$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: ZHQ73Q8OW4hagGXG9zmZ1iK5sz20G8QIlbly97PkAYo= Subject key identifier: 32:C2:BC:81:00:E9:2A:E5:54:2E:96:C0:8C:E4:A1:82:1D:5B:CF:67 Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 4E0E288224641F1E714BC1DF5118597007D1B79F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 0172 Signing time: Mon 28 Jul 2025 19:52:30 +0000 Manifest this update: Mon 28 Jul 2025 19:47:30 +0000 Manifest next update: Fri 01 Aug 2025 07:24:30 +0000 Files and hashes: 1: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: CtcSwtW0eQZcV76q5IyZFPggQ7etLNCoG9WfOGNT/Rw=) 2: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: OMvT7v+SWmvCcI/oQS1wfiv6hD1AXfKdII4PA3MiDEc=) 3: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 22:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0e:28:82:24:64:1f:1e:71:4b:c1:df:51:18:59:70:07:d1:b7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Jul 28 19:47:30 2025 GMT Not After : Aug 1 07:24:30 2025 GMT Subject: CN=32C2BC8100E92AE5542E96C08CE4A1821D5BCF67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5e:e4:1d:22:2a:64:32:2a:e8:a5:d5:a5:32: 80:89:50:05:01:11:82:de:7a:b7:6b:34:74:09:74: 49:88:36:24:e9:e6:f0:67:ca:a5:59:2e:98:ec:f1: b9:84:9f:9d:4f:58:c5:c7:ae:67:36:3b:f6:e4:8d: 97:75:8a:3a:d1:09:df:0a:74:5d:12:3b:84:32:dd: a7:99:6f:a6:1b:0c:ca:46:69:ea:06:62:b4:52:12: 94:97:d5:64:c8:e7:de:28:f9:fb:b3:0f:b5:47:e5: 52:d2:68:b5:77:7f:ac:a8:00:7a:24:85:fe:a7:93: c7:67:22:66:68:e5:98:da:72:7b:ea:6e:8a:39:4f: ad:5e:c5:56:31:c4:5e:4e:76:8b:74:9d:d2:a1:82: c3:0e:92:87:89:33:28:fe:f2:fb:a4:eb:b0:9b:dc: 30:2d:62:bd:cb:2a:f2:9b:77:56:09:19:ad:6e:6c: cc:ef:6c:c2:6c:75:23:cd:8e:61:d3:71:3a:ce:a7: 04:51:80:34:3d:10:ef:76:43:ed:8a:81:45:dd:34: f5:41:07:0b:e8:f0:a9:7c:23:f7:04:89:07:b7:4d: 2c:23:13:a0:1c:4c:18:ec:e0:a4:7e:64:31:81:4a: b7:d4:2a:b5:7e:a5:cc:f7:59:61:94:2c:dc:92:c3: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C2:BC:81:00:E9:2A:E5:54:2E:96:C0:8C:E4:A1:82:1D:5B:CF:67 X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:aa:73:6f:61:f4:8d:4c:7d:31:1e:8f:d9:86:e3:05:a1:04: 2b:26:2c:71:de:aa:ab:d8:fb:25:d8:7f:e0:df:1e:5e:6e:f5: e1:e2:4f:de:f8:a8:73:2c:22:e0:02:16:6a:5c:a3:80:c5:55: c7:db:27:2c:d5:74:a7:f3:05:15:a2:de:ee:c1:12:0c:2b:51: 1f:cd:cd:7b:93:63:92:02:26:a0:3a:1f:28:76:27:40:fa:01: 02:70:91:22:6b:d6:f4:06:85:5c:18:f8:be:cb:aa:fe:15:fd: 26:82:30:cc:60:1b:1f:ce:7c:d9:af:8a:1b:b8:89:c2:1a:c2: de:f7:a3:aa:17:37:4d:d2:ba:90:c4:10:5c:81:3c:65:b8:2a: b5:ce:b8:67:fc:f6:3b:fa:d6:30:5c:1c:4c:48:c8:43:7d:4a: 7e:a6:92:65:20:7e:fb:48:b7:50:fb:78:30:0a:3c:d2:f3:e3: 48:8a:70:02:da:13:c6:3b:a5:c4:f3:9f:dc:95:b8:11:96:ec: 27:d8:42:b8:67:60:18:84:58:64:94:22:6a:86:8a:c8:14:bf: 8f:68:bd:d4:f0:f9:00:22:59:2e:79:6a:9b:45:5c:ce:ea:31: ea:8a:03:32:34:6d:ca:6d:38:7c:73:e7:5c:86:5f:77:36:84: 27:72:9c:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTg4ogiRkHx5xS8HfURhZcAfRt58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNTA3MjgxOTQ3MzBaFw0yNTA4MDEwNzI0MzBaMDMxMTAvBgNV BAMTKDMyQzJCQzgxMDBFOTJBRTU1NDJFOTZDMDhDRTRBMTgyMUQ1QkNGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpXuQdIipkMiropdWlMoCJUAUB EYLeerdrNHQJdEmINiTp5vBnyqVZLpjs8bmEn51PWMXHrmc2O/bkjZd1ijrRCd8K dF0SO4Qy3aeZb6YbDMpGaeoGYrRSEpSX1WTI594o+fuzD7VH5VLSaLV3f6yoAHok hf6nk8dnImZo5Zjacnvqboo5T61exVYxxF5Odot0ndKhgsMOkoeJMyj+8vuk67Cb 3DAtYr3LKvKbd1YJGa1ubMzvbMJsdSPNjmHTcTrOpwRRgDQ9EO92Q+2KgUXdNPVB Bwvo8Kl8I/cEiQe3TSwjE6AcTBjs4KR+ZDGBSrfUKrV+pcz3WWGULNySw0GHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMsK8gQDpKuVULpbAjOShgh1bz2cwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuqc29h9I1MfTEej9mG4wWhBCsmLHHeqqvY +yXYf+DfHl5u9eHiT974qHMsIuACFmpco4DFVcfbJyzVdKfzBRWi3u7BEgwrUR/N zXuTY5ICJqA6Hyh2J0D6AQJwkSJr1vQGhVwY+L7Lqv4V/SaCMMxgGx/OfNmvihu4 icIawt73o6oXN03SupDEEFyBPGW4KrXOuGf89jv61jBcHExIyEN9Sn6mkmUgfvtI t1D7eDAKPNLz40iKcALaE8Y7pcTzn9yVuBGW7CfYQrhnYBiEWGSUImqGisgUv49o vdTw+QAiWS55aptFXM7qMeqKAzI0bcptOHxz51yGX3c2hCdynOQ= -----END CERTIFICATE-----Generated at Tue Jul 29 00:15:21 2025 by rpki-client