$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft File: 64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json) Hash identifier: 0IjNAEzkBitvAKJC3801xMRYfsOAiFJ2CCBdu2EP8XE= Subject key identifier: 9A:1E:96:FF:7E:97:C6:88:37:5C:0D:AF:67:11:50:C2:5C:C2:08:F3 Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 Certificate issuer: /CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Certificate serial: 4047766AEDAACC8B88FC5D6CBB3797FF8DFA38CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft Manifest number: 02CC Signing time: Thu 16 Apr 2026 21:52:28 +0000 Manifest this update: Thu 16 Apr 2026 21:47:28 +0000 Manifest next update: Mon 20 Apr 2026 04:31:28 +0000 Files and hashes: 1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: 3XMqr1SbGGTOsdpLnGk2+GvSMvPb+++c1PWx8+UbJng=) 2: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: q6HZJi38ROfpxv7vBhwXBuIAIVbEDaTJsG3SRblCMrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:47:76:6a:ed:aa:cc:8b:88:fc:5d:6c:bb:37:97:ff:8d:fa:38:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Validity Not Before: Apr 16 21:47:28 2026 GMT Not After : Apr 20 04:31:28 2026 GMT Subject: CN=9A1E96FF7E97C688375C0DAF671150C25CC208F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:9d:b1:6c:bc:ed:ba:4b:32:5f:74:21:92: 0d:5d:18:cd:57:eb:47:23:b6:a1:15:e9:f5:1e:18: 3c:bb:5c:02:d2:ad:f6:6f:d8:99:51:b8:7a:5f:d8: cd:2b:2b:35:fc:7b:9f:2d:dd:a3:59:52:58:9f:20: b2:00:f0:c7:d5:11:97:07:4b:fc:e9:b2:81:04:bb: 39:5c:fa:2a:18:fa:af:e6:fd:e8:56:25:42:b0:39: d4:eb:62:b5:86:0c:e3:d0:ba:d6:a1:7d:7b:38:32: 27:90:49:5f:e5:1e:b7:c7:ec:0e:ae:c9:f6:9b:e5: b4:f4:61:30:ef:52:dc:cc:72:1a:77:ac:25:d6:1e: f5:e6:14:49:42:4b:c1:62:99:a2:f9:37:4e:48:46: 07:d6:be:92:fb:8c:46:6c:ce:85:a6:a9:19:55:67: 38:2b:06:b1:f8:7f:d8:97:dd:3f:5d:50:1c:fd:09: 78:39:93:5a:f1:c4:c1:d6:a5:44:e5:0b:b5:fd:b3: ce:39:cd:0c:b8:67:7b:df:57:67:d2:1d:c2:52:7f: 9e:d1:4e:f0:a6:ae:19:ce:09:ac:2a:21:a2:a7:37: 4a:de:40:2e:10:30:81:c7:af:82:f9:b8:4b:be:10: 62:8e:2e:56:56:bc:2a:02:24:06:6a:d4:c6:b4:fd: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1E:96:FF:7E:97:C6:88:37:5C:0D:AF:67:11:50:C2:5C:C2:08:F3 X509v3 Authority Key Identifier: keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6f:2d:b9:24:fe:cd:36:2c:11:da:6c:4d:45:7a:d7:60:f1: 8c:a1:0a:4e:02:a3:2d:65:9e:6c:2a:29:1a:14:5e:c6:86:f2: 7e:51:4b:f6:09:b2:70:fc:68:b5:24:38:c4:17:2e:9f:7f:f2: 71:f1:e0:48:01:d0:fd:1b:38:80:b3:12:db:b2:09:43:66:71: 71:ca:41:0c:98:98:f8:8b:42:8c:16:41:d4:2b:cb:8c:77:20: 5c:b9:90:10:1d:69:45:77:5b:c7:6a:65:b2:02:b7:66:f0:1c: c2:bf:6a:2c:9b:c4:bb:53:12:cc:0c:9d:25:89:3c:f2:c2:e0: d9:f2:f7:a3:d5:16:9a:4e:2d:18:6f:2b:77:17:12:ff:bf:d7: 9e:10:21:c9:43:cd:c9:1f:64:7a:0d:86:7f:2b:03:c5:e3:96: d8:58:b0:3d:df:dd:be:1c:f6:07:bf:ae:41:e6:04:e4:e6:a7: 44:e3:be:03:8d:18:2f:93:51:90:fa:59:78:58:76:7f:e8:20: f4:86:02:d7:08:44:b8:de:56:50:13:11:6d:d8:4e:80:43:86: 90:79:3f:e8:fa:ef:c6:82:59:53:58:33:28:72:8a:ad:5d:25: ea:94:cc:46:f9:c2:29:fb:98:39:74:c9:f9:63:0a:b1:3e:4a: 9a:89:0c:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQEd2au2qzIuI/F1suzeX/436OMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4 MDIyQzNDNTAeFw0yNjA0MTYyMTQ3MjhaFw0yNjA0MjAwNDMxMjhaMDMxMTAvBgNV BAMTKDlBMUU5NkZGN0U5N0M2ODgzNzVDMERBRjY3MTE1MEMyNUNDMjA4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlJ2xbLztuksyX3Qhkg1dGM1X 60cjtqEV6fUeGDy7XALSrfZv2JlRuHpf2M0rKzX8e58t3aNZUlifILIA8MfVEZcH S/zpsoEEuzlc+ioY+q/m/ehWJUKwOdTrYrWGDOPQutahfXs4MieQSV/lHrfH7A6u yfab5bT0YTDvUtzMchp3rCXWHvXmFElCS8FimaL5N05IRgfWvpL7jEZszoWmqRlV ZzgrBrH4f9iX3T9dUBz9CXg5k1rxxMHWpUTlC7X9s845zQy4Z3vfV2fSHcJSf57R TvCmrhnOCawqIaKnN0reQC4QMIHHr4L5uEu+EGKOLlZWvCoCJAZq1Ma0/VO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmh6W/36Xxog3XA2vZxFQwlzCCPMwHwYDVR0j BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3 NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy QzNDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3 NjU4MDIyQzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJvLbkk/s02LBHabE1Fetdg8YyhCk4Coy1l nmwqKRoUXsaG8n5RS/YJsnD8aLUkOMQXLp9/8nHx4EgB0P0bOICzEtuyCUNmcXHK QQyYmPiLQowWQdQry4x3IFy5kBAdaUV3W8dqZbICt2bwHMK/aiybxLtTEswMnSWJ PPLC4Nny96PVFppOLRhvK3cXEv+/154QIclDzckfZHoNhn8rA8XjlthYsD3f3b4c 9ge/rkHmBOTmp0TjvgONGC+TUZD6WXhYdn/oIPSGAtcIRLjeVlATEW3YToBDhpB5 P+j678aCWVNYMyhyiq1dJeqUzEb5win7mDl0yfljCrE+SpqJDPU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:50:45 2026 by rpki-client