$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: k2dnUiuhZ2+9uasmmATRwAsjxyS1l7G1BAUkYUWfLDQ= Subject key identifier: 79:D3:02:DF:A2:9F:2B:85:78:8C:95:B9:4F:CC:99:B9:18:25:FF:76 Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 3B8BF3F0AC6A5943822153682FD9A102B3462451 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 0150 Signing time: Tue 03 Jun 2025 17:22:21 +0000 Manifest this update: Tue 03 Jun 2025 17:17:21 +0000 Manifest next update: Fri 06 Jun 2025 18:43:21 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=) 2: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=) 3: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: r6G6pXHWBPrUlzuQlBCCXqvF80gRcQ5cqt6eZspNYMk=) 4: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:8b:f3:f0:ac:6a:59:43:82:21:53:68:2f:d9:a1:02:b3:46:24:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Jun 3 17:17:21 2025 GMT Not After : Jun 6 18:43:21 2025 GMT Subject: CN=79D302DFA29F2B85788C95B94FCC99B91825FF76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b1:09:ec:b0:a3:e6:e9:c7:69:66:b4:39:fb: 82:b6:75:82:62:a8:d8:fd:7f:8b:2d:08:6e:97:b4: 2f:05:7f:c9:62:a9:3c:a5:9a:ed:6b:a0:1b:47:32: 1a:d1:9e:92:84:82:a1:f3:4b:8c:70:80:fd:49:62: c5:e3:30:ab:46:82:01:13:3b:78:4f:e6:36:95:5d: 59:03:75:a4:65:31:d8:02:33:e3:94:eb:25:df:bc: 55:9e:bd:ed:1e:72:7f:a5:9a:96:e8:31:b2:76:7a: 3a:c9:1c:81:29:af:0c:74:18:34:fb:c7:be:39:00: ac:fb:e0:ab:6f:08:1b:0f:86:f7:b7:c6:56:4f:a3: 72:53:ec:1b:33:c5:43:96:f2:c2:64:f9:64:db:92: 41:84:31:27:5f:a8:6b:39:b8:39:5d:ab:91:9e:a6: 6c:47:20:b5:c5:72:08:50:b9:74:c1:61:f3:0b:9e: c6:6b:dd:dd:b8:bc:9d:90:35:76:3c:14:0a:6a:21: 74:76:21:b7:26:f2:10:bc:e5:33:da:ac:a4:68:db: 89:b8:6d:13:25:95:13:1b:43:d2:49:26:10:68:e4: 39:61:cb:03:52:9e:56:af:fe:49:4e:36:37:49:7c: fc:10:23:5d:35:ed:4f:29:2a:37:93:2d:9f:5e:27: 26:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D3:02:DF:A2:9F:2B:85:78:8C:95:B9:4F:CC:99:B9:18:25:FF:76 X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:54:12:2e:58:de:78:96:ab:4c:46:ff:de:ef:da:46:46:e8: 46:73:25:af:2e:3a:c9:e0:d5:0e:bb:6c:e5:80:e6:eb:e5:03: f8:6f:74:5a:28:f7:02:df:cb:22:c3:17:0e:0d:56:af:ca:e6: f8:fd:92:74:69:f8:59:00:15:32:72:81:72:8e:73:0a:23:2e: a3:16:91:28:33:dc:78:0c:14:09:5e:1f:d9:60:b1:5d:80:7b: a3:82:69:06:22:c1:f9:a0:15:2f:65:e8:5b:a2:da:73:a4:e3: 5e:68:ad:d1:00:14:cd:f5:79:3e:98:22:e0:59:70:1e:b1:5b: 05:e3:0e:12:21:9f:ca:ca:8c:6b:f2:f5:f6:ed:52:81:60:12: 5a:99:d7:b8:e4:ca:39:69:43:35:c9:72:e8:67:57:ab:43:e5: 95:f2:2e:92:62:70:7c:4f:aa:84:48:18:8f:1c:6d:68:2a:ec: ad:ff:3a:a5:5b:11:0d:c9:6f:b0:de:40:81:17:4f:87:8d:12: 37:20:32:bf:d6:7f:8b:45:57:58:30:8c:2e:4a:da:f7:68:85: 3c:c6:27:a3:f5:51:10:57:db:7a:a8:66:17:83:78:44:30:63: 03:73:2c:cf:53:23:5a:00:19:cb:0a:cc:1c:49:30:6f:60:03: 20:d2:9b:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4vz8KxqWUOCIVNoL9mhArNGJFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTA2MDMxNzE3MjFaFw0yNTA2MDYxODQzMjFaMDMxMTAvBgNV BAMTKDc5RDMwMkRGQTI5RjJCODU3ODhDOTVCOTRGQ0M5OUI5MTgyNUZGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDysQnssKPm6cdpZrQ5+4K2dYJi qNj9f4stCG6XtC8Ff8liqTylmu1roBtHMhrRnpKEgqHzS4xwgP1JYsXjMKtGggET O3hP5jaVXVkDdaRlMdgCM+OU6yXfvFWeve0ecn+lmpboMbJ2ejrJHIEprwx0GDT7 x745AKz74KtvCBsPhve3xlZPo3JT7BszxUOW8sJk+WTbkkGEMSdfqGs5uDldq5Ge pmxHILXFcghQuXTBYfMLnsZr3d24vJ2QNXY8FApqIXR2Ibcm8hC85TParKRo24m4 bRMllRMbQ9JJJhBo5DlhywNSnlav/klONjdJfPwQI1017U8pKjeTLZ9eJyZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUedMC36KfK4V4jJW5T8yZuRgl/3YwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9UEi5Y3niWq0xG/97v2kZG6EZzJa8uOsng 1Q67bOWA5uvlA/hvdFoo9wLfyyLDFw4NVq/K5vj9knRp+FkAFTJygXKOcwojLqMW kSgz3HgMFAleH9lgsV2Ae6OCaQYiwfmgFS9l6Fui2nOk415ordEAFM31eT6YIuBZ cB6xWwXjDhIhn8rKjGvy9fbtUoFgElqZ17jkyjlpQzXJcuhnV6tD5ZXyLpJicHxP qoRIGI8cbWgq7K3/OqVbEQ3Jb7DeQIEXT4eNEjcgMr/Wf4tFV1gwjC5K2vdohTzG J6P1URBX23qoZheDeEQwYwNzLM9TI1oAGcsKzBxJMG9gAyDSmyU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:18 2025 by rpki-client