$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft (raw, json) Hash identifier: uFjHq+wv8JZP7tci5ZM9FiwCgdf4iAGZ+o0jPoPNA0M= Subject key identifier: 23:45:31:74:FA:0D:F2:17:AD:D4:EC:66:98:13:26:78:7D:BD:84:64 Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Certificate serial: 77936B473233BFB3451E7B20F1447D5B1ED96CF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft Manifest number: 01FC Signing time: Sat 23 Aug 2025 10:11:33 +0000 Manifest this update: Sat 23 Aug 2025 10:06:33 +0000 Manifest next update: Tue 26 Aug 2025 10:21:33 +0000 Files and hashes: 1: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: fQYP6KBmK43mZ1BOpBi0K6IbkEvJhG31/o2xXC40uG8=) 2: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: Mc8Ea5+5WJ6GF7G0KNR6Ybiy7ufabhA8F83CYeyA+z0=) 3: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: cu+gkkkTCuwJj0tPWyI4oDjIIQe1JqfFTuFCDD6tSKw=) 4: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl (hash: HNPDd/qKK2eXeEeqc7dzKdfDwM49lJvnHirrXdeVcAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:93:6b:47:32:33:bf:b3:45:1e:7b:20:f1:44:7d:5b:1e:d9:6c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Validity Not Before: Aug 23 10:06:33 2025 GMT Not After : Aug 26 10:21:33 2025 GMT Subject: CN=23453174FA0DF217ADD4EC66981326787DBD8464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:42:af:fe:a5:f8:94:21:e3:f2:75:30:30:de: f1:3e:0e:37:ac:0a:56:58:f8:7a:93:66:9b:71:f1: 4e:d1:33:d2:d4:8d:b0:0a:7f:d2:d2:1f:c1:7e:5d: 22:1d:ea:29:4b:fe:93:a7:8a:d0:70:df:4e:29:44: 8b:41:fe:1f:46:35:07:64:ce:1e:da:09:38:23:b0: 12:df:0f:01:76:2b:99:2f:3d:fc:ff:1f:8c:96:8a: 1c:b3:cd:0d:df:56:87:f6:25:d8:95:0f:89:cb:f5: 9d:f5:1d:ac:42:18:a6:fe:22:a6:c0:7b:17:f8:ea: ff:67:f3:f7:4e:67:a6:88:7a:fc:22:50:2d:37:d3: 86:93:c1:57:cf:4a:0c:4b:47:b4:34:6d:d1:70:97: 5b:50:d1:d0:ab:5d:3e:d2:c1:da:3b:2b:4f:8c:41: b5:a3:70:36:bd:99:9a:e8:0b:5d:1b:a0:ab:c6:44: ff:8c:7b:e8:79:92:f8:e9:ae:4a:7b:91:90:1d:f7: 84:e3:cf:6d:d7:13:61:7f:5b:4f:bf:66:93:ef:a5: 67:ec:5e:0d:52:16:72:6a:c0:7f:f4:9c:b0:7f:87: e9:47:1f:c9:24:72:24:05:ce:ad:a8:8e:e4:de:05: 68:6f:f7:05:1d:3d:ff:80:1e:3e:d0:b0:54:86:a5: 1b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:45:31:74:FA:0D:F2:17:AD:D4:EC:66:98:13:26:78:7D:BD:84:64 X509v3 Authority Key Identifier: keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4b:29:ea:68:86:89:0e:23:34:60:de:6e:c1:e3:26:7c:5d: 7f:12:0e:f4:61:22:0a:a2:c6:45:e6:6e:0d:0f:3c:d4:8c:dd: 9b:fc:6a:23:73:bd:df:87:4a:95:ab:4c:de:c2:1f:fd:0b:ab: 0c:f5:25:3a:1d:eb:34:7b:a9:22:c6:37:4e:24:a6:a0:5a:06: a9:b4:dc:9f:35:2d:91:5e:08:66:4f:83:f1:6e:94:50:96:a4: 89:b1:e7:81:45:fe:70:c7:9e:e9:3a:a5:54:65:46:3c:cb:08: 2c:79:1e:7e:d5:7b:9c:dd:6d:a7:51:28:d9:10:88:ed:82:11: 49:bf:a7:54:44:b2:53:0b:18:44:42:dd:6b:23:57:34:6f:4b: fa:92:b6:f3:d9:d9:08:07:a6:3d:46:72:cc:9c:07:68:07:2e: 92:a0:53:3c:de:02:d5:e2:24:f8:df:f9:8f:f3:ed:32:a3:5a: af:dc:e2:7a:d8:c4:d4:b5:04:db:4d:97:9b:28:28:8a:e5:41: ef:f7:88:cd:6d:b6:50:c1:3c:6a:8f:01:02:3c:07:9f:fb:46: cd:b2:a5:86:3a:d0:46:f5:12:a0:50:ac:49:ab:7c:0d:ce:c2: d5:1c:1c:0a:34:f6:0f:a2:ce:1e:f0:74:7d:4a:fc:13:58:be: 7d:a7:8f:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd5NrRzIzv7NFHnsg8UR9Wx7ZbPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZF RUYxNURCNjAeFw0yNTA4MjMxMDA2MzNaFw0yNTA4MjYxMDIxMzNaMDMxMTAvBgNV BAMTKDIzNDUzMTc0RkEwREYyMTdBREQ0RUM2Njk4MTMyNjc4N0RCRDg0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Qq/+pfiUIePydTAw3vE+Djes ClZY+HqTZptx8U7RM9LUjbAKf9LSH8F+XSId6ilL/pOnitBw304pRItB/h9GNQdk zh7aCTgjsBLfDwF2K5kvPfz/H4yWihyzzQ3fVof2JdiVD4nL9Z31HaxCGKb+IqbA exf46v9n8/dOZ6aIevwiUC0304aTwVfPSgxLR7Q0bdFwl1tQ0dCrXT7Swdo7K0+M QbWjcDa9mZroC10boKvGRP+Me+h5kvjprkp7kZAd94Tjz23XE2F/W0+/ZpPvpWfs Xg1SFnJqwH/0nLB/h+lHH8kkciQFzq2ojuTeBWhv9wUdPf+AHj7QsFSGpRvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0UxdPoN8het1OxmmBMmeH29hGQwHwYDVR0j BBgwFoAUZLRmUdewx1fkrt4BaR8GL+7xXbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTcwNTkyNy1lYzY0LTQ0ZjUtOWM5ZS1jOWE1NWE1MjNiNjQvMC82NEI0NjY1MUQ3 QjBDNzU3RTRBRURFMDE2OTFGMDYyRkVFRjE1REI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZFRUYx NURCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj OWUtYzlhNTVhNTIzYjY0LzAvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2 MkZFRUYxNURCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpLKepohokOIzRg3m7B4yZ8XX8SDvRhIgqi xkXmbg0PPNSM3Zv8aiNzvd+HSpWrTN7CH/0Lqwz1JTod6zR7qSLGN04kpqBaBqm0 3J81LZFeCGZPg/FulFCWpImx54FF/nDHnuk6pVRlRjzLCCx5Hn7Ve5zdbadRKNkQ iO2CEUm/p1REslMLGERC3WsjVzRvS/qStvPZ2QgHpj1GcsycB2gHLpKgUzzeAtXi JPjf+Y/z7TKjWq/c4nrYxNS1BNtNl5soKIrlQe/3iM1ttlDBPGqPAQI8B5/7Rs2y pYY60Eb1EqBQrEmrfA3OwtUcHAo09g+izh7wdH1K/BNYvn2njwM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:45:24 2025 by rpki-client