$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json) Hash identifier: Kkyeg7X/GZnS9isfGN7YAoHBgrtY3/7yhDHtQGWVL5E= Subject key identifier: AC:93:F1:C9:91:11:1E:C3:43:4C:F6:8F:B4:37:F1:DD:18:9A:27:68 Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 7E9FE2922BA9E47AC77FA2E62D189F7D71AEFFB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft Manifest number: 0559 Signing time: Sat 28 Feb 2026 23:51:54 +0000 Manifest this update: Sat 28 Feb 2026 23:46:54 +0000 Manifest next update: Wed 04 Mar 2026 07:03:54 +0000 Files and hashes: 1: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: ZpF/KGxPbErqJ8VSz1WkiCybrFY70jeXAIswB/bXwuI=) 2: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: TaFpYB5BIjay9BRD7iqZXyWfsvPUFx9J7RCgiFelJG0=) 3: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: KII5650hF6mmxLQ/rbgTb8PaRw7N913WBuqCn/GKGRI=) 4: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: kVt5AplIi2tCio95fGZq/cPfVyltnVVl2G0ZCHPdgRg=) 5: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: UVW9pjMMh6nTzzAse0pe198GDDypk+vSUVBxDpcZFG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9f:e2:92:2b:a9:e4:7a:c7:7f:a2:e6:2d:18:9f:7d:71:ae:ff:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: Feb 28 23:46:54 2026 GMT Not After : Mar 4 07:03:54 2026 GMT Subject: CN=AC93F1C991111EC3434CF68FB437F1DD189A2768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:a1:f1:a7:ff:1b:24:1e:ab:76:88:60:81: 0f:9b:55:a9:fa:07:e7:6d:cc:ef:0c:01:ee:6d:91: 3f:14:f0:5d:26:4b:21:d3:6b:fc:08:5f:a2:a2:2c: 79:66:28:97:d6:3c:50:09:0e:7c:cb:41:da:5b:42: 59:ce:75:30:3f:03:e5:48:57:5d:40:0c:ac:d5:88: 71:f3:f5:2c:08:39:3e:7d:2c:4b:01:06:99:9d:14: 99:70:e5:b3:ec:89:04:9c:ed:18:ff:cb:7d:1f:70: 6e:3f:96:52:fb:10:c5:fc:a9:95:d1:b7:71:3a:c4: f5:cc:d5:31:b0:50:67:34:1b:73:e8:fa:57:74:6f: d9:53:0d:3d:34:52:61:81:7a:da:ff:eb:25:8f:df: 93:ca:ea:09:fb:44:5e:c1:68:07:fa:97:fc:9c:c0: f8:81:e0:90:8d:5f:7e:dd:fb:f5:a7:59:e0:60:1b: 93:90:c2:79:fd:85:52:62:b0:c4:56:75:0f:08:d5: 34:53:4a:13:68:a1:22:8f:67:b1:c5:09:25:84:24: dc:da:f6:17:e3:91:9a:06:49:fd:ca:f6:48:69:31: d1:da:43:8b:74:df:49:ec:56:5a:6e:19:af:84:40: 77:d0:36:4d:5b:f3:29:21:f6:77:f0:50:07:b4:ba: ca:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:93:F1:C9:91:11:1E:C3:43:4C:F6:8F:B4:37:F1:DD:18:9A:27:68 X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a8:d7:eb:01:3d:6c:99:ac:a9:08:12:c9:08:25:0d:99:dc: 4a:ce:0e:03:52:25:b3:c4:b0:e5:80:95:9e:94:14:5a:8d:74: b7:b6:ea:fb:51:10:52:a2:85:1a:25:27:94:12:23:8a:84:44: da:0a:72:dc:81:18:3a:e7:6f:9b:52:c1:2d:63:49:d9:5b:82: d7:4b:fe:c7:89:c6:57:a4:d9:33:f8:26:7f:14:fb:6a:c0:14: 88:76:bb:a8:a5:9b:a9:f7:57:03:ed:a0:6b:a9:aa:21:3f:92: ba:e0:65:af:13:f0:5a:2c:77:c5:6d:0c:2f:98:c9:d1:ae:b5: 69:4e:53:c8:97:0c:73:5a:c5:df:eb:15:ec:1c:20:35:4f:73: 4e:f0:1b:3d:78:a7:fe:33:04:95:4e:78:ed:b2:1d:bc:d2:7c: 92:85:a5:04:eb:16:ae:c2:2e:1e:19:cc:cb:7f:54:10:54:b9: 7a:c4:b5:57:ce:3a:68:38:93:30:1a:c1:36:ee:9b:75:c6:97: 7c:5c:66:68:01:8f:e0:e3:5a:f9:0f:06:a9:8a:77:d6:59:1c: 04:6e:8b:de:1f:7a:c1:2f:61:64:62:be:75:d9:25:de:91:d9: 96:7c:4b:5f:66:5f:24:dd:fc:ba:0c:aa:61:19:b0:a8:8e:2e: 50:56:51:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfp/ikiup5HrHf6LmLRiffXGu/7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNjAyMjgyMzQ2NTRaFw0yNjAzMDQwNzAzNTRaMDMxMTAvBgNV BAMTKEFDOTNGMUM5OTExMTFFQzM0MzRDRjY4RkI0MzdGMUREMTg5QTI3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cqHxp/8bJB6rdohggQ+bVan6 B+dtzO8MAe5tkT8U8F0mSyHTa/wIX6KiLHlmKJfWPFAJDnzLQdpbQlnOdTA/A+VI V11ADKzViHHz9SwIOT59LEsBBpmdFJlw5bPsiQSc7Rj/y30fcG4/llL7EMX8qZXR t3E6xPXM1TGwUGc0G3Po+ld0b9lTDT00UmGBetr/6yWP35PK6gn7RF7BaAf6l/yc wPiB4JCNX37d+/WnWeBgG5OQwnn9hVJisMRWdQ8I1TRTShNooSKPZ7HFCSWEJNza 9hfjkZoGSf3K9khpMdHaQ4t030nsVlpuGa+EQHfQNk1b8ykh9nfwUAe0usqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrJPxyZERHsNDTPaPtDfx3RiaJ2gwHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZB M0Y1M0YzNDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCo1+sBPWyZrKkIEskIJQ2Z3ErODgNSJbPE sOWAlZ6UFFqNdLe26vtREFKihRolJ5QSI4qERNoKctyBGDrnb5tSwS1jSdlbgtdL /seJxlek2TP4Jn8U+2rAFIh2u6ilm6n3VwPtoGupqiE/krrgZa8T8Fosd8VtDC+Y ydGutWlOU8iXDHNaxd/rFewcIDVPc07wGz14p/4zBJVOeO2yHbzSfJKFpQTrFq7C Lh4ZzMt/VBBUuXrEtVfOOmg4kzAawTbum3XGl3xcZmgBj+DjWvkPBqmKd9ZZHARu i94fesEvYWRivnXZJd6R2ZZ8S19mXyTd/LoMqmEZsKiOLlBWUZo= -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:47 2026 by rpki-client