$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: iUsQOx0Go4JXGf95hlKrMWh1OTqfDhT3a31R4G2UyYs= Subject key identifier: 3E:65:08:78:77:36:BD:60:24:53:9C:1F:6E:84:8C:B2:54:8F:2D:F1 Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 36C644774BC0B04D8D894F0ABF35C89BBD66D1A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 0144 Signing time: Wed 07 May 2025 08:41:55 +0000 Manifest this update: Wed 07 May 2025 08:36:55 +0000 Manifest next update: Sat 10 May 2025 12:48:55 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=) 2: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=) 3: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: xf/NKhEJnrHivmJ21g6Afb6DRHb7l4n+01iZFHU38e8=) 4: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 12:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c6:44:77:4b:c0:b0:4d:8d:89:4f:0a:bf:35:c8:9b:bd:66:d1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: May 7 08:36:55 2025 GMT Not After : May 10 12:48:55 2025 GMT Subject: CN=3E6508787736BD6024539C1F6E848CB2548F2DF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:c0:9d:77:0c:a6:37:1c:93:f4:a3:8b:92: db:8d:e1:83:6b:7d:87:28:6b:3b:e8:9a:45:ff:2b: 37:3d:cd:a4:01:f6:82:25:58:e7:86:eb:1d:b9:0c: f7:2d:f2:ac:9e:52:78:f8:22:7a:cd:6d:2c:79:8f: cf:7d:53:6e:ac:a7:4c:80:ae:8a:23:e3:84:f9:f5: 5a:f9:65:5a:af:40:85:58:0d:0c:49:e9:6b:37:eb: ac:68:6d:47:7f:75:d6:73:57:65:4d:52:8f:d1:36: 59:a5:57:11:14:1e:51:91:70:c3:1e:b1:e8:ea:3e: 79:c2:13:d3:af:06:8b:14:8e:84:1a:66:d6:4c:8c: 27:6a:42:86:b7:e9:5d:27:90:9d:ed:d5:62:0b:60: c9:33:3b:ec:9f:62:7e:aa:f1:53:f8:cc:eb:aa:43: 79:ca:0d:05:a6:27:92:5b:54:6e:45:d7:8a:98:51: f8:2f:e2:0a:b6:b3:ad:3b:bb:8f:e5:c0:ba:dc:b1: a0:d9:54:55:70:47:4f:5a:fb:25:2d:db:81:39:18: 88:c3:94:70:cf:b1:6c:ae:bd:61:3a:7e:55:92:ad: 2e:42:15:f2:7f:00:ec:a1:25:23:a2:4f:6d:b2:fc: 19:de:98:8b:ac:98:43:09:ce:6a:dd:58:68:b0:cc: 37:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:65:08:78:77:36:BD:60:24:53:9C:1F:6E:84:8C:B2:54:8F:2D:F1 X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:10:19:7b:c0:e1:2b:74:6b:53:df:b7:97:dd:b4:0d:02:63: 69:d8:58:f5:d0:6e:09:9c:a9:15:20:31:a7:a3:e9:27:31:76: c7:c2:b9:a3:72:36:db:8d:dd:95:7e:23:3b:83:17:a9:76:6d: 96:cd:30:ce:bc:8a:16:a9:c0:82:bd:ee:64:ea:64:34:47:95: 22:da:47:e2:e9:8c:1e:ba:fa:ca:82:44:8e:72:ea:b0:c8:32: 54:6e:4b:fb:42:5a:e5:7b:0b:73:ed:e6:e4:c0:e8:29:e1:1a: b2:8c:17:b0:e0:ca:66:a6:37:55:d2:6f:c9:0f:80:6c:dc:6c: e4:f5:10:88:47:07:96:f8:ed:3a:a6:77:a2:f4:27:70:36:7a: e5:3b:59:07:7a:7d:29:57:62:7b:dc:00:cc:b2:f8:38:18:81: ca:c1:81:57:17:ce:c4:8e:fa:51:b9:d1:4c:b7:09:98:fd:9f: 4c:d5:f9:b1:9b:e0:ca:ad:56:12:12:7a:c4:55:b7:1b:4d:3c: ff:3a:9c:37:c6:b8:9f:70:82:46:dc:15:04:58:70:80:7e:2d: 93:5f:ad:ae:b9:28:88:63:0f:9a:0b:cd:ac:f6:59:f5:cf:0e: 8d:e9:63:b6:36:c3:33:0c:db:04:7d:04:67:f0:e8:66:69:76: ad:6f:8e:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsZEd0vAsE2NiU8KvzXIm71m0aMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTA1MDcwODM2NTVaFw0yNTA1MTAxMjQ4NTVaMDMxMTAvBgNV BAMTKDNFNjUwODc4NzczNkJENjAyNDUzOUMxRjZFODQ4Q0IyNTQ4RjJERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5RcCddwymNxyT9KOLktuN4YNr fYcoazvomkX/Kzc9zaQB9oIlWOeG6x25DPct8qyeUnj4InrNbSx5j899U26sp0yA rooj44T59Vr5ZVqvQIVYDQxJ6Ws366xobUd/ddZzV2VNUo/RNlmlVxEUHlGRcMMe sejqPnnCE9OvBosUjoQaZtZMjCdqQoa36V0nkJ3t1WILYMkzO+yfYn6q8VP4zOuq Q3nKDQWmJ5JbVG5F14qYUfgv4gq2s607u4/lwLrcsaDZVFVwR09a+yUt24E5GIjD lHDPsWyuvWE6flWSrS5CFfJ/AOyhJSOiT22y/BnemIusmEMJzmrdWGiwzDfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPmUIeHc2vWAkU5wfboSMslSPLfEwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcQGXvA4St0a1Pft5fdtA0CY2nYWPXQbgmc qRUgMaej6ScxdsfCuaNyNtuN3ZV+IzuDF6l2bZbNMM68ihapwIK97mTqZDRHlSLa R+LpjB66+sqCRI5y6rDIMlRuS/tCWuV7C3Pt5uTA6CnhGrKMF7DgymamN1XSb8kP gGzcbOT1EIhHB5b47Tqmd6L0J3A2euU7WQd6fSlXYnvcAMyy+DgYgcrBgVcXzsSO +lG50Uy3CZj9n0zV+bGb4MqtVhISesRVtxtNPP86nDfGuJ9wgkbcFQRYcIB+LZNf ra65KIhjD5oLzaz2WfXPDo3pY7Y2wzMM2wR9BGfw6GZpdq1vjic= -----END CERTIFICATE-----Generated at Thu May 8 10:43:03 2025 by rpki-client