$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: 3V5G0VRq6ayUGoSWgPY1vqoxfDH37Q9JPtyQctjzZTE= Subject key identifier: 96:F0:CB:73:43:C7:70:C1:B4:26:20:53:D4:81:01:00:66:9C:C2:92 Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 0FFC08FD15C9B0CBE333DA615731390D533BE3E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 01D3 Signing time: Sun 01 Mar 2026 22:02:36 +0000 Manifest this update: Sun 01 Mar 2026 21:57:36 +0000 Manifest next update: Wed 04 Mar 2026 22:57:36 +0000 Files and hashes: 1: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: eneF8PIBg2zQEo+KSGLFtss5hNaa6Co4sLJqDX/rS2s=) 2: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: FWPlMPHrqFoNNWPYTYDkvwMT0nqxPyPjTzrKzL7O4m4=) 3: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: n4N0hFQ/vvqlejLhB9JnzDV0h3HZbODWew6Ob6wqJn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fc:08:fd:15:c9:b0:cb:e3:33:da:61:57:31:39:0d:53:3b:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Mar 1 21:57:36 2026 GMT Not After : Mar 4 22:57:36 2026 GMT Subject: CN=96F0CB7343C770C1B4262053D4810100669CC292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:01:22:df:48:f4:ea:95:bf:69:d8:40:20: 10:cb:64:98:09:48:1b:fa:85:bb:5e:d4:5d:10:8d: eb:0a:ed:b2:59:15:55:9f:01:ad:15:cb:c6:16:bb: 31:1c:54:3c:88:26:08:6e:d7:7e:99:a1:8f:be:98: 68:c2:09:c0:88:08:cc:fa:a5:16:c4:d8:5f:31:cd: 5c:e5:06:84:5a:0e:00:9b:33:39:da:79:de:60:5e: 25:18:f3:2b:4c:fe:33:4d:2e:24:e8:dc:6f:14:4b: c7:30:4e:3c:5f:28:29:ab:8c:8e:0f:9e:16:73:41: ad:2c:76:48:d7:d7:e4:4f:bc:22:1c:50:02:cc:13: a7:07:a8:45:a8:83:42:5a:9a:3b:08:68:83:3b:f4: 52:1f:25:72:e1:35:c9:85:4a:b9:33:77:88:f5:8f: 7f:57:c4:2d:c5:51:bd:ef:2b:19:d8:d9:12:0b:69: b2:69:84:68:55:f2:d6:95:f2:71:f7:a1:19:95:31: 2a:6e:92:1e:72:79:ea:ab:60:e3:96:42:e8:07:83: 4e:39:c4:70:e8:d1:8f:3c:b0:ff:f5:8f:f2:ab:cf: a3:b0:45:39:44:5f:f7:10:e5:cb:c9:10:8e:5a:13: a7:22:a7:0c:d8:32:ec:0b:b0:09:58:aa:24:a6:60: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F0:CB:73:43:C7:70:C1:B4:26:20:53:D4:81:01:00:66:9C:C2:92 X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:20:52:c1:e0:f9:ef:97:ac:46:85:36:cc:2c:42:80:b4:26: c6:87:47:82:27:bd:5c:ab:05:9c:5b:cf:cf:70:d5:0b:f6:bc: 83:18:7c:87:35:0e:95:8f:59:b8:d6:23:39:41:a2:8b:26:c5: 4c:43:4f:a2:9a:c3:bb:9f:ea:0c:27:da:bf:8d:56:95:20:82: 40:f8:fa:61:a9:20:05:ba:c9:02:79:2c:c3:6f:d2:48:3e:02: ba:07:6b:9d:9d:cb:74:8f:c3:f8:66:78:04:94:7a:2a:85:76: d9:39:2e:79:6b:db:fe:91:c3:f5:d8:93:e8:da:6a:65:f4:71: 3d:dd:0e:90:83:e6:fb:05:c7:b9:2e:ef:df:28:68:03:44:cf: a3:18:05:d5:e8:cb:96:0e:ee:78:c6:3b:c1:ae:d6:7c:d0:42: a5:64:42:d0:c5:31:62:ad:8c:bf:b2:ea:9e:c6:c8:a8:cd:45: 9a:1f:22:f4:5c:01:de:e4:53:12:54:f8:bf:2a:91:bb:51:f6: fb:11:c3:2f:43:9e:54:9c:e5:f3:83:c0:b7:e0:df:7e:91:b0: 18:ce:c7:e5:8e:3a:64:13:6f:a3:d2:e3:04:9e:fa:c2:fb:72: ad:b6:01:6d:c9:69:f2:db:48:11:cb:af:46:8f:07:37:9c:83: 55:4c:03:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/wI/RXJsMvjM9phVzE5DVM74+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNjAzMDEyMTU3MzZaFw0yNjAzMDQyMjU3MzZaMDMxMTAvBgNV BAMTKDk2RjBDQjczNDNDNzcwQzFCNDI2MjA1M0Q0ODEwMTAwNjY5Q0MyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSAEi30j06pW/adhAIBDLZJgJ SBv6hbte1F0QjesK7bJZFVWfAa0Vy8YWuzEcVDyIJghu136ZoY++mGjCCcCICMz6 pRbE2F8xzVzlBoRaDgCbMznaed5gXiUY8ytM/jNNLiTo3G8US8cwTjxfKCmrjI4P nhZzQa0sdkjX1+RPvCIcUALME6cHqEWog0JamjsIaIM79FIfJXLhNcmFSrkzd4j1 j39XxC3FUb3vKxnY2RILabJphGhV8taV8nH3oRmVMSpukh5yeeqrYOOWQugHg045 xHDo0Y88sP/1j/Krz6OwRTlEX/cQ5cvJEI5aE6cipwzYMuwLsAlYqiSmYENhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlvDLc0PHcMG0JiBT1IEBAGacwpIwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQgUsHg+e+XrEaFNswsQoC0JsaHR4InvVyr BZxbz89w1Qv2vIMYfIc1DpWPWbjWIzlBoosmxUxDT6Kaw7uf6gwn2r+NVpUggkD4 +mGpIAW6yQJ5LMNv0kg+AroHa52dy3SPw/hmeASUeiqFdtk5Lnlr2/6Rw/XYk+ja amX0cT3dDpCD5vsFx7ku798oaANEz6MYBdXoy5YO7njGO8Gu1nzQQqVkQtDFMWKt jL+y6p7GyKjNRZofIvRcAd7kUxJU+L8qkbtR9vsRwy9DnlSc5fODwLfg336RsBjO x+WOOmQTb6PS4wSe+sL7cq22AW3JafLbSBHLr0aPBzecg1VMA6Q= -----END CERTIFICATE-----Generated at Mon Mar 2 16:53:19 2026 by rpki-client