$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft File: 64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json) Hash identifier: 7eiH6/dN295xoiOSazie3ucjqRk7Z+MGqkfNUn/rKqM= Subject key identifier: C5:73:C0:87:1E:99:07:32:EC:39:AB:44:D1:55:76:23:0B:75:F8:A4 Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 Certificate issuer: /CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Certificate serial: 23B5D82E7531BB280A31975A440417DF44339A71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft Manifest number: 0249 Signing time: Sun 29 Jun 2025 11:02:07 +0000 Manifest this update: Sun 29 Jun 2025 10:57:07 +0000 Manifest next update: Wed 02 Jul 2025 12:43:07 +0000 Files and hashes: 1: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: F0K1d6t08Uztl3k3jQz1hCvUp2LzAkzRZxQh6LHk3Vo=) 2: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: qSBErkc+YmE96+YNp3stuWS6LNkBq7zVOQLn2fcpQx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 12:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b5:d8:2e:75:31:bb:28:0a:31:97:5a:44:04:17:df:44:33:9a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Validity Not Before: Jun 29 10:57:07 2025 GMT Not After : Jul 2 12:43:07 2025 GMT Subject: CN=C573C0871E990732EC39AB44D15576230B75F8A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:37:64:ab:a3:29:23:23:d8:1e:fa:63:3a: 0f:8d:4e:69:21:08:06:48:b8:e3:0d:b1:a9:be:1b: 21:3a:6c:41:ea:9f:f7:d4:dc:60:62:d0:ff:0c:ae: 74:f2:68:96:c2:28:91:91:17:03:56:36:8f:3c:28: 24:83:70:cd:ff:37:b5:e8:5a:f6:b3:78:1e:06:14: e5:91:8a:90:61:37:77:91:8e:e7:29:7b:e4:37:a3: fe:28:90:8d:d5:f9:fd:b2:ca:cc:70:a1:e0:9d:45: a5:92:48:9e:1a:c5:15:86:11:74:42:88:68:33:30: 07:fe:ec:7a:56:77:9d:0f:cc:32:ad:ce:24:03:2e: 41:2a:cb:98:18:b2:29:22:d2:06:f8:cb:4b:cc:47: 80:05:b6:01:ee:01:1e:6d:5a:db:79:9f:bf:1e:14: a4:2e:a1:1e:50:4a:45:bf:cf:65:40:4f:7c:32:e5: 84:58:74:93:66:0c:94:6b:8c:c9:6f:c0:63:c2:52: 33:4a:1d:8f:88:14:d9:7d:ad:d0:cb:df:53:ea:ea: 18:ea:0e:46:46:49:50:ca:06:de:2b:a7:a3:3d:be: 86:c5:f8:b8:2e:df:d0:c6:04:e8:03:44:07:61:39: be:29:72:da:0d:ed:b5:17:5e:e3:18:70:2f:27:8f: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:73:C0:87:1E:99:07:32:EC:39:AB:44:D1:55:76:23:0B:75:F8:A4 X509v3 Authority Key Identifier: keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:b0:17:9d:17:09:b9:6b:0a:bf:85:4d:2c:72:1a:d1:9e:5e: 32:45:77:fa:67:95:36:4c:de:8b:40:37:3b:55:0e:93:09:8d: c3:32:5e:6b:37:60:ab:18:b9:6b:f5:f5:05:ef:35:31:ab:dd: 99:6c:8f:ed:a4:1d:5e:81:10:45:75:d2:c3:8b:bd:78:24:e1: 10:51:37:f5:33:68:be:fa:0f:58:45:64:11:9a:a9:f4:28:c8: 14:2e:75:87:09:1a:b2:d3:0e:97:48:0e:b3:4d:a3:34:be:54: 1c:74:52:f4:5d:f4:4d:cb:44:3b:02:bf:fc:db:c9:84:f2:f5: d9:5d:31:8c:43:b9:e5:4a:91:84:e1:54:c4:ef:01:77:89:2b: 7a:93:ce:91:98:e3:b8:ce:e4:5e:35:cd:f9:03:7b:99:b5:c4: 63:73:e5:7e:52:d2:a6:9f:b8:d5:45:76:c5:c8:ac:ec:f4:74: 29:7f:1a:a2:ca:d1:2a:17:17:43:30:52:7b:f6:84:e7:45:48: 2a:56:7e:2f:44:6e:9c:fe:0f:bb:d3:fe:2c:94:83:33:aa:a5: 4c:77:d0:6e:55:6a:4f:73:fd:a8:48:be:8d:f0:cc:35:99:77: f9:2a:c8:6d:aa:61:8c:b1:94:b2:dc:b7:42:6e:fc:f8:08:2f: 74:43:1a:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7XYLnUxuygKMZdaRAQX30QzmnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4 MDIyQzNDNTAeFw0yNTA2MjkxMDU3MDdaFw0yNTA3MDIxMjQzMDdaMDMxMTAvBgNV BAMTKEM1NzNDMDg3MUU5OTA3MzJFQzM5QUI0NEQxNTU3NjIzMEI3NUY4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc6Tdkq6MpIyPYHvpjOg+NTmkh CAZIuOMNsam+GyE6bEHqn/fU3GBi0P8MrnTyaJbCKJGRFwNWNo88KCSDcM3/N7Xo WvazeB4GFOWRipBhN3eRjucpe+Q3o/4okI3V+f2yysxwoeCdRaWSSJ4axRWGEXRC iGgzMAf+7HpWd50PzDKtziQDLkEqy5gYsiki0gb4y0vMR4AFtgHuAR5tWtt5n78e FKQuoR5QSkW/z2VAT3wy5YRYdJNmDJRrjMlvwGPCUjNKHY+IFNl9rdDL31Pq6hjq DkZGSVDKBt4rp6M9vobF+Lgu39DGBOgDRAdhOb4pctoN7bUXXuMYcC8njzxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxXPAhx6ZBzLsOatE0VV2Iwt1+KQwHwYDVR0j BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3 NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy QzNDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3 NjU4MDIyQzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMewF50XCblrCr+FTSxyGtGeXjJFd/pnlTZM 3otANztVDpMJjcMyXms3YKsYuWv19QXvNTGr3Zlsj+2kHV6BEEV10sOLvXgk4RBR N/UzaL76D1hFZBGaqfQoyBQudYcJGrLTDpdIDrNNozS+VBx0UvRd9E3LRDsCv/zb yYTy9dldMYxDueVKkYThVMTvAXeJK3qTzpGY47jO5F41zfkDe5m1xGNz5X5S0qaf uNVFdsXIrOz0dCl/GqLK0SoXF0MwUnv2hOdFSCpWfi9Ebpz+D7vT/iyUgzOqpUx3 0G5Vak9z/ahIvo3wzDWZd/kqyG2qYYyxlLLct0Ju/PgIL3RDGlc= -----END CERTIFICATE-----Generated at Mon Jun 30 16:16:28 2025 by rpki-client