$ rpki-client -vvf repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft File: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft (raw, json) Hash identifier: d71k/BtLmWabmKtIYroIZBUAnjBvgpsbsAiBYc9wQnQ= Subject key identifier: 9A:AF:97:D3:D8:8E:DD:F6:4E:84:C7:FF:6F:B1:B1:C6:E3:4C:89:15 Authority key identifier: 64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 Certificate issuer: /CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Certificate serial: 3E669FD7B0188ED8B03A79BB5AD93DDCDC8DDDE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft Manifest number: 0174 Signing time: Fri 22 Aug 2025 10:01:05 +0000 Manifest this update: Fri 22 Aug 2025 09:56:04 +0000 Manifest next update: Mon 25 Aug 2025 14:44:04 +0000 Files and hashes: 1: 3130332e3131372e35382e302f32332d3234203d3e20313530393534.roa (hash: PRtjDQLWn7DOhqpJ6ZyrW9FMpW7szF9MrVItEP9hNn4=) 2: 64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl (hash: U3j9u66E/OgsJv3cNFNowk75tkAABvIKfDg2lNwbYGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:66:9f:d7:b0:18:8e:d8:b0:3a:79:bb:5a:d9:3d:dc:dc:8d:dd:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B2DB7703C5C56A6F69C4789AB9F69214F22695 Validity Not Before: Aug 22 09:56:04 2025 GMT Not After : Aug 25 14:44:04 2025 GMT Subject: CN=9AAF97D3D88EDDF64E84C7FF6FB1B1C6E34C8915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:da:1d:bf:89:53:d1:5c:12:9f:70:c1:eb:b5: 7a:62:1b:59:49:6d:f7:8b:68:81:86:47:e5:6d:ee: 72:f4:48:7b:db:7a:27:c4:de:55:b0:02:7b:6a:97: cf:2a:d7:3f:50:19:84:84:a0:6c:39:39:8c:e5:26: 06:b2:da:94:44:18:0c:59:b9:99:04:fb:bb:2a:45: 03:0e:bf:0c:65:22:4e:4e:e3:19:e3:70:6b:88:e0: 75:e8:9d:07:76:9a:85:42:ac:ec:b8:56:ba:04:8a: 03:0c:2a:3c:c5:0a:4a:50:fc:f0:28:aa:d2:34:4c: cf:31:9a:ea:2b:39:7d:d1:7f:34:67:24:b7:bc:9a: c4:ff:22:ba:39:83:17:c9:18:eb:9f:6d:d4:cc:af: 89:b8:b8:d4:d3:c1:6e:23:18:5b:79:d0:01:02:c4: aa:ae:2b:7c:ca:b6:4d:5e:1d:7c:30:9f:b8:44:42: 42:8d:56:8f:7a:7e:bb:a6:e9:bc:37:a1:68:fa:32: 52:55:db:13:59:7e:30:94:50:fe:4e:62:1d:e9:21: 88:f7:a4:48:77:b9:21:02:c6:6a:7e:97:8f:ec:0c: 72:35:6f:4a:49:13:a2:64:48:bf:9b:1f:ce:e1:20: db:26:d7:16:cd:e8:b8:35:9c:ec:48:77:b3:0d:76: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AF:97:D3:D8:8E:DD:F6:4E:84:C7:FF:6F:B1:B1:C6:E3:4C:89:15 X509v3 Authority Key Identifier: keyid:64:B2:DB:77:03:C5:C5:6A:6F:69:C4:78:9A:B9:F6:92:14:F2:26:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B2DB7703C5C56A6F69C4789AB9F69214F22695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a262d341-94b5-474e-8bcd-d17988f099b3/0/64B2DB7703C5C56A6F69C4789AB9F69214F22695.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:84:64:18:30:46:4a:32:11:d4:66:27:6a:8f:0b:a1:68:7b: 94:43:14:73:b4:26:16:ae:7c:f3:8c:82:5a:5b:ae:a8:c3:0b: 88:e0:a3:b6:b6:91:eb:54:81:f1:cf:23:fb:0d:ee:d8:00:dc: ce:60:22:0c:2c:8a:0f:9d:5e:64:80:e9:61:e1:59:44:7d:e4: d7:95:20:7b:a4:63:32:45:a9:dc:5f:9c:ab:7d:f9:42:eb:32: 70:14:50:dc:73:38:b3:98:f2:2e:37:0a:ff:22:15:39:ef:9d: ff:a7:ab:b3:25:dc:f1:81:82:55:f7:c6:0d:e9:80:67:ee:e5: 80:e8:15:d4:e9:13:a4:78:2c:f2:8e:38:be:ff:d4:b1:0a:a9: 41:2f:d0:6f:63:5d:f1:cf:aa:f0:61:01:29:f7:b9:bc:ea:23: fb:e0:7c:0d:ca:95:fa:d1:8a:ed:28:78:01:88:e5:c6:71:93: fc:19:eb:ae:c3:54:08:38:44:e8:a6:26:47:e3:c3:ce:c6:8d: ed:ba:31:5d:4f:eb:3a:71:1f:a9:2e:3a:98:e9:10:5d:93:29: 50:58:08:79:fe:ee:57:01:d3:7f:51:5a:fc:43:07:d5:a0:0b: 4c:12:b2:2a:93:01:a9:9a:54:b5:a4:82:a3:61:d6:ec:f7:b2: fc:6c:f0:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmaf17AYjtiwOnm7Wtk93NyN3ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIx NEYyMjY5NTAeFw0yNTA4MjIwOTU2MDRaFw0yNTA4MjUxNDQ0MDRaMDMxMTAvBgNV BAMTKDlBQUY5N0QzRDg4RURERjY0RTg0QzdGRjZGQjFCMUM2RTM0Qzg5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2h2/iVPRXBKfcMHrtXpiG1lJ bfeLaIGGR+Vt7nL0SHvbeifE3lWwAntql88q1z9QGYSEoGw5OYzlJgay2pREGAxZ uZkE+7sqRQMOvwxlIk5O4xnjcGuI4HXonQd2moVCrOy4VroEigMMKjzFCkpQ/PAo qtI0TM8xmuorOX3RfzRnJLe8msT/Iro5gxfJGOufbdTMr4m4uNTTwW4jGFt50AEC xKquK3zKtk1eHXwwn7hEQkKNVo96frum6bw3oWj6MlJV2xNZfjCUUP5OYh3pIYj3 pEh3uSECxmp+l4/sDHI1b0pJE6JkSL+bH87hINsm1xbN6Lg1nOxId7MNdqo1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmq+X09iO3fZOhMf/b7GxxuNMiRUwHwYDVR0j BBgwFoAUZLLbdwPFxWpvacR4mrn2khTyJpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjYyZDM0MS05NGI1LTQ3NGUtOGJjZC1kMTc5ODhmMDk5YjMvMC82NEIyREI3NzAz QzVDNTZBNkY2OUM0Nzg5QUI5RjY5MjE0RjIyNjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2OTIxNEYy MjY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTI2MmQzNDEtOTRiNS00NzRlLThi Y2QtZDE3OTg4ZjA5OWIzLzAvNjRCMkRCNzcwM0M1QzU2QTZGNjlDNDc4OUFCOUY2 OTIxNEYyMjY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyEZBgwRkoyEdRmJ2qPC6Foe5RDFHO0Jhau fPOMglpbrqjDC4jgo7a2ketUgfHPI/sN7tgA3M5gIgwsig+dXmSA6WHhWUR95NeV IHukYzJFqdxfnKt9+ULrMnAUUNxzOLOY8i43Cv8iFTnvnf+nq7Ml3PGBglX3xg3p gGfu5YDoFdTpE6R4LPKOOL7/1LEKqUEv0G9jXfHPqvBhASn3ubzqI/vgfA3KlfrR iu0oeAGI5cZxk/wZ667DVAg4ROimJkfjw87Gje26MV1P6zpxH6kuOpjpEF2TKVBY CHn+7lcB039RWvxDB9WgC0wSsiqTAamaVLWkgqNh1uz3svxs8Hk= -----END CERTIFICATE-----Generated at Sat Aug 23 10:07:58 2025 by rpki-client