$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft File: 64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json) Hash identifier: T+XVzqRFMDjIVTVn+akk/WQ0r0OQ3nPN99nZQrCYeOc= Subject key identifier: 91:1F:84:0E:61:87:46:CC:30:18:C6:F0:F0:2C:39:F7:29:21:ED:3A Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 Certificate issuer: /CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Certificate serial: 134D88C84AF4E17B903110709182F99DD6FD52D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft Manifest number: 02B7 Signing time: Sat 28 Feb 2026 16:02:34 +0000 Manifest this update: Sat 28 Feb 2026 15:57:34 +0000 Manifest next update: Tue 03 Mar 2026 16:12:34 +0000 Files and hashes: 1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: 3XMqr1SbGGTOsdpLnGk2+GvSMvPb+++c1PWx8+UbJng=) 2: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: QBPwiF986rxw5xf0i8Q/t1S7XbzR27E5oeQVZwtZuBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4d:88:c8:4a:f4:e1:7b:90:31:10:70:91:82:f9:9d:d6:fd:52:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Validity Not Before: Feb 28 15:57:34 2026 GMT Not After : Mar 3 16:12:34 2026 GMT Subject: CN=911F840E618746CC3018C6F0F02C39F72921ED3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:b1:91:2d:18:ce:72:95:2f:21:78:30:39: da:33:87:c2:d9:6c:a2:7b:fa:04:2a:95:19:78:31: 9c:5d:2d:e0:7b:8a:3b:c2:de:05:ae:05:f2:60:68: 90:d2:f8:fd:19:6b:ff:3e:d0:c9:69:d5:ee:40:30: 0f:1b:40:3f:3d:1f:da:1f:0c:65:73:29:62:df:8c: 0d:79:90:8c:ae:03:4e:ff:55:06:6e:06:80:33:f7: 2e:c1:38:7e:9e:ce:d5:90:c6:ec:d0:ac:04:7d:1e: b8:7a:19:ed:25:86:e2:4d:6b:6f:2b:1e:2d:da:7b: 3d:cb:62:c1:d0:c5:fd:ff:16:6a:8d:47:3f:b1:4c: e5:41:ee:4b:80:eb:ab:4a:c8:23:5b:5e:9c:a7:bc: a0:af:87:3a:22:c6:60:35:1e:34:3a:69:da:51:6a: d1:38:96:f3:57:c2:c5:23:2e:68:69:d6:e7:d8:55: d5:1c:ba:18:28:40:bc:e8:e2:c2:31:d8:1d:ed:f9: 39:c2:44:44:2c:08:36:23:02:b3:ad:3c:82:4f:eb: 2b:75:11:7e:f4:f9:29:f1:50:fb:59:8d:2a:8c:58: 9c:a6:a6:4f:d4:cf:da:21:ee:b7:97:17:c1:c8:84: 14:93:ac:b9:23:8a:69:68:50:94:3c:8b:8f:57:e7: 81:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1F:84:0E:61:87:46:CC:30:18:C6:F0:F0:2C:39:F7:29:21:ED:3A X509v3 Authority Key Identifier: keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e7:e6:f6:fa:13:b5:84:74:c5:aa:c3:1e:94:b0:14:71:d0: 87:5a:e9:f3:09:01:80:0a:7d:00:d0:b9:6c:78:62:67:f4:15: ab:b0:bb:42:90:0c:37:06:34:a5:d9:1e:eb:a7:63:16:93:b4: d3:57:e9:bb:33:e2:51:2c:10:b0:e5:de:ae:1e:45:c1:32:0c: 83:ad:40:be:b4:5d:fe:07:98:c1:02:56:24:7b:ff:7a:a7:bd: 2e:3d:2d:28:e3:99:41:01:b6:22:4f:97:56:6e:44:cf:58:49: 7c:09:2b:c5:5e:e5:1a:53:ad:c1:5f:4d:41:77:30:72:73:8b: 8b:fe:92:a1:d9:f9:d4:1f:54:8a:fe:5f:b3:fc:d6:8d:c5:33: 2b:5a:78:33:08:b5:cc:a4:62:b0:c8:09:f7:e0:6c:4a:04:ed: d5:64:be:6d:d7:48:ae:8a:0c:f2:80:0e:94:6c:31:a6:48:d7: 2d:29:62:64:de:a5:13:8a:cf:21:d8:64:c8:72:1c:74:53:84: 3d:50:b4:3a:01:ae:3e:44:f3:04:9f:05:f8:c6:cc:77:7a:cc: 6f:2b:3c:a3:a6:00:50:be:dc:a5:5d:37:4f:1d:62:4c:74:74: 66:78:c0:e9:f2:b5:68:7a:18:78:9b:ef:7e:06:aa:e7:3e:bd: 66:1e:e1:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE02IyEr04XuQMRBwkYL5ndb9UtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4 MDIyQzNDNTAeFw0yNjAyMjgxNTU3MzRaFw0yNjAzMDMxNjEyMzRaMDMxMTAvBgNV BAMTKDkxMUY4NDBFNjE4NzQ2Q0MzMDE4QzZGMEYwMkMzOUY3MjkyMUVEM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDULrGRLRjOcpUvIXgwOdozh8LZ bKJ7+gQqlRl4MZxdLeB7ijvC3gWuBfJgaJDS+P0Za/8+0Mlp1e5AMA8bQD89H9of DGVzKWLfjA15kIyuA07/VQZuBoAz9y7BOH6eztWQxuzQrAR9Hrh6Ge0lhuJNa28r Hi3aez3LYsHQxf3/FmqNRz+xTOVB7kuA66tKyCNbXpynvKCvhzoixmA1HjQ6adpR atE4lvNXwsUjLmhp1ufYVdUcuhgoQLzo4sIx2B3t+TnCREQsCDYjArOtPIJP6yt1 EX70+SnxUPtZjSqMWJympk/Uz9oh7reXF8HIhBSTrLkjimloUJQ8i49X54GpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkR+EDmGHRswwGMbw8Cw59ykh7TowHwYDVR0j BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3 NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy QzNDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3 NjU4MDIyQzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHn5vb6E7WEdMWqwx6UsBRx0Ida6fMJAYAK fQDQuWx4Ymf0Fauwu0KQDDcGNKXZHuunYxaTtNNX6bsz4lEsELDl3q4eRcEyDIOt QL60Xf4HmMECViR7/3qnvS49LSjjmUEBtiJPl1ZuRM9YSXwJK8Ve5RpTrcFfTUF3 MHJzi4v+kqHZ+dQfVIr+X7P81o3FMytaeDMItcykYrDICffgbEoE7dVkvm3XSK6K DPKADpRsMaZI1y0pYmTepROKzyHYZMhyHHRThD1QtDoBrj5E8wSfBfjGzHd6zG8r PKOmAFC+3KVdN08dYkx0dGZ4wOnytWh6GHib734Gquc+vWYe4UU= -----END CERTIFICATE-----Generated at Mon Mar 2 00:25:59 2026 by rpki-client