$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: Sdwc8ZtiJJMCO43UBO+m3DjvDTv10PDrsSDOQrzyk6c= Subject key identifier: DD:CF:FA:7A:F3:59:C7:02:3B:EC:63:E4:66:B0:34:0E:82:7D:DC:89 Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 17794512D3BD46C087CB654D799EF54ED915EA13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: E0 Signing time: Fri 09 May 2025 15:10:56 +0000 Manifest this update: Fri 09 May 2025 15:05:56 +0000 Manifest next update: Mon 12 May 2025 21:38:56 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: gbaTGPZlcd4QGDbavYlknf6Bema44/5gvL6Q8LwvUj0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 21:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:79:45:12:d3:bd:46:c0:87:cb:65:4d:79:9e:f5:4e:d9:15:ea:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: May 9 15:05:56 2025 GMT Not After : May 12 21:38:56 2025 GMT Subject: CN=DDCFFA7AF359C7023BEC63E466B0340E827DDC89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:5e:5d:28:69:a7:4a:aa:8c:85:51:a4:6e: f9:a5:40:d5:9a:f1:ed:07:8c:24:35:25:2d:e8:f8: 65:84:1a:57:66:47:e7:0f:14:b1:82:1a:ad:32:b2: 42:c0:18:b1:e0:41:1e:b1:6e:d0:ff:5c:2a:52:da: 5c:4e:32:05:50:cf:df:3d:ae:a1:3b:e0:fc:99:58: 82:5a:47:75:dc:33:50:1a:ad:a1:a1:83:66:d6:e0: b4:dd:bd:bf:9a:a8:74:8d:cf:f9:a3:88:b5:0a:37: 75:26:44:4e:26:6a:85:18:23:8b:aa:e2:a5:7f:24: 80:83:a4:f5:33:be:94:ba:a4:9d:df:be:3c:52:17: 58:74:70:48:8b:08:21:de:59:c2:67:eb:89:c5:c9: 63:96:9b:ad:ce:9b:9c:fe:d1:7e:6a:d9:0f:1d:da: 07:19:12:57:cb:19:e5:ba:92:ed:c8:74:d5:58:3c: da:e7:a2:73:8c:5b:5e:a4:87:e0:fb:ae:64:f9:a3: fd:59:a8:a3:b1:89:02:2a:f1:66:e1:90:0c:4a:1f: b0:16:d0:9b:6d:b3:24:cc:2d:24:e2:11:10:ee:0c: 72:f3:b2:2b:1d:57:76:cb:e6:52:e4:99:83:38:8f: 14:ff:50:11:bf:7a:a9:9a:ef:24:a2:9a:fa:1a:68: e4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CF:FA:7A:F3:59:C7:02:3B:EC:63:E4:66:B0:34:0E:82:7D:DC:89 X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ca:a1:2f:b9:5f:5b:38:77:4f:c1:20:29:ef:89:61:db:9d: 89:cb:f6:46:6a:1d:a2:01:bc:9d:df:e0:bb:5c:0f:bf:36:59: 2c:7d:9d:fa:02:d4:ab:59:b8:8a:45:98:4c:05:0a:b2:dd:16: 12:96:90:8e:fb:e9:4b:74:d9:59:b5:3d:46:66:bd:94:69:e8: 27:7c:ca:a3:95:45:30:50:46:a3:4d:ab:32:0f:51:c1:37:39: 29:6b:f3:66:66:e0:1d:6c:e5:3b:e3:1b:28:67:1c:91:b3:41: 96:01:32:f5:b7:d4:20:27:3e:60:98:44:a4:20:87:6b:fc:5d: d6:0d:6d:d8:d1:e6:e7:f6:ad:1c:46:e2:93:34:fb:87:5c:44: ea:6c:7b:87:84:d2:ea:c9:64:9d:02:da:6b:d4:6c:02:72:52: 75:34:b3:ba:e5:31:1c:76:ad:f1:dd:a2:57:37:fb:7f:d9:7c: 19:df:60:d8:5f:59:4f:23:50:aa:e0:a9:92:95:b7:60:8e:d9: 69:4b:31:6c:bb:cd:d1:17:d1:15:ec:12:60:27:d3:76:9d:a6: b2:56:cc:43:da:ca:34:9c:a5:34:30:f6:cf:6a:f6:4b:9b:e0: 1c:8e:7d:56:96:d9:15:d1:55:dd:56:ac:ad:11:83:55:91:5c: 87:d6:b7:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3lFEtO9RsCHy2VNeZ71TtkV6hMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTA1MDkxNTA1NTZaFw0yNTA1MTIyMTM4NTZaMDMxMTAvBgNV BAMTKEREQ0ZGQTdBRjM1OUM3MDIzQkVDNjNFNDY2QjAzNDBFODI3RERDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRoF5dKGmnSqqMhVGkbvmlQNWa 8e0HjCQ1JS3o+GWEGldmR+cPFLGCGq0yskLAGLHgQR6xbtD/XCpS2lxOMgVQz989 rqE74PyZWIJaR3XcM1AaraGhg2bW4LTdvb+aqHSNz/mjiLUKN3UmRE4maoUYI4uq 4qV/JICDpPUzvpS6pJ3fvjxSF1h0cEiLCCHeWcJn64nFyWOWm63Om5z+0X5q2Q8d 2gcZElfLGeW6ku3IdNVYPNrnonOMW16kh+D7rmT5o/1ZqKOxiQIq8WbhkAxKH7AW 0JttsyTMLSTiERDuDHLzsisdV3bL5lLkmYM4jxT/UBG/eqma7ySimvoaaOTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3c/6evNZxwI77GPkZrA0DoJ93IkwHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzKoS+5X1s4d0/BICnviWHbnYnL9kZqHaIB vJ3f4LtcD782WSx9nfoC1KtZuIpFmEwFCrLdFhKWkI776Ut02Vm1PUZmvZRp6Cd8 yqOVRTBQRqNNqzIPUcE3OSlr82Zm4B1s5TvjGyhnHJGzQZYBMvW31CAnPmCYRKQg h2v8XdYNbdjR5uf2rRxG4pM0+4dcROpse4eE0urJZJ0C2mvUbAJyUnU0s7rlMRx2 rfHdolc3+3/ZfBnfYNhfWU8jUKrgqZKVt2CO2WlLMWy7zdEX0RXsEmAn03adprJW zEPayjScpTQw9s9q9kub4ByOfVaW2RXRVd1WrK0Rg1WRXIfWt28= -----END CERTIFICATE-----Generated at Sat May 10 03:12:24 2025 by rpki-client