$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: Tzfb4APk4PzYzUv/6H0JegDmKawFzBeD0OT+TNT1tPo= Subject key identifier: C1:94:80:DE:C4:4B:B0:67:A8:75:84:D7:34:77:B5:29:3B:B5:83:6E Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 4C6B05F6753CD4B44E374D27E7BB9981BB6136C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 0128 Signing time: Sat 18 Oct 2025 21:30:58 +0000 Manifest this update: Sat 18 Oct 2025 21:25:58 +0000 Manifest next update: Wed 22 Oct 2025 05:35:58 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: NvPCbK5j+uNM4Wq8BkinGU62RQSNjTw0F5JxmeGSXvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6b:05:f6:75:3c:d4:b4:4e:37:4d:27:e7:bb:99:81:bb:61:36:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Oct 18 21:25:58 2025 GMT Not After : Oct 22 05:35:58 2025 GMT Subject: CN=C19480DEC44BB067A87584D73477B5293BB5836E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:81:5d:84:8f:4d:b2:eb:a5:e3:63:09:9f: b5:21:e1:6b:d6:87:0f:f7:39:d6:f1:4c:f3:5f:19: 17:22:83:d3:2c:dc:8c:b1:6d:70:2d:f2:23:64:5d: 03:60:d4:94:0b:1f:1c:4a:11:b0:bb:06:80:53:59: 1f:bc:00:67:16:28:ec:2a:bc:d1:e5:4a:54:9d:20: b3:ed:1a:1c:de:29:9f:49:cc:cd:0d:c5:00:19:23: 39:be:5e:3e:b1:6c:58:d6:c1:c7:50:8f:ee:24:23: 41:91:a7:71:e0:23:33:97:b4:40:20:7f:d5:9c:1d: 10:a3:40:7f:35:23:92:2a:3f:6a:6a:74:4f:b0:6a: 12:6c:d6:50:2c:21:52:45:a3:4f:33:96:4d:cc:27: 54:0d:5c:50:1a:a2:07:d2:b6:5e:16:cf:56:57:4d: a3:4b:34:ed:6b:e0:79:33:0f:d3:2d:84:9e:be:f8: 1c:b6:57:a0:a5:d9:ca:6c:64:e4:5b:6b:a4:0c:b2: 5a:52:2d:27:bd:f8:2d:6e:7b:60:26:50:96:b9:97: e6:2c:88:e0:92:ba:16:ad:35:20:80:ae:08:33:4b: b1:47:d1:99:e3:33:0e:50:f2:4a:58:ac:13:0b:27: 92:f0:2d:8b:b9:a8:ec:8d:cc:ad:a3:84:96:e1:f8: 70:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:94:80:DE:C4:4B:B0:67:A8:75:84:D7:34:77:B5:29:3B:B5:83:6E X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b5:d4:ba:1b:21:85:06:3f:bf:8b:89:ac:6e:4e:03:61:e7: fb:d7:33:07:8c:a0:26:6a:e0:7c:6f:ac:36:21:56:29:a3:3e: 81:ea:2f:50:5e:95:aa:6a:9f:57:51:52:c0:a8:7d:b7:68:6f: 99:20:48:12:cf:87:ad:e1:8d:99:fc:bd:3b:69:c4:99:e0:24: 4e:95:2b:0e:11:72:cf:d5:ba:a1:a2:b8:fb:4b:50:04:c2:56: 15:74:8c:7a:46:f0:4d:01:b6:e3:20:03:92:78:f5:15:3d:8e: f8:2e:a9:b3:90:21:ab:95:fa:b3:25:46:d5:18:47:37:56:78: df:b7:ab:81:5e:1a:10:c7:3e:cd:3e:c3:d8:58:99:17:4f:67: 89:e1:aa:d4:ed:8b:4d:c8:1e:24:6a:c0:5e:3a:ce:4e:9c:c7: d9:bc:0d:f3:c8:42:ce:56:46:c9:5d:1d:06:c4:06:aa:b4:c7: 05:a6:f3:1f:57:cc:97:b3:a5:a1:13:0e:1c:96:61:ca:26:8f: c2:8e:7c:2d:3c:76:5e:75:38:dc:a2:bd:a7:59:96:dd:ae:06: d6:ff:52:c6:08:40:c7:3f:50:2f:14:b4:45:67:0e:b6:08:4c: 22:d8:6b:21:f9:da:5c:84:91:76:6c:3d:cb:9a:c9:4b:cd:44: c9:60:b0:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGsF9nU81LRON00n57uZgbthNscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTEwMTgyMTI1NThaFw0yNTEwMjIwNTM1NThaMDMxMTAvBgNV BAMTKEMxOTQ4MERFQzQ0QkIwNjdBODc1ODRENzM0NzdCNTI5M0JCNTgzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSYFdhI9Nsuul42MJn7Uh4WvW hw/3OdbxTPNfGRcig9Ms3IyxbXAt8iNkXQNg1JQLHxxKEbC7BoBTWR+8AGcWKOwq vNHlSlSdILPtGhzeKZ9JzM0NxQAZIzm+Xj6xbFjWwcdQj+4kI0GRp3HgIzOXtEAg f9WcHRCjQH81I5IqP2pqdE+wahJs1lAsIVJFo08zlk3MJ1QNXFAaogfStl4Wz1ZX TaNLNO1r4HkzD9MthJ6++By2V6Cl2cpsZORba6QMslpSLSe9+C1ue2AmUJa5l+Ys iOCSuhatNSCArggzS7FH0ZnjMw5Q8kpYrBMLJ5LwLYu5qOyNzK2jhJbh+HC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwZSA3sRLsGeodYTXNHe1KTu1g24wHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC611LobIYUGP7+LiaxuTgNh5/vXMweMoCZq 4HxvrDYhVimjPoHqL1Belapqn1dRUsCofbdob5kgSBLPh63hjZn8vTtpxJngJE6V Kw4Rcs/VuqGiuPtLUATCVhV0jHpG8E0BtuMgA5J49RU9jvguqbOQIauV+rMlRtUY RzdWeN+3q4FeGhDHPs0+w9hYmRdPZ4nhqtTti03IHiRqwF46zk6cx9m8DfPIQs5W RsldHQbEBqq0xwWm8x9XzJezpaETDhyWYcomj8KOfC08dl51ONyivadZlt2uBtb/ UsYIQMc/UC8UtEVnDrYITCLYayH52lyEkXZsPcuayUvNRMlgsMg= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:24 2025 by rpki-client