$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft File: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft (raw, json) Hash identifier: Mwtr6I128AERrA3ehYULYBn8deqY4rhSVVcwYFb1DxY= Subject key identifier: A2:83:13:AD:AB:0E:CA:57:D1:9B:53:EF:C8:5B:BC:00:A2:E2:DF:26 Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 4A436E1C49B3E649B5E55B7A4D4E90DBBB9BEAF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft Manifest number: 0150 Signing time: Mon 12 May 2025 15:52:16 +0000 Manifest this update: Mon 12 May 2025 15:47:16 +0000 Manifest next update: Thu 15 May 2025 22:19:16 +0000 Files and hashes: 1: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (hash: oP07dPM6PnkRNB+PzrhdYOY9okyRdrsFM/T0aA1Ih1s=) 2: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (hash: OMvT7v+SWmvCcI/oQS1wfiv6hD1AXfKdII4PA3MiDEc=) 3: 64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl (hash: ZYlW70VWgSeRU1ctr5e6nflmVgjU0n/PwJkkUAkhMhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:43:6e:1c:49:b3:e6:49:b5:e5:5b:7a:4d:4e:90:db:bb:9b:ea:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: May 12 15:47:16 2025 GMT Not After : May 15 22:19:16 2025 GMT Subject: CN=A28313ADAB0ECA57D19B53EFC85BBC00A2E2DF26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:9a:ec:f7:2c:3d:8e:d3:57:cc:eb:ba:6c: 25:19:e7:91:78:d7:0b:64:e5:7f:99:e2:64:0f:fd: f9:2a:e1:98:c6:63:c1:05:55:5a:e7:21:f3:be:7c: 64:b4:fb:b7:88:1d:e6:39:6b:1c:b8:38:22:5b:f8: c3:5c:d4:c4:77:07:e7:80:8e:5a:0d:ba:80:0a:c9: b7:51:ca:ab:ca:4a:a6:cd:42:1a:cf:98:80:04:75: ee:89:e4:85:e2:0e:cd:84:4c:2b:8e:c9:ee:bd:d9: a5:83:6d:cf:fa:44:77:13:ef:8b:fd:3c:87:ff:74: 63:0b:82:79:cc:ae:5d:f8:9e:c8:59:57:a9:37:c9: ba:1a:1d:ce:ae:59:18:4f:69:f5:70:14:d9:71:b0: cc:6b:fc:3d:0e:9e:0e:51:3a:31:e4:e5:f9:3e:e6: 33:a2:46:01:e2:65:c6:60:82:8a:89:ff:9b:e9:b2: 6b:e2:a0:0e:9b:14:e5:d2:ca:22:34:74:07:41:13: a4:5e:e5:79:89:aa:16:4c:7d:dd:e1:2c:30:03:55: b1:d1:34:51:d6:97:dd:9d:5f:dc:06:2a:54:da:a0: 38:62:b3:cf:23:c3:1f:4f:ea:e6:31:ab:25:2d:66: a5:ec:2b:a2:45:ac:1d:ae:1d:42:a4:6b:fd:47:ea: 76:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:83:13:AD:AB:0E:CA:57:D1:9B:53:EF:C8:5B:BC:00:A2:E2:DF:26 X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:17:db:b7:b7:7c:e5:a3:c7:dd:d9:c8:90:1c:ee:ce:7d:05: f9:93:97:f3:b9:8b:1d:5f:15:c0:16:af:96:98:60:24:b3:93: dc:da:57:6b:b7:6b:b4:9a:ec:3e:d4:45:3f:ed:8f:ca:88:e8: 3a:d0:a4:1d:5d:ec:30:bc:6e:ca:32:a2:8c:01:6a:18:1a:09: 83:0f:27:dc:d8:b0:31:b5:87:cc:fd:84:63:55:b7:f9:08:b0: b1:e1:ee:f5:d0:05:e1:72:a2:23:4e:d9:32:e3:ef:6b:b7:28: 57:3c:97:d7:a2:db:da:6b:e0:1b:f3:89:ce:ac:bb:4c:80:db: 20:e3:0d:c8:9e:3a:5b:58:89:8e:53:22:02:ce:8d:da:2c:37: 84:21:a0:4f:d1:58:e9:9e:f2:06:1e:96:ea:72:68:08:d5:9c: ce:37:49:43:cc:02:08:2f:38:6c:bc:d1:8c:7a:67:a2:82:3f: 0a:e3:77:f4:9a:95:d4:8f:a3:5a:e9:be:04:e8:4f:ba:bd:21: f7:88:62:ae:c8:ab:f6:ca:15:a1:e9:b6:f8:3b:cb:02:fd:b6: dd:9e:55:67:bc:56:bb:63:53:7d:e0:c8:bd:7e:ba:de:78:a4: f7:7f:d5:21:52:79:75:5b:ee:76:5c:32:dd:51:58:b4:a0:45: 1f:7c:0d:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSkNuHEmz5km15Vt6TU6Q27ub6vgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNTA1MTIxNTQ3MTZaFw0yNTA1MTUyMjE5MTZaMDMxMTAvBgNV BAMTKEEyODMxM0FEQUIwRUNBNTdEMTlCNTNFRkM4NUJCQzAwQTJFMkRGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5t5rs9yw9jtNXzOu6bCUZ55F4 1wtk5X+Z4mQP/fkq4ZjGY8EFVVrnIfO+fGS0+7eIHeY5axy4OCJb+MNc1MR3B+eA jloNuoAKybdRyqvKSqbNQhrPmIAEde6J5IXiDs2ETCuOye692aWDbc/6RHcT74v9 PIf/dGMLgnnMrl34nshZV6k3yboaHc6uWRhPafVwFNlxsMxr/D0Ong5ROjHk5fk+ 5jOiRgHiZcZggoqJ/5vpsmvioA6bFOXSyiI0dAdBE6Re5XmJqhZMfd3hLDADVbHR NFHWl92dX9wGKlTaoDhis88jwx9P6uYxqyUtZqXsK6JFrB2uHUKka/1H6nZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUooMTrasOylfRm1PvyFu8AKLi3yYwHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWIzMTNkMTctNWI5Yi00ZDIzLTk0 MjQtNzQ1Nzk1MDhiYTU0LzAvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4 RDc1RjYwNDJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANEX27e3fOWjx93ZyJAc7s59BfmTl/O5ix1f FcAWr5aYYCSzk9zaV2u3a7Sa7D7URT/tj8qI6DrQpB1d7DC8bsoyoowBahgaCYMP J9zYsDG1h8z9hGNVt/kIsLHh7vXQBeFyoiNO2TLj72u3KFc8l9ei29pr4Bvzic6s u0yA2yDjDcieOltYiY5TIgLOjdosN4QhoE/RWOme8gYelupyaAjVnM43SUPMAggv OGy80Yx6Z6KCPwrjd/SaldSPo1rpvgToT7q9IfeIYq7Iq/bKFaHptvg7ywL9tt2e VWe8VrtjU33gyL1+ut54pPd/1SFSeXVb7nZcMt1RWLSgRR98Dbo= -----END CERTIFICATE-----Generated at Wed May 14 12:39:26 2025 by rpki-client