$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: cFC0OQ22iir9c0TPtMelRYMPh8R8DZJI5DPmYfeUBZY= Subject key identifier: 12:F2:4A:F9:5B:93:1C:1B:F3:D0:F2:18:80:8F:50:84:67:CF:68:24 Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 59B02854130244D07385BA14F10D7BB082805600 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 016F Signing time: Tue 22 Jul 2025 03:32:17 +0000 Manifest this update: Tue 22 Jul 2025 03:27:17 +0000 Manifest next update: Fri 25 Jul 2025 12:02:17 +0000 Files and hashes: 1: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: OMvT7v+SWmvCcI/oQS1wfiv6hD1AXfKdII4PA3MiDEc=) 2: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s=) 3: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: VtuEhmPO7aeXTH94dLCnURKFCmv1P/dqumw9WheeLns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 12:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b0:28:54:13:02:44:d0:73:85:ba:14:f1:0d:7b:b0:82:80:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Jul 22 03:27:17 2025 GMT Not After : Jul 25 12:02:17 2025 GMT Subject: CN=12F24AF95B931C1BF3D0F218808F508467CF6824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:4a:42:e1:78:27:29:67:0b:02:15:f0:cc: 2e:05:ef:f0:12:6f:ef:d8:33:b9:65:e6:9f:36:cc: df:68:df:b4:0e:3b:4d:79:6c:16:16:b0:e2:a6:55: e3:0e:b9:85:10:e7:36:d2:54:9a:df:c5:1e:e8:ed: 80:ed:fa:8b:69:9b:93:fd:3c:b6:45:b3:20:15:4c: 2f:66:65:c0:a5:08:33:e3:f7:cb:f5:33:65:ee:8e: 47:fc:9c:62:93:b9:a0:bc:29:e6:a3:94:27:61:31: cb:d9:27:c6:d8:90:6c:4b:2a:41:76:79:d6:e6:81: b4:22:48:19:8a:4d:7f:22:9a:30:fb:05:82:8c:07: c4:f2:2d:f4:69:10:f2:4d:18:7c:12:27:21:25:b7: 0a:18:8b:a5:e0:79:a6:b1:ba:cd:f4:35:f0:aa:d8: 40:2c:99:a0:17:64:dd:21:0f:e5:75:3b:ed:d6:bd: 77:64:01:9b:bc:ce:b0:e8:ad:06:c0:06:d0:be:3d: fe:ad:cf:97:71:3e:3e:8f:27:69:09:0f:93:2a:ca: df:53:48:2c:e0:45:cd:32:91:b4:3d:c9:aa:be:ce: 7e:e5:5c:79:58:f3:84:4b:4a:37:27:41:c2:ef:f7: 36:15:d6:9f:3b:3a:d6:67:97:ba:4c:f1:a6:e1:b4: e1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F2:4A:F9:5B:93:1C:1B:F3:D0:F2:18:80:8F:50:84:67:CF:68:24 X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:fa:32:ea:38:d3:73:7a:84:42:9d:24:f4:8a:7e:96:81:1d: 12:1c:8c:44:b0:f3:61:59:b6:32:b1:79:01:c6:91:03:0f:0c: 17:fc:49:ab:a8:e3:d3:a3:9c:15:64:be:1e:dd:32:82:2b:cf: bd:99:0c:e6:9e:af:3f:48:0a:8d:7e:23:b8:16:06:73:26:a9: d8:bd:86:3d:16:70:ba:6b:78:66:78:eb:64:c9:eb:03:d5:07: 27:b7:e9:60:cc:43:03:8e:62:5d:e3:50:44:11:31:ce:bd:5d: b7:b9:9e:a4:fd:fe:10:e6:3b:84:a8:74:c9:e8:ac:74:45:e4: c6:22:71:2c:27:8a:2f:f3:67:98:af:de:ae:62:08:c9:1a:d6: 96:0c:1a:88:a2:77:6c:d3:c3:29:f9:87:fe:f9:8b:06:f2:07: 3c:a9:a8:3c:91:1e:64:e3:34:3e:a1:35:d3:dc:dd:a0:71:68: 4d:40:63:a1:e3:92:86:f2:8c:57:43:8e:02:53:d1:a4:78:76: c2:44:6b:35:16:9a:39:ff:1b:1b:77:7b:bf:c2:b8:b9:fc:86: d5:81:a6:85:1a:66:5d:55:1a:d7:15:78:f4:75:d6:72:43:5d: 5b:4b:b2:96:da:a2:e3:7d:08:1e:56:ef:fa:1a:d3:31:08:74: 4e:27:7d:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWbAoVBMCRNBzhboU8Q17sIKAVgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNTA3MjIwMzI3MTdaFw0yNTA3MjUxMjAyMTdaMDMxMTAvBgNV BAMTKDEyRjI0QUY5NUI5MzFDMUJGM0QwRjIxODgwOEY1MDg0NjdDRjY4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHkpC4XgnKWcLAhXwzC4F7/AS b+/YM7ll5p82zN9o37QOO015bBYWsOKmVeMOuYUQ5zbSVJrfxR7o7YDt+otpm5P9 PLZFsyAVTC9mZcClCDPj98v1M2Xujkf8nGKTuaC8KeajlCdhMcvZJ8bYkGxLKkF2 edbmgbQiSBmKTX8imjD7BYKMB8TyLfRpEPJNGHwSJyEltwoYi6Xgeaaxus30NfCq 2EAsmaAXZN0hD+V1O+3WvXdkAZu8zrDorQbABtC+Pf6tz5dxPj6PJ2kJD5Mqyt9T SCzgRc0ykbQ9yaq+zn7lXHlY84RLSjcnQcLv9zYV1p87OtZnl7pM8abhtOFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEvJK+VuTHBvz0PIYgI9QhGfPaCQwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAET6Muo403N6hEKdJPSKfpaBHRIcjESw82FZ tjKxeQHGkQMPDBf8Sauo49OjnBVkvh7dMoIrz72ZDOaerz9ICo1+I7gWBnMmqdi9 hj0WcLpreGZ462TJ6wPVBye36WDMQwOOYl3jUEQRMc69Xbe5nqT9/hDmO4SodMno rHRF5MYicSwnii/zZ5iv3q5iCMka1pYMGoiid2zTwyn5h/75iwbyBzypqDyRHmTj ND6hNdPc3aBxaE1AY6HjkobyjFdDjgJT0aR4dsJEazUWmjn/Gxt3e7/CuLn8htWB poUaZl1VGtcVePR11nJDXVtLspbaouN9CB5W7/oa0zEIdE4nfbw= -----END CERTIFICATE-----Generated at Wed Jul 23 12:48:50 2025 by rpki-client