$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft File: 64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json) Hash identifier: Npf5uWQHuWBQCAdArZaKBcuKW7iTF5XdhIvmFyAAlEo= Subject key identifier: 52:27:ED:8D:0D:FE:26:D3:BB:F9:ED:73:1B:74:C2:25:59:C1:9F:52 Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 Certificate issuer: /CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Certificate serial: 2BD716C22E9412A85CD6F1881578DF0CE30A07E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft Manifest number: 0253 Signing time: Tue 22 Jul 2025 05:52:08 +0000 Manifest this update: Tue 22 Jul 2025 05:47:08 +0000 Manifest next update: Fri 25 Jul 2025 16:02:08 +0000 Files and hashes: 1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: qSBErkc+YmE96+YNp3stuWS6LNkBq7zVOQLn2fcpQx8=) 2: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: r/EfjiABRzAunlZ9M0CUmU8qHNkrb4x+BhLBZlgjp44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d7:16:c2:2e:94:12:a8:5c:d6:f1:88:15:78:df:0c:e3:0a:07:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Validity Not Before: Jul 22 05:47:08 2025 GMT Not After : Jul 25 16:02:08 2025 GMT Subject: CN=5227ED8D0DFE26D3BBF9ED731B74C22559C19F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:2a:b2:7b:8d:fe:fe:f5:26:78:e1:8b:43: c2:0d:46:e9:cb:0e:35:53:fe:f6:20:92:0e:1b:4b: 32:25:bf:77:ba:c4:33:42:6b:49:af:9a:bf:18:00: e8:74:19:1e:03:1f:6f:69:7a:df:d5:f0:c2:62:4a: 25:0c:64:29:b1:27:13:89:c1:72:88:e3:eb:63:3d: 5a:4a:d3:47:b3:68:3b:4e:39:74:bb:bf:a5:c0:ec: 32:d3:e6:cd:54:2c:5b:ea:bb:05:86:86:a5:94:ba: 0e:f0:db:f4:8e:5c:e5:d8:20:bc:78:0a:b0:4d:ba: b2:17:a8:e5:bb:0e:76:82:67:54:14:21:27:39:d8: 09:07:91:71:eb:4f:a3:49:30:6c:65:40:a5:b1:60: e9:6b:af:8d:57:55:d4:10:0f:67:bc:23:39:a9:66: db:d2:4c:52:28:3d:cf:c5:23:b3:56:dd:1d:95:42: e1:a7:7d:f1:4b:5f:4f:5c:41:b2:2c:8a:94:cb:77: 40:07:15:7a:9b:35:ea:be:f2:f8:3b:f7:55:84:1c: 51:b0:c3:e9:20:71:d7:0c:47:ab:81:92:a8:ad:b4: 92:83:10:81:ad:cc:62:08:95:f2:dd:8f:79:cc:23: e3:cc:a8:4d:1c:c7:3e:ea:fd:d1:b6:64:a8:e5:37: 4e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:27:ED:8D:0D:FE:26:D3:BB:F9:ED:73:1B:74:C2:25:59:C1:9F:52 X509v3 Authority Key Identifier: keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:19:38:4e:f9:2d:c0:6c:44:9d:2b:82:3b:80:e4:67:bc:15: 46:97:52:c6:0d:4d:f6:8b:b3:78:70:63:74:91:b1:5f:de:d5: 31:36:dc:56:56:80:4a:f8:b5:17:71:26:c8:6e:fe:18:73:1d: d9:2e:c9:45:ca:8c:7d:22:60:2b:f1:ca:85:3d:4f:91:49:d7: a5:64:19:1c:05:63:50:af:10:00:4d:fa:a5:67:dc:1f:6e:e4: e4:95:72:31:3f:76:6b:9c:12:2b:26:ff:f8:58:03:0d:67:6d: 30:50:c7:47:3f:82:a0:a5:8f:a5:20:35:1e:d8:87:64:a7:50: 64:5a:75:e4:92:5a:bc:e3:9a:32:63:07:73:2c:4e:f5:34:44: 3c:da:4b:8c:4b:d8:fc:96:bd:44:65:4f:da:16:2a:7c:df:76: 44:50:ff:3b:36:38:c3:d4:65:de:43:99:f9:ac:c3:2c:c5:dd: 8a:eb:f9:f5:38:81:00:66:df:7d:56:c7:3c:c6:4a:47:16:36: 09:c5:81:a0:2d:8d:a5:16:b8:1a:38:1b:b1:48:18:a5:91:b1: 10:b8:b4:78:a3:a2:fe:0f:b4:6d:40:bc:ef:90:11:b0:cc:91: 99:26:d4:a8:24:d1:67:36:d8:ab:2e:6c:e7:ce:d6:9b:af:78: ca:7b:90:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9cWwi6UEqhc1vGIFXjfDOMKB+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4 MDIyQzNDNTAeFw0yNTA3MjIwNTQ3MDhaFw0yNTA3MjUxNjAyMDhaMDMxMTAvBgNV BAMTKDUyMjdFRDhEMERGRTI2RDNCQkY5RUQ3MzFCNzRDMjI1NTlDMTlGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFyqye43+/vUmeOGLQ8INRunL DjVT/vYgkg4bSzIlv3e6xDNCa0mvmr8YAOh0GR4DH29pet/V8MJiSiUMZCmxJxOJ wXKI4+tjPVpK00ezaDtOOXS7v6XA7DLT5s1ULFvquwWGhqWUug7w2/SOXOXYILx4 CrBNurIXqOW7DnaCZ1QUISc52AkHkXHrT6NJMGxlQKWxYOlrr41XVdQQD2e8Izmp ZtvSTFIoPc/FI7NW3R2VQuGnffFLX09cQbIsipTLd0AHFXqbNeq+8vg791WEHFGw w+kgcdcMR6uBkqittJKDEIGtzGIIlfLdj3nMI+PMqE0cxz7q/dG2ZKjlN06jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUiftjQ3+JtO7+e1zG3TCJVnBn1IwHwYDVR0j BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3 NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy QzNDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3 NjU4MDIyQzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUZOE75LcBsRJ0rgjuA5Ge8FUaXUsYNTfaL s3hwY3SRsV/e1TE23FZWgEr4tRdxJshu/hhzHdkuyUXKjH0iYCvxyoU9T5FJ16Vk GRwFY1CvEABN+qVn3B9u5OSVcjE/dmucEism//hYAw1nbTBQx0c/gqClj6UgNR7Y h2SnUGRadeSSWrzjmjJjB3MsTvU0RDzaS4xL2PyWvURlT9oWKnzfdkRQ/zs2OMPU Zd5DmfmswyzF3Yrr+fU4gQBm331WxzzGSkcWNgnFgaAtjaUWuBo4G7FIGKWRsRC4 tHijov4PtG1AvO+QEbDMkZkm1Kgk0Wc22KsubOfO1puveMp7kJ0= -----END CERTIFICATE-----Generated at Wed Jul 23 16:30:44 2025 by rpki-client