$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json) Hash identifier: 0hJ9XkdvxdCFiY/KHXJWjC7GAUzZ8x4o4cW1YplEBtw= Subject key identifier: 7B:27:DF:36:52:20:9E:5F:9A:EB:0B:26:C0:4A:67:DF:E6:E1:D8:9B Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Certificate serial: 08A8F7B4922D7DD55F36259D05807BE7E5AF8142 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft Manifest number: 0165 Signing time: Sat 19 Jul 2025 19:11:10 +0000 Manifest this update: Sat 19 Jul 2025 19:06:10 +0000 Manifest next update: Tue 22 Jul 2025 20:54:10 +0000 Files and hashes: 1: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: gEbq5i71rvXcTbKWrG38uKMD3qJ+e8f+e50+BPxKCks=) 2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: PRtjDQLWn7DOhqpJ6ZyrW9FMpW7szF9MrVItEP9hNn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a8:f7:b4:92:2d:7d:d5:5f:36:25:9d:05:80:7b:e7:e5:af:81:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Validity Not Before: Jul 19 19:06:10 2025 GMT Not After : Jul 22 20:54:10 2025 GMT Subject: CN=7B27DF3652209E5F9AEB0B26C04A67DFE6E1D89B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:4d:e5:f1:f2:d9:53:54:e1:08:18:8f:54: d5:6c:93:a4:71:9d:e5:c0:74:be:c0:78:72:9b:b3: 2c:6f:29:1f:46:58:a8:11:bf:52:18:b6:1e:5e:4c: f3:b5:2b:85:ef:bf:b5:ba:fd:dd:e0:e6:f2:44:f5: 73:cb:40:8a:a7:96:a6:3c:51:68:e8:c0:f3:46:71: ad:0c:d8:72:86:85:1a:0c:7f:c3:5e:73:86:95:b2: 00:b7:59:f7:60:d0:91:77:65:3d:a2:6f:6d:b3:d8: 7d:46:f7:71:f2:49:d0:a2:93:ce:0e:df:93:b8:90: cf:c4:3e:a4:60:49:66:99:f9:c0:fa:0f:46:01:91: ec:cd:ec:9e:41:f5:fb:d5:42:f7:39:04:66:65:4a: c4:1c:cf:04:26:c0:8b:36:a1:21:42:c5:73:6d:82: 2f:88:d0:39:05:fb:d3:dd:54:2a:e8:27:c5:87:81: ad:1a:9e:bc:ef:8c:18:77:79:f8:1a:47:0c:4b:7e: 47:ba:32:61:f8:da:00:07:19:ab:d8:f7:26:ee:9c: 5c:0d:22:08:85:29:3a:c2:4e:c2:70:38:43:85:d1: 27:d2:1d:76:f5:6a:7a:e8:bd:7f:5b:10:c5:d0:a5: d2:11:23:67:50:ad:8f:16:d8:75:c6:3a:b9:71:79: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:27:DF:36:52:20:9E:5F:9A:EB:0B:26:C0:4A:67:DF:E6:E1:D8:9B X509v3 Authority Key Identifier: keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:33:ac:e7:e3:77:93:9a:0a:17:26:a5:de:15:23:52:91:8a: c2:24:ed:fa:2c:87:94:4e:37:37:e3:db:89:c0:99:98:4e:18: 22:c9:43:06:e7:6e:57:22:6e:ef:ab:7c:ef:73:e4:d0:47:a1: 22:e8:a0:af:24:37:12:4d:b0:0f:97:86:9f:6e:9f:8c:27:b0: 6f:ba:c2:8b:40:be:12:fb:04:a8:69:c2:0b:00:42:b3:d8:df: e9:f4:34:97:fb:35:b9:65:61:0f:6d:61:55:37:5b:a3:e0:af: 54:a9:59:47:7d:e5:84:48:2d:78:a3:7f:3e:4d:52:5d:90:b0: 0c:1a:b3:d6:86:9a:8f:e8:e2:fe:7e:db:35:90:ae:f0:49:8e: 2f:6a:3b:8f:13:bf:77:3c:79:a8:a0:c3:c5:bf:97:84:3c:84: cb:02:1e:bd:d7:3b:ea:01:23:da:b2:d7:fd:f4:e5:7f:a7:29: 4d:c7:2e:5b:d2:85:46:a6:b7:1e:7b:d8:4a:66:74:fb:9e:6e: 95:6f:2a:0c:ec:d7:24:28:b9:d9:96:fa:ab:d8:52:48:62:81: 8d:e0:e6:6a:b1:47:a1:9c:2a:43:20:39:df:0d:94:ff:2d:a3: b4:f3:89:c4:cb:14:33:c3:5b:c7:92:6f:cd:2f:ad:75:9c:b1: 05:fa:9f:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKj3tJItfdVfNiWdBYB75+WvgUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIx NEYyMjY5NTAeFw0yNTA3MTkxOTA2MTBaFw0yNTA3MjIyMDU0MTBaMDMxMTAvBgNV BAMTKDdCMjdERjM2NTIyMDlFNUY5QUVCMEIyNkMwNEE2N0RGRTZFMUQ4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEF03l8fLZU1ThCBiPVNVsk6Rx neXAdL7AeHKbsyxvKR9GWKgRv1IYth5eTPO1K4Xvv7W6/d3g5vJE9XPLQIqnlqY8 UWjowPNGca0M2HKGhRoMf8Nec4aVsgC3Wfdg0JF3ZT2ib22z2H1G93HySdCik84O 35O4kM/EPqRgSWaZ+cD6D0YBkezN7J5B9fvVQvc5BGZlSsQczwQmwIs2oSFCxXNt gi+I0DkF+9PdVCroJ8WHga0anrzvjBh3efgaRwxLfke6MmH42gAHGavY9ybunFwN IgiFKTrCTsJwOEOF0SfSHXb1anrovX9bEMXQpdIRI2dQrY8W2HXGOrlxebjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeyffNlIgnl+a6wsmwEpn3+bh2JswHwYDVR0j BBgwFoAUZLLbdwPFxWpvacR4mrn2khTyJpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjYyZDM0MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC82NEIyREI3NzAz QzVDNTZBNkY2OUM0Nzg5QUI5RjY5MjE0RjIyNjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIxNEYy MjY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2 OTIxNEYyMjY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0zrOfjd5OaChcmpd4VI1KRisIk7fosh5RO Nzfj24nAmZhOGCLJQwbnblcibu+rfO9z5NBHoSLooK8kNxJNsA+Xhp9un4wnsG+6 wotAvhL7BKhpwgsAQrPY3+n0NJf7NbllYQ9tYVU3W6Pgr1SpWUd95YRILXijfz5N Ul2QsAwas9aGmo/o4v5+2zWQrvBJji9qO48Tv3c8eaigw8W/l4Q8hMsCHr3XO+oB I9qy1/305X+nKU3HLlvShUamtx572EpmdPuebpVvKgzs1yQoudmW+qvYUkhigY3g 5mqxR6GcKkMgOd8NlP8to7TzicTLFDPDW8eSb80vrXWcsQX6nww= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:23 2025 by rpki-client