$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: O0b5dEt+Vou8o9N9ZaJSJYzhyPYwt5xMt//0+aUFMWA= Subject key identifier: 1B:07:51:73:03:4F:94:BD:82:97:1B:97:B9:DF:E9:04:D1:71:B2:60 Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 37B25DC0AADB5DC1BE52B49C7A78E71FC7C33674 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 018D Signing time: Sun 19 Oct 2025 08:11:57 +0000 Manifest this update: Sun 19 Oct 2025 08:06:57 +0000 Manifest next update: Wed 22 Oct 2025 17:44:57 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=) 2: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=) 3: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=) 4: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: OVTWI95coiLvAaa9DzXtS/euLQbv8xBJQsuoA+NrI1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b2:5d:c0:aa:db:5d:c1:be:52:b4:9c:7a:78:e7:1f:c7:c3:36:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Oct 19 08:06:57 2025 GMT Not After : Oct 22 17:44:57 2025 GMT Subject: CN=1B075173034F94BD82971B97B9DFE904D171B260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:62:92:fa:2a:0d:2b:ee:86:59:63:cc:20: 07:42:af:30:7a:33:f0:11:68:d3:6b:a8:22:10:77: 77:e0:24:6b:2d:56:57:87:7e:80:5c:64:24:6f:eb: f6:8a:24:e3:91:ab:99:c5:7c:66:fb:be:b6:8d:0a: e6:1c:fb:45:41:f9:38:d8:62:48:6f:59:ef:97:be: ba:03:04:99:fa:25:4b:1b:42:5a:78:62:cf:74:d5: c1:df:e0:fb:5b:2c:8e:c6:7f:7a:1d:68:d9:80:8f: 67:5f:14:92:10:5b:9a:d5:c9:36:ef:97:d7:93:da: f0:29:27:b4:f5:6f:78:35:e1:5c:60:04:ef:cf:5e: ca:55:42:1b:40:c8:42:83:2d:99:82:0d:d0:f9:17: ac:4f:9e:aa:84:a8:40:cb:5d:f0:f8:5b:38:18:92: 1a:85:30:73:be:3d:27:72:9b:2c:0e:74:6e:bb:b8: da:f6:83:3b:71:5f:b3:11:43:a3:fa:b5:7e:69:1e: 13:7c:e5:3c:22:6e:f4:c1:ce:8a:be:f4:6c:b1:75: 4b:59:0c:35:db:6b:33:ab:fb:85:f3:98:01:53:30: bc:93:6e:ba:bf:7b:f6:93:fd:37:1b:74:7a:ac:bb: 22:3c:d6:4e:e5:5c:f4:50:b0:67:1d:54:7e:72:4c: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:07:51:73:03:4F:94:BD:82:97:1B:97:B9:DF:E9:04:D1:71:B2:60 X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a4:7d:56:74:e1:2c:24:f0:3b:3b:21:37:29:ff:b2:85:25: 5e:51:da:4b:cc:06:85:a9:b2:2e:68:11:47:fc:5b:6c:bc:ad: 39:8e:82:ab:48:5a:4f:3f:88:44:0f:a9:1f:cc:2c:4e:fd:d8: 9e:d0:52:cb:20:01:19:45:8c:d4:fe:51:f0:64:6f:44:13:80: a9:6d:7f:92:e5:58:34:ea:54:54:9a:95:26:2a:c0:25:bf:9f: ef:29:1e:21:34:3b:4e:b8:c3:0d:28:84:01:c4:67:5a:25:65: 16:24:fb:36:44:83:6c:41:1d:af:03:75:9d:6d:59:be:0c:67: 42:c8:6a:33:cc:12:e7:5f:a2:d9:d7:49:00:b4:b6:3b:12:7c: 95:2d:2c:e5:85:c5:76:cc:31:eb:fe:e4:7f:65:69:00:18:b0: 21:82:4a:61:f6:15:74:4c:4c:0a:c0:bb:ab:24:da:cb:45:ba: 0e:25:47:43:4d:f6:6a:a0:ef:e0:cd:8d:78:73:23:73:52:97: 00:17:09:aa:70:b7:59:7c:5f:9f:fa:8f:2e:eb:71:66:2d:5e: 29:aa:d1:92:56:49:1e:3a:c3:9f:cf:cc:bb:f3:32:42:1b:13: 16:16:5a:8a:7f:37:87:df:61:b1:dd:4e:1c:eb:1e:00:98:39: dd:7e:e6:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7JdwKrbXcG+UrScenjnH8fDNnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTEwMTkwODA2NTdaFw0yNTEwMjIxNzQ0NTdaMDMxMTAvBgNV BAMTKDFCMDc1MTczMDM0Rjk0QkQ4Mjk3MUI5N0I5REZFOTA0RDE3MUIyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPomKS+ioNK+6GWWPMIAdCrzB6 M/ARaNNrqCIQd3fgJGstVleHfoBcZCRv6/aKJOORq5nFfGb7vraNCuYc+0VB+TjY YkhvWe+XvroDBJn6JUsbQlp4Ys901cHf4PtbLI7Gf3odaNmAj2dfFJIQW5rVyTbv l9eT2vApJ7T1b3g14VxgBO/PXspVQhtAyEKDLZmCDdD5F6xPnqqEqEDLXfD4WzgY khqFMHO+PSdymywOdG67uNr2gztxX7MRQ6P6tX5pHhN85TwibvTBzoq+9GyxdUtZ DDXbazOr+4XzmAFTMLyTbrq/e/aT/TcbdHqsuyI81k7lXPRQsGcdVH5yTOGbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGwdRcwNPlL2ClxuXud/pBNFxsmAwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6kfVZ04Swk8Ds7ITcp/7KFJV5R2kvMBoWp si5oEUf8W2y8rTmOgqtIWk8/iEQPqR/MLE792J7QUssgARlFjNT+UfBkb0QTgKlt f5LlWDTqVFSalSYqwCW/n+8pHiE0O064ww0ohAHEZ1olZRYk+zZEg2xBHa8DdZ1t Wb4MZ0LIajPMEudfotnXSQC0tjsSfJUtLOWFxXbMMev+5H9laQAYsCGCSmH2FXRM TArAu6sk2stFug4lR0NN9mqg7+DNjXhzI3NSlwAXCapwt1l8X5/6jy7rcWYtXimq 0ZJWSR46w5/PzLvzMkIbExYWWop/N4ffYbHdThzrHgCYOd1+5v8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:49 2025 by rpki-client