$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json) Hash identifier: 32zYzIFJlTM+bIYUrEABfKiVHMAK1pcUIZHspc2/uWw= Subject key identifier: 93:4A:03:98:99:DA:D2:C9:64:57:52:E2:C5:09:DA:FC:D7:C6:B8:88 Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Certificate serial: 60D1C626F73D9EF64AE56C42BD7F85460B1E4CB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft Manifest number: 01CA Signing time: Mon 02 Mar 2026 17:51:13 +0000 Manifest this update: Mon 02 Mar 2026 17:46:13 +0000 Manifest next update: Fri 06 Mar 2026 02:35:13 +0000 Files and hashes: 1: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: SfkIYsXJojM65haB0cqB/IgneIxTSA2sgrcu1eCa/Sc=) 2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: oxm1JtkBeyGlYrT9RyVgRcjSHEEp+72qseHuuICIm9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d1:c6:26:f7:3d:9e:f6:4a:e5:6c:42:bd:7f:85:46:0b:1e:4c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Validity Not Before: Mar 2 17:46:13 2026 GMT Not After : Mar 6 02:35:13 2026 GMT Subject: CN=934A039899DAD2C9645752E2C509DAFCD7C6B888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:65:56:24:5a:d3:9b:22:38:32:c0:f6:d8:cb: bb:64:85:69:4d:2e:b5:51:ab:69:fc:a4:c6:69:57: 99:20:a1:06:ee:06:80:98:c0:30:e6:5a:62:fe:6c: 1d:ac:cd:a4:40:90:c6:0a:a6:aa:ba:a9:91:57:15: 48:b5:37:37:b8:b1:1f:50:63:5d:e3:03:33:67:fc: 0f:3a:57:d9:7d:0d:48:f7:88:f5:d6:0c:b6:c8:e4: d6:0d:ae:59:b4:5f:37:d5:1f:c3:bd:88:47:d9:15: 87:b1:65:95:0b:e2:b7:70:53:63:57:3c:82:bf:51: b5:f1:68:d4:73:03:7f:34:29:7c:06:42:15:28:cf: ce:74:78:77:5a:65:4b:27:9a:66:15:a7:c7:75:b8: f3:39:c3:29:e5:22:f8:d5:44:d6:48:1a:a1:13:a1: 57:22:14:be:10:9c:a0:90:54:fd:41:88:93:7f:b2: 32:7b:81:4a:64:ab:1b:a2:86:9c:a2:36:68:82:e7: ad:55:da:a9:4e:7e:5a:23:19:64:b5:49:04:d3:36: 40:69:84:f3:c0:26:e8:47:ef:3a:5e:79:e6:9e:83: f3:ac:08:e0:8b:76:74:a7:b6:08:66:3a:0c:06:60: e7:82:d1:e4:77:d7:b2:9b:27:db:f0:dc:c5:49:fc: c8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4A:03:98:99:DA:D2:C9:64:57:52:E2:C5:09:DA:FC:D7:C6:B8:88 X509v3 Authority Key Identifier: keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d1:e5:36:6f:e3:76:8c:9c:91:0b:7b:6c:fd:17:5c:bb:20: d3:63:73:d3:34:3b:ad:55:dd:92:cf:2c:d1:f2:64:af:d2:10: ba:35:c0:2c:eb:49:d1:a3:a8:15:f9:c7:e2:f1:63:c4:ed:26: fa:b5:e2:86:72:fa:e7:c1:39:2e:52:09:52:77:d6:5f:b9:3d: 14:f0:d0:aa:10:cf:04:2c:54:40:bd:b0:c7:45:e3:a3:d4:3e: b6:dd:9e:25:5f:e3:ff:17:0b:c9:92:ba:11:10:15:10:1f:b6: 40:01:c3:6e:54:97:2c:10:cc:db:f7:c8:35:27:c3:3b:1b:7b: 66:7d:8e:ad:11:a1:a5:68:05:d1:b0:86:8d:90:a8:36:da:6e: 8d:c0:24:f3:ec:d8:8f:b1:0b:62:f9:9f:a8:3f:ed:64:31:51: d2:3b:ea:09:3b:cc:b4:22:78:af:07:a4:89:cf:dc:e4:db:95: f4:43:19:36:ca:af:86:f8:e6:f9:38:82:4a:8b:79:97:c5:c3: 9b:d0:65:67:6b:d4:2a:38:4d:88:ab:b6:b0:ab:27:e0:36:76: b3:21:a1:7f:43:c9:4d:3a:a9:dc:3e:47:da:22:cd:25:d7:33: f6:6f:a1:36:2a:1c:f1:08:c3:2b:e6:44:45:5b:20:75:65:79: 23:2e:07:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNHGJvc9nvZK5WxCvX+FRgseTLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIx NEYyMjY5NTAeFw0yNjAzMDIxNzQ2MTNaFw0yNjAzMDYwMjM1MTNaMDMxMTAvBgNV BAMTKDkzNEEwMzk4OTlEQUQyQzk2NDU3NTJFMkM1MDlEQUZDRDdDNkI4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZVYkWtObIjgywPbYy7tkhWlN LrVRq2n8pMZpV5kgoQbuBoCYwDDmWmL+bB2szaRAkMYKpqq6qZFXFUi1Nze4sR9Q Y13jAzNn/A86V9l9DUj3iPXWDLbI5NYNrlm0XzfVH8O9iEfZFYexZZUL4rdwU2NX PIK/UbXxaNRzA380KXwGQhUoz850eHdaZUsnmmYVp8d1uPM5wynlIvjVRNZIGqET oVciFL4QnKCQVP1BiJN/sjJ7gUpkqxuihpyiNmiC561V2qlOflojGWS1SQTTNkBp hPPAJuhH7zpeeeaeg/OsCOCLdnSntghmOgwGYOeC0eR317KbJ9vw3MVJ/MgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk0oDmJna0slkV1LixQna/NfGuIgwHwYDVR0j BBgwFoAUZLLbdwPFxWpvacR4mrn2khTyJpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjYyZDM0MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC82NEIyREI3NzAz QzVDNTZBNkY2OUM0Nzg5QUI5RjY5MjE0RjIyNjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIxNEYy MjY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2 OTIxNEYyMjY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvR5TZv43aMnJELe2z9F1y7INNjc9M0O61V 3ZLPLNHyZK/SELo1wCzrSdGjqBX5x+LxY8TtJvq14oZy+ufBOS5SCVJ31l+5PRTw 0KoQzwQsVEC9sMdF46PUPrbdniVf4/8XC8mSuhEQFRAftkABw25UlywQzNv3yDUn wzsbe2Z9jq0RoaVoBdGwho2QqDbabo3AJPPs2I+xC2L5n6g/7WQxUdI76gk7zLQi eK8HpInP3OTblfRDGTbKr4b45vk4gkqLeZfFw5vQZWdr1Co4TYirtrCrJ+A2drMh oX9DyU06qdw+R9oizSXXM/ZvoTYqHPEIwyvmREVbIHVleSMuBzQ= -----END CERTIFICATE-----Generated at Mon Mar 2 20:01:44 2026 by rpki-client