$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: KmpXvNER3LuVXleoPgt/2gmPnddojGjc1GJKQVRXP0c= Subject key identifier: CC:21:69:FD:6B:C7:30:3B:9A:6E:CE:9F:C8:CE:E2:95:7F:DD:35:D0 Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 02B47C5BB3CF5A1340BF1DEFD96C5044BABC6586 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 015A Signing time: Wed 04 Jun 2025 11:32:18 +0000 Manifest this update: Wed 04 Jun 2025 11:27:18 +0000 Manifest next update: Sat 07 Jun 2025 18:54:18 +0000 Files and hashes: 1: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: OMvT7v+SWmvCcI/oQS1wfiv6hD1AXfKdII4PA3MiDEc=) 2: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s=) 3: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: CnSuqRZPNkwl30MclpFgWxdk4v8HwcutxtIM3ohDa/I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b4:7c:5b:b3:cf:5a:13:40:bf:1d:ef:d9:6c:50:44:ba:bc:65:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Jun 4 11:27:18 2025 GMT Not After : Jun 7 18:54:18 2025 GMT Subject: CN=CC2169FD6BC7303B9A6ECE9FC8CEE2957FDD35D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:00:aa:47:c4:c4:80:4b:d9:b1:79:5e:0c: a2:cd:e0:94:31:00:2a:f0:a9:dc:c0:dd:24:94:1d: 1b:2b:fb:f4:ae:b7:76:53:d4:6c:8f:77:ee:3c:d7: 2e:19:f8:d8:fb:4d:a1:f8:c1:a3:2e:16:59:1d:f3: cf:06:ff:ce:76:5f:a8:48:85:ff:57:6d:ab:6f:ef: d7:6a:d6:c0:e7:1f:e2:e8:04:f5:58:c7:1b:90:3c: ce:88:5a:35:66:e6:0f:7b:24:aa:a5:5e:3a:ae:58: 14:64:76:7f:ce:09:cd:56:9b:20:5c:28:dd:52:cc: e4:2a:da:37:1f:d6:88:87:5c:c8:b1:9b:f7:39:04: fb:cf:60:4b:4a:83:c5:3f:be:e3:f8:db:4d:d5:07: 0c:c9:28:2a:84:1c:33:9b:43:07:ec:dd:fa:41:8e: 1e:57:7f:05:cc:c0:99:2c:ef:2d:97:d3:ba:5c:49: 78:e9:06:32:42:07:1b:f0:ca:37:55:81:b7:06:86: 2d:3a:1f:e1:f1:3b:3c:9a:6a:8a:fa:74:c3:25:42: 22:87:6e:98:0d:0d:8b:63:8a:17:3c:5f:81:38:26: 20:1f:6a:e9:69:81:c4:1c:9f:3d:33:ef:60:1d:48: 17:3f:a7:71:6d:d1:6a:a8:f1:7f:f2:88:6e:fb:a6: b8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:21:69:FD:6B:C7:30:3B:9A:6E:CE:9F:C8:CE:E2:95:7F:DD:35:D0 X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:1d:46:cd:a4:7d:ec:d2:0b:5d:ed:3a:cd:a5:b6:ab:61:17: 36:ae:c6:63:77:30:ed:04:2a:98:9a:c0:6d:01:24:26:f8:6d: 87:2f:95:61:39:0c:e2:2e:60:a0:6c:1d:bd:44:35:49:6d:d6: 47:5c:19:d9:a4:4e:4e:2f:42:38:20:41:f4:05:5f:1f:d9:bc: 3d:9f:2c:d1:8d:e8:8f:f4:6c:fd:fb:0e:3a:b7:8a:f8:12:74: 10:90:47:d4:0b:5c:92:7f:2c:10:44:97:b1:25:ca:6a:9e:7b: 0e:e5:36:d1:5a:38:79:26:ff:7f:75:33:e2:53:b8:7f:c4:96: 78:f0:95:a3:3d:00:c4:4b:2e:ed:9b:7a:f3:5d:cf:1c:7f:37: 99:68:27:4b:bb:1f:10:55:47:15:18:78:25:e0:50:2a:c2:d5: 98:50:ac:16:e0:61:c7:b4:86:8b:27:4f:6d:87:e8:c0:ea:b9: d6:47:f0:30:d2:f5:b3:7d:bf:25:83:bf:32:42:b4:36:04:a4: cd:c4:21:87:29:36:f8:a2:ed:50:b6:45:e9:d4:b5:69:65:b5: 80:21:01:b4:9d:44:6e:18:bc:35:a3:9e:70:9b:c4:9b:6f:99: ae:00:2a:da:37:eb:7e:bc:31:f6:5e:94:85:f7:28:54:9a:63: 6f:3c:0c:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArR8W7PPWhNAvx3v2WxQRLq8ZYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNTA2MDQxMTI3MThaFw0yNTA2MDcxODU0MThaMDMxMTAvBgNV BAMTKENDMjE2OUZENkJDNzMwM0I5QTZFQ0U5RkM4Q0VFMjk1N0ZERDM1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiQCqR8TEgEvZsXleDKLN4JQx ACrwqdzA3SSUHRsr+/Sut3ZT1GyPd+481y4Z+Nj7TaH4waMuFlkd888G/852X6hI hf9Xbatv79dq1sDnH+LoBPVYxxuQPM6IWjVm5g97JKqlXjquWBRkdn/OCc1WmyBc KN1SzOQq2jcf1oiHXMixm/c5BPvPYEtKg8U/vuP4203VBwzJKCqEHDObQwfs3fpB jh5XfwXMwJks7y2X07pcSXjpBjJCBxvwyjdVgbcGhi06H+HxOzyaaor6dMMlQiKH bpgNDYtjihc8X4E4JiAfaulpgcQcnz0z72AdSBc/p3Ft0Wqo8X/yiG77prjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzCFp/WvHMDuabs6fyM7ilX/dNdAwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0dRs2kfezSC13tOs2ltqthFzauxmN3MO0E KpiawG0BJCb4bYcvlWE5DOIuYKBsHb1ENUlt1kdcGdmkTk4vQjggQfQFXx/ZvD2f LNGN6I/0bP37Djq3ivgSdBCQR9QLXJJ/LBBEl7Elymqeew7lNtFaOHkm/391M+JT uH/ElnjwlaM9AMRLLu2bevNdzxx/N5loJ0u7HxBVRxUYeCXgUCrC1ZhQrBbgYce0 hosnT22H6MDqudZH8DDS9bN9vyWDvzJCtDYEpM3EIYcpNvii7VC2RenUtWlltYAh AbSdRG4YvDWjnnCbxJtvma4AKto36368MfZelIX3KFSaY288DK4= -----END CERTIFICATE-----Generated at Fri Jun 6 17:20:20 2025 by rpki-client