$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: khVvD6zg4qpBqpwAytmLjXCGy+OI2juTpwzqmd4K2Ig= Subject key identifier: 52:9E:05:1E:06:24:0B:A7:01:2D:55:BD:42:90:E6:4A:F0:2F:AD:ED Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 1374DCF8FC8D106A6AB7E826A3CBE3649EB62AC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 0165 Signing time: Mon 21 Jul 2025 00:21:56 +0000 Manifest this update: Mon 21 Jul 2025 00:16:56 +0000 Manifest next update: Thu 24 Jul 2025 05:19:56 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=) 2: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=) 3: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: BfFFVGS5p6T1U2TaBAf8div1iWphHqQU1lBfnNo9xw0=) 4: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:74:dc:f8:fc:8d:10:6a:6a:b7:e8:26:a3:cb:e3:64:9e:b6:2a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Jul 21 00:16:56 2025 GMT Not After : Jul 24 05:19:56 2025 GMT Subject: CN=529E051E06240BA7012D55BD4290E64AF02FADED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:bb:02:74:98:ad:d8:c1:7c:a9:94:45:9c: ec:39:ad:89:61:2f:3e:7b:93:ab:1c:34:bd:2a:6f: b4:31:67:8f:e4:1a:15:c3:52:f9:e1:a3:fd:fd:19: 60:84:5b:52:8f:de:27:31:a4:f9:58:7c:8e:bd:31: 5e:b4:f4:73:81:a4:21:5c:13:62:a4:af:90:06:7b: 55:d1:8a:15:e8:9b:73:73:05:40:a3:44:1e:1f:81: 80:e9:45:68:fe:fb:e9:b1:de:ad:e0:1a:be:50:54: 32:fe:ee:e0:bb:70:5a:aa:e4:9b:81:83:42:9c:33: 34:7b:e4:49:d7:63:83:ab:56:63:12:b4:1d:55:83: b1:3e:e9:a4:9d:01:00:92:c7:1c:09:66:c1:f4:6d: e8:f0:b4:ed:00:e6:94:bc:77:38:58:f0:fd:f4:d2: b9:e7:cd:c8:f2:b3:9a:c8:5b:51:9a:92:25:90:56: a6:23:aa:28:eb:cd:56:48:e2:18:d8:8e:70:43:26: be:ef:2b:d5:1f:4b:a0:0b:2f:4b:cd:06:fe:89:fe: 37:07:3d:b8:61:7e:a0:1a:0d:fe:3d:47:a2:3d:54: 60:7a:3a:f2:b9:1b:5f:bb:13:f1:26:06:3a:f6:69: 5b:b7:8c:b8:b3:36:71:73:2b:0a:a4:ad:ab:f0:f4: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9E:05:1E:06:24:0B:A7:01:2D:55:BD:42:90:E6:4A:F0:2F:AD:ED X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ee:3a:b1:f5:4e:84:7e:98:aa:43:ef:f4:84:0c:7f:6f:cc: fb:dd:5e:ed:f7:ea:56:af:3e:a7:3d:c7:ab:ce:8d:f3:bf:29: f9:bc:c2:bd:9a:8d:b5:c7:a0:3a:07:b5:35:1d:31:25:c0:6f: 8f:15:b1:34:21:97:6d:43:c9:e0:56:0b:45:75:28:db:99:b5: 42:20:fe:a5:c2:00:3c:47:0b:03:53:b5:15:4f:41:28:7a:46: a2:6b:fa:37:87:d5:79:5e:b4:6f:71:a6:8a:c4:41:80:90:5c: d7:99:37:85:a0:b4:97:b4:75:9f:2b:fb:d3:4c:8b:72:5f:03: a5:d3:97:6d:9e:22:46:1d:53:97:52:f5:f4:8a:3b:53:ba:ef: 5d:28:c1:4e:0e:20:33:28:45:9f:52:b5:18:27:bd:18:60:11: d0:2c:f8:2b:ac:75:11:81:d0:4a:20:2d:ae:de:a9:00:d5:0b: aa:52:33:cf:63:c6:ae:84:70:51:b6:76:23:ca:8a:b3:e9:a8: 59:6e:2d:bf:68:c6:87:68:71:82:aa:b8:02:09:8b:cc:7f:e7: 50:83:f8:43:7b:39:c2:06:31:87:ba:86:99:ff:94:0a:1c:e7: e9:ce:2c:fd:ee:9f:ae:d5:ba:3b:e3:71:85:ae:36:3a:18:e5: 73:f5:ab:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3Tc+PyNEGpqt+gmo8vjZJ62KscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTA3MjEwMDE2NTZaFw0yNTA3MjQwNTE5NTZaMDMxMTAvBgNV BAMTKDUyOUUwNTFFMDYyNDBCQTcwMTJENTVCRDQyOTBFNjRBRjAyRkFERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/p7sCdJit2MF8qZRFnOw5rYlh Lz57k6scNL0qb7QxZ4/kGhXDUvnho/39GWCEW1KP3icxpPlYfI69MV609HOBpCFc E2Kkr5AGe1XRihXom3NzBUCjRB4fgYDpRWj+++mx3q3gGr5QVDL+7uC7cFqq5JuB g0KcMzR75EnXY4OrVmMStB1Vg7E+6aSdAQCSxxwJZsH0bejwtO0A5pS8dzhY8P30 0rnnzcjys5rIW1GakiWQVqYjqijrzVZI4hjYjnBDJr7vK9UfS6ALL0vNBv6J/jcH PbhhfqAaDf49R6I9VGB6OvK5G1+7E/EmBjr2aVu3jLizNnFzKwqkravw9BHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUp4FHgYkC6cBLVW9QpDmSvAvre0wHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAruOrH1ToR+mKpD7/SEDH9vzPvdXu336lav Pqc9x6vOjfO/Kfm8wr2ajbXHoDoHtTUdMSXAb48VsTQhl21DyeBWC0V1KNuZtUIg /qXCADxHCwNTtRVPQSh6RqJr+jeH1XletG9xporEQYCQXNeZN4WgtJe0dZ8r+9NM i3JfA6XTl22eIkYdU5dS9fSKO1O6710owU4OIDMoRZ9StRgnvRhgEdAs+CusdRGB 0EogLa7eqQDVC6pSM89jxq6EcFG2diPKirPpqFluLb9oxodocYKquAIJi8x/51CD +EN7OcIGMYe6hpn/lAoc5+nOLP3un67VujvjcYWuNjoY5XP1q5c= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:53 2025 by rpki-client