$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: 65A7ZyDQuAqsZqfN9AT6l3xuey6OG7io6sOLJf2dJNk= Subject key identifier: 2A:16:85:21:C1:1F:6F:D9:16:4B:A9:86:3D:22:59:93:7C:33:FD:EC Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 1668368DD172D3440400B7F94CFAFC3D01B8243B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: 0133 Signing time: Wed 18 Mar 2026 22:32:21 +0000 Manifest this update: Wed 18 Mar 2026 22:27:20 +0000 Manifest next update: Sun 22 Mar 2026 05:20:20 +0000 Files and hashes: 1: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: jFXQURh7mSFVqtkKV2yRJmEtM/8CwGtQkfAFPu9WV3g=) 2: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: uCH/JrJsLPZexF0rUx1EEQxpnCx3s5VDJ8IscbtIU4M=) 3: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: FOCno4gbHCAnLnmHobD1PWQDcUoK6xzxe9dzOJ2yOWg=) 4: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: 1t/YY4k/2f409jhOunWIVWLeQdkIptD7DDSdwQQxlp4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 05:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:68:36:8d:d1:72:d3:44:04:00:b7:f9:4c:fa:fc:3d:01:b8:24:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Mar 18 22:27:20 2026 GMT Not After : Mar 22 05:20:20 2026 GMT Subject: CN=2A168521C11F6FD9164BA9863D2259937C33FDEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0d:fa:f0:93:db:00:00:d9:6e:81:e9:b4:1f: 9b:1e:21:11:e8:07:0e:16:f9:26:6e:8d:4e:54:b7: fd:82:c2:d6:66:08:36:39:6e:6b:ca:1c:86:80:a8: 81:2b:f6:81:31:96:7a:d5:bb:78:10:48:1e:a4:a9: a5:47:4f:fc:67:06:9f:bb:0e:48:e2:2e:98:f3:0c: c6:b1:e7:07:ab:61:f1:9e:2e:b5:1c:f7:c0:d3:41: 0c:89:31:cd:80:0c:c4:46:0c:e3:26:fd:e4:6e:e1: 09:ab:cc:91:54:32:fe:d5:b1:22:7d:b2:b8:9b:06: 14:99:92:5c:68:ee:04:64:3f:ce:37:8d:ce:6c:b7: b3:3c:99:ad:90:95:5e:76:78:bb:b6:2a:84:33:98: 23:9a:d7:04:bf:9c:d1:82:9b:01:f0:3f:87:63:58: 4d:00:f9:11:68:1e:6e:19:b2:50:53:b2:ee:b5:c2: ce:3c:64:55:a5:93:bc:bc:bd:b5:b2:68:26:06:d0: 2c:ea:42:f3:a0:a6:f7:65:03:c0:d9:e7:a5:db:e9: 36:42:78:ee:94:a3:42:1d:ac:74:1b:14:01:1a:f8: ce:6c:1f:38:ae:ec:2e:0d:bf:30:a6:3a:e9:6c:ca: b0:d6:e4:b4:c9:12:bc:33:77:60:c1:48:52:0a:63: ce:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:16:85:21:C1:1F:6F:D9:16:4B:A9:86:3D:22:59:93:7C:33:FD:EC X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:20:99:e1:de:76:e6:ab:db:46:78:d8:65:24:a9:7f:72:9a: c6:e2:5a:c0:b4:f0:c8:a3:f5:66:8c:6f:c6:30:38:90:6c:20: 85:7b:43:83:91:fc:b4:d0:3d:39:c4:9b:17:9b:e3:84:df:4c: 3c:83:28:52:c4:54:41:5a:bb:4d:94:79:41:71:0a:c3:d8:a0: 82:e3:1f:9b:db:0d:72:3e:87:83:68:63:c3:18:1e:76:dc:06: e7:b0:06:17:3b:1e:8a:95:16:aa:9d:2d:6a:4f:ca:2d:36:08: d9:62:dc:07:78:07:f3:eb:89:4d:bb:0b:d9:70:48:01:78:98: d1:89:fb:87:3c:64:b2:54:28:3d:67:42:c2:ee:c9:0a:17:5f: 76:aa:e5:f2:21:d9:17:ca:d1:6b:2e:56:13:fe:3e:99:4a:79: 86:63:8f:f9:e2:a9:85:c0:1b:ee:c4:d9:43:07:73:f5:fd:e2: b6:4c:22:24:b1:2f:fa:bd:4f:80:71:4a:a9:31:da:63:e7:0e: e1:a9:97:8d:10:da:7c:c7:26:ce:fe:2b:45:6d:5d:01:fa:20: c2:bc:31:6d:3e:c6:f6:89:22:60:b9:9b:83:e8:93:e4:93:28: 70:39:ee:70:af:02:4c:c8:2f:c4:f4:c4:ea:1e:6f:68:1b:18: e7:09:31:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmg2jdFy00QEALf5TPr8PQG4JDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNjAzMTgyMjI3MjBaFw0yNjAzMjIwNTIwMjBaMDMxMTAvBgNV BAMTKDJBMTY4NTIxQzExRjZGRDkxNjRCQTk4NjNEMjI1OTkzN0MzM0ZERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDfrwk9sAANlugem0H5seIRHo Bw4W+SZujU5Ut/2CwtZmCDY5bmvKHIaAqIEr9oExlnrVu3gQSB6kqaVHT/xnBp+7 DkjiLpjzDMax5werYfGeLrUc98DTQQyJMc2ADMRGDOMm/eRu4QmrzJFUMv7VsSJ9 sribBhSZklxo7gRkP843jc5st7M8ma2QlV52eLu2KoQzmCOa1wS/nNGCmwHwP4dj WE0A+RFoHm4ZslBTsu61ws48ZFWlk7y8vbWyaCYG0CzqQvOgpvdlA8DZ56Xb6TZC eO6Uo0IdrHQbFAEa+M5sHziu7C4NvzCmOulsyrDW5LTJErwzd2DBSFIKY87BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKhaFIcEfb9kWS6mGPSJZk3wz/ewwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQgmeHeduar20Z42GUkqX9ymsbiWsC08Mij 9WaMb8YwOJBsIIV7Q4OR/LTQPTnEmxeb44TfTDyDKFLEVEFau02UeUFxCsPYoILj H5vbDXI+h4NoY8MYHnbcBuewBhc7HoqVFqqdLWpPyi02CNli3Ad4B/PriU27C9lw SAF4mNGJ+4c8ZLJUKD1nQsLuyQoXX3aq5fIh2RfK0WsuVhP+PplKeYZjj/niqYXA G+7E2UMHc/X94rZMIiSxL/q9T4BxSqkx2mPnDuGpl40Q2nzHJs7+K0VtXQH6IMK8 MW0+xvaJImC5m4Pok+STKHA57nCvAkzIL8T0xOoeb2gbGOcJMZA= -----END CERTIFICATE-----Generated at Fri Mar 20 18:45:25 2026 by rpki-client