$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: L4P2RN/OZ7Y0lJ9MaOzQelbwBMw9TDr0LjxBZn66x0Q= Subject key identifier: 3D:85:58:87:AA:F9:9D:9D:5E:BA:7D:AB:2D:8E:2A:D2:E6:E3:E7:BC Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 56896036E38A2D617CF24A88849D5DBC0474350C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 01DB Signing time: Thu 19 Mar 2026 05:24:51 +0000 Manifest this update: Thu 19 Mar 2026 05:19:51 +0000 Manifest next update: Sun 22 Mar 2026 16:14:51 +0000 Files and hashes: 1: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: n4N0hFQ/vvqlejLhB9JnzDV0h3HZbODWew6Ob6wqJn4=) 2: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: c212KaI4ZSZLbt4tHwBYueCPlfZljljS0ANG6H0Nrbc=) 3: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: FWPlMPHrqFoNNWPYTYDkvwMT0nqxPyPjTzrKzL7O4m4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:89:60:36:e3:8a:2d:61:7c:f2:4a:88:84:9d:5d:bc:04:74:35:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Mar 19 05:19:51 2026 GMT Not After : Mar 22 16:14:51 2026 GMT Subject: CN=3D855887AAF99D9D5EBA7DAB2D8E2AD2E6E3E7BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:79:04:3a:eb:55:aa:41:53:b3:48:8d:87: 30:87:b0:d1:10:35:9e:48:bc:8d:74:c5:dd:46:bb: fb:c6:23:d9:ca:68:6a:42:51:9b:49:d9:36:98:8d: 40:c0:c4:1d:f5:b1:83:1c:aa:b2:fa:3a:85:8a:a9: f4:22:7b:61:e9:77:18:a7:08:ab:df:ed:2d:2f:63: d8:92:8e:c0:63:3e:bd:ce:0c:51:a6:69:ad:51:6e: d0:52:53:8a:a2:db:c4:95:9a:57:c0:0f:47:e9:a5: b0:44:38:d7:2a:b8:da:07:3b:fb:b6:47:9c:79:d9: 8e:09:1f:03:4e:fe:c3:5d:d2:24:a9:d0:0a:a8:0a: af:16:f0:43:20:44:a9:61:5f:8b:5b:a2:df:58:fe: 75:c0:da:fe:93:7c:4e:f8:2f:44:29:5f:c3:8f:32: e0:11:e7:fd:8b:1d:3a:6c:e1:3f:47:85:8d:e0:c6: d3:1a:91:bf:3a:60:a9:66:a9:f8:0f:88:0f:26:e7: 23:6e:67:78:98:e0:88:bb:30:df:be:4b:27:1e:10: 3d:fa:2e:10:e2:a8:62:e3:77:c5:4a:17:ff:ff:e3: a5:13:f8:b7:91:76:54:4f:23:f4:6b:76:86:b7:24: 29:dd:1a:b5:93:86:cd:c6:81:c7:76:08:01:64:8d: a9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:85:58:87:AA:F9:9D:9D:5E:BA:7D:AB:2D:8E:2A:D2:E6:E3:E7:BC X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:5a:fb:ad:cc:99:08:59:06:ad:fc:6e:59:6e:ff:e4:d2:95: 5c:d0:3d:53:c3:60:8d:d4:21:7c:3f:c3:76:82:ea:6c:bf:d6: 69:11:06:6a:7a:9d:32:be:5a:b2:1e:94:b2:78:39:1c:f1:95: 7d:ca:d8:3c:d5:7a:c2:83:cd:f0:a4:ec:b8:fe:34:a3:06:63: a1:24:46:b2:c1:b5:01:1e:d8:25:57:0d:9a:1f:e2:8a:e0:b7: a6:f1:5f:a5:a1:bf:c3:84:48:89:ad:c4:54:e9:01:90:92:ea: 9c:45:9b:9d:62:79:93:af:6f:9c:f3:c8:19:ef:b3:f4:f7:d3: 54:08:b4:67:e1:1d:49:41:fd:3f:40:8e:55:e4:97:0c:95:8c: 4f:ba:cf:6a:76:75:76:20:da:16:4c:50:7a:ec:72:2e:6b:61: 2e:5f:ca:85:ef:95:8c:ee:54:8b:af:86:2b:6c:8c:a9:61:d0: fc:85:6b:eb:d5:55:44:fe:c0:a0:f0:a3:39:2b:64:fd:16:77: 31:82:96:40:bd:84:ff:22:24:70:d4:ef:04:19:92:70:3a:0f: 92:e7:b2:f9:0b:be:c2:c5:0c:a7:fd:dd:d3:50:6b:f4:ac:61: cc:9a:94:0e:f1:bd:5c:29:25:e1:13:26:7a:b1:37:e1:0a:91: 60:7a:6b:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVolgNuOKLWF88kqIhJ1dvAR0NQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNjAzMTkwNTE5NTFaFw0yNjAzMjIxNjE0NTFaMDMxMTAvBgNV BAMTKDNEODU1ODg3QUFGOTlEOUQ1RUJBN0RBQjJEOEUyQUQyRTZFM0U3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnxHkEOutVqkFTs0iNhzCHsNEQ NZ5IvI10xd1Gu/vGI9nKaGpCUZtJ2TaYjUDAxB31sYMcqrL6OoWKqfQie2Hpdxin CKvf7S0vY9iSjsBjPr3ODFGmaa1RbtBSU4qi28SVmlfAD0fppbBEONcquNoHO/u2 R5x52Y4JHwNO/sNd0iSp0AqoCq8W8EMgRKlhX4tbot9Y/nXA2v6TfE74L0QpX8OP MuAR5/2LHTps4T9HhY3gxtMakb86YKlmqfgPiA8m5yNuZ3iY4Ii7MN++SyceED36 LhDiqGLjd8VKF///46UT+LeRdlRPI/Rrdoa3JCndGrWThs3Ggcd2CAFkjannAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYVYh6r5nZ1eun2rLY4q0ubj57wwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZa+63MmQhZBq38bllu/+TSlVzQPVPDYI3U IXw/w3aC6my/1mkRBmp6nTK+WrIelLJ4ORzxlX3K2DzVesKDzfCk7Lj+NKMGY6Ek RrLBtQEe2CVXDZof4orgt6bxX6Whv8OESImtxFTpAZCS6pxFm51ieZOvb5zzyBnv s/T301QItGfhHUlB/T9AjlXklwyVjE+6z2p2dXYg2hZMUHrsci5rYS5fyoXvlYzu VIuvhitsjKlh0PyFa+vVVUT+wKDwozkrZP0WdzGClkC9hP8iJHDU7wQZknA6D5Ln svkLvsLFDKf93dNQa/SsYcyalA7xvVwpJeETJnqxN+EKkWB6a7E= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:53 2026 by rpki-client