$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: CCuTxmZ03dXaQmf911nkxamqCingwtHe794ITL9ESVk= Subject key identifier: 11:67:98:97:39:F3:3D:86:2B:26:FD:4B:0F:A3:54:DF:1F:D5:EB:C3 Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 4152581CD54F24111AE55E42852707FA21CB4AA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 01DE Signing time: Fri 17 Apr 2026 09:32:11 +0000 Manifest this update: Fri 17 Apr 2026 09:27:11 +0000 Manifest next update: Mon 20 Apr 2026 12:43:11 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: a+85n+xY/d/Kktuppb1aZPF1dbd9aMn1df7PH5efD38=) 2: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: J344zS//qgtp/moBKOHUO6s6tjlPR1YoOhimeHC/ozY=) 3: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: dfvTwA9g0PoiQuic92FFcarIIGy4IM2yPjpH4fTFWWk=) 4: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: ZuMX9SaCjlNMqVoVen3mC19Gd4hCWZ8Hgeihng1O4Rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:52:58:1c:d5:4f:24:11:1a:e5:5e:42:85:27:07:fa:21:cb:4a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Apr 17 09:27:11 2026 GMT Not After : Apr 20 12:43:11 2026 GMT Subject: CN=1167989739F33D862B26FD4B0FA354DF1FD5EBC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:80:b2:72:aa:eb:2f:48:3e:71:8d:af:e0: cd:10:e1:63:cf:22:73:c1:b1:bb:9d:d6:c4:75:cf: 2f:fe:fa:4e:07:52:40:b0:42:b7:b5:b6:66:63:60: 16:9d:e1:38:ec:8a:68:30:60:52:33:37:22:39:ab: c2:69:18:85:b2:5d:af:b7:26:d8:ab:f1:ba:2e:91: c2:30:03:71:6b:1e:cf:82:bd:9b:bb:2a:d8:6a:62: 21:b5:55:0a:de:e7:4a:09:ca:44:88:ca:5b:0c:a6: 1a:7d:23:be:b8:30:28:a0:22:a8:2b:e5:1a:f0:6f: 62:e5:b3:19:e3:98:0b:fb:62:53:b1:63:e8:ad:29: 0d:07:4c:30:8d:77:1e:4b:41:6a:4f:37:eb:36:3f: 59:51:32:60:c0:27:01:f3:36:68:ce:b0:61:4a:b5: 1e:78:b6:6f:14:13:1f:cf:0f:5b:64:62:a8:04:fc: 92:61:95:78:e7:b2:3f:61:52:4b:bc:4c:c0:c3:88: 6d:c6:6f:9d:ba:d9:d3:b8:ae:a7:45:7a:65:7b:3d: 6c:cc:ef:69:0c:5b:b2:da:76:15:62:b5:49:88:72: b0:54:50:62:a3:82:72:67:2f:4f:50:01:76:7c:5e: eb:6c:ce:e8:4d:63:57:94:c0:77:0b:49:7c:98:bc: 5a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:67:98:97:39:F3:3D:86:2B:26:FD:4B:0F:A3:54:DF:1F:D5:EB:C3 X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:78:ca:f6:8a:d1:cf:83:62:3f:ab:fd:fc:de:c6:16:44:9b: 0a:b4:ba:2b:e1:e5:91:f7:95:2f:35:c8:0c:38:ea:dd:8a:ac: 99:a6:b2:21:04:a7:f9:73:36:89:ce:d1:dd:3b:34:dc:51:f2: 3b:48:ac:b0:32:47:b4:d8:9d:3b:e3:a4:15:24:19:52:05:f9: f2:b4:73:a6:f7:e2:39:b8:2f:83:15:f2:5d:3c:65:78:af:33: 1d:a4:a5:b1:31:8e:15:48:82:a8:54:77:63:b2:b9:e3:75:cb: ac:79:da:25:e8:11:59:b4:f9:64:e2:21:87:2a:bf:09:4a:cb: 38:38:ca:37:16:0e:22:27:e9:c5:98:f4:55:a5:83:c9:e9:f7: 17:bf:b8:ff:04:97:3e:b7:6d:96:b3:34:44:27:a9:96:71:e1: 13:b9:eb:d0:65:00:6a:cd:be:5c:ff:4a:60:a6:3c:38:4a:1d: 7b:46:f0:24:1c:a8:e2:db:90:2a:5d:d7:6a:8d:f4:20:e1:20: 3c:43:4d:ac:ad:b9:c3:a2:0a:d9:17:94:e6:a1:8c:21:16:ef: 0c:24:ad:db:70:b5:1c:df:bf:3a:d9:53:38:53:c5:3a:1d:9f: 31:4a:4b:47:c2:a5:fb:2c:91:f0:e0:2e:c5:b0:e0:0b:19:e9: e8:8a:25:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVJYHNVPJBEa5V5ChScH+iHLSqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNjA0MTcwOTI3MTFaFw0yNjA0MjAxMjQzMTFaMDMxMTAvBgNV BAMTKDExNjc5ODk3MzlGMzNEODYyQjI2RkQ0QjBGQTM1NERGMUZENUVCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkEYCycqrrL0g+cY2v4M0Q4WPP InPBsbud1sR1zy/++k4HUkCwQre1tmZjYBad4TjsimgwYFIzNyI5q8JpGIWyXa+3 Jtir8boukcIwA3FrHs+CvZu7KthqYiG1VQre50oJykSIylsMphp9I764MCigIqgr 5Rrwb2LlsxnjmAv7YlOxY+itKQ0HTDCNdx5LQWpPN+s2P1lRMmDAJwHzNmjOsGFK tR54tm8UEx/PD1tkYqgE/JJhlXjnsj9hUku8TMDDiG3Gb5262dO4rqdFemV7PWzM 72kMW7LadhVitUmIcrBUUGKjgnJnL09QAXZ8XutszuhNY1eUwHcLSXyYvFoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEWeYlznzPYYrJv1LD6NU3x/V68MwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEh4yvaK0c+DYj+r/fzexhZEmwq0uivh5ZH3 lS81yAw46t2KrJmmsiEEp/lzNonO0d07NNxR8jtIrLAyR7TYnTvjpBUkGVIF+fK0 c6b34jm4L4MV8l08ZXivMx2kpbExjhVIgqhUd2OyueN1y6x52iXoEVm0+WTiIYcq vwlKyzg4yjcWDiIn6cWY9FWlg8np9xe/uP8Elz63bZazNEQnqZZx4RO569BlAGrN vlz/SmCmPDhKHXtG8CQcqOLbkCpd12qN9CDhIDxDTaytucOiCtkXlOahjCEW7wwk rdtwtRzfvzrZUzhTxTodnzFKS0fCpfsskfDgLsWw4AsZ6eiKJcA= -----END CERTIFICATE-----Generated at Fri Apr 17 16:05:34 2026 by rpki-client