$ rpki-client -vvf repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft File: 64285236074D6BC2BB384B2D544C7F545C16CF31.mft (raw, json) Hash identifier: HuYW0ZbXr8ahldPrAcyRcasgPwlHs9Wzz/UZz7m4UQ0= Subject key identifier: 8F:D3:F4:2E:1E:8D:EA:98:83:8C:C2:10:CF:05:CE:94:CF:4E:A2:78 Authority key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 Certificate issuer: /CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Certificate serial: 71815A20CBA4E228D2176319490CB0BDAFF6F895 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft Manifest number: 021C Signing time: Mon 21 Jul 2025 00:01:28 +0000 Manifest this update: Sun 20 Jul 2025 23:56:28 +0000 Manifest next update: Thu 24 Jul 2025 04:07:28 +0000 Files and hashes: 1: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: wmIuzk0Oh9311GQSErNLF7rj7zFPZyoKari4za10W8M=) 2: 64285236074D6BC2BB384B2D544C7F545C16CF31.crl (hash: HAX/sBWkc8DKZ8Pfb+rQx1o6hk8OPdej32T8r9Xe1cc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 04:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:81:5a:20:cb:a4:e2:28:d2:17:63:19:49:0c:b0:bd:af:f6:f8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Validity Not Before: Jul 20 23:56:28 2025 GMT Not After : Jul 24 04:07:28 2025 GMT Subject: CN=8FD3F42E1E8DEA98838CC210CF05CE94CF4EA278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f4:d5:57:64:32:c1:82:fc:ff:df:b0:4a:d1: 86:f9:eb:9f:e6:3a:bb:d7:03:b4:08:1d:fb:de:24: 90:3a:6f:93:49:d3:89:1b:c2:c3:26:71:66:c6:a1: 93:35:a6:e9:c3:55:ce:db:10:46:7d:65:e4:4b:e1: d3:ac:78:73:6e:97:1f:ce:72:64:f6:5a:1c:88:9b: 56:56:86:d0:16:20:ba:9a:4f:e6:e4:88:42:f5:6e: 1c:46:cf:1d:6f:89:06:0c:00:c1:33:8f:bb:81:f3: e8:df:e9:59:10:29:a6:39:fe:1d:8f:c2:be:3b:67: 80:0b:c8:39:f9:30:a6:59:db:d7:10:a1:1b:f4:07: 9d:97:01:0e:e1:35:92:d7:aa:60:27:4b:de:97:37: f6:72:55:2d:68:4c:51:ad:c8:9f:b6:34:e5:7f:63: f9:ac:05:47:4c:e1:be:4e:6b:f3:c7:5c:97:d2:59: 41:01:f5:e6:6b:06:b4:3d:fa:5b:67:f1:b7:98:7b: 77:6f:07:01:ee:24:b1:2b:e7:cb:4e:c2:a2:53:f0: 85:a8:04:1d:7c:77:f6:7f:b8:c1:cf:ed:62:64:c5: a8:98:3c:1f:a3:12:19:71:11:a3:cf:b9:f5:ba:aa: d1:e6:92:b3:dc:32:f1:3b:27:b5:bd:af:01:33:d7: cd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D3:F4:2E:1E:8D:EA:98:83:8C:C2:10:CF:05:CE:94:CF:4E:A2:78 X509v3 Authority Key Identifier: keyid:64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e1:bd:e5:87:f7:77:b7:4f:07:87:c6:4b:6d:03:6f:9d:0c: 1b:88:4d:af:b2:9d:78:4e:b2:18:de:3f:76:cf:a2:d7:58:f0: c7:08:b1:98:50:7e:9f:4e:e7:89:d8:a3:03:0a:7f:ff:86:ea: f6:86:7c:c4:b8:cc:a3:82:68:0e:df:f9:46:81:ce:41:d5:38: 6c:37:8b:fc:74:89:7e:92:a8:dc:e0:0a:cb:75:f8:26:8c:bf: cf:5e:be:86:fa:29:b1:c7:d7:89:8f:d5:ec:8d:a0:a2:a4:07: ee:fd:65:1f:53:80:fe:6d:9c:0b:68:36:34:3f:71:98:75:1f: d5:bd:8a:70:d9:d9:08:b2:ed:f8:32:00:af:a0:4f:1c:8f:9a: 66:e2:0e:c3:5f:62:ca:8e:7e:2f:45:8c:68:7f:3d:85:8d:65: a9:bb:53:7c:d6:06:29:c3:28:73:0c:59:c1:2f:6d:7c:f2:c9: 22:55:05:2a:46:c1:5d:bb:6d:6f:27:c8:59:8c:c7:7d:37:51: 21:26:1e:73:94:51:d1:51:7b:06:2c:2f:82:93:b0:a5:e4:20: 39:71:c1:db:9e:b8:9e:ad:35:19:f9:a2:85:6e:e5:a9:5b:a4: da:f8:8f:9f:b8:83:45:77:50:48:1f:c2:84:84:7f:ee:78:8a: 5f:f8:d4:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcYFaIMuk4ijSF2MZSQywva/2+JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1 QzE2Q0YzMTAeFw0yNTA3MjAyMzU2MjhaFw0yNTA3MjQwNDA3MjhaMDMxMTAvBgNV BAMTKDhGRDNGNDJFMUU4REVBOTg4MzhDQzIxMENGMDVDRTk0Q0Y0RUEyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd9NVXZDLBgvz/37BK0Yb565/m OrvXA7QIHfveJJA6b5NJ04kbwsMmcWbGoZM1punDVc7bEEZ9ZeRL4dOseHNulx/O cmT2WhyIm1ZWhtAWILqaT+bkiEL1bhxGzx1viQYMAMEzj7uB8+jf6VkQKaY5/h2P wr47Z4ALyDn5MKZZ29cQoRv0B52XAQ7hNZLXqmAnS96XN/ZyVS1oTFGtyJ+2NOV/ Y/msBUdM4b5Oa/PHXJfSWUEB9eZrBrQ9+ltn8beYe3dvBwHuJLEr58tOwqJT8IWo BB18d/Z/uMHP7WJkxaiYPB+jEhlxEaPPufW6qtHmkrPcMvE7J7W9rwEz183LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj9P0Lh6N6piDjMIQzwXOlM9OongwHwYDVR0j BBgwFoAUZChSNgdNa8K7OEstVEx/VFwWzzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2MxOTdmOC00ZTJlLTQ2ZDktYmUyYi1lMzQ4YTEzM2RjNTcvMC82NDI4NTIzNjA3 NEQ2QkMyQkIzODRCMkQ1NDRDN0Y1NDVDMTZDRjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1QzE2 Q0YzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdG NTQ1QzE2Q0YzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjhveWH93e3TweHxkttA2+dDBuITa+ynXhO shjeP3bPotdY8McIsZhQfp9O54nYowMKf/+G6vaGfMS4zKOCaA7f+UaBzkHVOGw3 i/x0iX6SqNzgCst1+CaMv89evob6KbHH14mP1eyNoKKkB+79ZR9TgP5tnAtoNjQ/ cZh1H9W9inDZ2Qiy7fgyAK+gTxyPmmbiDsNfYsqOfi9FjGh/PYWNZam7U3zWBinD KHMMWcEvbXzyySJVBSpGwV27bW8nyFmMx303USEmHnOUUdFRewYsL4KTsKXkIDlx wdueuJ6tNRn5ooVu5albpNr4j5+4g0V3UEgfwoSEf+54il/41FE= -----END CERTIFICATE-----Generated at Mon Jul 21 07:31:46 2025 by rpki-client