$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: G4/ViEog14emygE4CFUFXyGeC2rUavzRpB9io0p8sso= Subject key identifier: 93:02:AA:E2:19:90:DA:25:4A:25:36:52:23:EA:69:CA:04:A5:81:95 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 751F59F3830F482F618C3EC663CC80CB8FD3681F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 0DA0 Signing time: Wed 25 Mar 2026 17:12:04 +0000 Manifest this update: Wed 25 Mar 2026 17:07:04 +0000 Manifest next update: Sun 29 Mar 2026 01:04:04 +0000 Files and hashes: 1: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=) 2: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=) 3: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=) 4: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=) 5: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=) 6: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=) 7: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: inpZD+noXzOGbAmWHFR+saEHaVeaBAAusBDmzKKpdBU=) 8: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=) 9: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=) 10: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=) 11: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=) 12: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=) 13: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=) 14: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=) 15: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=) 16: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:1f:59:f3:83:0f:48:2f:61:8c:3e:c6:63:cc:80:cb:8f:d3:68:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Mar 25 17:07:04 2026 GMT Not After : Mar 29 01:04:04 2026 GMT Subject: CN=9302AAE21990DA254A25365223EA69CA04A58195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:2b:60:84:d7:17:4f:5c:3f:18:a8:b7:6e: 58:87:d2:d3:7b:41:67:21:40:0a:a1:a8:ac:45:1a: 06:14:5f:fc:19:8d:d6:d4:11:18:a8:b0:c4:2e:fa: 0f:f4:74:f5:3a:06:f3:aa:e1:e3:18:df:a2:7d:c3: aa:c2:54:e2:dc:0e:50:3c:77:5f:9f:68:83:e1:16: 02:7d:1d:5e:34:51:59:f8:fa:30:cc:ed:db:3f:97: b6:c5:28:33:4e:59:e5:2b:68:63:bc:f4:54:0a:6b: f6:6c:ae:58:0e:a9:e2:f2:87:d4:fa:04:dc:78:e1: 87:f4:36:17:fd:a0:45:bb:58:2a:23:7d:c4:b1:0a: 27:e2:2b:b1:71:68:4a:3f:a9:d6:75:09:52:89:b5: 7d:60:3f:45:d8:40:e1:7c:0a:b1:a5:d9:b9:10:48: 1c:5a:39:d5:be:95:42:99:07:cf:e3:71:05:ad:a2: 1e:dd:73:78:b3:73:4c:d1:6d:5d:9b:3d:94:dc:da: f4:30:08:7f:68:7a:39:2d:7b:fe:b0:cb:9a:4a:80: ac:bd:ad:46:4d:dc:b4:b8:0c:16:cf:78:e5:ac:1a: 22:6c:b0:15:ce:d3:b2:60:ba:67:76:e0:ce:1c:c9: 81:13:f1:ee:34:84:de:5f:17:09:83:1b:f4:19:19: 8e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:02:AA:E2:19:90:DA:25:4A:25:36:52:23:EA:69:CA:04:A5:81:95 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:0c:88:1d:25:a2:a9:3e:f0:e1:8e:e5:67:2a:34:fc:97:5e: 73:6c:1b:45:f1:4e:be:d3:99:61:95:eb:d0:f2:97:cd:e2:72: 04:a6:a6:40:83:c0:cb:5f:66:f2:d3:58:90:4c:c8:02:0d:69: f2:09:9b:de:c2:99:69:cd:10:f0:03:1a:0d:f0:55:c6:06:4d: 31:e2:f4:7e:b1:17:ba:cf:34:d9:51:44:5b:7c:2d:1a:47:74: 69:c0:1b:9c:69:1e:bd:49:16:4f:19:5f:c7:ae:db:20:5c:47: 92:57:85:fc:e8:c3:a7:d0:76:33:5b:e0:db:4c:f3:cf:ba:b3: e3:bd:1c:e1:66:62:85:dd:b5:f1:51:10:fd:b7:96:43:1e:fc: ad:d9:c3:3f:ce:0e:53:09:4c:3c:7d:48:b4:6f:2a:68:22:2d: 12:60:90:bb:0e:30:dc:d8:2e:9c:90:e4:cc:8a:60:93:51:ac: 03:80:f1:d6:4a:ca:07:01:82:12:12:1a:91:a7:7f:4b:60:06: 1b:9c:86:98:d9:09:99:e2:07:e9:08:e0:ab:a3:a1:68:8f:88: ba:bd:ad:19:66:61:89:6c:64:b8:e8:88:78:6d:40:a9:33:ec: 6e:7b:0d:9c:08:27:a8:5b:b7:1c:fd:f8:7b:69:4d:c7:72:06: 23:4a:0c:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdR9Z84MPSC9hjD7GY8yAy4/TaB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNjAzMjUxNzA3MDRaFw0yNjAzMjkwMTA0MDRaMDMxMTAvBgNV BAMTKDkzMDJBQUUyMTk5MERBMjU0QTI1MzY1MjIzRUE2OUNBMDRBNTgxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoeStghNcXT1w/GKi3bliH0tN7 QWchQAqhqKxFGgYUX/wZjdbUERiosMQu+g/0dPU6BvOq4eMY36J9w6rCVOLcDlA8 d1+faIPhFgJ9HV40UVn4+jDM7ds/l7bFKDNOWeUraGO89FQKa/ZsrlgOqeLyh9T6 BNx44Yf0Nhf9oEW7WCojfcSxCifiK7FxaEo/qdZ1CVKJtX1gP0XYQOF8CrGl2bkQ SBxaOdW+lUKZB8/jcQWtoh7dc3izc0zRbV2bPZTc2vQwCH9oejkte/6wy5pKgKy9 rUZN3LS4DBbPeOWsGiJssBXO07Jgumd24M4cyYET8e40hN5fFwmDG/QZGY6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkwKq4hmQ2iVKJTZSI+ppygSlgZUwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUMiB0loqk+8OGO5WcqNPyXXnNsG0XxTr7T mWGV69Dyl83icgSmpkCDwMtfZvLTWJBMyAINafIJm97CmWnNEPADGg3wVcYGTTHi 9H6xF7rPNNlRRFt8LRpHdGnAG5xpHr1JFk8ZX8eu2yBcR5JXhfzow6fQdjNb4NtM 88+6s+O9HOFmYoXdtfFREP23lkMe/K3Zwz/ODlMJTDx9SLRvKmgiLRJgkLsOMNzY LpyQ5MyKYJNRrAOA8dZKygcBghISGpGnf0tgBhuchpjZCZniB+kI4KujoWiPiLq9 rRlmYYlsZLjoiHhtQKkz7G57DZwIJ6hbtxz9+HtpTcdyBiNKDNo= -----END CERTIFICATE-----Generated at Thu Mar 26 05:55:13 2026 by rpki-client