$ rpki-client -vvf repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft File: E64D2B2A02A172B64A71F75C753571C841216A21.mft (raw, json) Hash identifier: JzkPpm2n+5/G9tqq8duY4NqNYAyLunnKoDGFC30iWJ0= Subject key identifier: 34:2A:D5:6E:1E:80:06:73:A9:3A:76:24:90:16:EC:1B:03:76:9E:3D Authority key identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 Certificate issuer: /CN=E64D2B2A02A172B64A71F75C753571C841216A21 Certificate serial: 05E3F10F455A0496437242637EEF633CC1D3711F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft Manifest number: AD Signing time: Thu 04 Sep 2025 03:30:48 +0000 Manifest this update: Thu 04 Sep 2025 03:25:48 +0000 Manifest next update: Sun 07 Sep 2025 10:16:48 +0000 Files and hashes: 1: E64D2B2A02A172B64A71F75C753571C841216A21.crl (hash: EdB7Q4VFq511GewPtqRogK8Ur7bZi1HIVTIUmXHyxjE=) 2: 3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (hash: 3wY6YhGHW2FNk89iUabtEb3voGoMeSvrsN+5cal1TNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 10:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e3:f1:0f:45:5a:04:96:43:72:42:63:7e:ef:63:3c:c1:d3:71:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E64D2B2A02A172B64A71F75C753571C841216A21 Validity Not Before: Sep 4 03:25:48 2025 GMT Not After : Sep 7 10:16:48 2025 GMT Subject: CN=342AD56E1E800673A93A76249016EC1B03769E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:22:d6:e1:3b:5a:00:6a:21:16:ef:f4:98:25: b0:61:4f:9e:1d:24:2a:35:fd:6b:c4:81:55:50:66: d2:15:9a:7c:75:da:b6:a8:0b:1b:ab:e0:40:43:8f: 5a:b2:26:c8:93:ad:c0:4b:76:df:1e:4f:ec:ad:f3: 8d:ca:4c:0b:60:b6:eb:14:b3:da:6c:44:eb:31:ba: 8a:49:9f:89:66:d8:7c:e9:34:86:9a:c7:4a:f7:fc: 11:bd:3a:4c:6d:61:15:b3:3e:6a:9c:4f:cf:50:da: 1c:fe:dc:e0:80:df:c2:8f:13:b1:31:38:d1:ef:22: fc:c0:73:52:a1:5a:4c:25:58:15:2a:bf:33:42:2d: b9:9a:d2:43:0d:cf:52:7b:4f:38:9b:35:32:e7:3e: 80:0b:43:01:f3:71:f2:3e:93:8a:2c:c0:9c:7a:97: e5:b6:95:d3:e9:20:ad:2e:6c:32:13:72:eb:77:f3: 5e:55:66:ee:fd:ca:33:7d:f8:7d:f9:c8:88:be:fb: f0:bc:b8:ff:05:19:73:b2:5a:cd:bc:d9:58:13:ad: b7:39:fe:37:e7:9c:a7:d1:e5:58:2f:c3:37:61:50: 12:f3:42:52:c4:cc:5a:88:15:e9:4b:7a:39:78:dd: 8d:f5:2a:fd:d9:80:27:79:31:9f:01:65:d6:ef:27: bc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2A:D5:6E:1E:80:06:73:A9:3A:76:24:90:16:EC:1B:03:76:9E:3D X509v3 Authority Key Identifier: keyid:E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d6:59:8d:78:68:d4:c2:b8:10:3b:61:9d:cd:11:8b:aa:05: f3:2c:75:ab:46:ce:75:2f:f0:1d:4e:a5:7c:71:8f:55:9a:6e: 17:6f:75:50:eb:81:b2:a1:13:05:67:69:12:8d:58:df:07:45: d1:76:b7:08:56:7f:d4:fb:bb:12:0a:37:8a:86:89:41:26:c0: 02:85:7d:76:f2:1b:05:b5:a8:2b:d8:a2:9b:ff:fc:15:c8:48: 92:cf:3c:f3:82:9c:cc:01:9c:f4:95:51:6b:94:93:8c:38:de: c8:8b:f5:89:68:13:5b:5c:5d:54:55:61:89:5c:2e:5b:76:ff: 42:18:68:b0:4d:8b:01:e4:b9:8d:bc:ea:b1:15:fd:f3:14:8e: 02:af:7a:da:0a:7c:60:af:3b:99:b7:4c:ad:36:75:ed:e0:51: 2c:05:80:58:16:95:60:be:56:a5:c1:ed:f9:c6:52:b9:33:17: b2:ca:ea:69:6a:8e:db:11:cb:32:67:a6:a5:54:58:c6:6e:0d: a5:1b:8e:e3:0a:ad:27:e5:f0:ff:49:e2:4d:c8:7a:fa:4d:60: 8a:bd:75:ea:f9:54:98:bf:84:48:da:64:ac:aa:48:fe:76:94: d6:90:55:4f:e5:40:a9:1c:53:85:83:39:e9:03:4e:07:da:38: 18:1a:03:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBePxD0VaBJZDckJjfu9jPMHTcR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0 MTIxNkEyMTAeFw0yNTA5MDQwMzI1NDhaFw0yNTA5MDcxMDE2NDhaMDMxMTAvBgNV BAMTKDM0MkFENTZFMUU4MDA2NzNBOTNBNzYyNDkwMTZFQzFCMDM3NjlFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiItbhO1oAaiEW7/SYJbBhT54d JCo1/WvEgVVQZtIVmnx12raoCxur4EBDj1qyJsiTrcBLdt8eT+yt843KTAtgtusU s9psROsxuopJn4lm2HzpNIaax0r3/BG9OkxtYRWzPmqcT89Q2hz+3OCA38KPE7Ex ONHvIvzAc1KhWkwlWBUqvzNCLbma0kMNz1J7TzibNTLnPoALQwHzcfI+k4oswJx6 l+W2ldPpIK0ubDITcut3815VZu79yjN9+H35yIi++/C8uP8FGXOyWs282VgTrbc5 /jfnnKfR5VgvwzdhUBLzQlLEzFqIFelLejl43Y31Kv3ZgCd5MZ8BZdbvJ7xVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNCrVbh6ABnOpOnYkkBbsGwN2nj0wHwYDVR0j BBgwFoAU5k0rKgKhcrZKcfdcdTVxyEEhaiEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Njc1MGJmOS05ZjU4LTQyOGEtODk1Mi04YjU1NTVlZjdjYTcvMC9FNjREMkIyQTAy QTE3MkI2NEE3MUY3NUM3NTM1NzFDODQxMjE2QTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0MTIx NkEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTY3NTBiZjktOWY1OC00MjhhLTg5 NTItOGI1NTU1ZWY3Y2E3LzAvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcx Qzg0MTIxNkEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbWWY14aNTCuBA7YZ3NEYuqBfMsdatGznUv 8B1OpXxxj1WabhdvdVDrgbKhEwVnaRKNWN8HRdF2twhWf9T7uxIKN4qGiUEmwAKF fXbyGwW1qCvYopv//BXISJLPPPOCnMwBnPSVUWuUk4w43siL9YloE1tcXVRVYYlc Llt2/0IYaLBNiwHkuY286rEV/fMUjgKvetoKfGCvO5m3TK02de3gUSwFgFgWlWC+ VqXB7fnGUrkzF7LK6mlqjtsRyzJnpqVUWMZuDaUbjuMKrSfl8P9J4k3IevpNYIq9 der5VJi/hEjaZKyqSP52lNaQVU/lQKkcU4WDOekDTgfaOBgaA6w= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:48 2025 by rpki-client