$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: vQKNxn8ovPSdY+4HPgJvmAxZXmq83Daov+BwdnSVlWk= Subject key identifier: 40:20:5A:FB:73:09:AB:56:4E:C9:34:3B:69:53:03:77:CB:25:74:FF Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 5BB04F5ECD8CDE46970F0EA0022E51420B8F1BB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 0215 Signing time: Thu 26 Mar 2026 04:11:21 +0000 Manifest this update: Thu 26 Mar 2026 04:06:21 +0000 Manifest next update: Sun 29 Mar 2026 08:56:21 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=) 2: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=) 3: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: ghssEE9zj9axglbKjUOvFcXIOFWwWgWFdjOGnyGNun8=) 4: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: ykjvE7t1T+V2QN0mw2gRbvwN6DQixulGDmfG/rIF9SQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b0:4f:5e:cd:8c:de:46:97:0f:0e:a0:02:2e:51:42:0b:8f:1b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Mar 26 04:06:21 2026 GMT Not After : Mar 29 08:56:21 2026 GMT Subject: CN=40205AFB7309AB564EC9343B69530377CB2574FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:f3:62:a0:53:24:12:85:c1:81:5f:8d:ef: 2d:36:45:6a:98:28:5a:ed:38:ba:a1:e7:67:be:55: 52:5f:33:1b:b8:07:c9:3c:2f:91:b4:15:7d:d8:c4: 24:cb:17:d3:c9:d1:ea:ea:40:fd:2d:d6:5d:b3:f8: a5:f4:93:37:c9:3d:c0:f4:74:b9:c6:99:6c:70:e2: 9a:98:04:11:c5:72:56:7e:2d:b9:8d:87:3a:4f:da: 41:81:c5:3b:50:34:f4:3b:0d:0f:a5:38:d0:8b:a4: 78:d3:df:c5:f8:92:61:9a:5b:19:a6:02:72:eb:5e: e1:d8:f5:6d:57:bd:18:d2:b8:f0:a7:88:c5:06:26: 7d:80:57:6e:3e:57:19:e1:21:e3:40:bd:b1:ce:42: cf:e9:2f:f2:52:68:7a:06:28:1f:da:51:83:8d:fc: 3e:a5:40:2b:13:66:54:d3:f2:75:5a:08:f0:af:16: 88:58:c4:5c:78:6b:d5:68:df:be:28:c9:dd:9f:eb: 5d:54:16:ea:04:48:5d:95:a0:05:97:65:00:f7:98: 66:55:15:bf:bc:d8:2e:16:c5:9c:6b:fd:37:4f:20: b1:fa:5a:a0:ac:c5:d9:22:76:bd:d5:50:58:f1:2d: 21:11:0e:50:6f:23:6d:66:84:44:75:c8:e9:46:c7: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:20:5A:FB:73:09:AB:56:4E:C9:34:3B:69:53:03:77:CB:25:74:FF X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:8f:f7:15:a9:9d:83:dd:7f:b5:85:ed:84:35:5a:38:31:ec: 05:2a:c8:cc:2b:74:bf:2e:ac:6b:00:e7:bd:43:70:a2:d5:7e: a8:82:b4:4e:56:c7:35:cf:e6:a9:4a:d3:f3:ca:df:e0:b9:76: 78:b3:28:d2:ae:05:db:f9:74:cf:79:0f:00:33:61:86:98:87: 8b:aa:58:3a:f3:46:ce:1d:59:74:b1:f6:c1:8a:ae:56:e2:13: 5c:87:ff:9b:cb:37:c5:b9:a1:47:a7:04:f0:7f:08:2d:52:f3: ef:65:99:e6:72:83:54:ba:c5:e5:ea:ac:9d:90:6d:68:86:5d: 35:e1:79:ba:cd:c9:e3:a3:6c:a7:4e:05:85:0c:7b:07:88:e2: a2:bf:07:dd:cb:41:d5:de:67:9a:73:68:63:0e:0a:b0:e0:fe: 8e:2a:d1:b6:cd:08:f8:c4:90:ba:fe:e1:b5:2e:dd:65:6e:96: bb:e2:8c:a7:20:3a:20:e9:d9:9b:32:b2:05:a6:5e:7c:7e:c9: cb:ca:ec:9d:9d:91:f6:06:16:24:89:ae:85:06:f8:74:20:e3: 28:0b:f7:03:aa:94:93:e4:ed:bd:ac:20:18:99:44:a0:3d:7b: e0:52:bd:02:65:51:2f:27:db:86:65:a4:20:b1:88:57:cf:60: 1c:35:83:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7BPXs2M3kaXDw6gAi5RQguPG7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNjAzMjYwNDA2MjFaFw0yNjAzMjkwODU2MjFaMDMxMTAvBgNV BAMTKDQwMjA1QUZCNzMwOUFCNTY0RUM5MzQzQjY5NTMwMzc3Q0IyNTc0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/PNioFMkEoXBgV+N7y02RWqY KFrtOLqh52e+VVJfMxu4B8k8L5G0FX3YxCTLF9PJ0erqQP0t1l2z+KX0kzfJPcD0 dLnGmWxw4pqYBBHFclZ+LbmNhzpP2kGBxTtQNPQ7DQ+lONCLpHjT38X4kmGaWxmm AnLrXuHY9W1XvRjSuPCniMUGJn2AV24+VxnhIeNAvbHOQs/pL/JSaHoGKB/aUYON /D6lQCsTZlTT8nVaCPCvFohYxFx4a9Vo374oyd2f611UFuoESF2VoAWXZQD3mGZV Fb+82C4WxZxr/TdPILH6WqCsxdkidr3VUFjxLSERDlBvI21mhER1yOlGxzN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQCBa+3MJq1ZOyTQ7aVMDd8sldP8wHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiP9xWpnYPdf7WF7YQ1Wjgx7AUqyMwrdL8u rGsA571DcKLVfqiCtE5WxzXP5qlK0/PK3+C5dnizKNKuBdv5dM95DwAzYYaYh4uq WDrzRs4dWXSx9sGKrlbiE1yH/5vLN8W5oUenBPB/CC1S8+9lmeZyg1S6xeXqrJ2Q bWiGXTXhebrNyeOjbKdOBYUMeweI4qK/B93LQdXeZ5pzaGMOCrDg/o4q0bbNCPjE kLr+4bUu3WVulrvijKcgOiDp2ZsysgWmXnx+ycvK7J2dkfYGFiSJroUG+HQg4ygL 9wOqlJPk7b2sIBiZRKA9e+BSvQJlUS8n24ZlpCCxiFfPYBw1g+k= -----END CERTIFICATE-----Generated at Thu Mar 26 21:40:28 2026 by rpki-client