$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: 1j4LrlX2LGQ6KPTTpQcWqYck7ltskkVd8BdsV/5AL/w= Subject key identifier: EF:BE:13:3C:62:70:39:62:AC:47:EE:65:E6:0F:5F:AA:65:AC:1D:8F Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 649C0DDCB4348A3D51FD773FDAFC5BB4613B0E7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 01E8 Signing time: Fri 17 Apr 2026 14:42:37 +0000 Manifest this update: Fri 17 Apr 2026 14:37:37 +0000 Manifest next update: Mon 20 Apr 2026 19:33:37 +0000 Files and hashes: 1: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: n4N0hFQ/vvqlejLhB9JnzDV0h3HZbODWew6Ob6wqJn4=) 2: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: 369WkRasS2VxVmTyl6PraGGo3NYjUFInwaEPEHkkv4c=) 3: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: FWPlMPHrqFoNNWPYTYDkvwMT0nqxPyPjTzrKzL7O4m4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9c:0d:dc:b4:34:8a:3d:51:fd:77:3f:da:fc:5b:b4:61:3b:0e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Apr 17 14:37:37 2026 GMT Not After : Apr 20 19:33:37 2026 GMT Subject: CN=EFBE133C62703962AC47EE65E60F5FAA65AC1D8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e3:f8:32:6f:76:3c:ef:b0:0b:88:c8:98:db: a4:af:8c:da:ab:e1:0e:1e:e4:74:39:00:06:3e:a7: 14:89:3d:a8:27:39:85:b6:91:9a:b0:16:0d:5f:eb: 05:40:6b:bd:21:2b:1a:91:e2:a2:54:3c:e3:ab:b8: 74:01:79:8a:27:9e:b1:07:07:57:3b:7a:7e:b4:9e: 6a:aa:56:13:db:c0:a1:46:35:34:9a:72:ee:d4:2e: e4:ff:34:6d:96:f2:a8:06:1c:70:6e:bf:69:bb:5a: 95:95:16:7d:07:4a:ae:5f:f3:a8:94:94:75:3f:dc: 25:4e:05:47:ce:21:3b:60:3c:35:57:5d:a0:1e:46: 3b:45:5a:26:66:23:68:4e:9f:21:35:35:b4:39:f6: 25:86:95:70:ea:0b:c3:23:ad:90:29:fe:6b:23:f3: 38:03:a3:14:ce:ad:d4:88:88:05:52:b0:15:50:61: 28:05:0e:22:08:7b:69:39:77:ff:bb:08:ab:72:17: 4b:43:b2:0c:cf:40:23:6d:bc:e7:ec:19:c0:b1:92: be:ca:dc:06:7e:ba:5b:97:76:27:46:ef:03:0f:2e: 28:35:fe:de:eb:60:7d:7b:8c:c0:f2:9d:a8:80:04: 5b:6c:ff:70:9e:ea:fb:0a:cd:e7:b3:39:0b:ac:05: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BE:13:3C:62:70:39:62:AC:47:EE:65:E6:0F:5F:AA:65:AC:1D:8F X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:66:31:c0:3b:73:de:02:73:f2:70:f9:15:58:91:dc:b9:3c: d4:89:62:62:22:da:d6:d4:b8:9e:7a:4e:bb:14:c9:cd:08:2f: ec:e9:ca:01:34:1f:6d:97:e7:2d:94:00:37:45:9a:16:de:b3: df:6e:a9:0e:db:bc:95:55:70:25:c1:f0:69:d7:f7:98:11:6a: 6c:0a:ee:15:4d:58:b6:34:2b:52:17:dd:0c:3f:ee:00:9e:8a: 81:b0:a4:b5:bf:fe:b4:c9:2f:c6:71:9a:90:ae:dc:c0:a7:aa: 43:96:f0:36:e2:b9:d2:f8:fb:d6:83:a6:e9:af:63:bb:5c:f5: e6:92:b4:12:83:32:02:db:ba:2b:4f:60:ca:5a:78:cb:1e:ad: cf:bb:ed:4b:7e:7f:db:6b:c7:69:92:e7:a6:60:fc:3d:1b:10: 47:0c:79:50:8f:13:f1:45:eb:14:5a:dc:03:b3:3e:11:a4:fa: 94:07:5c:a0:84:d3:4f:16:94:6f:9d:0a:80:aa:36:70:9d:22: b0:6f:50:c1:30:65:fc:2e:b2:f9:2e:6d:49:29:4e:93:04:da: 20:32:e7:94:b1:ce:c0:3e:f7:b1:07:87:62:fc:2f:47:3d:b7: 99:20:ce:8f:60:9f:7b:5f:cd:95:94:90:d3:37:53:01:98:07: 01:9e:c1:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJwN3LQ0ij1R/Xc/2vxbtGE7Dn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNjA0MTcxNDM3MzdaFw0yNjA0MjAxOTMzMzdaMDMxMTAvBgNV BAMTKEVGQkUxMzNDNjI3MDM5NjJBQzQ3RUU2NUU2MEY1RkFBNjVBQzFEOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq4/gyb3Y877ALiMiY26SvjNqr 4Q4e5HQ5AAY+pxSJPagnOYW2kZqwFg1f6wVAa70hKxqR4qJUPOOruHQBeYonnrEH B1c7en60nmqqVhPbwKFGNTSacu7ULuT/NG2W8qgGHHBuv2m7WpWVFn0HSq5f86iU lHU/3CVOBUfOITtgPDVXXaAeRjtFWiZmI2hOnyE1NbQ59iWGlXDqC8MjrZAp/msj 8zgDoxTOrdSIiAVSsBVQYSgFDiIIe2k5d/+7CKtyF0tDsgzPQCNtvOfsGcCxkr7K 3AZ+uluXdidG7wMPLig1/t7rYH17jMDynaiABFts/3Ce6vsKzeezOQusBWt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU774TPGJwOWKsR+5l5g9fqmWsHY8wHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItmMcA7c94Cc/Jw+RVYkdy5PNSJYmIi2tbU uJ56TrsUyc0IL+zpygE0H22X5y2UADdFmhbes99uqQ7bvJVVcCXB8GnX95gRamwK 7hVNWLY0K1IX3Qw/7gCeioGwpLW//rTJL8ZxmpCu3MCnqkOW8DbiudL4+9aDpumv Y7tc9eaStBKDMgLbuitPYMpaeMserc+77Ut+f9trx2mS56Zg/D0bEEcMeVCPE/FF 6xRa3AOzPhGk+pQHXKCE008WlG+dCoCqNnCdIrBvUMEwZfwusvkubUkpTpME2iAy 55SxzsA+97EHh2L8L0c9t5kgzo9gn3tfzZWUkNM3UwGYBwGewfA= -----END CERTIFICATE-----Generated at Sun Apr 19 11:40:06 2026 by rpki-client