$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: H9rkZfKR90JzBUt1R3DUkZk61Ocv4XbrdWtSS5P+kj0= Subject key identifier: 66:60:81:CE:48:0B:2B:87:B1:5A:D8:5A:95:A9:29:D1:2B:6F:08:3E Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 0D68F01443641321E6F9A93A8A6A8A075964E2BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 0195 Signing time: Fri 17 Oct 2025 20:02:25 +0000 Manifest this update: Fri 17 Oct 2025 19:57:25 +0000 Manifest next update: Mon 20 Oct 2025 20:34:25 +0000 Files and hashes: 1: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: OMvT7v+SWmvCcI/oQS1wfiv6hD1AXfKdII4PA3MiDEc=) 2: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: IfQ7nRI9T7JFbzOkiwYipG5kRwx0girpMxIvOYuTWU8=) 3: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 20:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:68:f0:14:43:64:13:21:e6:f9:a9:3a:8a:6a:8a:07:59:64:e2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Oct 17 19:57:25 2025 GMT Not After : Oct 20 20:34:25 2025 GMT Subject: CN=666081CE480B2B87B15AD85A95A929D12B6F083E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:14:d2:fa:d5:c3:f9:4b:c6:04:c2:37:fb:5a: e2:fd:77:33:e4:c6:a0:40:1c:20:42:30:f1:15:1f: a3:fc:d7:5b:98:39:ff:6e:12:35:6c:00:fc:ac:6c: 02:36:c1:98:53:c0:7d:96:b6:66:46:6d:cd:ab:51: 5f:35:e3:ca:c7:51:9c:17:65:ef:12:df:a7:53:eb: cf:4b:f7:a9:8d:76:31:fe:15:c2:19:a8:2c:67:6a: 2f:28:af:57:e0:13:b5:0d:89:55:cf:cd:0b:00:d2: 16:55:f2:e3:91:89:b4:9a:c2:f2:10:9d:53:00:4d: aa:d9:17:88:9d:d9:7b:fa:91:bc:27:46:09:9a:e3: 28:d5:35:29:32:c1:07:ca:b8:69:40:7b:29:cb:86: 69:fa:80:4c:34:d4:71:ec:dd:01:31:63:43:74:22: e1:03:65:44:72:dc:14:a8:1e:8d:f2:8d:69:8a:15: c9:ae:2a:89:2d:6a:1c:0e:9a:fa:39:e9:eb:2d:a7: 8e:d1:d9:40:c8:67:65:bc:1a:e8:73:9f:53:5e:24: 6c:f2:5c:96:6e:f8:a5:94:42:97:98:0c:b2:a6:cf: 4f:b5:04:3b:7e:9c:41:29:b5:b5:11:4a:dd:09:dd: 35:f7:0f:06:03:c3:33:76:fe:15:82:2d:5f:00:21: af:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:60:81:CE:48:0B:2B:87:B1:5A:D8:5A:95:A9:29:D1:2B:6F:08:3E X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:bf:18:b0:4b:65:44:68:25:f1:d5:0a:d3:99:ef:63:9b:54: 9b:f7:a2:a6:20:e4:90:e6:cf:46:cf:23:e2:f0:5c:74:25:b6: 68:9f:bf:10:60:17:c9:19:83:31:b5:83:2f:68:31:ed:d9:b5: 3b:ac:1e:56:81:52:7b:ec:cf:1b:bf:ab:17:20:1f:89:e9:14: 67:df:35:a1:19:35:c7:bf:0e:c5:d5:ea:9b:c0:3b:43:e4:55: 61:a4:43:57:ad:a6:85:65:9f:2b:35:d9:12:9a:63:6d:c1:6e: c8:f0:15:3f:ed:f2:8c:18:07:8a:32:a7:47:6e:63:8a:0a:32: 00:09:17:b9:bf:71:ef:65:8b:b2:80:e1:38:f6:ac:27:bd:d6: 89:d9:4e:40:54:1d:b6:b1:4a:bd:b0:95:30:ab:31:a7:97:2f: ac:e2:e7:d3:21:9a:50:e7:75:9e:e0:bb:34:8d:6c:46:65:74: 7b:69:b0:0d:8c:39:3e:75:26:e4:0e:9d:fa:a4:51:db:3a:d3: a2:2d:cf:7e:a2:30:35:a2:79:04:97:fe:ef:78:79:4a:1e:1a: 47:32:fd:f3:d7:2e:67:90:22:45:97:11:61:8b:22:2b:7c:9f: c8:9c:04:c6:06:43:05:51:12:19:cd:f3:62:66:c8:1a:9b:96: f9:16:5d:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWjwFENkEyHm+ak6imqKB1lk4rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNTEwMTcxOTU3MjVaFw0yNTEwMjAyMDM0MjVaMDMxMTAvBgNV BAMTKDY2NjA4MUNFNDgwQjJCODdCMTVBRDg1QTk1QTkyOUQxMkI2RjA4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRFNL61cP5S8YEwjf7WuL9dzPk xqBAHCBCMPEVH6P811uYOf9uEjVsAPysbAI2wZhTwH2WtmZGbc2rUV8148rHUZwX Ze8S36dT689L96mNdjH+FcIZqCxnai8or1fgE7UNiVXPzQsA0hZV8uORibSawvIQ nVMATarZF4id2Xv6kbwnRgma4yjVNSkywQfKuGlAeynLhmn6gEw01HHs3QExY0N0 IuEDZURy3BSoHo3yjWmKFcmuKoktahwOmvo56estp47R2UDIZ2W8Guhzn1NeJGzy XJZu+KWUQpeYDLKmz0+1BDt+nEEptbURSt0J3TX3DwYDwzN2/hWCLV8AIa/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZmCBzkgLK4exWthalakp0StvCD4wHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN6/GLBLZURoJfHVCtOZ72ObVJv3oqYg5JDm z0bPI+LwXHQltmifvxBgF8kZgzG1gy9oMe3ZtTusHlaBUnvszxu/qxcgH4npFGff NaEZNce/DsXV6pvAO0PkVWGkQ1etpoVlnys12RKaY23BbsjwFT/t8owYB4oyp0du Y4oKMgAJF7m/ce9li7KA4Tj2rCe91onZTkBUHbaxSr2wlTCrMaeXL6zi59MhmlDn dZ7guzSNbEZldHtpsA2MOT51JuQOnfqkUds606Itz36iMDWieQSX/u94eUoeGkcy /fPXLmeQIkWXEWGLIit8n8icBMYGQwVREhnN82JmyBqblvkWXWM= -----END CERTIFICATE-----Generated at Sun Oct 19 18:07:51 2025 by rpki-client