$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: Nht9k3HsBP279tfGi/c4ZQzx/0v73VVQ/0fBeQQzv5Q= Subject key identifier: BC:38:27:5E:73:D4:D1:0B:06:74:FB:3C:DB:47:79:8B:0B:54:15:A5 Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 7CFABD5678327E4DEA4E4B3237CF68FD9C35B140 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 0166 Signing time: Wed 02 Jul 2025 00:02:16 +0000 Manifest this update: Tue 01 Jul 2025 23:57:16 +0000 Manifest next update: Sat 05 Jul 2025 03:07:16 +0000 Files and hashes: 1: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: BoMUNsI/j2e9G/63Rb5G+uJNzLn6ordfO4a5FDZZXOA=) 2: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s=) 3: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: OMvT7v+SWmvCcI/oQS1wfiv6hD1AXfKdII4PA3MiDEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 03:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fa:bd:56:78:32:7e:4d:ea:4e:4b:32:37:cf:68:fd:9c:35:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Jul 1 23:57:16 2025 GMT Not After : Jul 5 03:07:16 2025 GMT Subject: CN=BC38275E73D4D10B0674FB3CDB47798B0B5415A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:ec:d1:3d:df:31:88:19:6e:bd:01:f2:db: 24:94:35:16:fb:53:aa:e0:46:89:13:2c:4c:5e:a6: a4:b0:6c:e2:c4:6f:94:5a:39:07:9e:2c:a6:23:18: 7d:47:83:69:41:ab:cb:e8:11:d6:31:30:6b:39:4f: 75:3e:35:42:02:07:6a:79:86:65:31:26:3b:75:69: 02:72:a2:7e:1c:33:35:f7:5d:8b:8c:fc:0e:79:2a: 38:c6:40:fc:5b:9a:5b:c9:db:08:61:8e:9a:9e:77: 59:f7:41:0f:89:ce:3d:60:10:57:9b:15:77:bb:56: bc:eb:81:76:46:5a:98:25:c6:26:44:17:60:ed:1e: c0:6d:ef:c5:bb:63:ed:3c:81:f6:57:95:8a:a5:b0: a4:ba:05:80:bb:fe:5d:bc:8c:12:b0:c3:a0:7f:0d: 6b:a0:59:87:8c:fb:83:28:1a:4d:33:83:65:62:de: 13:08:ae:bd:34:10:c0:a4:f6:7f:fc:ca:1d:13:ea: 1d:20:c0:b9:28:c2:96:3d:8a:ef:ec:27:57:db:0f: b8:02:58:5b:5c:6c:65:91:c8:dc:1a:99:a3:df:2d: 05:a5:ad:88:c8:35:5c:f4:cb:f6:fd:8d:2e:b3:c8: 3f:c4:e3:e5:40:87:ca:09:90:4e:57:c1:ec:49:31: d7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:38:27:5E:73:D4:D1:0B:06:74:FB:3C:DB:47:79:8B:0B:54:15:A5 X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:60:59:10:e1:90:c1:dc:74:c0:34:3d:50:4d:69:ca:75:f6: 3a:41:2b:ea:86:f4:57:04:e2:a1:cd:48:d1:ee:2d:58:ba:7f: 9d:53:53:12:e6:c9:06:1f:73:eb:93:d4:d2:a1:79:a2:76:7b: 22:e7:36:bd:7f:3a:86:90:7f:f5:27:ed:0e:fc:7b:4d:ba:33: 72:65:71:d3:b7:4c:ec:73:00:ef:8b:17:f4:cf:84:d2:7b:4c: 94:17:c3:b4:42:d1:15:06:7b:83:77:10:80:44:be:5f:a2:4a: e1:38:a0:17:d4:c3:3b:b8:9a:77:e3:e5:94:d7:af:07:6d:95: 1d:06:7a:c0:d1:44:a0:a3:f7:e8:7c:f7:a5:d8:b6:fc:72:63: 08:14:9e:d2:35:37:51:6b:7e:3d:cc:53:0d:0a:4e:c9:04:b8: 8b:8f:1a:10:9c:8f:75:8d:b0:cc:38:6a:8e:98:53:1c:65:ad: cb:0e:fc:39:f1:90:a2:e4:2b:81:82:2a:01:96:e4:a9:e4:87: ae:32:67:78:b9:c1:d1:34:12:4b:f2:27:17:6c:96:4f:fd:f2: 54:ef:5e:15:f1:35:78:1d:52:c3:bc:4c:b7:a1:8c:79:cd:5a: 45:68:a7:27:78:9c:54:c7:2e:e4:07:0a:27:39:c5:cd:81:d4: 87:0d:57:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPq9Vngyfk3qTksyN89o/Zw1sUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNTA3MDEyMzU3MTZaFw0yNTA3MDUwMzA3MTZaMDMxMTAvBgNV BAMTKEJDMzgyNzVFNzNENEQxMEIwNjc0RkIzQ0RCNDc3OThCMEI1NDE1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUezRPd8xiBluvQHy2ySUNRb7 U6rgRokTLExepqSwbOLEb5RaOQeeLKYjGH1Hg2lBq8voEdYxMGs5T3U+NUICB2p5 hmUxJjt1aQJyon4cMzX3XYuM/A55KjjGQPxbmlvJ2whhjpqed1n3QQ+Jzj1gEFeb FXe7VrzrgXZGWpglxiZEF2DtHsBt78W7Y+08gfZXlYqlsKS6BYC7/l28jBKww6B/ DWugWYeM+4MoGk0zg2Vi3hMIrr00EMCk9n/8yh0T6h0gwLkowpY9iu/sJ1fbD7gC WFtcbGWRyNwamaPfLQWlrYjINVz0y/b9jS6zyD/E4+VAh8oJkE5XwexJMddRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvDgnXnPU0QsGdPs820d5iwtUFaUwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtgWRDhkMHcdMA0PVBNacp19jpBK+qG9FcE 4qHNSNHuLVi6f51TUxLmyQYfc+uT1NKheaJ2eyLnNr1/OoaQf/Un7Q78e026M3Jl cdO3TOxzAO+LF/TPhNJ7TJQXw7RC0RUGe4N3EIBEvl+iSuE4oBfUwzu4mnfj5ZTX rwdtlR0GesDRRKCj9+h896XYtvxyYwgUntI1N1Frfj3MUw0KTskEuIuPGhCcj3WN sMw4ao6YUxxlrcsO/DnxkKLkK4GCKgGW5Knkh64yZ3i5wdE0EkvyJxdslk/98lTv XhXxNXgdUsO8TLehjHnNWkVopyd4nFTHLuQHCic5xc2B1IcNVyQ= -----END CERTIFICATE-----Generated at Thu Jul 3 07:06:13 2025 by rpki-client