$ rpki-client -vvf repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft File: E64D2B2A02A172B64A71F75C753571C841216A21.mft (raw, json) Hash identifier: UXDl4h3ZBL3OmuF3EdnyAU/sT3dgiiM4WzXUMFebk0M= Subject key identifier: B0:A6:97:B1:7A:FA:66:3A:FA:07:3C:EA:D6:93:CB:02:21:C6:DD:30 Authority key identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 Certificate issuer: /CN=E64D2B2A02A172B64A71F75C753571C841216A21 Certificate serial: 51CD4EFAC55EF62FE7B03E8C238E4C99986E0ED9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft Manifest number: 99 Signing time: Sun 20 Jul 2025 14:20:48 +0000 Manifest this update: Sun 20 Jul 2025 14:15:48 +0000 Manifest next update: Wed 23 Jul 2025 22:17:48 +0000 Files and hashes: 1: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: 3wY6YhGHW2FNk89iUabtEb3voGoMeSvrsN+5cal1TNI=) 2: E64D2B2A02A172B64A71F75C753571C841216A21.crl (hash: pA+m3mgHx6q2sWMefDCgzrmUu+Ir+TL6PaFQw167WRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:cd:4e:fa:c5:5e:f6:2f:e7:b0:3e:8c:23:8e:4c:99:98:6e:0e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E64D2B2A02A172B64A71F75C753571C841216A21 Validity Not Before: Jul 20 14:15:48 2025 GMT Not After : Jul 23 22:17:48 2025 GMT Subject: CN=B0A697B17AFA663AFA073CEAD693CB0221C6DD30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:b9:b6:8f:94:5a:5f:9c:b2:10:97:1b:b5: d7:cd:8d:dd:68:a4:00:2d:cf:64:55:be:88:6f:49: 5a:fe:a3:58:d0:54:80:ba:17:e7:f7:8b:75:c7:00: 3b:80:03:67:70:b2:45:48:12:0b:4d:3c:37:79:a9: 52:0b:2b:98:4c:d2:c8:9e:81:23:58:b9:0d:8a:21: 1a:47:56:51:65:14:fb:05:70:02:24:f5:72:8b:60: a0:13:5e:89:2c:5d:6c:b1:96:2f:e1:52:46:aa:22: 36:6e:d5:97:5a:9b:23:c3:b1:d3:55:6f:24:90:9a: d1:19:50:da:71:58:7c:6c:d2:37:89:03:0f:53:9b: 3e:ff:db:35:5a:83:c2:7d:21:a1:48:8e:bf:58:f0: 11:e3:29:0c:7e:b0:5e:50:e8:cc:94:96:df:ad:89: 1c:a6:0c:f7:93:26:0c:2a:8c:de:1b:5d:9e:7d:b3: d8:ef:23:3a:8b:7b:76:2f:e7:40:24:fa:98:4e:5b: 74:cb:52:98:d9:63:d8:44:45:b3:eb:e1:7b:31:f1: 9b:d3:55:15:38:62:c5:02:f3:32:eb:70:45:10:c6: a2:5a:38:70:32:37:49:ff:c6:fb:8a:a1:bd:13:8a: 49:a1:07:4c:64:43:4b:f1:db:7b:24:62:cf:66:92: 21:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A6:97:B1:7A:FA:66:3A:FA:07:3C:EA:D6:93:CB:02:21:C6:DD:30 X509v3 Authority Key Identifier: keyid:E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a9:5c:48:77:90:8f:13:75:66:f5:d2:a2:a3:22:f0:36:ad: 9d:8e:db:d7:21:fa:78:9d:bb:6c:65:fd:3a:13:74:b3:1a:fd: 09:e3:c4:e8:8b:3e:14:86:03:33:87:30:15:43:f8:9c:d8:e0: df:cd:c9:31:48:56:e5:d1:be:84:6c:fa:37:85:5c:b7:6f:8f: db:78:5c:09:03:95:ef:c5:a1:07:03:37:9b:e6:23:1a:45:83: 25:22:76:c2:37:f1:c9:ba:86:05:8e:23:0c:3e:0e:62:73:d5: 5c:a6:b9:d2:94:33:8a:98:74:f0:68:c5:dd:dc:b7:4f:36:7d: 1b:c1:f5:11:32:17:3f:ab:b4:5a:79:36:82:db:d5:8a:1a:87: 7c:51:55:8c:4d:a3:6d:2e:ce:45:69:3a:8a:f2:84:37:4c:9a: 50:b7:a0:8c:6e:18:b6:b1:31:25:03:16:a5:5b:89:9f:86:96: 01:63:e9:71:27:53:f7:48:8e:07:86:39:4e:c6:33:6b:7f:3c: 80:c9:b5:48:38:bb:b1:f7:56:8e:d4:c6:d7:59:ab:fa:32:ba: 1c:8c:08:02:5e:15:68:17:d2:5b:6e:71:65:96:d5:04:38:f2: b3:e6:cc:26:18:ad:0c:14:41:58:8c:6a:36:42:6f:1e:1b:c9: 79:ae:45:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUc1O+sVe9i/nsD6MI45MmZhuDtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0 MTIxNkEyMTAeFw0yNTA3MjAxNDE1NDhaFw0yNTA3MjMyMjE3NDhaMDMxMTAvBgNV BAMTKEIwQTY5N0IxN0FGQTY2M0FGQTA3M0NFQUQ2OTNDQjAyMjFDNkREMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHLm2j5RaX5yyEJcbtdfNjd1o pAAtz2RVvohvSVr+o1jQVIC6F+f3i3XHADuAA2dwskVIEgtNPDd5qVILK5hM0sie gSNYuQ2KIRpHVlFlFPsFcAIk9XKLYKATXoksXWyxli/hUkaqIjZu1ZdamyPDsdNV bySQmtEZUNpxWHxs0jeJAw9Tmz7/2zVag8J9IaFIjr9Y8BHjKQx+sF5Q6MyUlt+t iRymDPeTJgwqjN4bXZ59s9jvIzqLe3Yv50Ak+phOW3TLUpjZY9hERbPr4Xsx8ZvT VRU4YsUC8zLrcEUQxqJaOHAyN0n/xvuKob0TikmhB0xkQ0vx23skYs9mkiHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsKaXsXr6Zjr6Bzzq1pPLAiHG3TAwHwYDVR0j BBgwFoAU5k0rKgKhcrZKcfdcdTVxyEEhaiEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Njc1MGJmOS05ZjU4LTQyOGEtODk1Mi04YjU1NTVlZjdjYTcvMC9FNjREMkIyQTAy QTE3MkI2NEE3MUY3NUM3NTM1NzFDODQxMjE2QTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0MTIx NkEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcx Qzg0MTIxNkEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOpXEh3kI8TdWb10qKjIvA2rZ2O29ch+nid u2xl/ToTdLMa/QnjxOiLPhSGAzOHMBVD+JzY4N/NyTFIVuXRvoRs+jeFXLdvj9t4 XAkDle/FoQcDN5vmIxpFgyUidsI38cm6hgWOIww+DmJz1VymudKUM4qYdPBoxd3c t082fRvB9REyFz+rtFp5NoLb1Yoah3xRVYxNo20uzkVpOoryhDdMmlC3oIxuGLax MSUDFqVbiZ+GlgFj6XEnU/dIjgeGOU7GM2t/PIDJtUg4u7H3Vo7UxtdZq/oyuhyM CAJeFWgX0ltucWWW1QQ48rPmzCYYrQwUQViMajZCbx4byXmuRZ8= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:00 2025 by rpki-client