$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json) Hash identifier: FNyPfXPQ/6kBJ5lCbfDVp1xwm3ukPTiY/5rj35MpfJI= Subject key identifier: 1D:9C:90:E4:82:E9:92:FF:D8:86:25:44:F7:ED:7D:22:25:0A:F6:AA Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Certificate serial: 107BD9B41F3F91C03EE570E1A62E3BD8FBD0B0D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft Manifest number: 0151 Signing time: Wed 04 Jun 2025 12:31:03 +0000 Manifest this update: Wed 04 Jun 2025 12:26:03 +0000 Manifest next update: Sat 07 Jun 2025 22:59:03 +0000 Files and hashes: 1: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: PRtjDQLWn7DOhqpJ6ZyrW9FMpW7szF9MrVItEP9hNn4=) 2: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: 8H2c1MYKUkARYq2YFbmvVlqQvX3drq/UfgzCPMr/39E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7b:d9:b4:1f:3f:91:c0:3e:e5:70:e1:a6:2e:3b:d8:fb:d0:b0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Validity Not Before: Jun 4 12:26:03 2025 GMT Not After : Jun 7 22:59:03 2025 GMT Subject: CN=1D9C90E482E992FFD8862544F7ED7D22250AF6AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:77:f4:24:05:d8:d3:7c:8a:40:f9:16:ce: 43:4c:67:1f:85:fb:2e:76:8d:67:61:6e:5b:8e:33: e9:16:f6:7b:c1:59:ae:11:4d:41:82:03:83:a3:3b: 72:ae:cf:1b:77:de:60:73:b0:86:bc:05:80:6e:be: 4f:b7:67:89:ba:c0:45:48:80:35:04:30:8e:89:06: 0d:77:f3:e8:3d:ca:da:6d:e6:b3:0e:c5:87:9b:e5: 99:52:e0:70:9f:65:fe:fc:11:1f:8d:b5:47:2f:7b: 5a:05:84:c0:bd:ee:5e:b8:54:4a:ee:86:2c:fb:12: aa:85:c9:19:eb:aa:77:e4:a0:10:b7:a0:37:ae:9d: 3a:d2:88:5d:bc:46:ff:be:01:9a:d7:1b:95:f6:63: 48:62:fb:55:32:d0:9c:8a:c4:a5:29:36:52:53:a1: ed:3c:5a:05:c1:51:18:62:fb:3b:ee:a0:58:3a:e4: 77:ac:4a:0e:48:ca:d8:de:67:84:16:13:21:2f:84: 9e:d7:f6:e4:ab:1a:cb:63:15:a1:ba:90:31:ae:38: 42:b0:0d:a4:8b:4f:14:7c:1e:64:2e:2a:1e:19:70: bc:d7:6c:b3:65:8b:fb:13:11:47:aa:59:7b:ff:4a: f7:fc:db:da:b9:32:d9:a0:8c:8f:13:69:1b:80:cd: 91:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9C:90:E4:82:E9:92:FF:D8:86:25:44:F7:ED:7D:22:25:0A:F6:AA X509v3 Authority Key Identifier: keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:97:c7:f8:ae:6d:e2:a1:52:98:b7:2a:93:ae:6c:01:fd:87: e7:af:1e:c6:b2:a5:46:02:3d:2c:4f:f0:8c:0c:b3:70:69:50: 73:21:c4:70:94:93:b9:c2:64:27:44:b3:4b:0e:fe:9d:26:57: 2c:e9:34:09:b8:69:24:73:0e:96:50:c9:b0:f5:a4:35:e1:23: 39:49:12:1b:57:00:06:4d:89:08:75:54:f9:3f:c2:3b:b0:a9: 9f:59:fd:a9:df:62:62:75:8a:21:58:ae:e2:01:7b:d9:93:17: 2b:70:71:c5:6d:29:9e:69:69:6f:d2:45:cb:9c:f7:01:01:75: 94:46:14:8d:c4:e2:d2:80:a6:bf:8a:7d:ef:90:32:62:96:e7: 9d:42:06:93:50:e6:29:26:6c:56:7c:bb:b4:4c:8e:08:a7:c0: e6:da:2b:e3:43:c6:38:d3:4c:10:c5:dd:f2:9d:39:54:31:5a: 6d:53:8e:89:c2:24:01:95:e2:2c:8f:9a:93:02:67:26:6a:20: da:a3:e2:1c:e0:3a:12:25:0b:8c:bb:77:81:0e:cf:8f:e9:ce: 2a:aa:f5:e8:72:45:f3:b5:91:e3:8d:94:b7:21:d2:a0:7b:3d: dd:c8:bd:e5:5c:09:12:fa:e6:54:23:4b:dd:bc:54:34:95:b7: 48:fe:fe:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEHvZtB8/kcA+5XDhpi472PvQsNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIx NEYyMjY5NTAeFw0yNTA2MDQxMjI2MDNaFw0yNTA2MDcyMjU5MDNaMDMxMTAvBgNV BAMTKDFEOUM5MEU0ODJFOTkyRkZEODg2MjU0NEY3RUQ3RDIyMjUwQUY2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2S3f0JAXY03yKQPkWzkNMZx+F +y52jWdhbluOM+kW9nvBWa4RTUGCA4OjO3Kuzxt33mBzsIa8BYBuvk+3Z4m6wEVI gDUEMI6JBg138+g9ytpt5rMOxYeb5ZlS4HCfZf78ER+NtUcve1oFhMC97l64VEru hiz7EqqFyRnrqnfkoBC3oDeunTrSiF28Rv++AZrXG5X2Y0hi+1Uy0JyKxKUpNlJT oe08WgXBURhi+zvuoFg65HesSg5IytjeZ4QWEyEvhJ7X9uSrGstjFaG6kDGuOEKw DaSLTxR8HmQuKh4ZcLzXbLNli/sTEUeqWXv/Svf829q5MtmgjI8TaRuAzZHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHZyQ5ILpkv/YhiVE9+19IiUK9qowHwYDVR0j BBgwFoAUZLLbdwPFxWpvacR4mrn2khTyJpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjYyZDM0MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC82NEIyREI3NzAz QzVDNTZBNkY2OUM0Nzg5QUI5RjY5MjE0RjIyNjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIxNEYy MjY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2 OTIxNEYyMjY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWXx/iubeKhUpi3KpOubAH9h+evHsaypUYC PSxP8IwMs3BpUHMhxHCUk7nCZCdEs0sO/p0mVyzpNAm4aSRzDpZQybD1pDXhIzlJ EhtXAAZNiQh1VPk/wjuwqZ9Z/anfYmJ1iiFYruIBe9mTFytwccVtKZ5paW/SRcuc 9wEBdZRGFI3E4tKApr+Kfe+QMmKW551CBpNQ5ikmbFZ8u7RMjginwObaK+NDxjjT TBDF3fKdOVQxWm1TjonCJAGV4iyPmpMCZyZqINqj4hzgOhIlC4y7d4EOz4/pziqq 9ehyRfO1keONlLch0qB7Pd3IveVcCRL65lQjS928VDSVt0j+/oE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:35 2025 by rpki-client