18:30 2026 by rpki-client