$ rpki-client -vvf repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft File: 64285236074D6BC2BB384B2D544C7F545C16CF31.mft (raw, json) Hash identifier: vGr6J8pKIGhGPBxEnXlM+OMfpVTaF8z8japx0Ed924M= Subject key identifier: 2E:8C:C8:27:15:2F:EB:3F:A9:F7:ED:9B:DB:B0:C1:68:60:6B:EB:1E Authority key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 Certificate issuer: /CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Certificate serial: 060E104BA777AF945FC1DF65E55ABD71C9AB62F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft Manifest number: 022A Signing time: Thu 21 Aug 2025 17:31:30 +0000 Manifest this update: Thu 21 Aug 2025 17:26:30 +0000 Manifest next update: Sun 24 Aug 2025 21:52:30 +0000 Files and hashes: 1: 64285236074D6BC2BB384B2D544C7F545C16CF31.crl (hash: fN4i5AeO75VGvgQlnmY3qMq3viCj55P0oW6qssNG4jA=) 2: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: wmIuzk0Oh9311GQSErNLF7rj7zFPZyoKari4za10W8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0e:10:4b:a7:77:af:94:5f:c1:df:65:e5:5a:bd:71:c9:ab:62:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Validity Not Before: Aug 21 17:26:30 2025 GMT Not After : Aug 24 21:52:30 2025 GMT Subject: CN=2E8CC827152FEB3FA9F7ED9BDBB0C168606BEB1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:1e:c8:ce:fa:90:be:f4:97:5f:04:5d:7a: 43:5b:e0:2f:95:c6:df:6f:98:67:34:d5:b6:34:37: 4e:d0:0b:96:76:e5:0e:91:d8:44:a2:29:c7:8e:ee: ca:b6:32:c1:69:1d:28:33:77:bd:7a:37:7c:1e:7c: 66:35:a0:e8:d4:28:54:e1:cf:85:c2:a2:40:63:c1: bd:8b:f0:a0:d4:45:07:27:04:b2:8e:39:cd:c5:d5: 7a:be:d6:00:c2:74:f0:3c:b0:73:95:0d:1d:c2:c8: d0:91:da:d3:03:15:fb:f2:d9:cd:0f:34:f3:34:7a: b1:8e:a3:2e:61:f7:61:ce:e2:bf:bd:06:7a:2f:4c: c0:52:a0:28:93:5a:53:37:a2:6c:14:26:22:32:29: 78:8e:43:15:ad:c9:33:bf:7b:f0:b2:63:33:10:0c: b1:1c:b3:61:81:c9:e2:85:6b:37:f5:d7:c4:03:af: 09:da:d7:c3:9b:7a:77:c1:89:98:b0:ef:29:de:5c: 0c:b2:d0:fe:45:ad:49:27:e1:51:ef:5a:cf:c2:0b: 1b:84:b0:a4:93:a5:07:ac:a2:a9:ef:48:92:ce:64: 0d:52:5f:a2:0b:c2:d9:94:af:3a:1b:ba:f0:ee:3e: 6d:59:69:3b:4d:5d:26:f2:e5:2e:ad:9d:b9:c8:9d: 4a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8C:C8:27:15:2F:EB:3F:A9:F7:ED:9B:DB:B0:C1:68:60:6B:EB:1E X509v3 Authority Key Identifier: keyid:64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:fd:2f:63:e0:f3:4a:24:aa:1a:42:76:c1:d4:0b:f8:3c:f7: b9:c8:23:b6:cb:0b:17:7b:ba:27:be:1e:ae:6d:2a:9c:e2:b3: 22:74:0b:48:a2:20:01:1b:9a:83:39:0f:f7:cd:8b:be:78:89: 3a:43:16:b9:e3:77:da:b1:ba:04:5a:24:a3:44:ae:71:07:88: 95:4e:dd:a3:71:9a:26:83:a5:1c:22:87:41:e8:e7:13:8b:34: 6a:cb:30:80:3d:dd:0b:20:e8:b9:61:f4:49:6d:67:bf:c5:43: 24:d7:97:58:23:58:f8:af:d0:4c:76:1b:9e:0b:91:e9:2e:25: 5b:2b:b8:af:2f:bf:78:72:ca:5e:99:a6:3f:0f:76:35:84:ce: 7a:7f:16:4c:9a:fb:d9:de:65:8f:43:7e:4d:fe:5f:9b:53:03: 21:18:44:62:0f:4b:c3:90:bd:c9:ca:ed:d2:d8:a1:f3:85:bb: 44:17:15:92:d4:ca:1f:14:04:14:e3:3e:85:d0:28:e8:24:5d: 31:9c:9b:89:0d:ac:29:cb:5e:04:ad:4b:d0:e6:ca:90:6a:40: 39:51:aa:4c:51:a4:1e:a0:ee:bf:65:07:f0:44:20:86:65:2d: cd:c5:3f:74:08:6a:67:64:19:b7:54:70:00:65:39:8c:39:14: 0c:3a:4d:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBg4QS6d3r5Rfwd9l5Vq9ccmrYvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1 QzE2Q0YzMTAeFw0yNTA4MjExNzI2MzBaFw0yNTA4MjQyMTUyMzBaMDMxMTAvBgNV BAMTKDJFOENDODI3MTUyRkVCM0ZBOUY3RUQ5QkRCQjBDMTY4NjA2QkVCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Ah7IzvqQvvSXXwRdekNb4C+V xt9vmGc01bY0N07QC5Z25Q6R2ESiKceO7sq2MsFpHSgzd716N3wefGY1oOjUKFTh z4XCokBjwb2L8KDURQcnBLKOOc3F1Xq+1gDCdPA8sHOVDR3CyNCR2tMDFfvy2c0P NPM0erGOoy5h92HO4r+9BnovTMBSoCiTWlM3omwUJiIyKXiOQxWtyTO/e/CyYzMQ DLEcs2GByeKFazf118QDrwna18ObenfBiZiw7yneXAyy0P5FrUkn4VHvWs/CCxuE sKSTpQesoqnvSJLOZA1SX6ILwtmUrzobuvDuPm1ZaTtNXSby5S6tnbnInUrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULozIJxUv6z+p9+2b27DBaGBr6x4wHwYDVR0j BBgwFoAUZChSNgdNa8K7OEstVEx/VFwWzzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2MxOTdmOC00ZTJlLTQ2ZDktYmUyYi1lMzQ4YTEzM2RjNTcvMC82NDI4NTIzNjA3 NEQ2QkMyQkIzODRCMkQ1NDRDN0Y1NDVDMTZDRjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1QzE2 Q0YzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdG NTQ1QzE2Q0YzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFH9L2Pg80okqhpCdsHUC/g897nII7bLCxd7 uie+Hq5tKpzisyJ0C0iiIAEbmoM5D/fNi754iTpDFrnjd9qxugRaJKNErnEHiJVO 3aNxmiaDpRwih0Ho5xOLNGrLMIA93Qsg6Llh9EltZ7/FQyTXl1gjWPiv0Ex2G54L kekuJVsruK8vv3hyyl6Zpj8PdjWEznp/Fkya+9neZY9Dfk3+X5tTAyEYRGIPS8OQ vcnK7dLYofOFu0QXFZLUyh8UBBTjPoXQKOgkXTGcm4kNrCnLXgStS9DmypBqQDlR qkxRpB6g7r9lB/BEIIZlLc3FP3QIamdkGbdUcABlOYw5FAw6TRI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:12 2025 by rpki-client