$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft File: 64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json) Hash identifier: OT9uw2VwsgJp+5tnN7cRGC9xHNQYH1gY2iKLLgBP2mc= Subject key identifier: C0:7E:81:93:09:0F:49:AB:BA:D7:66:33:5C:13:63:AA:46:EF:2F:88 Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 Certificate issuer: /CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Certificate serial: 41B9BA0DC8FB03380706AAFA7542C1F9F1E6AF51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft Manifest number: 02CE Signing time: Tue 21 Apr 2026 05:32:34 +0000 Manifest this update: Tue 21 Apr 2026 05:27:34 +0000 Manifest next update: Fri 24 Apr 2026 10:01:34 +0000 Files and hashes: 1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: 3XMqr1SbGGTOsdpLnGk2+GvSMvPb+++c1PWx8+UbJng=) 2: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: D09AOFu85MMFNxabVFcCTN+Zj/iFjV4IjFt2K8sFYPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b9:ba:0d:c8:fb:03:38:07:06:aa:fa:75:42:c1:f9:f1:e6:af:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Validity Not Before: Apr 21 05:27:34 2026 GMT Not After : Apr 24 10:01:34 2026 GMT Subject: CN=C07E8193090F49ABBAD766335C1363AA46EF2F88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:0c:c6:7f:f8:60:c7:e3:38:5c:66:e0:91: 0f:9c:bf:cf:d8:1a:53:aa:c9:9d:05:3d:93:1d:a7: d7:2a:6f:4a:e0:ee:17:7f:91:e8:5f:d7:35:38:d3: 3e:64:9b:80:58:ce:15:06:ed:d6:a4:52:e9:cd:9f: 5e:13:4e:6b:83:21:2e:9a:9b:6b:ab:27:44:cb:15: 33:9f:3d:f4:83:39:ce:38:66:df:72:bf:0f:ca:9b: 1f:a0:bb:b4:a2:58:a4:4c:92:73:69:90:23:bb:5a: cc:60:ee:6f:6d:28:c6:3f:d7:70:b9:63:f3:93:ad: 23:87:d7:f4:be:85:01:56:b6:d8:59:6f:c3:06:fe: 44:c7:8e:03:08:59:7d:8c:b3:07:bc:92:81:fc:1a: 7a:03:7a:95:43:29:e4:89:87:8e:56:97:4c:c9:da: 58:aa:d6:ac:a0:b3:e2:aa:a0:71:49:bb:ba:8d:eb: e0:62:11:f1:84:cd:45:18:01:f8:cf:60:bb:16:e0: 07:41:f3:a3:03:21:2b:82:74:1a:27:9c:2b:de:9f: 5f:19:57:57:70:f1:66:eb:67:88:34:5b:11:f1:c0: c1:43:b3:12:70:b9:46:17:15:7c:c0:76:d2:38:6f: 7f:f4:fc:75:79:1f:6b:ff:00:45:1f:27:c2:fd:97: d4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7E:81:93:09:0F:49:AB:BA:D7:66:33:5C:13:63:AA:46:EF:2F:88 X509v3 Authority Key Identifier: keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:5f:57:28:2e:6a:5e:6e:66:87:b2:fa:83:11:47:a2:1c:67: 8a:98:22:a5:99:46:f2:cd:d2:5b:0a:4c:1b:94:11:f6:c3:af: cf:e6:d7:2c:3a:6a:91:eb:fb:4b:c8:f4:ac:e5:bd:87:af:3a: 17:b7:7d:02:de:7a:18:66:a7:fb:1f:2f:49:b6:61:aa:8c:9c: 1c:c5:98:41:d2:b2:ee:8c:d8:f2:e6:2a:62:d6:d9:ab:60:6f: 4a:f5:77:7e:52:8a:a4:f8:2c:10:7c:b9:5d:d3:84:2c:61:3b: 91:e9:a1:23:b1:47:75:e2:a6:32:72:14:9e:b5:98:82:fa:33: b2:2e:6a:4f:7e:fb:78:50:d8:5e:61:b9:d9:1e:5b:8d:c7:32: 19:bd:68:31:8d:08:fb:92:c8:27:3d:e3:ca:d6:62:3f:4c:87: d2:fe:07:d7:28:60:af:95:41:11:6e:ab:c7:df:33:84:28:c5: 9c:52:93:b0:ac:a8:f3:27:d7:35:fa:26:cb:9c:bb:df:68:2b: 8f:d8:0c:72:71:cb:bc:4e:b8:25:90:f0:52:48:7e:6a:8a:9d: f3:ce:7c:84:7f:12:c8:bb:3b:08:43:5f:09:e0:ca:32:64:b1: 67:7e:10:25:2d:9a:19:a2:44:a1:c8:72:c6:4d:a0:8d:d7:c9: d5:aa:ac:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbm6Dcj7AzgHBqr6dULB+fHmr1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4 MDIyQzNDNTAeFw0yNjA0MjEwNTI3MzRaFw0yNjA0MjQxMDAxMzRaMDMxMTAvBgNV BAMTKEMwN0U4MTkzMDkwRjQ5QUJCQUQ3NjYzMzVDMTM2M0FBNDZFRjJGODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wgzGf/hgx+M4XGbgkQ+cv8/Y GlOqyZ0FPZMdp9cqb0rg7hd/kehf1zU40z5km4BYzhUG7dakUunNn14TTmuDIS6a m2urJ0TLFTOfPfSDOc44Zt9yvw/Kmx+gu7SiWKRMknNpkCO7Wsxg7m9tKMY/13C5 Y/OTrSOH1/S+hQFWtthZb8MG/kTHjgMIWX2Mswe8koH8GnoDepVDKeSJh45Wl0zJ 2liq1qygs+KqoHFJu7qN6+BiEfGEzUUYAfjPYLsW4AdB86MDISuCdBonnCven18Z V1dw8WbrZ4g0WxHxwMFDsxJwuUYXFXzAdtI4b3/0/HV5H2v/AEUfJ8L9l9TNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwH6BkwkPSau612YzXBNjqkbvL4gwHwYDVR0j BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3 NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy QzNDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3 NjU4MDIyQzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1fVygual5uZoey+oMRR6IcZ4qYIqWZRvLN 0lsKTBuUEfbDr8/m1yw6apHr+0vI9KzlvYevOhe3fQLeehhmp/sfL0m2YaqMnBzF mEHSsu6M2PLmKmLW2atgb0r1d35SiqT4LBB8uV3ThCxhO5HpoSOxR3XipjJyFJ61 mIL6M7Iuak9++3hQ2F5hudkeW43HMhm9aDGNCPuSyCc948rWYj9Mh9L+B9coYK+V QRFuq8ffM4QoxZxSk7CsqPMn1zX6Jsucu99oK4/YDHJxy7xOuCWQ8FJIfmqKnfPO fIR/Esi7OwhDXwngyjJksWd+ECUtmhmiRKHIcsZNoI3XydWqrBY= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:39 2026 by rpki-client