$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json) Hash identifier: K/n39nBx/AMuVTaB30/M1sDtVlcKyUW/ShlxvRVrHTk= Subject key identifier: C5:6A:28:0B:4A:5A:5C:FA:A1:29:08:72:B4:A7:60:D1:7A:2F:95:94 Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Certificate serial: 4891D0A156B693AB8F57AFC6087DE2252C3ADE7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft Manifest number: 018E Signing time: Mon 20 Oct 2025 06:21:05 +0000 Manifest this update: Mon 20 Oct 2025 06:16:05 +0000 Manifest next update: Thu 23 Oct 2025 11:40:05 +0000 Files and hashes: 1: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: HNfH+lGIt7J+YN1TJNAJQVvtH9oNanTNB92EdP/iXDA=) 2: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: PRtjDQLWn7DOhqpJ6ZyrW9FMpW7szF9MrVItEP9hNn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:91:d0:a1:56:b6:93:ab:8f:57:af:c6:08:7d:e2:25:2c:3a:de:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Validity Not Before: Oct 20 06:16:05 2025 GMT Not After : Oct 23 11:40:05 2025 GMT Subject: CN=C56A280B4A5A5CFAA1290872B4A760D17A2F9594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:f8:ee:89:84:14:49:eb:72:b2:3f:39:a4: cb:b2:a6:81:90:97:1f:a6:db:86:02:0b:f0:a3:10: c9:e1:b3:82:bf:d6:fe:ba:5c:3d:82:eb:fe:75:ed: d4:05:f3:32:c4:47:aa:b0:7e:b9:32:d9:d4:f8:2d: c9:1d:80:b1:4d:db:31:48:a3:41:20:f0:d9:c2:8d: 31:90:17:bc:c3:07:e8:f2:9e:4b:3f:c3:5d:c9:81: 8e:14:14:fc:b6:4b:ff:9a:7f:3c:50:90:63:cb:68: bd:e2:46:3d:df:d6:33:ca:2e:c6:6b:c4:82:b0:84: fa:af:0b:ba:bf:1b:84:ec:8e:f8:40:09:1a:68:e5: af:92:4a:12:66:85:f8:61:8c:4c:14:78:8b:89:e6: bf:89:a1:ad:66:ba:7b:f2:a9:15:37:2a:b4:87:ea: 11:48:20:66:cc:75:fc:3a:be:5f:33:c0:5e:5d:30: 67:7e:1e:db:e3:ab:85:2f:0d:c5:4d:1d:51:99:bf: 0c:46:2c:06:58:e8:81:2f:8b:87:df:bb:7e:44:09: 4a:86:a2:63:d3:f4:c0:06:57:27:f1:95:67:ad:9a: 01:fa:3d:79:c2:c8:00:2a:09:90:fb:50:45:2b:20: 8f:88:f2:c7:a8:34:48:c9:1d:7e:84:14:92:1c:ae: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6A:28:0B:4A:5A:5C:FA:A1:29:08:72:B4:A7:60:D1:7A:2F:95:94 X509v3 Authority Key Identifier: keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c3:33:56:f1:60:55:ab:f7:67:53:12:a7:46:e4:3e:e7:36: a6:73:fe:8a:9c:48:29:3d:7e:70:ed:20:12:f7:aa:0d:e2:e3: b1:89:13:3d:e7:dc:f0:0f:a4:fa:b5:0d:b3:cf:f1:9d:cc:f0: 93:32:5a:01:7f:e4:e6:22:47:d2:83:47:e2:c2:0c:b6:5b:92: 96:f8:3e:63:04:6f:18:af:79:9e:5c:f2:aa:df:6d:8e:99:b6: c8:eb:50:3a:af:92:0d:64:59:7a:fb:84:62:21:97:13:60:e5: 42:a9:47:57:df:ad:d1:91:08:8f:68:3c:c1:34:1d:67:1a:0e: 2d:2b:20:22:52:23:87:8e:f3:f8:ff:17:09:a5:a8:13:97:79: 0e:85:d8:d9:3c:88:0f:e6:90:ff:bf:04:fa:75:ab:81:70:dc: 3d:1c:0c:5e:de:31:73:0b:3e:b1:d1:bd:4e:57:53:eb:c3:e0: 7d:4a:ef:d1:29:2a:11:35:6c:31:42:a2:f7:cb:68:ec:a1:c7: 38:ea:de:24:91:b3:04:5e:bd:90:db:9b:3b:ba:88:aa:3a:f1: 71:35:5e:c9:3d:29:e4:43:ff:0e:b3:af:ab:7b:24:4d:32:0d: 18:dc:47:af:8b:6c:75:d0:cc:6e:68:61:aa:58:32:b7:a9:f7: 60:9d:c0:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJHQoVa2k6uPV6/GCH3iJSw63nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIx NEYyMjY5NTAeFw0yNTEwMjAwNjE2MDVaFw0yNTEwMjMxMTQwMDVaMDMxMTAvBgNV BAMTKEM1NkEyODBCNEE1QTVDRkFBMTI5MDg3MkI0QTc2MEQxN0EyRjk1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIPjuiYQUSetysj85pMuypoGQ lx+m24YCC/CjEMnhs4K/1v66XD2C6/517dQF8zLER6qwfrky2dT4LckdgLFN2zFI o0Eg8NnCjTGQF7zDB+jynks/w13JgY4UFPy2S/+afzxQkGPLaL3iRj3f1jPKLsZr xIKwhPqvC7q/G4TsjvhACRpo5a+SShJmhfhhjEwUeIuJ5r+Joa1munvyqRU3KrSH 6hFIIGbMdfw6vl8zwF5dMGd+Htvjq4UvDcVNHVGZvwxGLAZY6IEvi4ffu35ECUqG omPT9MAGVyfxlWetmgH6PXnCyAAqCZD7UEUrII+I8seoNEjJHX6EFJIcrt2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxWooC0paXPqhKQhytKdg0XovlZQwHwYDVR0j BBgwFoAUZLLbdwPFxWpvacR4mrn2khTyJpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjYyZDM0MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC82NEIyREI3NzAz QzVDNTZBNkY2OUM0Nzg5QUI5RjY5MjE0RjIyNjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIxNEYy MjY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2 OTIxNEYyMjY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPDM1bxYFWr92dTEqdG5D7nNqZz/oqcSCk9 fnDtIBL3qg3i47GJEz3n3PAPpPq1DbPP8Z3M8JMyWgF/5OYiR9KDR+LCDLZbkpb4 PmMEbxiveZ5c8qrfbY6ZtsjrUDqvkg1kWXr7hGIhlxNg5UKpR1ffrdGRCI9oPME0 HWcaDi0rICJSI4eO8/j/FwmlqBOXeQ6F2Nk8iA/mkP+/BPp1q4Fw3D0cDF7eMXML PrHRvU5XU+vD4H1K79EpKhE1bDFCovfLaOyhxzjq3iSRswRevZDbmzu6iKo68XE1 Xsk9KeRD/w6zr6t7JE0yDRjcR6+LbHXQzG5oYapYMrep92CdwKA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:06 2025 by rpki-client