$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: TQdRkDHYkKA1MKmYb7R1RjcxEygpWlbDo1O8BADPpAU= Subject key identifier: FF:5A:AA:59:63:FA:AD:6F:6D:04:92:AB:F6:C3:68:AF:1B:FE:08:DE Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 5993BC7A444ECEAE335E571637A2208F6915D820 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 01C9 Signing time: Sun 01 Mar 2026 21:22:14 +0000 Manifest this update: Sun 01 Mar 2026 21:17:14 +0000 Manifest next update: Wed 04 Mar 2026 21:36:14 +0000 Files and hashes: 1: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: twnLbDff9KCpEirGz3Yytm94kHcqc614Gh/j223AxIY=) 2: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: ZuMX9SaCjlNMqVoVen3mC19Gd4hCWZ8Hgeihng1O4Rc=) 3: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: dfvTwA9g0PoiQuic92FFcarIIGy4IM2yPjpH4fTFWWk=) 4: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: a+85n+xY/d/Kktuppb1aZPF1dbd9aMn1df7PH5efD38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:93:bc:7a:44:4e:ce:ae:33:5e:57:16:37:a2:20:8f:69:15:d8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Mar 1 21:17:14 2026 GMT Not After : Mar 4 21:36:14 2026 GMT Subject: CN=FF5AAA5963FAAD6F6D0492ABF6C368AF1BFE08DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:c9:81:3b:8a:7c:ab:2f:f1:f2:b6:e0:10: 55:2d:94:e3:eb:bc:77:84:0f:ec:ce:95:e2:96:a9: f4:19:c0:a2:bb:73:c7:c2:5b:ae:de:09:b9:06:82: 87:f7:4e:6a:b7:13:b8:cd:c6:3d:eb:1a:24:be:31: 1b:3e:43:7e:24:b5:8c:54:bc:e7:1f:dc:6e:65:66: f1:fe:ec:0c:6b:89:28:66:f0:cb:7d:b5:b3:18:bf: bd:80:69:ce:4f:08:1e:29:dc:0f:6c:a1:6f:95:27: b6:16:ba:e1:1e:e7:25:5d:c2:21:8a:c8:97:27:15: 44:25:3a:1e:b1:5b:aa:39:b6:8a:9a:97:7c:dd:f1: 86:69:af:16:04:df:a7:5b:bb:57:f4:14:cb:d9:aa: 59:48:fe:11:09:7f:ef:08:f5:b7:f0:ff:d6:bc:42: 07:6e:ae:a0:e4:f7:c4:27:f7:01:24:0d:30:9c:06: 2e:06:13:fa:0c:a1:92:6d:73:d6:c6:f3:d0:40:eb: 5a:dc:61:1d:05:d0:03:f8:3a:e1:25:16:e3:c5:55: d6:f1:9c:cf:af:9f:20:e8:bb:5d:d2:fd:7c:c9:cb: d0:f3:50:9f:34:1a:29:3a:bd:3f:39:17:b1:c7:65: 0a:e0:bc:99:fd:53:7d:18:00:64:5d:27:c7:1d:15: 8f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5A:AA:59:63:FA:AD:6F:6D:04:92:AB:F6:C3:68:AF:1B:FE:08:DE X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bf:97:83:d4:3a:26:c5:ff:1a:62:f3:39:a3:e6:34:9f:0e: c0:86:aa:73:61:d9:60:df:5d:a0:0b:a7:99:08:41:46:d6:1c: 9f:fe:96:45:9d:da:8c:c2:ac:73:a0:01:ba:d7:77:2a:2b:9b: d4:9a:aa:5a:47:da:f1:43:3f:37:be:7b:43:12:57:94:b8:10: ed:7b:91:f4:f8:14:26:b3:91:f3:50:96:ae:b7:57:0f:fe:c2: 0c:f9:f4:e5:c5:59:f1:3f:f3:bd:31:34:67:2f:06:7a:a6:9f: 0c:a3:12:76:58:3f:63:f7:fe:a4:bb:de:99:83:82:e3:0c:28: 2b:a2:a2:c0:98:3b:14:92:93:16:b0:cd:4b:84:8e:1b:88:32: b0:90:fd:b6:2a:8d:b2:a9:41:ab:53:86:39:fc:d2:ea:ad:64: 61:e3:60:55:38:27:83:a1:06:b1:3c:df:c4:5f:7f:e1:67:d7: 0d:46:3d:64:53:e5:07:6e:36:ab:54:39:46:03:37:96:8a:a8: 4d:8d:fe:48:76:6f:56:9a:bd:24:ea:9a:35:20:a8:4d:1a:f8: 68:34:78:b4:c8:c1:d5:ab:21:4b:c2:71:d9:b8:a5:6f:e8:ae: ca:df:97:3e:a9:e4:f9:17:70:c8:0e:53:a3:35:2b:95:c9:bf: d0:fb:82:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZO8ekROzq4zXlcWN6Igj2kV2CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNjAzMDEyMTE3MTRaFw0yNjAzMDQyMTM2MTRaMDMxMTAvBgNV BAMTKEZGNUFBQTU5NjNGQUFENkY2RDA0OTJBQkY2QzM2OEFGMUJGRTA4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5icmBO4p8qy/x8rbgEFUtlOPr vHeED+zOleKWqfQZwKK7c8fCW67eCbkGgof3Tmq3E7jNxj3rGiS+MRs+Q34ktYxU vOcf3G5lZvH+7AxriShm8Mt9tbMYv72Aac5PCB4p3A9soW+VJ7YWuuEe5yVdwiGK yJcnFUQlOh6xW6o5toqal3zd8YZprxYE36dbu1f0FMvZqllI/hEJf+8I9bfw/9a8 QgdurqDk98Qn9wEkDTCcBi4GE/oMoZJtc9bG89BA61rcYR0F0AP4OuElFuPFVdbx nM+vnyDou13S/XzJy9DzUJ80Gik6vT85F7HHZQrgvJn9U30YAGRdJ8cdFY9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/1qqWWP6rW9tBJKr9sNorxv+CN4wHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABq/l4PUOibF/xpi8zmj5jSfDsCGqnNh2WDf XaALp5kIQUbWHJ/+lkWd2ozCrHOgAbrXdyorm9SaqlpH2vFDPze+e0MSV5S4EO17 kfT4FCazkfNQlq63Vw/+wgz59OXFWfE/870xNGcvBnqmnwyjEnZYP2P3/qS73pmD guMMKCuiosCYOxSSkxawzUuEjhuIMrCQ/bYqjbKpQatThjn80uqtZGHjYFU4J4Oh BrE838Rff+Fn1w1GPWRT5QduNqtUOUYDN5aKqE2N/kh2b1aavSTqmjUgqE0a+Gg0 eLTIwdWrIUvCcdm4pW/orsrflz6p5PkXcMgOU6M1K5XJv9D7gqU= -----END CERTIFICATE-----Generated at Mon Mar 2 05:02:22 2026 by rpki-client