$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: c7pYYJhqFamZU9pDZaWi8zQHMUuZ7MXBAlvzbyz0yTk= Subject key identifier: 85:5E:C8:E4:10:7C:2E:F1:3A:84:21:81:64:97:04:64:96:0C:10:D3 Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 67172BF0E436AD5660C8906B0B1E1EDA3974CE69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 0163 Signing time: Sun 01 Mar 2026 02:31:07 +0000 Manifest this update: Sun 01 Mar 2026 02:26:07 +0000 Manifest next update: Wed 04 Mar 2026 11:00:07 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: Cx7dNdcRhlWsD3mGyu2G+tIweHrxywT0hS76XcV5HcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:17:2b:f0:e4:36:ad:56:60:c8:90:6b:0b:1e:1e:da:39:74:ce:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Mar 1 02:26:07 2026 GMT Not After : Mar 4 11:00:07 2026 GMT Subject: CN=855EC8E4107C2EF13A84218164970464960C10D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:34:04:d0:72:84:96:02:20:8c:f0:44:c6: 32:88:5c:2a:2a:95:34:64:6b:e2:29:fd:49:85:77: 62:7c:24:03:f1:e4:4b:91:57:45:9d:73:13:9c:5c: 1b:41:66:90:76:63:75:c9:00:15:b4:cc:d2:5b:13: ba:17:a8:cb:3f:0f:1c:b7:b9:55:9b:b3:2e:be:e0: 99:2e:fe:ea:31:02:35:61:74:e6:81:b3:63:88:6e: 4f:3d:1e:7c:52:4e:fd:a2:c3:4f:fe:b9:3c:25:46: d5:d7:24:d8:4b:a8:4b:1b:ec:28:36:a8:fa:10:6c: 6c:c2:c5:95:bc:83:b7:30:7f:48:c5:7d:31:6c:c9: d4:3b:d8:b9:6e:b3:c8:53:cc:9a:2c:94:f8:c8:9b: 44:72:7e:cf:cd:05:61:38:80:40:ef:e3:6f:21:6c: f5:8b:45:b8:44:77:3d:dc:92:13:73:83:3d:95:51: a9:cb:5d:9d:19:b8:35:1b:1f:6e:2a:05:b0:6b:ea: c4:54:70:fb:ad:85:aa:42:db:ac:4b:c6:5f:36:54: 81:6d:bc:47:f0:94:b2:17:55:19:c3:6d:8e:04:78: 2e:0b:3c:00:c9:7d:b3:a8:3c:0d:2d:ac:13:93:10: 39:c7:a4:cb:08:6f:68:f6:8f:65:5e:4b:ce:fe:dd: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5E:C8:E4:10:7C:2E:F1:3A:84:21:81:64:97:04:64:96:0C:10:D3 X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:15:9f:85:cd:58:07:5b:8d:b4:75:0f:06:78:13:cb:0d:72: 66:5c:51:5c:19:40:42:6e:bb:d6:2f:03:6f:67:8b:39:f0:ff: cc:08:c8:23:47:53:48:bd:32:17:8d:50:2a:1a:52:f1:a0:5d: 60:46:38:e0:07:14:6a:6f:89:77:f4:62:a7:15:d4:00:39:b3: 68:32:5f:e0:e1:bd:2b:bf:1f:e2:f7:1d:7e:e1:aa:a0:b1:9b: 43:5c:c4:c5:25:02:61:90:98:21:84:5a:40:1c:8d:a4:58:85: 5b:eb:af:46:98:cd:d8:f0:be:07:32:fe:e3:9f:84:47:c1:05: 20:a6:ee:6d:e0:d7:61:6d:aa:51:8b:48:f6:c6:77:0d:aa:2d: 09:35:29:78:89:64:f0:73:24:86:1e:c8:7a:4a:e4:73:ad:05: ff:9a:85:3e:92:33:ed:0f:b5:67:cb:9b:28:88:a4:22:71:3b: 07:eb:47:73:cf:14:07:b2:98:1e:08:57:90:ae:49:36:e9:e2: 4c:3e:30:89:c0:12:1b:cb:17:6d:48:ce:4a:e9:e8:26:61:22: 4d:41:ee:d2:37:1d:e8:64:93:6b:f1:c5:74:d7:90:67:c3:10: e1:de:f8:3f:83:fe:49:a7:c8:02:21:e9:13:1b:2f:87:2f:fb: 9c:46:24:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxcr8OQ2rVZgyJBrCx4e2jl0zmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNjAzMDEwMjI2MDdaFw0yNjAzMDQxMTAwMDdaMDMxMTAvBgNV BAMTKDg1NUVDOEU0MTA3QzJFRjEzQTg0MjE4MTY0OTcwNDY0OTYwQzEwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ATQE0HKElgIgjPBExjKIXCoq lTRka+Ip/UmFd2J8JAPx5EuRV0WdcxOcXBtBZpB2Y3XJABW0zNJbE7oXqMs/Dxy3 uVWbsy6+4Jku/uoxAjVhdOaBs2OIbk89HnxSTv2iw0/+uTwlRtXXJNhLqEsb7Cg2 qPoQbGzCxZW8g7cwf0jFfTFsydQ72Llus8hTzJoslPjIm0Ryfs/NBWE4gEDv428h bPWLRbhEdz3ckhNzgz2VUanLXZ0ZuDUbH24qBbBr6sRUcPuthapC26xLxl82VIFt vEfwlLIXVRnDbY4EeC4LPADJfbOoPA0trBOTEDnHpMsIb2j2j2VeS87+3TLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhV7I5BB8LvE6hCGBZJcEZJYMENMwHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMVn4XNWAdbjbR1DwZ4E8sNcmZcUVwZQEJu u9YvA29niznw/8wIyCNHU0i9MheNUCoaUvGgXWBGOOAHFGpviXf0YqcV1AA5s2gy X+DhvSu/H+L3HX7hqqCxm0NcxMUlAmGQmCGEWkAcjaRYhVvrr0aYzdjwvgcy/uOf hEfBBSCm7m3g12FtqlGLSPbGdw2qLQk1KXiJZPBzJIYeyHpK5HOtBf+ahT6SM+0P tWfLmyiIpCJxOwfrR3PPFAeymB4IV5CuSTbp4kw+MInAEhvLF21Izkrp6CZhIk1B 7tI3Hehkk2vxxXTXkGfDEOHe+D+D/kmnyAIh6RMbL4cv+5xGJL8= -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:52 2026 by rpki-client