$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft File: 64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json) Hash identifier: 8naRB74NYV13XPou+cLVCuiy9xTKj1msreYlEJxDewM= Subject key identifier: 98:A5:BE:FD:5D:B7:64:83:DF:F0:99:66:25:53:1D:E3:31:D3:B6:73 Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 Certificate issuer: /CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Certificate serial: 2F7F7D0E3C2F4952F0089EEB9CFE4A5C1D49CD34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft Manifest number: 0261 Signing time: Sat 23 Aug 2025 10:22:19 +0000 Manifest this update: Sat 23 Aug 2025 10:17:19 +0000 Manifest next update: Tue 26 Aug 2025 14:56:19 +0000 Files and hashes: 1: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: 5/4B7mjJxJu1f6zKI33n6PYrawE2JzH7domW+RNwtsE=) 2: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: qSBErkc+YmE96+YNp3stuWS6LNkBq7zVOQLn2fcpQx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7f:7d:0e:3c:2f:49:52:f0:08:9e:eb:9c:fe:4a:5c:1d:49:cd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Validity Not Before: Aug 23 10:17:19 2025 GMT Not After : Aug 26 14:56:19 2025 GMT Subject: CN=98A5BEFD5DB76483DFF0996625531DE331D3B673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:74:18:e3:13:be:3e:c8:2a:13:6f:3f:54: 21:ad:55:76:2f:59:46:ff:3b:11:ef:d6:bf:91:be: bf:c9:8c:5a:78:59:cd:bb:bb:fc:c4:3a:df:1f:70: e9:97:b4:70:4c:0f:f2:90:87:ba:76:f8:5c:b6:e7: 38:a3:f5:50:2a:ed:48:6d:1f:30:96:eb:e3:2c:50: b7:55:8f:92:7f:05:ec:0b:f9:68:65:87:5d:f6:80: bb:50:bd:ec:de:44:bb:53:15:40:c2:90:c6:d1:0f: b2:a0:fb:9f:61:54:06:04:f7:d3:fd:9a:5e:f1:74: ec:8f:28:97:a8:8a:ee:40:86:1c:95:16:bd:b7:b1: e1:71:cb:33:14:c6:d2:e2:61:71:b9:3f:e6:af:53: 5b:8f:5f:43:1c:93:85:04:8e:d2:89:83:3c:25:7b: ee:5b:13:1a:49:86:54:78:b6:81:bf:0c:57:c1:bb: ba:f7:44:d5:c2:32:f2:1f:00:a2:8f:3c:ab:89:90: 67:86:c0:8f:4f:13:10:54:7a:93:ab:76:50:e4:e6: 46:fa:88:ac:b1:08:02:56:be:27:e1:d2:f3:a3:92: ee:ea:4f:f6:a0:9d:4b:b2:df:5a:23:2a:2e:37:db: 5b:69:6a:be:b1:3b:5b:0d:23:f9:9b:05:a5:31:55: a1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A5:BE:FD:5D:B7:64:83:DF:F0:99:66:25:53:1D:E3:31:D3:B6:73 X509v3 Authority Key Identifier: keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:a1:3f:e4:2e:1c:a8:4e:cb:e0:94:82:5c:0f:3a:de:ef:c5: d2:2c:77:b1:72:53:1a:2b:27:4e:5d:cb:61:0c:22:cf:d8:d8: 99:79:d2:26:66:6a:35:fa:1e:95:82:a0:98:f8:ec:b3:25:4a: 36:4f:63:cc:33:8c:17:28:7e:21:4c:1a:c2:8d:f2:30:63:4f: c1:0d:95:05:6e:c1:4d:17:35:44:f7:3a:12:e7:b5:ff:e9:0e: 26:0e:4c:5d:0d:2c:27:47:3a:9c:4e:dd:cd:17:b4:06:03:28: ee:91:6d:e2:d4:ed:a5:8e:38:81:a7:1c:3b:c5:e9:ce:7c:86: 6d:10:c3:15:fc:78:78:3e:59:68:36:b6:55:70:bc:4f:63:55: 44:64:37:45:24:f7:38:e4:9e:b1:30:db:d5:c1:ec:18:8f:63: 58:74:48:85:10:ed:70:0b:99:b2:4a:6b:bc:44:d8:fb:74:71: 9a:e3:41:17:8e:99:25:41:5a:a3:ed:fa:38:8f:d9:c6:5e:cc: 34:6c:80:c2:c5:c3:e7:77:70:9b:15:3d:27:16:73:10:99:e0: bb:56:05:c7:ef:8c:96:2a:6c:46:68:07:eb:e3:4a:04:1d:d6: 31:f7:25:e8:b9:88:7c:da:9b:d6:e1:ba:9c:91:2a:10:bb:79: 26:a2:9a:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL399DjwvSVLwCJ7rnP5KXB1JzTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4 MDIyQzNDNTAeFw0yNTA4MjMxMDE3MTlaFw0yNTA4MjYxNDU2MTlaMDMxMTAvBgNV BAMTKDk4QTVCRUZENURCNzY0ODNERkYwOTk2NjI1NTMxREUzMzFEM0I2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2FXQY4xO+PsgqE28/VCGtVXYv WUb/OxHv1r+Rvr/JjFp4Wc27u/zEOt8fcOmXtHBMD/KQh7p2+Fy25zij9VAq7Uht HzCW6+MsULdVj5J/BewL+Whlh132gLtQvezeRLtTFUDCkMbRD7Kg+59hVAYE99P9 ml7xdOyPKJeoiu5AhhyVFr23seFxyzMUxtLiYXG5P+avU1uPX0Mck4UEjtKJgzwl e+5bExpJhlR4toG/DFfBu7r3RNXCMvIfAKKPPKuJkGeGwI9PExBUepOrdlDk5kb6 iKyxCAJWvifh0vOjku7qT/agnUuy31ojKi4321tpar6xO1sNI/mbBaUxVaGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmKW+/V23ZIPf8JlmJVMd4zHTtnMwHwYDVR0j BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3 NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy QzNDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3 NjU4MDIyQzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMChP+QuHKhOy+CUglwPOt7vxdIsd7FyUxor J05dy2EMIs/Y2Jl50iZmajX6HpWCoJj47LMlSjZPY8wzjBcofiFMGsKN8jBjT8EN lQVuwU0XNUT3OhLntf/pDiYOTF0NLCdHOpxO3c0XtAYDKO6RbeLU7aWOOIGnHDvF 6c58hm0QwxX8eHg+WWg2tlVwvE9jVURkN0Uk9zjknrEw29XB7BiPY1h0SIUQ7XAL mbJKa7xE2Pt0cZrjQReOmSVBWqPt+jiP2cZezDRsgMLFw+d3cJsVPScWcxCZ4LtW BcfvjJYqbEZoB+vjSgQd1jH3Jei5iHzam9bhupyRKhC7eSaimvk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:28:55 2025 by rpki-client