$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft File: 645C9D445B2796662EE98A03E50C124F3E962CAB.mft (raw, json) Hash identifier: LVSK7NU+hB8i9SDWRw6MrSnia2cjAPZnoTyptwBV448= Subject key identifier: 60:79:35:F4:85:CA:93:A4:9C:9C:11:6C:F9:D5:EC:83:9A:A9:83:CB Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB Certificate serial: 6BC9DC0F94AC93CC325C72B39A366C942B6BBA2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft Manifest number: 0393 Signing time: Tue 22 Jul 2025 16:01:05 +0000 Manifest this update: Tue 22 Jul 2025 15:56:05 +0000 Manifest next update: Sat 26 Jul 2025 00:54:05 +0000 Files and hashes: 1: 323430313a626534303a3a2f33322d3332203d3e20313336383431.roa (hash: fqov0BDCIixBi9VcnBXwyfgiMxOlqrXxcfdLtIYOthI=) 2: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: qbkH1qedbuL2nkb9oW2AlysgwJB8XaNgGrzurioAZP0=) 3: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: Yo/r10NdHpCyWdp4iTpRbnPv2TKKyCyVTnBiO8AmbDc=) 4: 645C9D445B2796662EE98A03E50C124F3E962CAB.crl (hash: 4i1Zo+9XFtryr8aCRl4Q0afCwAZLN8/wmWMBXgDapRE=) 5: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: pfMM3/ygiEY34vdGoVOYeg8tWN4ZaCnJmX0NJOGEX00=) 6: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: ehP408+CXUe13X4F5TvwPj6ddCoH7T+4InUUhWjVyGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c9:dc:0f:94:ac:93:cc:32:5c:72:b3:9a:36:6c:94:2b:6b:ba:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB Validity Not Before: Jul 22 15:56:05 2025 GMT Not After : Jul 26 00:54:05 2025 GMT Subject: CN=607935F485CA93A49C9C116CF9D5EC839AA983CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:53:56:6e:7f:43:d8:3b:28:57:da:8d:ef: a6:6f:6f:5b:de:71:dd:4a:3b:06:ca:f8:27:2b:5b: ce:a7:9a:6e:6e:a0:a7:d0:2c:fd:83:66:68:22:0e: 09:49:99:43:1c:2c:26:90:39:27:25:bd:a4:bc:99: a7:90:27:d2:2a:a9:f2:ff:2a:d9:6e:73:21:df:53: c2:1c:51:02:d6:57:6e:1e:21:54:cd:c6:07:aa:24: b9:f9:9e:34:a9:27:e6:22:72:d5:c9:9d:a9:83:98: 88:1c:f6:c7:1d:f3:7d:f4:6f:02:5f:26:0c:71:51: 53:ea:f3:ed:51:f8:04:bb:ca:64:b6:c0:9b:a9:6e: 04:06:6b:83:0a:90:61:26:4e:e9:6f:7c:0f:25:44: 49:ce:18:3d:6c:c7:4c:c6:d7:e3:1a:0b:c0:59:78: 1d:27:73:24:2b:09:df:cd:9b:ca:a7:82:72:fe:63: ac:ac:bb:90:23:40:9a:d0:fb:4b:15:90:c9:89:d6: 66:ec:87:68:6e:a6:c3:44:51:e7:cf:4b:c6:9d:9a: 1f:84:da:7b:74:29:37:95:0e:87:c9:43:03:60:29: 8d:66:b6:2c:60:79:38:75:15:60:f0:b8:d7:c5:f1: 66:eb:83:5b:2d:80:4b:dc:be:05:44:fe:34:34:29: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:79:35:F4:85:CA:93:A4:9C:9C:11:6C:F9:D5:EC:83:9A:A9:83:CB X509v3 Authority Key Identifier: keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:42:15:13:6e:d7:08:97:85:54:57:b5:f3:91:30:e3:24:82: 97:0e:c9:65:cd:92:79:c0:b1:14:8c:bd:17:83:2c:ff:68:59: 2b:70:6f:6f:a8:0f:68:ab:39:23:c1:7b:04:2a:e6:13:f3:f0: b6:8e:2a:12:78:b8:d7:45:fb:27:9a:57:a6:42:9d:59:80:5d: c5:a4:ae:a7:08:e6:74:19:52:f9:2e:a8:8a:6f:31:d5:1b:f7: e5:7a:20:1d:b1:21:8f:75:c1:32:7b:b9:4f:96:a6:2e:d6:11: 0f:76:a2:cc:0f:2b:a9:54:d7:e7:84:59:90:f9:e8:4a:b9:72: 4b:ad:ef:6b:66:25:01:9e:79:91:c1:4e:5d:c6:8b:77:78:a2: 66:fe:1c:d0:37:c6:5d:b0:9e:fe:ff:cd:56:ac:6c:e5:24:66: 6d:23:ed:12:6a:39:03:70:32:26:aa:82:2c:ec:22:16:0c:4c: f1:94:f1:87:3d:e1:bf:96:1d:f4:c0:18:0b:11:eb:2e:77:a8: 98:2c:07:e3:07:14:d5:9e:0d:43:d7:33:90:9d:05:27:ed:71: 4a:40:ac:aa:26:3a:19:ca:55:91:d8:f3:6f:e7:29:e5:d5:1b: 3f:c7:a0:1c:f3:d7:bc:35:69:5f:22:e7:24:d2:2b:77:1d:65: 40:28:10:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa8ncD5Ssk8wyXHKzmjZslCtruiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYz RTk2MkNBQjAeFw0yNTA3MjIxNTU2MDVaFw0yNTA3MjYwMDU0MDVaMDMxMTAvBgNV BAMTKDYwNzkzNUY0ODVDQTkzQTQ5QzlDMTE2Q0Y5RDVFQzgzOUFBOTgzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMaVNWbn9D2DsoV9qN76Zvb1ve cd1KOwbK+CcrW86nmm5uoKfQLP2DZmgiDglJmUMcLCaQOSclvaS8maeQJ9IqqfL/ KtlucyHfU8IcUQLWV24eIVTNxgeqJLn5njSpJ+YictXJnamDmIgc9scd8330bwJf JgxxUVPq8+1R+AS7ymS2wJupbgQGa4MKkGEmTulvfA8lREnOGD1sx0zG1+MaC8BZ eB0ncyQrCd/Nm8qngnL+Y6ysu5AjQJrQ+0sVkMmJ1mbsh2hupsNEUefPS8admh+E 2nt0KTeVDofJQwNgKY1mtixgeTh1FWDwuNfF8Wbrg1stgEvcvgVE/jQ0KSqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYHk19IXKk6ScnBFs+dXsg5qpg8swHwYDVR0j BBgwFoAUZFydRFsnlmYu6YoD5QwSTz6WLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC82NDVDOUQ0NDVC Mjc5NjY2MkVFOThBMDNFNTBDMTI0RjNFOTYyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYzRTk2 MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEy NEYzRTk2MkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1CFRNu1wiXhVRXtfORMOMkgpcOyWXNknnA sRSMvReDLP9oWStwb2+oD2irOSPBewQq5hPz8LaOKhJ4uNdF+yeaV6ZCnVmAXcWk rqcI5nQZUvkuqIpvMdUb9+V6IB2xIY91wTJ7uU+Wpi7WEQ92oswPK6lU1+eEWZD5 6Eq5ckut72tmJQGeeZHBTl3Gi3d4omb+HNA3xl2wnv7/zVasbOUkZm0j7RJqOQNw MiaqgizsIhYMTPGU8Yc94b+WHfTAGAsR6y53qJgsB+MHFNWeDUPXM5CdBSftcUpA rKomOhnKVZHY82/nKeXVGz/HoBzz17w1aV8i5yTSK3cdZUAoEO0= -----END CERTIFICATE-----Generated at Wed Jul 23 12:47:23 2025 by rpki-client