$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: ko1AnDee3tghXiFm4Ud/SVw/9G9gGcg+MiVOmfM1lnA= Subject key identifier: 44:79:E6:36:53:FA:89:14:53:C7:88:A0:7E:1F:46:A5:49:55:9B:5E Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 20C687C92259934C8A9B67DA4669F84D9000FAF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 0173 Signing time: Thu 21 Aug 2025 14:51:56 +0000 Manifest this update: Thu 21 Aug 2025 14:46:56 +0000 Manifest next update: Mon 25 Aug 2025 01:43:56 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=) 2: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=) 3: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: SqjIp7Po1/R3MhoZubTQ3tmHuZDaJRZo9lT1F8+nfo4=) 4: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c6:87:c9:22:59:93:4c:8a:9b:67:da:46:69:f8:4d:90:00:fa:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Aug 21 14:46:56 2025 GMT Not After : Aug 25 01:43:56 2025 GMT Subject: CN=4479E63653FA891453C788A07E1F46A549559B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:30:aa:10:7a:f4:82:0b:9f:7a:d1:b2:f8:86: 0e:b9:dd:11:79:ff:20:dc:89:3c:dc:c7:82:99:5d: 4a:79:a6:a6:a4:ee:94:6c:f4:8a:bf:a2:61:b1:b2: 08:58:20:23:04:4f:e9:64:60:3f:07:4a:d9:b2:3f: b5:17:fe:cf:75:35:14:a9:a4:d1:c5:b4:10:c2:2c: e1:f2:05:35:dc:b7:3e:d8:ed:c9:ac:fc:0b:94:b6: 26:96:10:1a:8e:da:95:fd:31:ba:53:c3:96:d7:d1: c3:1a:44:55:33:52:19:45:24:66:0a:d5:a1:0b:58: 53:23:4f:ab:5e:9c:c6:38:f2:89:9e:44:c0:44:8d: 69:ee:54:0f:02:9f:3c:23:f4:71:f6:5b:fd:e7:87: 9b:67:ba:54:39:28:cf:7b:88:60:e1:73:71:8d:81: 5a:74:e8:6b:df:11:3d:c7:66:75:e2:9c:40:e8:1c: a0:27:79:f4:e0:db:1e:4e:44:89:fd:be:cc:ea:d7: 55:64:08:9a:f1:59:c6:ea:a3:34:e2:69:dd:53:a9: 29:49:95:da:b3:e0:e6:fa:b0:df:0a:79:9c:40:21: d3:cc:9a:61:2b:83:94:d5:38:de:b4:e0:fa:6f:be: 42:12:ba:ae:bf:a9:a4:06:75:47:ec:59:fa:bd:13: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:79:E6:36:53:FA:89:14:53:C7:88:A0:7E:1F:46:A5:49:55:9B:5E X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:70:0a:8a:de:7b:05:aa:11:28:97:fe:9d:a1:6c:66:d2:b5: 9f:2f:00:89:aa:86:56:87:5e:2e:4c:d5:64:b5:14:47:52:e8: 64:f2:ba:cb:ed:a6:2b:3c:bb:dd:14:ad:9d:11:60:9c:39:9d: 34:39:22:4f:1f:94:c0:c6:d6:ef:cc:55:e8:c7:b9:90:89:71: d5:95:60:83:f3:65:b1:d3:77:93:93:39:50:a5:e7:a3:27:cd: bc:40:0b:d9:01:44:53:2d:ed:49:0c:03:05:76:ef:85:34:48: 33:f5:77:18:6d:30:8f:e2:d7:60:a7:ef:ec:53:82:1c:9f:47: 67:27:48:ee:70:57:ef:c3:c7:52:12:1e:15:96:2f:32:e4:0f: db:df:7a:2b:db:cd:b8:5a:26:17:ea:51:6a:2d:1b:e1:a6:b9: ac:24:80:ab:a0:84:73:f9:68:fd:76:05:b8:2e:69:fd:a5:77: 59:6e:60:6e:52:1a:f2:8a:bd:ba:c8:5b:26:cc:ac:c7:a7:14: 75:ce:a2:6d:e5:a1:57:bd:6b:43:b8:03:da:59:ed:c4:fd:64: f4:f1:ae:71:9e:f3:0a:e0:f0:14:49:0c:19:2f:24:97:f0:4f: 63:5a:2f:c1:0b:47:9c:26:f2:98:86:6d:a0:9d:e6:e6:13:21: 60:3d:0f:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMaHySJZk0yKm2faRmn4TZAA+vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTA4MjExNDQ2NTZaFw0yNTA4MjUwMTQzNTZaMDMxMTAvBgNV BAMTKDQ0NzlFNjM2NTNGQTg5MTQ1M0M3ODhBMDdFMUY0NkE1NDk1NTlCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9MKoQevSCC5960bL4hg653RF5 /yDciTzcx4KZXUp5pqak7pRs9Iq/omGxsghYICMET+lkYD8HStmyP7UX/s91NRSp pNHFtBDCLOHyBTXctz7Y7cms/AuUtiaWEBqO2pX9MbpTw5bX0cMaRFUzUhlFJGYK 1aELWFMjT6tenMY48omeRMBEjWnuVA8Cnzwj9HH2W/3nh5tnulQ5KM97iGDhc3GN gVp06GvfET3HZnXinEDoHKAnefTg2x5ORIn9vszq11VkCJrxWcbqozTiad1TqSlJ ldqz4Ob6sN8KeZxAIdPMmmErg5TVON604PpvvkISuq6/qaQGdUfsWfq9E4J3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURHnmNlP6iRRTx4igfh9GpUlVm14wHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9wCoreewWqESiX/p2hbGbStZ8vAImqhlaH Xi5M1WS1FEdS6GTyusvtpis8u90UrZ0RYJw5nTQ5Ik8flMDG1u/MVejHuZCJcdWV YIPzZbHTd5OTOVCl56MnzbxAC9kBRFMt7UkMAwV274U0SDP1dxhtMI/i12Cn7+xT ghyfR2cnSO5wV+/Dx1ISHhWWLzLkD9vfeivbzbhaJhfqUWotG+GmuawkgKughHP5 aP12Bbguaf2ld1luYG5SGvKKvbrIWybMrMenFHXOom3loVe9a0O4A9pZ7cT9ZPTx rnGe8wrg8BRJDBkvJJfwT2NaL8ELR5wm8piGbaCd5uYTIWA9D2Y= -----END CERTIFICATE-----Generated at Sat Aug 23 15:27:04 2025 by rpki-client