$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: XhV0TjErh5jNW0hitCaf3WsjnReUxCBOdoJ5WMr+Ywk= Subject key identifier: F3:AF:AA:04:E1:A3:13:AC:C8:E4:A8:39:1F:BA:12:FE:B9:0B:44:19 Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 160E3411E2F1E87E7271E52CCB97FAADA50024B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 020A Signing time: Sun 01 Mar 2026 11:41:19 +0000 Manifest this update: Sun 01 Mar 2026 11:36:19 +0000 Manifest next update: Wed 04 Mar 2026 20:47:19 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=) 2: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=) 3: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: cw7I3oSDZj4kKt04S4noM8F5IhovYLavZnXIpgeauxw=) 4: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: ghssEE9zj9axglbKjUOvFcXIOFWwWgWFdjOGnyGNun8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0e:34:11:e2:f1:e8:7e:72:71:e5:2c:cb:97:fa:ad:a5:00:24:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Mar 1 11:36:19 2026 GMT Not After : Mar 4 20:47:19 2026 GMT Subject: CN=F3AFAA04E1A313ACC8E4A8391FBA12FEB90B4419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:a5:56:57:5d:8a:fd:b7:6e:78:e3:a0:89: dc:4d:f3:d1:a4:e8:a3:eb:96:c3:1e:55:c7:ce:81: ed:20:a0:98:3f:47:6c:6a:bb:69:72:55:7a:b6:e2: 04:de:0c:cf:dd:21:66:8f:ee:c4:d9:93:43:3e:f3: 8d:51:ca:c0:16:13:bf:39:5a:15:3f:1f:d9:a7:aa: 5c:05:ed:6e:0a:39:b5:16:17:ff:6e:d8:1b:be:7f: b3:c0:ad:c5:19:4a:bf:13:98:d3:93:d3:73:6e:23: 8a:d0:90:a5:56:1b:f4:d5:c1:9c:73:71:eb:79:f5: 55:69:77:70:27:30:6e:42:4c:d8:5f:8c:96:f8:a0: 8a:1b:84:a3:83:b4:d8:68:74:85:db:17:ac:85:bc: 28:54:4d:b6:9f:6e:0d:2e:46:00:07:26:58:f5:a8: 11:29:e0:90:88:db:4b:aa:a7:69:49:d0:ba:26:80: 96:83:8a:4a:95:41:77:88:0b:90:3b:7a:63:cb:62: 04:a2:ba:bc:7b:16:ff:a8:7e:fc:b6:f5:37:eb:fa: 5d:61:10:0d:cf:2d:3f:b8:10:e0:c7:ea:c9:cd:8f: 72:d6:1d:eb:c2:c2:70:7e:80:a3:73:1e:57:88:4c: 54:4a:6f:9e:bd:4b:b0:fc:a4:fc:a4:08:8c:c1:7c: 8e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AF:AA:04:E1:A3:13:AC:C8:E4:A8:39:1F:BA:12:FE:B9:0B:44:19 X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:4f:60:34:e5:35:0d:f3:5c:26:b7:fd:8d:48:17:1d:56:5b: 32:42:15:5f:79:56:ff:7e:b8:50:d9:09:ff:b9:d9:6a:7a:89: 07:e8:0a:4c:0c:13:74:34:90:ba:7a:15:db:71:5a:0e:b9:09: 32:74:c0:0c:22:c1:43:0c:a8:bc:67:56:f8:2d:60:df:63:e9: 15:5d:a9:c8:b7:1c:8e:b5:2d:9c:ef:92:e2:fe:a1:21:dd:8e: ab:f4:52:d6:08:2f:ec:3c:4e:96:7f:3f:30:b0:99:c1:f9:61: af:09:d2:e5:e3:36:76:76:51:11:03:6c:6a:97:79:9a:c1:95: ad:c5:e1:ad:22:31:8d:2c:0c:44:38:18:8e:33:c7:02:ba:5d: 98:9e:35:7c:90:c0:42:6d:6e:21:c6:a8:4e:54:03:f0:e1:17: fd:03:c1:86:c3:d9:cb:c3:e5:8f:62:4a:cc:33:72:e0:bc:af: 7d:d1:2f:d3:3f:1c:1b:b7:33:81:64:ea:9c:35:da:a0:fe:cf: 42:d4:28:57:e4:25:b8:22:54:3f:f7:01:22:f4:c1:dc:f4:12: 00:3f:c3:8f:59:23:49:36:a1:a8:f7:51:7b:38:ad:33:11:80: 75:0e:00:d3:90:e9:86:7f:aa:d1:50:c2:e4:fe:e8:40:fd:ec: 85:7c:79:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFg40EeLx6H5yceUsy5f6raUAJLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNjAzMDExMTM2MTlaFw0yNjAzMDQyMDQ3MTlaMDMxMTAvBgNV BAMTKEYzQUZBQTA0RTFBMzEzQUNDOEU0QTgzOTFGQkExMkZFQjkwQjQ0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5aVWV12K/bdueOOgidxN89Gk 6KPrlsMeVcfOge0goJg/R2xqu2lyVXq24gTeDM/dIWaP7sTZk0M+841RysAWE785 WhU/H9mnqlwF7W4KObUWF/9u2Bu+f7PArcUZSr8TmNOT03NuI4rQkKVWG/TVwZxz cet59VVpd3AnMG5CTNhfjJb4oIobhKODtNhodIXbF6yFvChUTbafbg0uRgAHJlj1 qBEp4JCI20uqp2lJ0LomgJaDikqVQXeIC5A7emPLYgSiurx7Fv+ofvy29Tfr+l1h EA3PLT+4EODH6snNj3LWHevCwnB+gKNzHleITFRKb569S7D8pPykCIzBfI7FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU86+qBOGjE6zI5Kg5H7oS/rkLRBkwHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpPYDTlNQ3zXCa3/Y1IFx1WWzJCFV95Vv9+ uFDZCf+52Wp6iQfoCkwME3Q0kLp6FdtxWg65CTJ0wAwiwUMMqLxnVvgtYN9j6RVd qci3HI61LZzvkuL+oSHdjqv0UtYIL+w8TpZ/PzCwmcH5Ya8J0uXjNnZ2UREDbGqX eZrBla3F4a0iMY0sDEQ4GI4zxwK6XZieNXyQwEJtbiHGqE5UA/DhF/0DwYbD2cvD 5Y9iSswzcuC8r33RL9M/HBu3M4Fk6pw12qD+z0LUKFfkJbgiVD/3ASL0wdz0EgA/ w49ZI0k2oaj3UXs4rTMRgHUOANOQ6YZ/qtFQwuT+6ED97IV8eWY= -----END CERTIFICATE-----Generated at Mon Mar 2 14:48:46 2026 by rpki-client