$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft (raw, json) Hash identifier: 4Amwy15ekKJyuDG/SJaWl/crZ5SmhsAacS2js+icvWs= Subject key identifier: 65:90:7A:1E:62:DA:28:82:E4:66:02:AA:36:BF:34:CC:7B:EA:70:26 Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Certificate serial: 75FE85B2037476B3F858E945EB48C6006A84F465 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft Manifest number: 0201 Signing time: Wed 03 Sep 2025 07:11:31 +0000 Manifest this update: Wed 03 Sep 2025 07:06:31 +0000 Manifest next update: Sat 06 Sep 2025 18:14:31 +0000 Files and hashes: 1: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl (hash: /w1L+SZoHxsGZv1OOnxcBq04SPfTcP9lb2kdXkFcQQ0=) 2: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: fQYP6KBmK43mZ1BOpBi0K6IbkEvJhG31/o2xXC40uG8=) 3: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: Mc8Ea5+5WJ6GF7G0KNR6Ybiy7ufabhA8F83CYeyA+z0=) 4: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: cu+gkkkTCuwJj0tPWyI4oDjIIQe1JqfFTuFCDD6tSKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:fe:85:b2:03:74:76:b3:f8:58:e9:45:eb:48:c6:00:6a:84:f4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Validity Not Before: Sep 3 07:06:31 2025 GMT Not After : Sep 6 18:14:31 2025 GMT Subject: CN=65907A1E62DA2882E46602AA36BF34CC7BEA7026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:d1:5e:0c:cb:42:bb:e2:58:19:c2:ec:c4: 1f:69:b8:92:53:15:e2:9b:f2:77:2d:17:25:77:f4: 32:ad:c8:ce:00:3f:02:70:5a:3f:31:61:27:af:50: b2:5e:c6:06:66:c2:c6:26:9a:18:08:e4:74:25:2e: b7:09:09:b2:f2:20:7e:7d:8c:de:1c:4a:da:2e:99: 9d:09:af:f0:69:99:e1:34:79:48:c3:ac:b1:36:b9: 32:e7:63:61:3d:74:9d:85:7a:4e:e6:63:ae:05:c9: f4:fc:4f:df:3e:c2:d6:26:9f:7e:54:41:1a:f3:ac: 14:fb:35:1b:40:4f:ee:35:02:21:a1:21:5b:e6:5c: 42:dd:f7:60:d8:4b:c6:60:d9:3e:fb:b8:38:1c:e2: ff:ff:85:e7:fe:06:e6:f4:99:46:c4:ad:5c:70:f0: 10:c9:a5:73:55:f6:14:a4:a7:fc:57:53:6e:a8:e4: a3:a3:44:85:73:fa:3f:be:76:73:72:f4:ab:79:c6: 12:14:4c:2b:fc:17:1b:7f:50:ba:87:d1:ee:86:e1: 2e:4a:5a:39:22:28:ff:71:1d:38:84:f2:87:7e:99: 38:34:58:e6:00:30:86:60:c2:ac:96:3b:0e:10:c5: 4b:dc:c9:06:1e:45:8a:9b:7f:31:96:b3:40:1e:6f: b0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:90:7A:1E:62:DA:28:82:E4:66:02:AA:36:BF:34:CC:7B:EA:70:26 X509v3 Authority Key Identifier: keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:40:6e:ca:af:7e:13:ce:02:ba:2a:ea:a0:3d:78:c6:dc:54: 10:0b:a7:ad:af:fc:84:a1:ae:3e:5f:60:40:70:cd:d0:af:76: ce:02:d9:28:d6:1a:0c:f7:04:50:38:ee:d4:a5:61:fb:65:33: 31:ce:2e:e8:8c:6b:be:2f:32:0b:0c:52:30:2b:6e:ed:dd:7e: ee:ce:9d:85:f8:d2:28:62:31:74:ad:4d:64:80:40:ef:f4:8d: 0f:b6:d0:d4:c8:3c:c9:89:29:e0:15:ae:81:4a:45:fb:cb:68: 36:32:2f:fa:7c:db:5d:0a:03:29:f6:10:96:1a:14:ea:b0:01: c3:a8:bd:e8:bc:b1:a7:0f:58:51:6b:0e:bf:60:bb:1f:73:a9: 5b:8e:14:dc:a2:0b:dd:a6:f0:e9:36:44:ce:dc:eb:a2:fa:05: 4d:5b:c9:30:85:8a:0f:df:08:32:5e:cc:8e:a4:e1:d5:cb:1e: 53:ae:18:a9:16:17:91:b3:fb:6a:9a:5e:1f:62:3d:7c:2a:d1: 82:e7:a4:a1:d4:be:2b:b6:e8:b4:d7:87:0d:22:dd:f1:fe:58: 39:f1:2d:45:7c:62:53:b9:ac:59:30:19:a3:27:06:99:18:db: ca:4a:53:49:d0:b8:d3:71:35:40:12:37:cd:a8:4b:c6:81:06: 49:37:54:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdf6FsgN0drP4WOlF60jGAGqE9GUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZF RUYxNURCNjAeFw0yNTA5MDMwNzA2MzFaFw0yNTA5MDYxODE0MzFaMDMxMTAvBgNV BAMTKDY1OTA3QTFFNjJEQTI4ODJFNDY2MDJBQTM2QkYzNENDN0JFQTcwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVNFeDMtCu+JYGcLsxB9puJJT FeKb8nctFyV39DKtyM4APwJwWj8xYSevULJexgZmwsYmmhgI5HQlLrcJCbLyIH59 jN4cStoumZ0Jr/BpmeE0eUjDrLE2uTLnY2E9dJ2Fek7mY64FyfT8T98+wtYmn35U QRrzrBT7NRtAT+41AiGhIVvmXELd92DYS8Zg2T77uDgc4v//hef+Bub0mUbErVxw 8BDJpXNV9hSkp/xXU26o5KOjRIVz+j++dnNy9Kt5xhIUTCv8Fxt/ULqH0e6G4S5K WjkiKP9xHTiE8od+mTg0WOYAMIZgwqyWOw4QxUvcyQYeRYqbfzGWs0Aeb7DTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZZB6HmLaKILkZgKqNr80zHvqcCYwHwYDVR0j BBgwFoAUZLRmUdewx1fkrt4BaR8GL+7xXbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTcwNTkyNy1lYzY0LTQ0ZjUtOWM5ZS1jOWE1NWE1MjNiNjQvMC82NEI0NjY1MUQ3 QjBDNzU3RTRBRURFMDE2OTFGMDYyRkVFRjE1REI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZFRUYx NURCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj OWUtYzlhNTVhNTIzYjY0LzAvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2 MkZFRUYxNURCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5AbsqvfhPOAroq6qA9eMbcVBALp62v/ISh rj5fYEBwzdCvds4C2SjWGgz3BFA47tSlYftlMzHOLuiMa74vMgsMUjArbu3dfu7O nYX40ihiMXStTWSAQO/0jQ+20NTIPMmJKeAVroFKRfvLaDYyL/p8210KAyn2EJYa FOqwAcOovei8sacPWFFrDr9gux9zqVuOFNyiC92m8Ok2RM7c66L6BU1byTCFig/f CDJezI6k4dXLHlOuGKkWF5Gz+2qaXh9iPXwq0YLnpKHUviu26LTXhw0i3fH+WDnx LUV8YlO5rFkwGaMnBpkY28pKU0nQuNNxNUASN82oS8aBBkk3VMk= -----END CERTIFICATE-----Generated at Fri Sep 5 12:38:45 2025 by rpki-client