$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: AXHwoexhjvLGhMFNUxq/zUbVr8dlHBoq5frmCY2BUxU= Subject key identifier: 72:71:87:EA:14:7E:8C:FE:DE:ED:B1:FD:73:A4:12:45:1F:46:0D:91 Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 4FBBCE8AEB438204EB103D73F0F08BAE0BD11DF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: F7 Signing time: Mon 30 Jun 2025 20:00:57 +0000 Manifest this update: Mon 30 Jun 2025 19:55:57 +0000 Manifest next update: Thu 03 Jul 2025 21:14:57 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: Qkt0PjjyxOdE2s7AD2mofOab1arU+lA01FNAX0bbYmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 21:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:bb:ce:8a:eb:43:82:04:eb:10:3d:73:f0:f0:8b:ae:0b:d1:1d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Jun 30 19:55:57 2025 GMT Not After : Jul 3 21:14:57 2025 GMT Subject: CN=727187EA147E8CFEDEEDB1FD73A412451F460D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:36:c7:27:8d:f9:0f:09:96:f5:61:06:76: 98:17:3d:bf:32:44:11:67:07:32:1a:7a:ca:98:cd: 6c:4c:00:50:bc:6b:d2:60:11:a6:a1:63:86:92:8f: 86:bf:f2:e6:97:08:59:47:26:80:1c:fb:85:d4:b0: 17:e6:dd:c4:f4:c5:0f:be:5d:10:4a:5a:1f:6e:2b: a9:36:21:51:d9:b1:ed:de:70:07:a9:a4:2e:7d:74: c1:bf:57:c7:68:23:d0:84:f6:c6:b0:93:75:cb:ff: c7:da:e9:c0:2a:26:52:67:7c:6c:6e:ab:68:2d:c9: a5:c6:45:78:00:17:a3:04:59:8d:4b:49:d4:bb:1c: d2:ae:4b:79:db:72:fc:ae:a2:74:a5:2b:59:cb:26: 13:07:18:01:fc:b8:6a:78:fb:1f:c6:2f:3d:d8:a4: a2:58:03:58:88:13:6a:4d:c4:8c:b1:50:86:8e:a4: d8:7a:3a:aa:ff:8d:d8:f3:e2:34:fc:c5:37:75:13: af:23:e7:06:d5:91:29:39:c8:a9:f1:0d:7a:19:df: d7:27:3e:c3:a7:4d:b5:c5:10:ae:e9:a3:be:5f:8d: 94:1e:33:e8:3d:8f:61:18:d2:6d:07:cf:82:f5:22: e8:58:ba:2e:f4:17:b3:46:b6:52:8d:3c:5e:41:a9: 47:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:71:87:EA:14:7E:8C:FE:DE:ED:B1:FD:73:A4:12:45:1F:46:0D:91 X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:87:fb:a0:55:a1:9f:35:70:18:41:da:c0:fa:ef:5a:87:bc: 8f:4a:8c:a4:64:e3:d5:83:9a:11:15:78:72:e0:be:e8:d2:85: 19:0e:b7:73:e3:1b:1c:0a:58:1b:11:a1:e8:e1:db:d1:8f:20: 9c:f7:f1:e9:d8:22:69:16:48:12:47:73:8e:a4:83:25:e2:f9: c4:2a:cc:32:2c:89:d7:19:40:67:77:53:f6:08:02:80:e3:d2: 59:0a:23:bd:f4:64:6e:c6:40:25:d5:b0:d9:ff:8e:c5:35:cd: c8:42:49:45:56:71:14:0f:a6:04:3e:ac:38:36:c1:83:2c:2a: 46:c2:65:3f:04:b6:82:c4:88:47:df:60:35:bf:d6:68:79:1d: 31:5f:47:a0:f6:35:23:41:6b:5d:4f:0e:7c:67:9a:4e:c9:d8: 46:bc:f5:f0:71:43:d2:50:09:02:da:12:5d:11:09:11:a1:ab: d4:c8:74:0b:f2:8e:55:6e:0a:06:5b:de:9c:c2:06:fc:88:bb: a8:ed:6a:81:2a:98:d8:71:4e:f3:89:32:70:f2:2e:53:e9:ad: c4:ae:dc:21:5f:ca:01:5f:50:16:55:c7:6c:41:3c:dc:6d:98: f8:e4:64:8b:cd:2a:a5:90:45:73:8d:87:e3:10:fc:df:de:df: 4a:fc:c3:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7vOiutDggTrED1z8PCLrgvRHfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTA2MzAxOTU1NTdaFw0yNTA3MDMyMTE0NTdaMDMxMTAvBgNV BAMTKDcyNzE4N0VBMTQ3RThDRkVERUVEQjFGRDczQTQxMjQ1MUY0NjBEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2TbHJ435DwmW9WEGdpgXPb8y RBFnBzIaesqYzWxMAFC8a9JgEaahY4aSj4a/8uaXCFlHJoAc+4XUsBfm3cT0xQ++ XRBKWh9uK6k2IVHZse3ecAeppC59dMG/V8doI9CE9sawk3XL/8fa6cAqJlJnfGxu q2gtyaXGRXgAF6MEWY1LSdS7HNKuS3nbcvyuonSlK1nLJhMHGAH8uGp4+x/GLz3Y pKJYA1iIE2pNxIyxUIaOpNh6Oqr/jdjz4jT8xTd1E68j5wbVkSk5yKnxDXoZ39cn PsOnTbXFEK7po75fjZQeM+g9j2EY0m0Hz4L1IuhYui70F7NGtlKNPF5BqUd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcnGH6hR+jP7e7bH9c6QSRR9GDZEwHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuH+6BVoZ81cBhB2sD671qHvI9KjKRk49WD mhEVeHLgvujShRkOt3PjGxwKWBsRoejh29GPIJz38enYImkWSBJHc46kgyXi+cQq zDIsidcZQGd3U/YIAoDj0lkKI730ZG7GQCXVsNn/jsU1zchCSUVWcRQPpgQ+rDg2 wYMsKkbCZT8EtoLEiEffYDW/1mh5HTFfR6D2NSNBa11PDnxnmk7J2Ea89fBxQ9JQ CQLaEl0RCRGhq9TIdAvyjlVuCgZb3pzCBvyIu6jtaoEqmNhxTvOJMnDyLlPprcSu 3CFfygFfUBZVx2xBPNxtmPjkZIvNKqWQRXONh+MQ/N/e30r8w/s= -----END CERTIFICATE-----Generated at Tue Jul 1 23:24:29 2025 by rpki-client