$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: xgWQA40YrKOH0fdDHUIt7Qs1QX8pYxKzOiUCW1zo07M= Subject key identifier: 36:79:BB:5C:22:49:D4:B5:25:66:D0:AF:13:A3:D8:C7:AC:7E:4C:81 Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 76202DD77EDDFB9D496C3832832F6BD659832143 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 01DE Signing time: Thu 26 Mar 2026 05:32:36 +0000 Manifest this update: Thu 26 Mar 2026 05:27:36 +0000 Manifest next update: Sun 29 Mar 2026 08:48:36 +0000 Files and hashes: 1: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: zEV2MqUy++hIC1Y3Bfos/MGS2MgJAXOcWgMlLuUg8GI=) 2: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: FWPlMPHrqFoNNWPYTYDkvwMT0nqxPyPjTzrKzL7O4m4=) 3: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: n4N0hFQ/vvqlejLhB9JnzDV0h3HZbODWew6Ob6wqJn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:20:2d:d7:7e:dd:fb:9d:49:6c:38:32:83:2f:6b:d6:59:83:21:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Mar 26 05:27:36 2026 GMT Not After : Mar 29 08:48:36 2026 GMT Subject: CN=3679BB5C2249D4B52566D0AF13A3D8C7AC7E4C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:8c:e7:d2:89:99:f1:93:61:76:e5:8e:7c: e6:2d:29:15:1d:42:18:b1:72:3a:28:70:c8:33:2d: b5:33:97:33:1e:0b:be:a6:02:f4:d5:69:71:d3:1e: 6e:08:33:91:f0:8b:45:bd:45:0f:c8:ae:d1:fc:c0: d0:62:ea:10:a1:61:97:3d:66:c7:cf:05:56:94:08: 37:89:d6:0a:10:03:fb:bf:ea:ba:af:a8:53:4a:c7: cc:41:24:92:e5:9a:06:f5:f1:14:f4:2c:6e:1f:32: 0d:86:45:62:4b:89:77:77:00:b3:c0:bb:ee:df:66: 58:9f:4b:85:d0:e4:53:38:d2:1e:72:57:d3:7c:29: c2:f4:52:a4:e7:ab:26:71:a1:32:42:66:2e:63:f5: a6:34:4b:be:f5:53:15:15:f8:5e:70:f5:95:60:2a: d5:d8:d8:78:44:94:e7:c2:43:33:8b:cd:fd:51:4e: 10:ba:09:90:34:66:ed:78:e0:8f:73:19:4b:a2:5f: 03:6c:0e:7f:f4:36:54:13:1d:f6:b6:de:c5:dd:b5: 65:c7:ed:4f:54:28:b8:57:b8:a9:61:14:02:0c:42: 78:bb:ac:a9:f2:b3:23:05:5a:ed:a6:4e:c2:ac:a0: 63:a7:8b:e3:6b:99:82:b5:0d:b5:b3:ef:e0:82:7f: 3d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:79:BB:5C:22:49:D4:B5:25:66:D0:AF:13:A3:D8:C7:AC:7E:4C:81 X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:63:82:a0:4b:56:d9:3b:7c:c1:71:fa:8c:f8:16:dd:b3:d6: 95:2a:8b:47:84:b6:92:c7:42:86:b7:3c:4b:86:f9:ce:3c:3a: de:43:63:a7:3e:57:71:bc:b2:9c:da:88:dc:20:57:e2:fa:8d: 20:8f:52:0e:94:9c:63:ca:98:c8:9e:ef:a7:fd:9a:8a:97:56: 05:ab:89:e9:4d:93:27:01:1f:a8:59:7c:90:79:92:a9:5d:39: 62:f0:44:1b:e9:44:b1:79:c0:12:e2:77:b6:9f:08:60:e2:50: 7b:6e:f4:11:83:a8:41:de:83:c7:b2:e5:4c:3b:81:98:79:4a: 1d:f8:05:84:7c:38:6e:43:db:54:4f:3e:68:dd:08:de:03:38: 5b:31:bb:78:93:2b:ea:eb:a6:79:a7:1f:d5:e1:e1:35:b2:9f: ae:a3:48:87:03:d9:44:4d:8b:fc:56:ce:3f:54:69:6d:72:d2: ca:a3:72:07:91:67:be:f9:bd:ff:23:ba:92:d9:51:a5:e7:4b: e0:93:de:0c:0c:e8:6d:b4:e0:f1:73:9d:c7:ff:cd:18:8f:49: 69:53:74:ef:49:13:c1:3a:9d:99:a5:01:f2:b0:cb:11:65:f6: 65:b4:6d:5d:3f:41:de:43:e5:56:19:4f:24:49:29:49:f8:e3: e8:ed:4c:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdiAt137d+51JbDgygy9r1lmDIUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNjAzMjYwNTI3MzZaFw0yNjAzMjkwODQ4MzZaMDMxMTAvBgNV BAMTKDM2NzlCQjVDMjI0OUQ0QjUyNTY2RDBBRjEzQTNEOEM3QUM3RTRDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cYzn0omZ8ZNhduWOfOYtKRUd QhixcjoocMgzLbUzlzMeC76mAvTVaXHTHm4IM5Hwi0W9RQ/IrtH8wNBi6hChYZc9 ZsfPBVaUCDeJ1goQA/u/6rqvqFNKx8xBJJLlmgb18RT0LG4fMg2GRWJLiXd3ALPA u+7fZlifS4XQ5FM40h5yV9N8KcL0UqTnqyZxoTJCZi5j9aY0S771UxUV+F5w9ZVg KtXY2HhElOfCQzOLzf1RThC6CZA0Zu144I9zGUuiXwNsDn/0NlQTHfa23sXdtWXH 7U9UKLhXuKlhFAIMQni7rKnysyMFWu2mTsKsoGOni+NrmYK1DbWz7+CCfz3fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNnm7XCJJ1LUlZtCvE6PYx6x+TIEwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJjgqBLVtk7fMFx+oz4Ft2z1pUqi0eEtpLH Qoa3PEuG+c48Ot5DY6c+V3G8spzaiNwgV+L6jSCPUg6UnGPKmMie76f9moqXVgWr ielNkycBH6hZfJB5kqldOWLwRBvpRLF5wBLid7afCGDiUHtu9BGDqEHeg8ey5Uw7 gZh5Sh34BYR8OG5D21RPPmjdCN4DOFsxu3iTK+rrpnmnH9Xh4TWyn66jSIcD2URN i/xWzj9UaW1y0sqjcgeRZ775vf8jupLZUaXnS+CT3gwM6G204PFzncf/zRiPSWlT dO9JE8E6nZmlAfKwyxFl9mW0bV0/Qd5D5VYZTyRJKUn44+jtTD4= -----END CERTIFICATE-----Generated at Thu Mar 26 20:11:21 2026 by rpki-client