$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: OOw9I5XqXF0en2fxZJrvTCQ+Gz/TEXVJRubAYAzMptM= Subject key identifier: AF:2B:6C:C6:1E:EA:71:37:D5:2F:CE:33:F8:26:4D:19:1E:D1:1A:E9 Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 1BD30A9C5CA14CE629C91DAD28308BF93BF17EAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 017A Signing time: Sat 06 Sep 2025 05:21:56 +0000 Manifest this update: Sat 06 Sep 2025 05:16:56 +0000 Manifest next update: Tue 09 Sep 2025 07:11:56 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=) 2: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=) 3: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=) 4: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: wo3UivDlFcsFHMSpFtA0Wvsws64UtnAQoduuCiIUoh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 07:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d3:0a:9c:5c:a1:4c:e6:29:c9:1d:ad:28:30:8b:f9:3b:f1:7e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Sep 6 05:16:56 2025 GMT Not After : Sep 9 07:11:56 2025 GMT Subject: CN=AF2B6CC61EEA7137D52FCE33F8264D191ED11AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:13:96:aa:45:59:b6:cb:7a:f2:c0:a7:34:ed: 0c:79:de:84:ae:66:0e:4e:e2:19:e2:2c:75:80:9f: 23:10:82:db:82:ee:e1:54:e8:7c:3a:c9:48:eb:15: af:2f:ab:ec:80:09:89:4f:43:e1:22:cb:35:ff:61: b0:f4:ca:af:e7:60:40:97:20:23:fc:ee:98:ad:c9: 08:9c:93:4b:41:ee:81:8f:d4:0e:45:4c:33:32:53: b8:15:78:40:71:c1:92:d9:57:3a:77:5b:2b:8c:70: 81:e6:11:57:3c:d5:d4:2e:55:47:64:0b:68:32:ba: e2:d3:96:ec:37:47:34:59:92:45:ae:54:9f:9c:d2: b7:a6:12:38:a8:e9:56:03:d7:ee:5c:32:c2:c9:2b: 7f:e4:59:dd:be:3b:85:f6:3c:f7:c8:01:94:0c:e8: 0b:53:54:f1:0e:b4:fd:5b:04:72:73:06:0e:66:25: 1c:87:25:70:45:7e:69:1e:4c:da:cc:b1:3f:3d:d0: 4b:44:a4:82:cc:47:d0:8f:35:ca:b2:1a:7b:a4:e8: c4:dd:ae:a3:e8:4d:58:b4:59:a3:a3:c6:88:e2:64: de:ff:42:08:08:b9:fe:fc:3d:12:37:00:d6:71:a0: c8:c9:c3:03:02:d6:23:04:77:87:49:cb:c1:ef:db: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:6C:C6:1E:EA:71:37:D5:2F:CE:33:F8:26:4D:19:1E:D1:1A:E9 X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:6d:95:d6:e7:61:b1:e8:bb:79:ac:53:4c:7f:2a:ba:6b:ea: e0:14:7c:43:9f:c4:de:cd:3c:d5:36:13:a7:f2:31:36:ce:70: 2d:91:3b:30:16:f9:a3:e0:d1:5a:d6:d7:20:58:96:23:9b:0b: bf:aa:66:52:3c:1e:c1:69:dc:c5:cf:12:05:e7:be:e6:4a:50: 1f:15:f8:6f:a2:37:a2:bf:ab:29:c1:57:27:4c:c9:2a:c1:4c: 4e:65:42:f2:84:47:ae:8d:ff:49:4f:a8:92:19:75:e5:dd:34: be:68:48:5a:da:60:c9:31:74:c1:0e:07:08:a1:4f:60:1a:f7: ea:dd:1b:32:d5:3f:27:cc:b3:5b:47:05:b1:e5:ba:40:10:65: ed:43:97:74:8b:df:26:ee:f8:85:a9:fc:f9:00:69:b4:d1:af: f4:26:17:79:72:a9:97:96:08:cc:bd:f9:93:65:d8:2b:de:cb: 97:48:f4:8c:69:7d:b6:38:60:fd:0e:41:31:7e:9f:b9:d2:00: 97:a5:d0:ac:5b:db:97:12:44:2e:ca:00:37:f2:fb:22:a5:a2: 4a:5c:c4:02:ad:ff:5f:1d:7f:11:49:17:22:25:15:bf:27:76: cd:78:0f:46:3a:29:59:6a:f5:aa:a7:92:ac:c4:d1:c9:f8:d9: 58:ca:39:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9MKnFyhTOYpyR2tKDCL+Tvxfq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTA5MDYwNTE2NTZaFw0yNTA5MDkwNzExNTZaMDMxMTAvBgNV BAMTKEFGMkI2Q0M2MUVFQTcxMzdENTJGQ0UzM0Y4MjY0RDE5MUVEMTFBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaE5aqRVm2y3rywKc07Qx53oSu Zg5O4hniLHWAnyMQgtuC7uFU6Hw6yUjrFa8vq+yACYlPQ+EiyzX/YbD0yq/nYECX ICP87pityQick0tB7oGP1A5FTDMyU7gVeEBxwZLZVzp3WyuMcIHmEVc81dQuVUdk C2gyuuLTluw3RzRZkkWuVJ+c0remEjio6VYD1+5cMsLJK3/kWd2+O4X2PPfIAZQM 6AtTVPEOtP1bBHJzBg5mJRyHJXBFfmkeTNrMsT890EtEpILMR9CPNcqyGnuk6MTd rqPoTVi0WaOjxojiZN7/QggIuf78PRI3ANZxoMjJwwMC1iMEd4dJy8Hv24krAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrytsxh7qcTfVL84z+CZNGR7RGukwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZtldbnYbHou3msU0x/Krpr6uAUfEOfxN7N PNU2E6fyMTbOcC2ROzAW+aPg0VrW1yBYliObC7+qZlI8HsFp3MXPEgXnvuZKUB8V +G+iN6K/qynBVydMySrBTE5lQvKER66N/0lPqJIZdeXdNL5oSFraYMkxdMEOBwih T2Aa9+rdGzLVPyfMs1tHBbHlukAQZe1Dl3SL3ybu+IWp/PkAabTRr/QmF3lyqZeW CMy9+ZNl2Cvey5dI9IxpfbY4YP0OQTF+n7nSAJel0Kxb25cSRC7KADfy+yKlokpc xAKt/18dfxFJFyIlFb8nds14D0Y6KVlq9aqnkqzE0cn42VjKOUw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:18 2025 by rpki-client