$ rpki-client -vvf repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft File: E64D2B2A02A172B64A71F75C753571C841216A21.mft (raw, json) Hash identifier: dVdFV4s9r36r5JTq+LxqToMSkr0XjsB2ETI8+rX81Bg= Subject key identifier: CC:DA:F3:46:11:26:CB:E9:B7:D7:D3:9D:51:20:45:5D:64:04:EA:70 Authority key identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 Certificate issuer: /CN=E64D2B2A02A172B64A71F75C753571C841216A21 Certificate serial: 44D3C922EF93851D9A774D573355DB162E8756DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft Manifest number: 83 Signing time: Mon 02 Jun 2025 05:20:48 +0000 Manifest this update: Mon 02 Jun 2025 05:15:48 +0000 Manifest next update: Thu 05 Jun 2025 08:32:48 +0000 Files and hashes: 1: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: BLjMDQDkzYen2EW3xea2TvldMIcxYxV0TxQmwmMaIwY=) 2: E64D2B2A02A172B64A71F75C753571C841216A21.crl (hash: uGgXpXleQ9J8Q/Fax8eNDxXcyBpQsPvJ/5mKPnuGN8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 08:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d3:c9:22:ef:93:85:1d:9a:77:4d:57:33:55:db:16:2e:87:56:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E64D2B2A02A172B64A71F75C753571C841216A21 Validity Not Before: Jun 2 05:15:48 2025 GMT Not After : Jun 5 08:32:48 2025 GMT Subject: CN=CCDAF3461126CBE9B7D7D39D5120455D6404EA70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:41:10:dd:e6:ed:be:0d:cf:10:bd:51:2f: 9e:32:67:02:2d:19:a5:d0:40:ca:70:fa:59:7a:db: 21:56:94:dc:3f:68:60:09:42:af:6e:77:44:a4:7d: f7:8c:f6:98:01:3d:9d:3e:e7:3f:67:e0:bd:16:6a: 8a:8d:59:a7:85:f0:8f:86:ca:42:dc:5f:0a:86:04: 88:92:92:2c:73:67:e2:2a:0d:ef:12:a9:16:12:f2: 30:a8:ad:69:98:3d:3b:8b:f7:fd:3d:c2:eb:ec:ab: 90:c7:b5:0e:59:cf:e2:fe:e9:97:0d:d1:f7:60:38: 5f:21:15:b3:4f:6b:4f:7d:ca:b3:19:3e:13:84:c1: f6:00:30:7c:02:87:d9:b7:75:6d:09:df:3b:f5:5e: 6d:23:9b:4d:34:b5:14:e9:dc:50:7f:cc:61:1f:2a: c9:35:8f:bc:55:23:86:f1:91:16:4c:ed:c2:04:9c: 84:b3:df:8a:73:05:1d:5e:9c:fe:57:c0:ca:ea:29: 11:0a:27:69:8a:e8:d7:a8:62:33:c6:19:a1:70:73: 5a:27:c8:33:41:53:fa:a0:fb:1f:f8:c7:af:61:1c: 95:96:2f:5a:1f:c5:f3:03:0d:bb:fc:7f:8d:92:fb: 55:c4:6f:a6:9b:12:83:fc:5a:65:2a:92:8c:3f:70: 81:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DA:F3:46:11:26:CB:E9:B7:D7:D3:9D:51:20:45:5D:64:04:EA:70 X509v3 Authority Key Identifier: keyid:E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ba:da:9b:56:fa:3f:de:5a:1d:57:8f:31:b6:82:46:8f:a2: 9b:5d:cc:ee:da:7f:4e:3f:78:dd:82:9c:da:3b:91:8e:f8:87: 9e:17:e8:14:e2:73:9a:3b:5c:93:c1:3d:20:ee:ba:d8:77:3a: 85:04:ff:46:df:29:2f:38:8d:97:e5:c0:da:b5:80:b5:19:c7: 32:54:ef:07:9a:ab:a6:bf:72:74:88:5b:1c:1f:52:07:23:d6: 1d:63:a4:13:35:ae:45:77:60:65:c1:1a:4b:16:60:ce:41:70: c2:d8:4f:78:a8:87:93:8d:62:99:ec:c4:9d:5c:9a:ff:8a:25: 53:08:8a:2a:19:fd:52:88:83:ef:17:0a:1f:84:70:c3:fd:d4: 12:46:15:9a:bf:c8:aa:7e:4a:24:5f:b2:21:a7:76:94:09:27: f7:f3:00:5e:af:f4:c4:4a:fe:12:72:ad:4a:2c:d4:fc:69:46: 4a:f9:a1:e6:7f:56:08:c3:4e:9a:92:7b:a3:ff:fc:da:3c:64: 2d:b1:8e:de:03:dc:00:38:f3:b6:fe:3d:f0:0c:01:71:61:23: d3:ca:69:e8:c4:cd:40:3b:07:99:af:04:37:5c:5d:f5:8c:8d: f2:24:58:cc:37:23:68:7e:24:79:10:99:fc:65:9a:17:29:2f: ed:e3:94:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNPJIu+ThR2ad01XM1XbFi6HVt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0 MTIxNkEyMTAeFw0yNTA2MDIwNTE1NDhaFw0yNTA2MDUwODMyNDhaMDMxMTAvBgNV BAMTKENDREFGMzQ2MTEyNkNCRTlCN0Q3RDM5RDUxMjA0NTVENjQwNEVBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pkEQ3ebtvg3PEL1RL54yZwIt GaXQQMpw+ll62yFWlNw/aGAJQq9ud0SkffeM9pgBPZ0+5z9n4L0WaoqNWaeF8I+G ykLcXwqGBIiSkixzZ+IqDe8SqRYS8jCorWmYPTuL9/09wuvsq5DHtQ5Zz+L+6ZcN 0fdgOF8hFbNPa099yrMZPhOEwfYAMHwCh9m3dW0J3zv1Xm0jm000tRTp3FB/zGEf Ksk1j7xVI4bxkRZM7cIEnISz34pzBR1enP5XwMrqKREKJ2mK6NeoYjPGGaFwc1on yDNBU/qg+x/4x69hHJWWL1ofxfMDDbv8f42S+1XEb6abEoP8WmUqkow/cIFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzNrzRhEmy+m319OdUSBFXWQE6nAwHwYDVR0j BBgwFoAU5k0rKgKhcrZKcfdcdTVxyEEhaiEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Njc1MGJmOS05ZjU4LTQyOGEtODk1Mi04YjU1NTVlZjdjYTcvMC9FNjREMkIyQTAy QTE3MkI2NEE3MUY3NUM3NTM1NzFDODQxMjE2QTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0MTIx NkEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcx Qzg0MTIxNkEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKe62ptW+j/eWh1XjzG2gkaPoptdzO7af04/ eN2CnNo7kY74h54X6BTic5o7XJPBPSDuuth3OoUE/0bfKS84jZflwNq1gLUZxzJU 7weaq6a/cnSIWxwfUgcj1h1jpBM1rkV3YGXBGksWYM5BcMLYT3ioh5ONYpnsxJ1c mv+KJVMIiioZ/VKIg+8XCh+EcMP91BJGFZq/yKp+SiRfsiGndpQJJ/fzAF6v9MRK /hJyrUos1PxpRkr5oeZ/VgjDTpqSe6P//No8ZC2xjt4D3AA487b+PfAMAXFhI9PK aejEzUA7B5mvBDdcXfWMjfIkWMw3I2h+JHkQmfxlmhcpL+3jlMo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:51 2025 by rpki-client