$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json) Hash identifier: M91YHrDi3fLIL7RqKkrPjdE2BbUtnhvKUw+KB0aOsO4= Subject key identifier: B9:BA:9F:09:F2:AB:70:E8:1C:61:DD:7D:34:41:D8:A3:4E:37:4B:B9 Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Certificate serial: 427C7B3DDC6756226C2E0AFFDDF58F0E6CCA39DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft Manifest number: 01D4 Signing time: Tue 24 Mar 2026 19:31:13 +0000 Manifest this update: Tue 24 Mar 2026 19:26:13 +0000 Manifest next update: Fri 27 Mar 2026 22:16:13 +0000 Files and hashes: 1: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: u8aNBte20PfDEEPohzgOX1rZfJQyFPcqvtKOsQWQoSw=) 2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: oxm1JtkBeyGlYrT9RyVgRcjSHEEp+72qseHuuICIm9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7c:7b:3d:dc:67:56:22:6c:2e:0a:ff:dd:f5:8f:0e:6c:ca:39:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Validity Not Before: Mar 24 19:26:13 2026 GMT Not After : Mar 27 22:16:13 2026 GMT Subject: CN=B9BA9F09F2AB70E81C61DD7D3441D8A34E374BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:8b:92:c2:61:c8:c4:4f:bf:ec:61:01:86: 0c:2f:36:3a:60:94:a2:e3:79:03:57:e2:85:5d:c0: 8c:4a:75:b9:90:0f:59:81:3d:d6:f0:ea:09:3b:02: 9d:e6:fd:17:e6:5b:5f:4f:dc:67:ad:90:04:f1:28: ea:dd:97:26:9a:4d:b4:30:5b:ab:6d:75:4c:0d:6a: ed:25:91:04:b8:21:6b:8a:3b:4b:ff:a6:41:0b:6d: cd:83:61:03:83:d6:c2:4f:64:d6:c3:35:70:44:68: 08:54:ec:ea:73:7e:6a:22:cf:29:17:32:a3:f8:22: ef:a0:1c:48:da:db:63:12:8c:b1:be:9d:7b:d0:55: 88:bc:42:40:15:54:fa:58:68:b9:66:07:25:b2:7a: 16:5b:80:ad:64:aa:33:6b:92:ad:03:d6:a4:e6:23: eb:4f:4a:69:d7:3f:e9:d2:de:bc:47:68:e9:ff:1f: 9c:50:ca:b0:eb:c5:66:3a:86:98:ae:98:e7:be:98: ac:de:87:cd:d3:37:d2:36:54:f9:9f:5c:a7:3d:6b: aa:28:d5:e0:e9:56:ef:40:19:30:5a:4a:38:54:5a: 99:43:1c:0f:b8:91:fd:90:6b:59:b3:5d:28:d9:29: 08:8f:97:fc:ba:d4:8a:59:f5:3e:81:46:70:43:3f: 02:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BA:9F:09:F2:AB:70:E8:1C:61:DD:7D:34:41:D8:A3:4E:37:4B:B9 X509v3 Authority Key Identifier: keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ca:f4:97:4c:71:12:b2:05:54:fe:69:4b:e5:4e:68:11:83: 4a:d9:96:ab:d7:f9:b9:aa:cf:fd:ee:d4:db:f6:01:39:da:16: 69:87:f6:ae:b9:a9:69:46:fe:f9:d0:eb:29:92:a3:0f:b5:29: 21:a9:fe:bf:02:a4:6b:83:ee:19:f1:68:ea:cd:15:76:f6:fa: 67:f4:ae:97:fa:91:a1:a1:15:4c:a4:a4:09:fe:64:1a:3b:91: d3:85:14:70:4a:0e:90:87:d6:b3:3d:fe:8a:51:dc:90:4f:49: 16:bc:40:eb:97:88:80:73:68:87:02:a4:10:34:0a:87:43:d4: c3:69:78:ad:68:31:65:0c:0d:70:6d:0e:f2:a5:35:e4:a9:b2: 0a:08:15:5e:7e:3e:32:c0:5f:ab:43:b6:9b:9e:07:8e:6b:c7: aa:b9:55:78:d3:4c:89:f2:08:4b:28:69:5e:07:3e:9e:34:0f: 54:da:ad:3a:7c:73:d5:14:dd:4a:b6:6c:21:a2:da:97:a6:a5: 5e:16:75:bd:85:de:8e:46:5e:5f:10:98:e2:c9:c8:26:ff:6e: fe:ae:a4:c5:b1:03:e6:41:9a:b8:cc:6e:73:54:a2:95:49:97: c2:30:57:ba:43:ee:f8:7a:fa:d0:13:2f:b8:40:da:fe:24:65: 86:cc:39:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnx7PdxnViJsLgr/3fWPDmzKOdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIx NEYyMjY5NTAeFw0yNjAzMjQxOTI2MTNaFw0yNjAzMjcyMjE2MTNaMDMxMTAvBgNV BAMTKEI5QkE5RjA5RjJBQjcwRTgxQzYxREQ3RDM0NDFEOEEzNEUzNzRCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkRYuSwmHIxE+/7GEBhgwvNjpg lKLjeQNX4oVdwIxKdbmQD1mBPdbw6gk7Ap3m/RfmW19P3GetkATxKOrdlyaaTbQw W6ttdUwNau0lkQS4IWuKO0v/pkELbc2DYQOD1sJPZNbDNXBEaAhU7OpzfmoizykX MqP4Iu+gHEja22MSjLG+nXvQVYi8QkAVVPpYaLlmByWyehZbgK1kqjNrkq0D1qTm I+tPSmnXP+nS3rxHaOn/H5xQyrDrxWY6hpiumOe+mKzeh83TN9I2VPmfXKc9a6oo 1eDpVu9AGTBaSjhUWplDHA+4kf2Qa1mzXSjZKQiPl/y61IpZ9T6BRnBDPwIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUubqfCfKrcOgcYd19NEHYo043S7kwHwYDVR0j BBgwFoAUZLLbdwPFxWpvacR4mrn2khTyJpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjYyZDM0MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC82NEIyREI3NzAz QzVDNTZBNkY2OUM0Nzg5QUI5RjY5MjE0RjIyNjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIxNEYy MjY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2 OTIxNEYyMjY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7K9JdMcRKyBVT+aUvlTmgRg0rZlqvX+bmq z/3u1Nv2ATnaFmmH9q65qWlG/vnQ6ymSow+1KSGp/r8CpGuD7hnxaOrNFXb2+mf0 rpf6kaGhFUykpAn+ZBo7kdOFFHBKDpCH1rM9/opR3JBPSRa8QOuXiIBzaIcCpBA0 CodD1MNpeK1oMWUMDXBtDvKlNeSpsgoIFV5+PjLAX6tDtpueB45rx6q5VXjTTIny CEsoaV4HPp40D1TarTp8c9UU3Uq2bCGi2pempV4Wdb2F3o5GXl8QmOLJyCb/bv6u pMWxA+ZBmrjMbnNUopVJl8IwV7pD7vh6+tATL7hA2v4kZYbMOeY= -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:50 2026 by rpki-client