$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft File: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft (raw, json) Hash identifier: l2tG3v+NPtdtPGeNWN6eAVNYsGdGWgtqqZNxt0OM6q0= Subject key identifier: 24:94:37:1B:B9:73:7B:75:40:C7:DD:9C:9F:2F:4C:08:06:3F:6F:B1 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 606314FADEA8B635E38FE7D9D5B64B1986A7C5A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft Manifest number: 012B Signing time: Sat 28 Feb 2026 04:42:21 +0000 Manifest this update: Sat 28 Feb 2026 04:37:21 +0000 Manifest next update: Tue 03 Mar 2026 13:04:21 +0000 Files and hashes: 1: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (hash: FOCno4gbHCAnLnmHobD1PWQDcUoK6xzxe9dzOJ2yOWg=) 2: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (hash: 1t/YY4k/2f409jhOunWIVWLeQdkIptD7DDSdwQQxlp4=) 3: 63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl (hash: zFRp1S0rk4k2utdRm2NMIxFREvn4gJLVSgW/dmUyr8E=) 4: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (hash: uCH/JrJsLPZexF0rUx1EEQxpnCx3s5VDJ8IscbtIU4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 13:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:63:14:fa:de:a8:b6:35:e3:8f:e7:d9:d5:b6:4b:19:86:a7:c5:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Feb 28 04:37:21 2026 GMT Not After : Mar 3 13:04:21 2026 GMT Subject: CN=2494371BB9737B7540C7DD9C9F2F4C08063F6FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:19:86:54:70:ba:8b:41:45:79:09:5f:32: 9d:99:af:4d:2c:ae:9a:c4:46:e0:6f:c0:76:1f:b5: da:72:3a:6f:03:89:1b:59:6a:e7:0f:37:ce:e1:9e: e6:57:78:21:47:45:ff:03:d6:1c:b8:94:fa:66:fa: 65:83:e7:95:cc:d9:23:9b:19:85:d6:8e:47:72:52: 53:89:62:db:93:f0:ab:da:51:3d:da:79:ec:11:35: dc:70:67:3e:cd:fc:3f:3e:84:09:6f:d6:7f:4f:ff: 29:ab:de:e5:fe:f2:d8:5e:7c:27:67:aa:00:a4:84: 4a:dc:01:ff:1a:78:c8:d1:f1:2e:e2:4d:09:81:7a: a3:56:84:5d:ab:5f:f6:6a:60:1a:76:07:f9:cf:3d: 73:16:a6:12:98:00:76:46:5f:74:85:a0:57:97:40: ae:df:8a:7b:6a:34:b7:f1:54:0d:f5:21:ed:29:01: 0f:e8:3f:d6:89:9a:21:4c:0c:ea:21:49:4f:be:69: d8:c4:01:03:e4:0f:1b:fb:a5:2c:61:b7:24:a6:b8: 8a:f9:e0:86:ee:82:34:c0:b5:6a:7b:45:3d:1c:7c: eb:6d:47:b0:85:e6:4b:ea:a1:4a:0c:a5:d9:11:ad: 7a:82:4c:44:d6:34:84:da:38:f7:02:14:5a:2c:dd: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:94:37:1B:B9:73:7B:75:40:C7:DD:9C:9F:2F:4C:08:06:3F:6F:B1 X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b5:54:9a:27:3f:e3:bd:c0:39:d5:dd:79:b7:9f:f3:60:b5: b2:3a:c8:08:c3:81:df:67:c8:b5:ce:85:6e:f2:72:40:26:b4: e2:a5:dc:78:66:d5:f5:02:04:7d:2d:de:35:c2:2f:fc:56:bf: e8:82:b8:b1:09:6f:e2:ac:e9:99:97:d8:48:ba:d0:14:a0:e0: 33:a6:7d:62:44:91:2f:3f:b4:14:73:7d:14:3c:7d:b7:8d:bf: c6:22:d4:eb:6a:10:c2:a8:c3:6d:c0:15:ba:2d:29:32:ed:c3: 9c:8a:20:63:d5:b7:9e:97:a7:df:f2:0a:7c:2f:ab:b0:0b:c1: 9d:df:1c:21:8e:21:e1:cb:6d:d5:9f:76:a8:c5:ca:a7:53:b7: 64:b8:c7:15:15:89:40:78:b1:09:f3:c1:b3:7c:c8:ca:04:11: fd:81:fa:a7:38:5f:a1:0e:43:2f:bd:70:8e:5a:71:61:8b:ff: e5:b9:3c:a8:5a:cb:61:2f:64:a7:d2:9a:73:5d:e4:5b:62:f8: 69:7d:c5:3f:e3:c9:aa:30:1d:ce:46:a6:f8:7b:ec:67:9b:c5: 5a:f0:ec:77:66:7d:b0:96:00:2c:33:6e:34:13:a8:e8:20:eb: 80:5f:fd:50:a3:d1:80:32:f8:04:2e:3f:ef:a6:aa:2c:97:2d: 7c:02:fd:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGMU+t6otjXjj+fZ1bZLGYanxaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNjAyMjgwNDM3MjFaFw0yNjAzMDMxMzA0MjFaMDMxMTAvBgNV BAMTKDI0OTQzNzFCQjk3MzdCNzU0MEM3REQ5QzlGMkY0QzA4MDYzRjZGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURBmGVHC6i0FFeQlfMp2Zr00s rprERuBvwHYftdpyOm8DiRtZaucPN87hnuZXeCFHRf8D1hy4lPpm+mWD55XM2SOb GYXWjkdyUlOJYtuT8KvaUT3aeewRNdxwZz7N/D8+hAlv1n9P/ymr3uX+8thefCdn qgCkhErcAf8aeMjR8S7iTQmBeqNWhF2rX/ZqYBp2B/nPPXMWphKYAHZGX3SFoFeX QK7fintqNLfxVA31Ie0pAQ/oP9aJmiFMDOohSU++adjEAQPkDxv7pSxhtySmuIr5 4IbugjTAtWp7RT0cfOttR7CF5kvqoUoMpdkRrXqCTETWNITaOPcCFFos3RN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJJQ3G7lze3VAx92cny9MCAY/b7EwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI0ZDFlYmItYWVlYi00OTQ1LTll ZjItMzJhZDliZmRlYjE5LzAvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFG MDNCRUYxMkY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALG1VJonP+O9wDnV3Xm3n/NgtbI6yAjDgd9n yLXOhW7yckAmtOKl3Hhm1fUCBH0t3jXCL/xWv+iCuLEJb+Ks6ZmX2Ei60BSg4DOm fWJEkS8/tBRzfRQ8fbeNv8Yi1OtqEMKow23AFbotKTLtw5yKIGPVt56Xp9/yCnwv q7ALwZ3fHCGOIeHLbdWfdqjFyqdTt2S4xxUViUB4sQnzwbN8yMoEEf2B+qc4X6EO Qy+9cI5acWGL/+W5PKhay2EvZKfSmnNd5Fti+Gl9xT/jyaowHc5Gpvh77GebxVrw 7HdmfbCWACwzbjQTqOgg64Bf/VCj0YAy+AQuP++mqiyXLXwC/c4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:46 2026 by rpki-client