$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json) Hash identifier: 7qzdZXv8QaVkbGrmpjFzR5shQuZkngiGboJjqqaEGAg= Subject key identifier: 64:89:63:BE:15:B4:5F:87:0F:A0:5A:66:7D:CA:A9:32:72:A9:08:64 Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 60C7F772EBC1C9015D453212D628733BAD8F1156 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft Manifest number: 0206 Signing time: Sat 07 Jun 2025 13:42:09 +0000 Manifest this update: Sat 07 Jun 2025 13:37:09 +0000 Manifest next update: Tue 10 Jun 2025 23:14:09 +0000 Files and hashes: 1: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: IUGzTgb6/LUxFFHxSRQ0z8++IoTuLaext9vMPCnMyAE=) 2: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=) 3: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=) 4: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 318Q6731sMFPRMDMOoStaI6Bz5sS+OT9DxYXEQE+OOU=) 5: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=) 6: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=) 7: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=) 8: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=) 9: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=) 10: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=) 11: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=) 12: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: Vxu7OgcrZ32tVA4THVShJIrGxnq9jK2ER/olk1k8ato=) 13: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 23:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c7:f7:72:eb:c1:c9:01:5d:45:32:12:d6:28:73:3b:ad:8f:11:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Jun 7 13:37:09 2025 GMT Not After : Jun 10 23:14:09 2025 GMT Subject: CN=648963BE15B45F870FA05A667DCAA93272A90864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0e:70:32:ba:c4:e4:23:fd:e3:02:59:1d:61: a5:c6:d9:18:bd:4e:af:18:60:a2:04:a0:ac:0f:59: 1a:62:98:c6:f0:da:e2:c9:a1:80:57:fa:c1:6d:30: b2:42:a9:f7:97:f1:30:51:51:09:95:7f:8e:31:e8: 03:2d:01:1c:78:42:8e:8f:bc:25:1a:26:b5:84:3b: c3:b9:57:18:9d:b3:4c:07:92:d2:93:2a:2d:cc:79: ce:db:22:14:79:6f:72:d3:75:da:b7:2b:91:1c:27: ff:6d:78:ee:06:c5:05:71:4d:6d:d0:43:d4:7a:9e: 7f:f2:2c:e0:d6:fd:96:f2:52:d3:a2:b5:72:49:c0: 67:06:ab:ac:1e:38:7a:9f:fd:91:e9:7e:0e:22:31: 96:b6:1c:a4:02:12:04:a5:d5:ae:4e:2a:ca:50:ae: a0:7c:47:55:12:e7:75:7e:31:8d:f9:a2:60:8e:bb: 4d:cb:2e:10:42:a4:70:db:a5:59:d8:20:d1:db:20: 68:ee:b3:71:07:a8:a7:8b:2c:b8:94:26:83:a7:fe: dd:75:61:ab:aa:3f:8b:fa:96:ba:d8:fa:5f:2f:4c: 1e:0b:7c:5c:23:ec:bd:2a:da:c0:fd:10:19:52:b2: 49:56:c1:cc:98:ad:2e:e8:7f:85:9e:88:aa:44:58: af:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:89:63:BE:15:B4:5F:87:0F:A0:5A:66:7D:CA:A9:32:72:A9:08:64 X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:18:8d:32:6f:8d:14:01:2f:aa:28:52:4a:b7:50:e3:1a:4a: 16:79:96:fe:ee:f5:54:4b:4e:a0:4d:f2:35:04:60:77:a6:83: d8:a5:cf:92:e8:5d:c8:fa:43:ff:8e:80:af:83:3f:8b:50:64: 4e:6a:52:f3:a7:ec:e7:43:b6:fd:32:fd:ae:31:d6:20:d8:de: 52:59:28:13:23:54:f4:fc:c2:41:f3:a7:9c:9d:1c:a5:65:53: 07:4a:83:68:ef:e1:8d:bb:d3:95:22:fc:66:32:b2:4a:6a:33: 43:4f:70:84:c3:40:d7:74:8b:73:62:38:bf:54:8d:0c:1a:93: c6:80:63:d6:54:60:44:f0:b7:32:92:81:e6:19:40:65:38:d4: 71:83:96:88:78:81:ba:90:ea:d9:bd:d2:02:be:48:7b:7e:69: d6:d2:3b:4d:9a:9a:b9:67:c0:b8:a4:e7:ed:30:a9:be:9c:8e: 5f:a4:6a:02:ce:e2:7f:d6:4d:40:0d:be:e3:bd:9e:69:de:ba: 6c:a1:69:da:9d:6c:6f:ab:19:c0:fd:12:5a:f4:3e:f6:ae:b4: cf:da:be:56:c2:7e:a7:b5:01:d0:99:68:0f:39:83:4c:8e:ac: 29:1c:1d:e7:3f:64:28:d8:7a:51:5f:f0:07:7d:dd:3a:25:92: cd:d1:ba:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMf3cuvByQFdRTIS1ihzO62PEVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNTA2MDcxMzM3MDlaFw0yNTA2MTAyMzE0MDlaMDMxMTAvBgNV BAMTKDY0ODk2M0JFMTVCNDVGODcwRkEwNUE2NjdEQ0FBOTMyNzJBOTA4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxDnAyusTkI/3jAlkdYaXG2Ri9 Tq8YYKIEoKwPWRpimMbw2uLJoYBX+sFtMLJCqfeX8TBRUQmVf44x6AMtARx4Qo6P vCUaJrWEO8O5Vxids0wHktKTKi3Mec7bIhR5b3LTddq3K5EcJ/9teO4GxQVxTW3Q Q9R6nn/yLODW/ZbyUtOitXJJwGcGq6weOHqf/ZHpfg4iMZa2HKQCEgSl1a5OKspQ rqB8R1US53V+MY35omCOu03LLhBCpHDbpVnYINHbIGjus3EHqKeLLLiUJoOn/t11 YauqP4v6lrrY+l8vTB4LfFwj7L0q2sD9EBlSsklWwcyYrS7of4WeiKpEWK/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZIljvhW0X4cPoFpmfcqpMnKpCGQwHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1MTlhZWItNWM1Ni00Y2IzLTk0 YTAtMGY0MDBlYTZhMzc1LzAvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUz QUFGQzhBN0U5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEYjTJvjRQBL6ooUkq3UOMaShZ5lv7u9VRL TqBN8jUEYHemg9ilz5LoXcj6Q/+OgK+DP4tQZE5qUvOn7OdDtv0y/a4x1iDY3lJZ KBMjVPT8wkHzp5ydHKVlUwdKg2jv4Y2705Ui/GYyskpqM0NPcITDQNd0i3NiOL9U jQwak8aAY9ZUYETwtzKSgeYZQGU41HGDloh4gbqQ6tm90gK+SHt+adbSO02amrln wLik5+0wqb6cjl+kagLO4n/WTUANvuO9nmneumyhadqdbG+rGcD9Elr0PvautM/a vlbCfqe1AdCZaA85g0yOrCkcHec/ZCjYelFf8Ad93Tolks3Rujk= -----END CERTIFICATE-----Generated at Sun Jun 8 23:53:32 2025 by rpki-client