
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft (raw, json)
Hash identifier: NZm90jPikZcLoayEIX0Q3fE+aY6ov1zwoTjA4/0KCrE=
Subject key identifier: 51:04:5E:F9:C6:E4:C8:61:F8:09:83:CE:22:EE:F8:B7:0C:1D:A3:71
Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6
Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
Certificate serial: 2771718FC32F12635B9D217DF370AC5BEF0DAC49
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
Manifest number: 0250
Signing time: Sat 28 Feb 2026 12:01:43 +0000
Manifest this update: Sat 28 Feb 2026 11:56:43 +0000
Manifest next update: Tue 03 Mar 2026 20:53:43 +0000
Files and hashes: 1: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: Mc8Ea5+5WJ6GF7G0KNR6Ybiy7ufabhA8F83CYeyA+z0=)
2: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: cu+gkkkTCuwJj0tPWyI4oDjIIQe1JqfFTuFCDD6tSKw=)
3: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: fQYP6KBmK43mZ1BOpBi0K6IbkEvJhG31/o2xXC40uG8=)
4: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl (hash: RPg+KAR+o21OXs2PZpjE6mTFuMMp+O/vLcYX04uBN5w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl
rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 20:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:71:71:8f:c3:2f:12:63:5b:9d:21:7d:f3:70:ac:5b:ef:0d:ac:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
Validity
Not Before: Feb 28 11:56:43 2026 GMT
Not After : Mar 3 20:53:43 2026 GMT
Subject: CN=51045EF9C6E4C861F80983CE22EEF8B70C1DA371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:e5:d6:ae:ce:8b:e0:4e:fa:95:6f:32:c5:
ab:d3:04:9d:52:f4:41:d8:d5:1a:c1:f7:83:45:23:
86:2c:1d:93:c6:1e:f4:6e:a9:23:ab:b8:9c:62:ec:
b2:8b:b7:c4:d4:4f:a6:19:09:e0:00:0a:9e:28:33:
ed:e5:71:78:bd:2f:1f:da:e1:6d:46:0f:a8:ba:08:
cd:06:db:b4:51:1a:52:af:d9:fb:95:27:bc:a8:32:
34:2f:0f:39:ec:3f:26:e3:29:7e:ac:a9:84:83:b5:
b2:c3:16:fa:d3:4a:41:63:00:b4:1d:80:d2:de:19:
e2:b9:4d:f8:2a:f1:1c:8f:bd:3f:ed:18:40:aa:f9:
35:6e:d1:6f:14:1f:ba:a7:06:a9:c6:ab:21:94:5a:
2c:65:90:31:9c:ce:a4:be:82:55:26:24:4a:72:2d:
a4:63:97:75:95:8d:89:74:20:f0:08:36:5f:b4:95:
8c:cd:4b:2d:4a:3b:57:76:51:8d:48:d5:43:d6:65:
49:74:2e:bf:eb:e7:32:c3:7f:2c:aa:37:db:16:ac:
b4:42:e6:41:c0:47:30:4a:9a:45:45:e9:64:43:d6:
26:4c:df:38:49:d1:2b:93:89:b1:b3:c6:58:ea:9f:
ca:5c:7f:ac:3c:da:1d:49:9c:50:d4:d8:17:b7:9c:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:04:5E:F9:C6:E4:C8:61:F8:09:83:CE:22:EE:F8:B7:0C:1D:A3:71
X509v3 Authority Key Identifier:
keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:24:61:72:11:ce:55:b0:12:d7:11:90:54:a1:13:2b:c8:b9:
24:6a:89:2c:bc:31:aa:6e:72:cc:e2:08:a7:28:56:5e:ba:e3:
ef:74:7a:c8:e3:1a:63:b9:81:10:6a:05:5d:3e:3a:79:1d:64:
11:1e:8e:1b:5e:34:02:77:ab:a8:00:f6:d2:fc:6b:fb:b4:51:
6a:a6:5f:f4:67:70:34:11:f0:3e:22:22:f2:92:2e:2d:db:42:
46:6b:16:74:aa:88:18:01:d8:16:70:5a:07:8d:90:d3:74:ec:
9a:ab:14:31:da:f8:4a:5c:3b:08:f4:0b:bb:47:89:97:ae:82:
96:d0:d2:f6:25:3e:a9:df:7a:79:6d:56:7d:02:35:47:a7:20:
70:41:39:4d:12:5d:af:77:68:56:4c:05:e1:d2:42:e3:61:d2:
df:1a:d2:68:26:38:6b:06:7d:ad:68:62:5f:8f:4f:ff:6a:87:
42:80:eb:0b:24:6d:57:ed:7d:fc:2b:33:b2:c3:15:7a:04:53:
2e:dc:df:3b:43:61:9e:e2:95:fe:b9:3b:78:bd:42:53:87:3b:
02:72:19:01:05:14:73:5d:cb:40:0c:8d:e2:ca:47:55:b7:04:
1e:37:a4:af:04:1d:d3:63:68:b0:ac:9f:38:70:d5:a3:63:17:
03:96:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:44 2026 by rpki-client