$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: 4CkhH3E6dipIB2fdRf84PxGMzhnYJmP8SwpsbeIJkog= Subject key identifier: B5:C6:49:5A:97:0A:93:47:56:84:7F:40:82:ED:C5:E3:D0:CB:5D:5A Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 57F7E9A2E35E465D775082188F46092AD0685904 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 010E Signing time: Thu 21 Aug 2025 12:10:58 +0000 Manifest this update: Thu 21 Aug 2025 12:05:58 +0000 Manifest next update: Sun 24 Aug 2025 12:28:58 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: b38azWd1zp3BerGOy23LTG1clZOuBIPYGO0f84R57d0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f7:e9:a2:e3:5e:46:5d:77:50:82:18:8f:46:09:2a:d0:68:59:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: Aug 21 12:05:58 2025 GMT Not After : Aug 24 12:28:58 2025 GMT Subject: CN=B5C6495A970A934756847F4082EDC5E3D0CB5D5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:82:be:cb:90:3b:55:65:4c:39:1e:2f:d0: 9f:70:a1:24:44:ce:11:77:82:84:9d:d4:b3:27:ed: 96:08:3b:6d:98:2c:24:d8:b4:84:a5:50:b5:49:d3: 54:2c:d5:01:77:fc:62:43:80:d6:8c:ab:f5:26:57: 9c:cc:2e:5b:c0:ae:7a:bb:0a:f7:44:9e:83:28:2c: 47:5c:e7:d9:88:75:4f:3a:98:82:d3:86:38:c2:6f: 1c:da:c8:50:4a:1e:98:38:46:11:8b:7c:80:b8:5c: f9:47:96:1c:12:45:d8:36:82:93:e0:2c:b9:ae:0f: 71:42:1b:68:8d:cf:60:40:87:bb:1a:21:60:4f:9a: 23:01:c7:9d:b1:09:b8:2d:92:05:01:48:6c:f1:d3: f0:87:87:61:a5:57:f6:00:e9:64:f3:1f:8d:e9:ed: 27:46:da:86:b1:43:28:74:7c:fb:c8:60:92:a8:17: 87:6a:b9:fa:ec:4d:e0:c0:bb:8d:78:a4:4c:df:4f: 3f:d3:b3:19:2a:70:4e:b0:f1:22:a6:75:32:11:f6: b8:15:ad:4f:9d:a7:a6:56:ff:6b:04:8f:34:20:b0: 9d:e7:a4:b5:8d:1c:01:d7:0d:2c:c8:a2:67:b5:75: 16:51:ff:f5:17:aa:3e:04:de:4f:04:60:e9:ac:d7: ee:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C6:49:5A:97:0A:93:47:56:84:7F:40:82:ED:C5:E3:D0:CB:5D:5A X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:fc:c9:6e:c3:f0:b2:8d:f6:4e:95:0e:d1:b4:cf:bd:1b:12: 19:c7:f1:49:c6:d4:a6:14:40:ca:ba:f0:89:24:8d:de:05:b1: 17:22:b2:ce:c7:fa:1c:5f:6c:3f:ce:12:96:b7:21:ed:81:d7: a3:99:40:67:f9:29:ba:3b:58:47:4c:84:fd:be:a9:78:d7:25: fd:31:e0:aa:c8:17:96:e0:0d:78:56:64:50:df:e5:f4:80:e6: a4:b1:45:98:18:29:97:07:35:9e:70:a1:84:8f:de:55:2f:d6: 4e:80:b7:c6:1b:88:35:14:40:94:2b:c9:07:ff:b4:ff:1e:1d: 9d:33:6e:06:38:56:0d:09:7f:c1:91:00:15:48:74:65:74:29: f2:49:69:b8:9a:b0:c6:f0:96:3c:64:92:4c:0c:ba:c1:80:56: e3:80:4a:dd:1c:32:60:bf:9b:f6:0a:62:5b:1f:b3:e9:18:7b: 37:3c:e2:be:2d:81:06:08:f6:1b:b8:fd:46:16:3d:ba:2f:dc: 28:ef:c5:5d:6f:d8:71:bd:3c:02:c6:c5:bd:6a:e6:e6:0e:27: 82:a0:08:55:30:84:8a:b3:88:48:1f:9c:cd:93:f4:7f:3f:98: 6c:5f:8b:65:82:17:71:7d:0d:9f:10:99:07:62:9f:dc:25:85: cc:9e:3d:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/fpouNeRl13UIIYj0YJKtBoWQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNTA4MjExMjA1NThaFw0yNTA4MjQxMjI4NThaMDMxMTAvBgNV BAMTKEI1QzY0OTVBOTcwQTkzNDc1Njg0N0Y0MDgyRURDNUUzRDBDQjVENUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHAIK+y5A7VWVMOR4v0J9woSRE zhF3goSd1LMn7ZYIO22YLCTYtISlULVJ01Qs1QF3/GJDgNaMq/UmV5zMLlvArnq7 CvdEnoMoLEdc59mIdU86mILThjjCbxzayFBKHpg4RhGLfIC4XPlHlhwSRdg2gpPg LLmuD3FCG2iNz2BAh7saIWBPmiMBx52xCbgtkgUBSGzx0/CHh2GlV/YA6WTzH43p 7SdG2oaxQyh0fPvIYJKoF4dqufrsTeDAu414pEzfTz/TsxkqcE6w8SKmdTIR9rgV rU+dp6ZW/2sEjzQgsJ3npLWNHAHXDSzIome1dRZR//UXqj4E3k8EYOms1+6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtcZJWpcKk0dWhH9Agu3F49DLXVowHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMH8yW7D8LKN9k6VDtG0z70bEhnH8UnG1KYU QMq68Ikkjd4FsRciss7H+hxfbD/OEpa3Ie2B16OZQGf5Kbo7WEdMhP2+qXjXJf0x 4KrIF5bgDXhWZFDf5fSA5qSxRZgYKZcHNZ5woYSP3lUv1k6At8YbiDUUQJQryQf/ tP8eHZ0zbgY4Vg0Jf8GRABVIdGV0KfJJabiasMbwljxkkkwMusGAVuOASt0cMmC/ m/YKYlsfs+kYezc84r4tgQYI9hu4/UYWPbov3CjvxV1v2HG9PALGxb1q5uYOJ4Kg CFUwhIqziEgfnM2T9H8/mGxfi2WCF3F9DZ8QmQdin9wlhcyePaE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:52 2025 by rpki-client