$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: xEwD8anUnv+sHpBrMr/I69iy7Tu36ChBR2094Kt4ua0= Subject key identifier: 0E:02:01:89:60:77:05:7E:0A:3C:C9:38:22:ED:F9:3A:23:C5:C6:22 Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 4E52547D738BAC1ED7E087869FAE5734F39C7533 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 016E Signing time: Wed 25 Mar 2026 21:11:06 +0000 Manifest this update: Wed 25 Mar 2026 21:06:06 +0000 Manifest next update: Sun 29 Mar 2026 03:23:06 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: vDsUtan6PuetAKgOza2cOUt2rSCp4pZ3QGSi4eyGa5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:52:54:7d:73:8b:ac:1e:d7:e0:87:86:9f:ae:57:34:f3:9c:75:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Mar 25 21:06:06 2026 GMT Not After : Mar 29 03:23:06 2026 GMT Subject: CN=0E0201896077057E0A3CC93822EDF93A23C5C622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:e2:6a:f9:aa:56:cb:5d:59:62:72:8a:8b: db:43:68:66:66:f9:aa:a1:eb:fb:ed:da:fe:89:13: f6:41:18:a0:16:2b:29:a0:22:fb:59:a8:49:32:17: b1:b3:ba:d5:c4:0b:63:c7:04:17:13:01:35:cb:01: 34:1b:c6:e1:d4:08:1c:ca:74:68:80:94:fb:fe:87: 4a:c6:fd:f1:39:0c:c1:0d:66:d9:c9:11:1a:8a:09: 1e:90:4b:8e:8d:dd:4d:ff:75:0b:74:07:43:76:b7: c2:43:a2:07:ea:0d:02:c6:86:2b:ee:de:37:3f:7e: 4d:e7:33:ce:f8:72:1d:40:50:67:0e:db:c3:e9:cc: 2e:b7:18:06:2e:14:e3:a8:01:49:d1:cb:0e:ce:bd: e8:e5:6d:db:38:e6:3a:e4:8c:43:31:c8:4e:b8:45: 27:8b:43:2e:c7:f1:62:af:89:e5:20:c0:6a:7c:a4: 1b:ee:0c:ce:cd:bd:df:a0:f0:c7:8e:8e:2d:13:ac: d5:33:84:1d:03:db:86:3e:d5:bc:14:7c:4e:58:d3: 43:58:4d:82:07:4f:14:76:39:d4:d6:a0:5b:a8:12: 22:8a:57:12:76:99:5d:63:6c:60:bb:34:49:79:e4: 97:4c:39:51:1c:bb:7a:ed:bf:95:f0:77:00:83:ec: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:02:01:89:60:77:05:7E:0A:3C:C9:38:22:ED:F9:3A:23:C5:C6:22 X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:27:e2:1b:ef:e6:4e:e3:bf:bb:f2:74:b1:ec:e9:cb:7b:d3: 05:7b:1d:91:2e:d4:22:ee:0d:f1:3a:12:66:87:e6:14:5c:e3: 5d:52:16:4d:7e:28:df:97:60:ba:d1:1e:ef:2f:ed:d9:5f:92: 83:8f:32:39:38:f2:03:e3:7a:d9:39:63:8e:a2:ac:61:b9:68: 98:38:5d:e0:b5:1a:ca:89:ff:dc:04:5a:84:83:11:b6:88:44: 7e:08:49:e8:35:57:53:fa:2b:d2:71:d2:40:24:f8:5a:7c:a7: 45:33:d3:c3:dd:58:16:56:4d:c2:50:d5:d8:2e:c4:80:ca:1a: 17:b7:22:e3:55:9a:45:40:97:c4:f9:07:a7:d1:1f:c3:01:a8: a5:14:a6:6c:ca:95:40:8a:64:f0:f3:01:72:b5:3d:bf:71:23: 64:09:f3:d3:3d:7e:22:c3:d9:77:68:a2:71:bc:c7:64:89:13: b6:f7:7f:b6:ff:36:98:8c:24:9e:78:28:81:a4:c7:a1:c5:bd: 8d:7c:74:bf:ed:e8:8f:fe:e9:81:82:8d:0f:53:51:16:3f:bf: 5a:a4:30:48:0b:a2:72:b4:52:26:17:ce:4b:3d:fc:16:fb:94: 78:3f:1f:ab:4f:af:f0:b9:9b:9f:0a:a6:96:c3:f6:ca:9c:0b: 5a:b6:04:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlJUfXOLrB7X4IeGn65XNPOcdTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNjAzMjUyMTA2MDZaFw0yNjAzMjkwMzIzMDZaMDMxMTAvBgNV BAMTKDBFMDIwMTg5NjA3NzA1N0UwQTNDQzkzODIyRURGOTNBMjNDNUM2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWi+Jq+apWy11ZYnKKi9tDaGZm +aqh6/vt2v6JE/ZBGKAWKymgIvtZqEkyF7GzutXEC2PHBBcTATXLATQbxuHUCBzK dGiAlPv+h0rG/fE5DMENZtnJERqKCR6QS46N3U3/dQt0B0N2t8JDogfqDQLGhivu 3jc/fk3nM874ch1AUGcO28PpzC63GAYuFOOoAUnRyw7Ovejlbds45jrkjEMxyE64 RSeLQy7H8WKvieUgwGp8pBvuDM7Nvd+g8MeOji0TrNUzhB0D24Y+1bwUfE5Y00NY TYIHTxR2OdTWoFuoEiKKVxJ2mV1jbGC7NEl55JdMOVEcu3rtv5XwdwCD7NzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDgIBiWB3BX4KPMk4Iu35OiPFxiIwHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8n4hvv5k7jv7vydLHs6ct70wV7HZEu1CLu DfE6EmaH5hRc411SFk1+KN+XYLrRHu8v7dlfkoOPMjk48gPjetk5Y46irGG5aJg4 XeC1GsqJ/9wEWoSDEbaIRH4ISeg1V1P6K9Jx0kAk+Fp8p0Uz08PdWBZWTcJQ1dgu xIDKGhe3IuNVmkVAl8T5B6fRH8MBqKUUpmzKlUCKZPDzAXK1Pb9xI2QJ89M9fiLD 2XdoonG8x2SJE7b3f7b/NpiMJJ54KIGkx6HFvY18dL/t6I/+6YGCjQ9TURY/v1qk MEgLonK0UiYXzks9/Bb7lHg/H6tPr/C5m58KppbD9sqcC1q2BDc= -----END CERTIFICATE-----Generated at Thu Mar 26 05:37:52 2026 by rpki-client