$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: sjdK03bkSK0XtpEGRWRftvO5CL8sHbfhpfrDZB9OGtw= Subject key identifier: 98:84:53:9B:E4:25:28:44:27:EF:81:9B:06:DC:F8:09:0A:2B:1D:48 Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 171E786F496D3BB0858DF5D1661C17BD6C4BBB62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 017C Signing time: Thu 21 Aug 2025 10:32:22 +0000 Manifest this update: Thu 21 Aug 2025 10:27:22 +0000 Manifest next update: Sun 24 Aug 2025 19:09:22 +0000 Files and hashes: 1: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: FOlxIQQMFFGaLVaefsge3an9Zuq9SenfRW730Ka6MNA=) 2: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: OMvT7v+SWmvCcI/oQS1wfiv6hD1AXfKdII4PA3MiDEc=) 3: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1e:78:6f:49:6d:3b:b0:85:8d:f5:d1:66:1c:17:bd:6c:4b:bb:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Aug 21 10:27:22 2025 GMT Not After : Aug 24 19:09:22 2025 GMT Subject: CN=9884539BE425284427EF819B06DCF8090A2B1D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:56:d2:e1:cd:3a:df:a2:62:ac:07:17:57: b6:23:e3:5d:80:1f:68:b6:36:71:8d:a0:66:65:c1: 11:26:e9:24:e2:c2:df:15:23:91:11:b5:d6:42:29: b2:2c:05:bb:3a:57:46:f4:08:d2:81:93:75:49:b3: c1:e2:e5:d3:c3:eb:b3:0f:bd:4b:8a:2c:ce:63:39: cb:a7:36:dc:a4:0c:37:36:00:75:47:f1:49:ae:af: 67:d8:f1:2b:fc:a8:11:ab:04:83:c4:c8:75:ec:3c: 19:89:6a:15:2b:ab:fa:da:f0:13:a2:5d:82:6a:bd: 05:b0:30:be:fd:63:be:0d:35:25:0c:2a:ac:05:58: 20:e1:67:b4:c4:eb:e0:8e:c7:74:12:0c:36:82:66: e8:dc:a8:3e:63:f4:15:b5:99:15:0e:25:2a:d9:97: 62:74:f3:5b:a5:80:7e:95:b6:cf:f6:7b:97:06:1d: c9:24:75:f2:4d:20:06:8b:29:fc:cb:32:cd:8a:3b: 41:e9:7b:38:0b:6c:32:3f:a3:4b:6c:e3:f6:e7:9d: ee:2b:a7:20:39:1a:8f:94:45:39:0c:b3:f5:80:9d: c8:e5:8d:bb:53:23:1a:e9:b8:dc:ce:e1:75:8e:08: 3f:31:23:06:17:bc:b4:4d:36:ec:83:53:ab:d1:92: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:84:53:9B:E4:25:28:44:27:EF:81:9B:06:DC:F8:09:0A:2B:1D:48 X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:4f:60:58:62:6a:6c:e3:ff:23:6f:41:fa:a9:2f:10:1a:46: 2c:bc:9b:e4:ec:81:55:aa:b9:b2:86:54:62:10:af:e4:67:2e: 3a:a0:43:f0:09:fd:64:2d:66:57:d9:cb:dd:98:17:fd:b9:67: 55:2f:30:3d:22:9a:6c:79:f8:ca:6c:ef:fc:91:d0:7a:5f:55: 21:96:33:f5:65:bd:f0:08:e9:51:ef:63:18:83:18:33:31:b7: 72:b0:a8:45:9c:10:1e:c0:a6:c2:98:1e:8a:b6:26:bf:09:69: ad:68:af:ea:97:ed:e1:ca:b9:90:13:be:57:47:ce:c2:f3:c7: 14:f4:d5:90:91:c8:a5:a6:81:1e:1c:c2:98:61:60:f7:c5:be: 54:62:42:cb:89:43:8d:3b:5e:a0:3b:86:d0:da:71:32:d6:9a: c3:68:31:5f:c6:fc:77:f0:bc:77:ec:91:38:1f:52:e4:da:c7: 73:ee:2f:a7:90:c4:53:90:06:dc:cd:5a:12:cb:87:55:9f:15: e6:f1:a3:58:71:34:2b:d7:3d:95:6c:41:f0:6b:12:1c:1e:d6: 70:a9:39:33:92:99:9a:21:de:aa:ba:ae:f4:fc:75:55:0d:ab: 45:ee:2a:39:03:bd:dc:f3:f3:f3:0c:fc:a7:80:fc:45:4c:fc: 21:17:d2:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFx54b0ltO7CFjfXRZhwXvWxLu2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNTA4MjExMDI3MjJaFw0yNTA4MjQxOTA5MjJaMDMxMTAvBgNV BAMTKDk4ODQ1MzlCRTQyNTI4NDQyN0VGODE5QjA2RENGODA5MEEyQjFENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUtFbS4c0636JirAcXV7Yj412A H2i2NnGNoGZlwREm6STiwt8VI5ERtdZCKbIsBbs6V0b0CNKBk3VJs8Hi5dPD67MP vUuKLM5jOcunNtykDDc2AHVH8Umur2fY8Sv8qBGrBIPEyHXsPBmJahUrq/ra8BOi XYJqvQWwML79Y74NNSUMKqwFWCDhZ7TE6+COx3QSDDaCZujcqD5j9BW1mRUOJSrZ l2J081ulgH6Vts/2e5cGHckkdfJNIAaLKfzLMs2KO0HpezgLbDI/o0ts4/bnne4r pyA5Go+URTkMs/WAncjljbtTIxrpuNzO4XWOCD8xIwYXvLRNNuyDU6vRkm4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmIRTm+QlKEQn74GbBtz4CQorHUgwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM5PYFhiamzj/yNvQfqpLxAaRiy8m+TsgVWq ubKGVGIQr+RnLjqgQ/AJ/WQtZlfZy92YF/25Z1UvMD0immx5+Mps7/yR0HpfVSGW M/VlvfAI6VHvYxiDGDMxt3KwqEWcEB7ApsKYHoq2Jr8Jaa1or+qX7eHKuZATvldH zsLzxxT01ZCRyKWmgR4cwphhYPfFvlRiQsuJQ407XqA7htDacTLWmsNoMV/G/Hfw vHfskTgfUuTax3PuL6eQxFOQBtzNWhLLh1WfFebxo1hxNCvXPZVsQfBrEhwe1nCp OTOSmZoh3qq6rvT8dVUNq0XuKjkDvdzz8/MM/KeA/EVM/CEX0mY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:58 2025 by rpki-client