$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: Mk9v64IWEQ1L4SmvLFAgj13jLC0AXVTQfbrjUy5neNc= Subject key identifier: 70:6D:E6:68:01:C5:ED:03:05:A9:25:6E:25:79:95:7D:B3:AD:A8:AD Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 3CFFC0C966A0A924FA5559C8F20C289B28F1FF4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 0100 Signing time: Mon 21 Jul 2025 00:31:00 +0000 Manifest this update: Mon 21 Jul 2025 00:26:00 +0000 Manifest next update: Thu 24 Jul 2025 11:43:00 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: P6ZBflRv7HDjarhkAQQqZUCRZCPw9LNsiuX4U9qTIw0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ff:c0:c9:66:a0:a9:24:fa:55:59:c8:f2:0c:28:9b:28:f1:ff:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Jul 21 00:26:00 2025 GMT Not After : Jul 24 11:43:00 2025 GMT Subject: CN=706DE66801C5ED0305A9256E2579957DB3ADA8AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:72:5d:0d:f8:83:6a:f9:5a:62:f5:70:3b:f3: 2c:3f:81:10:8b:a4:03:e1:35:f6:7a:3e:b1:49:a7: 9e:c3:f6:00:30:75:f8:49:c5:92:f5:18:bc:ed:59: 8a:e2:f1:df:63:56:0c:71:52:f7:50:35:af:86:a0: 36:55:7b:a2:46:37:ae:43:da:43:0f:29:91:85:ac: 18:f6:3b:a2:d1:c5:f0:2e:60:61:c8:e4:10:fe:87: 0f:0a:ad:ad:8d:3f:80:74:b8:e3:dc:1b:4e:7f:95: b2:2b:69:5b:c6:76:00:05:f9:06:db:c1:0a:e9:d7: ac:da:69:50:70:64:13:5c:3f:ed:42:97:60:07:b1: 9f:bc:c8:cb:60:35:f0:d4:1c:53:b4:27:53:84:04: 24:03:b3:42:4c:c7:8b:d5:3c:ed:26:10:11:e6:04: 61:6d:1c:d8:56:a5:f0:7e:f5:c0:e4:e4:2a:56:39: e0:51:77:87:9b:b0:75:70:cd:9b:cc:1c:1d:c7:8e: a5:61:d7:c0:d6:ac:15:cb:f3:f3:b9:30:7a:89:6b: 34:6e:52:96:44:6b:f9:fe:65:60:05:14:36:0a:dc: 01:03:5f:cc:8a:56:66:69:ae:d1:87:57:89:95:3a: ce:52:43:3d:70:62:e0:43:8c:cb:cb:52:88:2c:15: 6e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6D:E6:68:01:C5:ED:03:05:A9:25:6E:25:79:95:7D:B3:AD:A8:AD X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:6d:90:15:f9:3c:8e:5b:97:7e:57:b4:bc:bf:89:ae:22:8c: 92:46:d1:53:fe:16:e2:f2:9e:b8:7b:07:f7:ca:54:aa:93:2a: 4f:69:1b:e6:1d:e6:f3:1a:14:1c:e9:fe:d6:e4:7e:46:d2:0a: e2:ec:0b:82:1d:d0:6b:fa:72:92:bc:8a:27:2a:e4:47:25:41: 1b:9d:ec:03:ff:fd:d7:6e:da:d9:d3:d6:24:4f:01:d9:b4:98: bf:60:20:87:4c:34:0e:c6:1b:f6:14:b8:21:cc:a8:42:ab:d2: 63:9b:20:7c:86:44:f9:9e:d4:c6:28:8b:1a:8f:6e:5d:e1:a9: 1f:7c:7f:d4:37:96:d2:e1:b1:be:b2:a9:29:b2:99:3c:d2:f5: 3f:38:43:81:1e:97:1f:96:22:35:99:44:c6:eb:ec:23:5c:71: b7:cc:63:e8:51:00:0a:97:ff:b6:a8:7b:df:df:e4:e5:d7:82: 56:57:97:70:73:fb:18:93:9f:79:56:9d:f1:ec:0c:8f:16:13: 7c:e6:62:f1:f3:da:34:d5:72:2d:96:73:23:d6:72:8e:2f:90: 57:34:ef:a0:24:18:39:ee:00:34:ed:82:1e:48:1c:c1:fe:53: 46:4f:0a:86:05:54:ee:dc:51:8f:2a:8a:bd:90:ba:fe:a8:dd: 9c:10:85:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPP/AyWagqST6VVnI8gwomyjx/0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTA3MjEwMDI2MDBaFw0yNTA3MjQxMTQzMDBaMDMxMTAvBgNV BAMTKDcwNkRFNjY4MDFDNUVEMDMwNUE5MjU2RTI1Nzk5NTdEQjNBREE4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcl0N+INq+Vpi9XA78yw/gRCL pAPhNfZ6PrFJp57D9gAwdfhJxZL1GLztWYri8d9jVgxxUvdQNa+GoDZVe6JGN65D 2kMPKZGFrBj2O6LRxfAuYGHI5BD+hw8Kra2NP4B0uOPcG05/lbIraVvGdgAF+Qbb wQrp16zaaVBwZBNcP+1Cl2AHsZ+8yMtgNfDUHFO0J1OEBCQDs0JMx4vVPO0mEBHm BGFtHNhWpfB+9cDk5CpWOeBRd4ebsHVwzZvMHB3HjqVh18DWrBXL8/O5MHqJazRu UpZEa/n+ZWAFFDYK3AEDX8yKVmZprtGHV4mVOs5SQz1wYuBDjMvLUogsFW4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcG3maAHF7QMFqSVuJXmVfbOtqK0wHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9tkBX5PI5bl35XtLy/ia4ijJJG0VP+FuLy nrh7B/fKVKqTKk9pG+Yd5vMaFBzp/tbkfkbSCuLsC4Id0Gv6cpK8iicq5EclQRud 7AP//ddu2tnT1iRPAdm0mL9gIIdMNA7GG/YUuCHMqEKr0mObIHyGRPme1MYoixqP bl3hqR98f9Q3ltLhsb6yqSmymTzS9T84Q4Eelx+WIjWZRMbr7CNccbfMY+hRAAqX /7aoe9/f5OXXglZXl3Bz+xiTn3lWnfHsDI8WE3zmYvHz2jTVci2WcyPWco4vkFc0 76AkGDnuADTtgh5IHMH+U0ZPCoYFVO7cUY8qir2Quv6o3ZwQhaI= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:59 2025 by rpki-client