$ rpki-client -vvf repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft File: 64285236074D6BC2BB384B2D544C7F545C16CF31.mft (raw, json) Hash identifier: +8HeaoYmeN/r8UZiGUPArTfXZfHn3bcyCupRF4h1v2k= Subject key identifier: 1C:6A:78:08:CA:3D:9D:31:FF:13:EB:8D:20:7D:E8:01:47:BA:30:95 Authority key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 Certificate issuer: /CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Certificate serial: 28C2A04253FEBD8EC45773AF0F8290AF9D98C7A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft Manifest number: 01FD Signing time: Mon 12 May 2025 09:31:27 +0000 Manifest this update: Mon 12 May 2025 09:26:27 +0000 Manifest next update: Thu 15 May 2025 17:04:27 +0000 Files and hashes: 1: 64285236074D6BC2BB384B2D544C7F545C16CF31.crl (hash: nXejRA1/v/dewNOVjo05MeH+hk/DYeSjgmO8fDzluaU=) 2: 3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (hash: wmIuzk0Oh9311GQSErNLF7rj7zFPZyoKari4za10W8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 10:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c2:a0:42:53:fe:bd:8e:c4:57:73:af:0f:82:90:af:9d:98:c7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64285236074D6BC2BB384B2D544C7F545C16CF31 Validity Not Before: May 12 09:26:27 2025 GMT Not After : May 15 17:04:27 2025 GMT Subject: CN=1C6A7808CA3D9D31FF13EB8D207DE80147BA3095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:df:69:da:74:d6:7a:0c:2a:88:cb:08:52: ce:0e:07:d5:16:9f:ee:04:43:56:1e:10:f9:bc:10: 99:46:a0:56:64:f5:c6:8c:f2:29:40:c7:25:69:e1: ae:57:07:a2:75:25:54:08:c2:4b:a5:ab:1e:c8:87: 5d:16:dd:d6:3d:98:05:5e:a3:40:05:70:51:3e:cd: 29:7a:0a:52:30:77:8d:b0:e3:e3:9e:2b:f4:9e:f0: a7:97:44:92:f8:66:75:7f:11:09:09:6a:45:f6:86: 06:7c:5d:6c:f3:54:27:8c:0f:26:bf:5c:c1:02:26: d4:7f:3d:f6:4e:ef:78:4f:a9:a5:3f:6d:9c:d5:87: c9:db:27:6e:d6:44:a8:8e:70:10:dd:49:7d:2e:7d: 3a:40:0f:44:4f:e3:81:22:f7:dc:0c:43:16:51:35: 1e:8f:f3:fb:26:93:95:fa:5d:56:53:f6:99:18:d7: 5c:09:20:c0:4a:f1:8a:c0:8a:7b:02:21:f9:dc:a7: 41:37:4a:aa:83:75:0d:56:1f:ca:c1:e7:a8:00:55: 63:ff:16:9d:8c:b3:60:c4:ad:7c:13:41:89:ee:6c: cb:c1:88:e9:73:02:da:97:b9:47:06:0b:7b:26:8d: f3:33:42:ae:b8:8b:f0:f3:da:0f:5d:1f:61:fd:be: e2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6A:78:08:CA:3D:9D:31:FF:13:EB:8D:20:7D:E8:01:47:BA:30:95 X509v3 Authority Key Identifier: keyid:64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:74:e0:b9:a5:b4:b5:05:41:2f:10:bb:d4:f3:e9:bf:22:91: 70:b2:56:39:fa:be:43:4b:e5:80:b0:4d:66:4f:d9:a1:5a:17: 86:66:bc:c2:fa:7a:ca:37:70:1a:d9:ba:55:48:b2:37:cb:6e: 85:01:97:a7:0a:b4:95:17:66:31:78:1d:b4:a1:37:f2:4e:87: 1e:4b:44:68:be:91:b9:b4:09:ce:f3:90:4e:2b:65:c1:b4:33: d2:28:eb:25:e7:6a:2c:bc:0c:7a:ec:d3:76:05:c0:07:34:ba: a0:28:f7:d2:58:b3:79:f2:6c:c1:30:32:42:d9:b8:6a:7a:37: ef:a3:96:f1:f5:b1:21:68:7c:07:62:09:29:61:39:a5:f1:44: c6:3f:71:4f:2c:c7:5e:b4:04:27:0e:c3:74:6a:0a:e2:11:5b: f2:29:a3:1a:31:49:86:83:4f:4c:a9:da:46:ec:dd:ff:b9:4c: a5:bf:fc:35:1c:00:28:66:11:6c:82:9d:98:e2:29:ff:cb:b0: 9d:36:c4:17:b6:d5:e5:7e:cc:cd:f4:4d:ca:0a:de:88:d8:53: 2f:bb:b5:4a:ad:4c:e0:05:21:07:8e:67:21:fe:9b:44:99:c6: 0c:ea:a8:b3:68:4e:11:7f:19:d3:b4:11:56:82:65:06:68:be: 74:d1:6a:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMKgQlP+vY7EV3OvD4KQr52Yx6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1 QzE2Q0YzMTAeFw0yNTA1MTIwOTI2MjdaFw0yNTA1MTUxNzA0MjdaMDMxMTAvBgNV BAMTKDFDNkE3ODA4Q0EzRDlEMzFGRjEzRUI4RDIwN0RFODAxNDdCQTMwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRz99p2nTWegwqiMsIUs4OB9UW n+4EQ1YeEPm8EJlGoFZk9caM8ilAxyVp4a5XB6J1JVQIwkulqx7Ih10W3dY9mAVe o0AFcFE+zSl6ClIwd42w4+OeK/Se8KeXRJL4ZnV/EQkJakX2hgZ8XWzzVCeMDya/ XMECJtR/PfZO73hPqaU/bZzVh8nbJ27WRKiOcBDdSX0ufTpAD0RP44Ei99wMQxZR NR6P8/smk5X6XVZT9pkY11wJIMBK8YrAinsCIfncp0E3SqqDdQ1WH8rB56gAVWP/ Fp2Ms2DErXwTQYnubMvBiOlzAtqXuUcGC3smjfMzQq64i/Dz2g9dH2H9vuKFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHGp4CMo9nTH/E+uNIH3oAUe6MJUwHwYDVR0j BBgwFoAUZChSNgdNa8K7OEstVEx/VFwWzzEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2MxOTdmOC00ZTJlLTQ2ZDktYmUyYi1lMzQ4YTEzM2RjNTcvMC82NDI4NTIzNjA3 NEQ2QkMyQkIzODRCMkQ1NDRDN0Y1NDVDMTZDRjMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdGNTQ1QzE2 Q0YzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNjMTk3ZjgtNGUyZS00NmQ5LWJl MmItZTM0OGExMzNkYzU3LzAvNjQyODUyMzYwNzRENkJDMkJCMzg0QjJENTQ0QzdG NTQ1QzE2Q0YzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEt04LmltLUFQS8Qu9Tz6b8ikXCyVjn6vkNL 5YCwTWZP2aFaF4ZmvML6eso3cBrZulVIsjfLboUBl6cKtJUXZjF4HbShN/JOhx5L RGi+kbm0Cc7zkE4rZcG0M9Io6yXnaiy8DHrs03YFwAc0uqAo99JYs3nybMEwMkLZ uGp6N++jlvH1sSFofAdiCSlhOaXxRMY/cU8sx160BCcOw3RqCuIRW/IpoxoxSYaD T0yp2kbs3f+5TKW//DUcAChmEWyCnZjiKf/LsJ02xBe21eV+zM30TcoK3ojYUy+7 tUqtTOAFIQeOZyH+m0SZxgzqqLNoThF/GdO0EVaCZQZovnTRaok= -----END CERTIFICATE-----Generated at Mon May 12 11:20:46 2025 by rpki-client