$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: RW9MzMnYoveISccQyT1fdp5MGLtwVNsBaMr2AI7zIH0= Subject key identifier: AA:F1:CA:37:2E:9D:8C:E0:3F:49:ED:A2:96:4D:A8:69:1F:3C:3D:84 Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 147600FC0E438DA7F78E3E5164785D2567BD3599 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: EC Signing time: Thu 05 Jun 2025 15:50:56 +0000 Manifest this update: Thu 05 Jun 2025 15:45:56 +0000 Manifest next update: Sun 08 Jun 2025 19:27:56 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: wStkUgZTNwPIWg8EP8IjvUEIN+zOHIiLcIWPUtiyYzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:76:00:fc:0e:43:8d:a7:f7:8e:3e:51:64:78:5d:25:67:bd:35:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Jun 5 15:45:56 2025 GMT Not After : Jun 8 19:27:56 2025 GMT Subject: CN=AAF1CA372E9D8CE03F49EDA2964DA8691F3C3D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:70:77:74:82:05:e9:44:bc:c7:e4:d2:04:c3: 93:93:59:77:14:49:c7:ad:a2:d6:c2:25:64:04:b2: 22:e2:67:ae:4d:17:c0:ab:95:09:1e:3a:c7:bc:64: 73:d9:60:8b:85:b0:73:06:39:fd:0e:fb:6b:d2:99: 61:98:6c:17:f2:da:4d:97:29:d6:76:16:02:de:f4: 21:36:db:bf:22:ce:c2:14:c3:f2:4d:25:7d:7b:b7: 4d:63:0d:64:48:29:70:31:13:22:e4:45:de:a7:84: f8:cb:7e:d6:61:56:e1:c2:9b:ba:20:8c:48:1b:7d: aa:21:fd:22:4c:ff:aa:39:e4:f4:8c:af:b8:ea:62: 9f:18:9f:05:61:ef:86:32:28:47:8e:e7:ce:5a:bb: 48:78:53:75:e6:3b:14:fe:11:f5:a8:4c:fa:d8:65: 7c:8b:82:4d:61:b4:6a:8d:de:8f:05:68:41:71:94: 1c:bb:56:ed:b5:d5:ef:67:23:c9:e4:2f:a3:d8:49: 63:e6:15:73:52:c2:9d:ad:87:c2:bb:67:16:a1:07: 9e:02:9b:7e:7f:e5:6d:b6:5b:65:6a:e1:8c:39:da: 74:5c:42:e9:7c:90:df:0a:e9:ff:d0:3d:bb:aa:32: 33:c9:05:4e:3c:3d:7b:51:70:0d:e5:8f:48:0b:81: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:CA:37:2E:9D:8C:E0:3F:49:ED:A2:96:4D:A8:69:1F:3C:3D:84 X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:29:0e:6f:06:ec:94:0b:56:80:ea:d9:55:3d:e6:e5:f0:e1: ed:30:6d:44:d3:24:71:71:67:bf:25:31:ac:25:5b:d4:1c:52: b2:f2:2d:13:c3:d4:b8:a5:3a:ca:d2:c8:ad:7e:e6:d9:ef:24: 36:3f:b6:51:3e:b3:b0:87:e3:45:6f:fb:83:d1:50:d1:10:91: 3a:6f:a0:10:e4:96:a7:82:4a:b2:ff:23:c9:a2:a9:06:ba:e9: f6:d2:e7:39:a1:91:29:9c:88:14:6c:e2:af:b5:06:fa:97:15: 96:73:0a:cb:46:cb:1a:e0:00:d0:42:5c:ea:93:ca:52:72:dc: 6c:9b:03:71:da:8f:3c:12:35:3f:c9:ef:30:93:0e:94:e8:8a: 4b:78:71:ce:4f:f5:85:4d:5a:33:46:d5:27:94:be:45:40:41: ab:9d:94:01:7c:77:c6:3e:82:25:67:24:a0:1d:77:40:ca:2e: 5d:10:93:81:b6:71:90:a0:ea:c8:75:f6:08:33:6a:e4:a2:c7: 98:9e:73:f7:ce:db:f4:42:89:7b:8c:c1:d3:c1:d9:d7:82:3a: 5c:ed:b1:ee:a9:f6:10:ce:cb:4d:2c:17:46:4e:07:6f:08:87: 20:bb:56:06:0d:3b:37:2a:8e:72:7f:63:fb:eb:a3:6e:98:3e: a4:88:95:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHYA/A5Djaf3jj5RZHhdJWe9NZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTA2MDUxNTQ1NTZaFw0yNTA2MDgxOTI3NTZaMDMxMTAvBgNV BAMTKEFBRjFDQTM3MkU5RDhDRTAzRjQ5RURBMjk2NERBODY5MUYzQzNEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlcHd0ggXpRLzH5NIEw5OTWXcU ScetotbCJWQEsiLiZ65NF8CrlQkeOse8ZHPZYIuFsHMGOf0O+2vSmWGYbBfy2k2X KdZ2FgLe9CE2278izsIUw/JNJX17t01jDWRIKXAxEyLkRd6nhPjLftZhVuHCm7og jEgbfaoh/SJM/6o55PSMr7jqYp8YnwVh74YyKEeO585au0h4U3XmOxT+EfWoTPrY ZXyLgk1htGqN3o8FaEFxlBy7Vu211e9nI8nkL6PYSWPmFXNSwp2th8K7ZxahB54C m35/5W22W2Vq4Yw52nRcQul8kN8K6f/QPbuqMjPJBU48PXtRcA3lj0gLgeA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqvHKNy6djOA/Se2ilk2oaR88PYQwHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAApDm8G7JQLVoDq2VU95uXw4e0wbUTTJHFx Z78lMawlW9QcUrLyLRPD1LilOsrSyK1+5tnvJDY/tlE+s7CH40Vv+4PRUNEQkTpv oBDklqeCSrL/I8miqQa66fbS5zmhkSmciBRs4q+1BvqXFZZzCstGyxrgANBCXOqT ylJy3GybA3HajzwSNT/J7zCTDpToikt4cc5P9YVNWjNG1SeUvkVAQaudlAF8d8Y+ giVnJKAdd0DKLl0Qk4G2cZCg6sh19ggzauSix5iec/fO2/RCiXuMwdPB2deCOlzt se6p9hDOy00sF0ZOB28IhyC7VgYNOzcqjnJ/Y/vro26YPqSIlVk= -----END CERTIFICATE-----Generated at Thu Jun 5 19:39:49 2025 by rpki-client