$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft File: 639473CD2054A78B39F9AC7A83232462F00E71AA.mft (raw, json) Hash identifier: Fhz37ULDfYI9eL7AQvDDnpPS2UNKF9PoD2pSfCLpf/A= Subject key identifier: 32:97:7E:B6:87:E0:08:FD:01:17:2B:F2:F4:52:89:4D:86:BA:52:C0 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 3D6872B29479E82489A4C764D0714CE774E59E81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft Manifest number: 0D9E Signing time: Sat 21 Mar 2026 03:32:05 +0000 Manifest this update: Sat 21 Mar 2026 03:27:05 +0000 Manifest next update: Tue 24 Mar 2026 14:37:05 +0000 Files and hashes: 1: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (hash: QsDPs2mlZqyMZXfjf6Zh+NWMXGWy1j4R+YaYRxdbecQ=) 2: 3130332e3232382e3234362e302f32342d3234203d3e203539323832.roa (hash: XZ4OJKWgYbKu4ak8HWaN9bEJfkYQKh79GGoEWm0kS2Q=) 3: 323430303a643638303a3a2f33322d3438203d3e203539323832.roa (hash: SgqLAGcMTNBEKnSS7cpl5WafnRLBI8WCT5GxxXyN0zA=) 4: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (hash: 7JHZWmtz01hYjYbLRHq9pCZCM42A/jGx+qscoYZR+8M=) 5: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (hash: mgdd33inbho0w/YafQxmlb4mn2645LWgbd4GjzvqC5g=) 6: 3130332e3232382e3234342e302f32342d3234203d3e203539323832.roa (hash: esxHqUt3Xq6PKKXsfFgfUEYi1fJUgVnC6F8M6sDPUJM=) 7: 3130332e3232382e3234372e302f32342d3234203d3e203539323832.roa (hash: 4gtV8ZXJhBLgP6alnZmazQL9Du+oKvqI/MvatS0Bbyw=) 8: 323430303a643638303a35393a3a2f34382d3438203d3e203539323832.roa (hash: 0AzZnlQLCCzpiwYH8VB91hQfBqmdrJ+ok40Qb8sCeko=) 9: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (hash: 5B7v2ShhK5C4wbhQiHatQFgCi8oUxqkoPlhjyp+Rnaw=) 10: 323430303a643638303a353a3a2f34382d3438203d3e203539323832.roa (hash: /8HKOKl3PxMMPopAmXJsDfZHfFoo7wkQ81V5TqWB1uE=) 11: 3130332e3232382e3234342e302f32322d3234203d3e203539323832.roa (hash: kkZ5080z9oUs+jW8iHX1Tzr1MG5R0/keiimPL4Y7DMk=) 12: 323430303a643638303a666163653a3a2f34382d3438203d3e203539323832.roa (hash: u5dDjhuBvBzcqNjKEeW7vizdTx58v6wY4rfkMiHiI5I=) 13: 3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (hash: JPYapDBTyTePbdwtE88+heXxGhufXE50JBbJ2fq7FKo=) 14: 323430303a643638303a323a3a2f34382d3438203d3e203539323832.roa (hash: qLkIroWnbqSVivBGqvgi5oF8E8eNhXgrJocCdlawdNk=) 15: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (hash: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg=) 16: 639473CD2054A78B39F9AC7A83232462F00E71AA.crl (hash: fBRz5T3jQqgz6FonqDABAGzD2Q74ftoHMhE/zFdMA2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 11:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:68:72:b2:94:79:e8:24:89:a4:c7:64:d0:71:4c:e7:74:e5:9e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Mar 21 03:27:05 2026 GMT Not After : Mar 24 14:37:05 2026 GMT Subject: CN=32977EB687E008FD01172BF2F452894D86BA52C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bb:9a:e8:71:17:bf:b9:02:7f:49:a2:22:30: 05:4b:7a:4f:19:31:08:5e:d4:f9:cc:92:f0:67:3e: 6e:4f:5f:a4:72:2e:31:f8:4a:21:09:57:30:82:59: 6b:d2:dc:b4:27:6a:c7:91:19:c5:16:8c:5a:9c:b1: d6:ea:2c:61:7d:84:35:32:00:92:66:56:49:56:3f: 4a:34:43:21:e0:40:d4:8c:d3:11:1f:9b:fc:37:b4: ab:af:35:73:6e:74:ff:38:82:6a:04:b4:e4:9a:f6: ec:f8:e1:4e:60:1d:5b:0c:12:19:1c:f9:dd:97:11: 10:d7:e9:b7:9a:2b:77:90:9c:92:02:6c:e2:53:c8: 83:4c:5d:78:10:3f:f4:70:68:7d:b2:50:91:d6:4b: 05:b7:04:cb:dd:52:a0:7b:d8:d1:cf:cd:26:ac:0f: 35:54:6d:e2:d7:80:e7:99:4b:23:b1:2d:c4:01:81: 4d:1e:09:1d:59:ec:84:e8:ff:5c:de:3a:2c:27:cc: 64:fd:97:ee:4e:6c:f8:5a:70:cf:02:6f:cc:dc:81: 11:55:86:70:bb:2b:d4:bb:46:01:60:bb:35:5d:bd: 0a:80:0b:42:ed:f3:db:c3:5a:ed:98:43:ff:71:48: 1d:c6:c7:4c:55:c7:2a:f8:2f:06:de:92:da:a1:f0: b8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:97:7E:B6:87:E0:08:FD:01:17:2B:F2:F4:52:89:4D:86:BA:52:C0 X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:63:5d:5e:8d:1d:a8:ec:c9:de:10:d0:da:79:eb:11:6c:3a: 34:a1:ca:46:63:9b:a3:a4:cb:fa:34:60:18:18:74:25:36:86: db:36:7b:e2:97:b4:5d:38:96:fe:bd:72:70:3c:f8:8e:40:7d: eb:1b:fd:8b:b1:30:bd:de:82:6b:0e:a8:14:d1:61:e3:e2:7c: a4:41:c0:d3:31:58:9e:ec:0b:50:f1:13:4f:c9:94:fd:37:42: 31:5d:9b:e9:06:2c:34:3a:51:66:ca:71:1c:70:6b:e9:38:fe: 0c:4e:55:a4:b1:a0:4b:5a:79:48:82:05:67:37:08:72:8a:66: 08:82:68:01:34:5a:12:88:45:df:65:97:39:f3:fa:3a:82:0e: 88:1f:82:79:e3:2e:da:51:f7:7c:5a:99:c1:f6:a2:3e:71:8b: 51:2a:7d:73:98:af:d9:61:13:90:b3:fd:25:80:16:b3:53:90: 31:d4:42:5b:bc:64:73:f5:de:14:7d:d5:6a:74:3e:11:a2:7d: 44:0f:d5:01:bc:46:85:03:bf:cd:a9:cc:73:8b:52:59:77:20: 80:8d:a8:73:d0:41:93:db:db:5c:03:f2:dc:eb:29:70:56:26: 6a:b0:91:be:aa:79:84:27:c0:01:6b:eb:1e:bc:83:e9:09:6c: 1a:d7:c2:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWhyspR56CSJpMdk0HFM53TlnoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNjAzMjEwMzI3MDVaFw0yNjAzMjQxNDM3MDVaMDMxMTAvBgNV BAMTKDMyOTc3RUI2ODdFMDA4RkQwMTE3MkJGMkY0NTI4OTREODZCQTUyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEu5rocRe/uQJ/SaIiMAVLek8Z MQhe1PnMkvBnPm5PX6RyLjH4SiEJVzCCWWvS3LQnaseRGcUWjFqcsdbqLGF9hDUy AJJmVklWP0o0QyHgQNSM0xEfm/w3tKuvNXNudP84gmoEtOSa9uz44U5gHVsMEhkc +d2XERDX6beaK3eQnJICbOJTyINMXXgQP/RwaH2yUJHWSwW3BMvdUqB72NHPzSas DzVUbeLXgOeZSyOxLcQBgU0eCR1Z7ITo/1zeOiwnzGT9l+5ObPhacM8Cb8zcgRFV hnC7K9S7RgFguzVdvQqAC0Lt89vDWu2YQ/9xSB3Gx0xVxyr4Lwbektqh8Li1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMpd+tofgCP0BFyvy9FKJTYa6UsAwHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg0NjRhNWItMmZjZS00N2RhLTgw NDctNjhkMmJkNjNjOWMzLzAvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0 NjJGMDBFNzFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdjXV6NHajsyd4Q0Np56xFsOjShykZjm6Ok y/o0YBgYdCU2hts2e+KXtF04lv69cnA8+I5Afesb/YuxML3egmsOqBTRYePifKRB wNMxWJ7sC1DxE0/JlP03QjFdm+kGLDQ6UWbKcRxwa+k4/gxOVaSxoEtaeUiCBWc3 CHKKZgiCaAE0WhKIRd9llznz+jqCDogfgnnjLtpR93xamcH2oj5xi1EqfXOYr9lh E5Cz/SWAFrNTkDHUQlu8ZHP13hR91Wp0PhGifUQP1QG8RoUDv82pzHOLUll3IICN qHPQQZPb21wD8tzrKXBWJmqwkb6qeYQnwAFr6x68g+kJbBrXwuw= -----END CERTIFICATE-----Generated at Sat Mar 21 08:33:06 2026 by rpki-client