$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft (raw, json) Hash identifier: E7SAItOk8TY7Dc5AzPkDnkiu1M5cCpD/RFGLnbzk29w= Subject key identifier: 6B:5E:4E:7C:F9:87:63:35:A0:9F:FC:A1:D4:05:BA:F8:DC:9D:17:F8 Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Certificate serial: 60EEF6CA78E15ADEE88B23F8C10F304F84289C00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft Manifest number: 01F5 Signing time: Wed 06 Aug 2025 21:31:34 +0000 Manifest this update: Wed 06 Aug 2025 21:26:34 +0000 Manifest next update: Sun 10 Aug 2025 04:29:34 +0000 Files and hashes: 1: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: Mc8Ea5+5WJ6GF7G0KNR6Ybiy7ufabhA8F83CYeyA+z0=) 2: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl (hash: +Tn80dN1OVQdffncL5YTTnttuVmn5AwndrBp5sUP1f4=) 3: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: fQYP6KBmK43mZ1BOpBi0K6IbkEvJhG31/o2xXC40uG8=) 4: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: cu+gkkkTCuwJj0tPWyI4oDjIIQe1JqfFTuFCDD6tSKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ee:f6:ca:78:e1:5a:de:e8:8b:23:f8:c1:0f:30:4f:84:28:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Validity Not Before: Aug 6 21:26:34 2025 GMT Not After : Aug 10 04:29:34 2025 GMT Subject: CN=6B5E4E7CF9876335A09FFCA1D405BAF8DC9D17F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6a:45:03:50:9b:05:18:06:db:37:35:53:6e: 63:99:db:ec:28:89:59:b8:7f:97:e8:01:32:5f:f1: 0f:66:56:76:97:43:03:68:4f:ae:9d:cd:37:3f:9f: 82:ff:bd:cb:97:e9:a4:43:6f:72:b8:dd:2b:19:48: 6a:88:3a:10:25:38:4d:87:ac:f7:04:b6:c3:d4:32: 7f:21:dd:bb:f5:47:c5:6a:84:bb:66:4d:28:d2:a4: fc:59:80:1f:97:88:b0:79:3d:8b:27:82:a9:18:0e: 8a:29:b3:df:a6:b1:8f:e9:2c:38:e3:b3:b0:81:a7: cb:ce:a9:4f:59:0f:cd:cc:b0:65:4c:58:06:09:ed: ff:31:17:f8:ef:87:55:11:8e:d9:bf:5f:56:2b:00: fd:8c:64:b0:48:76:d7:4e:c5:1c:75:44:e1:b0:d5: c7:a1:a4:c7:3a:90:c1:1d:eb:9e:c0:2a:65:fa:78: 95:dd:f9:a9:30:62:f5:de:09:97:3e:17:96:bb:41: 4a:9c:83:78:87:18:16:a0:a3:1e:a6:32:d2:b6:ab: 02:6f:21:69:3b:b2:4e:28:5b:78:31:a3:60:b3:0b: 48:04:9d:00:0e:14:3e:3f:9a:03:4a:b8:4b:c9:16: 0c:ad:91:ab:64:77:2f:88:65:fd:f9:a3:ff:bd:93: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5E:4E:7C:F9:87:63:35:A0:9F:FC:A1:D4:05:BA:F8:DC:9D:17:F8 X509v3 Authority Key Identifier: keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:69:f7:12:c8:9c:e4:ff:bc:a4:d5:e7:57:c1:32:3a:3d:e2: 81:80:c5:bc:27:2c:d0:8c:94:e3:12:bc:73:22:c6:2b:a3:80: 18:3c:dc:46:41:ec:71:b7:8a:58:c4:df:74:79:80:a7:14:b5: 22:7f:86:83:76:86:73:a3:2a:00:1d:4f:f2:82:3c:1a:03:3e: a6:4c:4c:8d:b6:62:80:51:e6:87:84:4e:dd:24:92:7f:44:80: 58:83:d1:9d:9f:f5:c8:4a:e0:93:c5:6b:92:34:ba:ce:1e:c6: ee:90:1b:cb:60:6a:9c:de:f4:aa:e7:0c:34:cb:8f:d3:2b:f8: c9:9f:59:1c:6f:bd:49:e1:8f:17:66:b5:e4:b3:a3:2c:05:67: a4:f0:6b:6c:69:4f:d4:6e:65:0d:c1:21:1a:90:16:21:2e:5e: 42:c8:4c:ff:94:f4:bc:9a:96:fc:0d:39:f4:49:06:fa:ee:4c: f8:ca:fd:79:94:d1:18:af:96:1d:65:9e:ba:3b:f9:a6:00:6d: ca:1b:a8:d2:d2:ee:75:bf:92:13:20:dd:5f:53:23:e1:b7:78: c0:5c:ee:75:06:b4:8f:56:1b:0c:f9:db:82:c4:de:e9:83:5e: 48:ad:00:d4:a0:f2:ca:fc:dd:2e:16:a8:9e:b0:c5:ca:35:4b: 2d:91:9f:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYO72ynjhWt7oiyP4wQ8wT4QonAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZF RUYxNURCNjAeFw0yNTA4MDYyMTI2MzRaFw0yNTA4MTAwNDI5MzRaMDMxMTAvBgNV BAMTKDZCNUU0RTdDRjk4NzYzMzVBMDlGRkNBMUQ0MDVCQUY4REM5RDE3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkakUDUJsFGAbbNzVTbmOZ2+wo iVm4f5foATJf8Q9mVnaXQwNoT66dzTc/n4L/vcuX6aRDb3K43SsZSGqIOhAlOE2H rPcEtsPUMn8h3bv1R8VqhLtmTSjSpPxZgB+XiLB5PYsngqkYDoops9+msY/pLDjj s7CBp8vOqU9ZD83MsGVMWAYJ7f8xF/jvh1URjtm/X1YrAP2MZLBIdtdOxRx1ROGw 1cehpMc6kMEd657AKmX6eJXd+akwYvXeCZc+F5a7QUqcg3iHGBagox6mMtK2qwJv IWk7sk4oW3gxo2CzC0gEnQAOFD4/mgNKuEvJFgytkatkdy+IZf35o/+9kzgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa15OfPmHYzWgn/yh1AW6+NydF/gwHwYDVR0j BBgwFoAUZLRmUdewx1fkrt4BaR8GL+7xXbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTcwNTkyNy1lYzY0LTQ0ZjUtOWM5ZS1jOWE1NWE1MjNiNjQvMC82NEI0NjY1MUQ3 QjBDNzU3RTRBRURFMDE2OTFGMDYyRkVFRjE1REI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZFRUYx NURCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj OWUtYzlhNTVhNTIzYjY0LzAvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2 MkZFRUYxNURCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxp9xLInOT/vKTV51fBMjo94oGAxbwnLNCM lOMSvHMixiujgBg83EZB7HG3iljE33R5gKcUtSJ/hoN2hnOjKgAdT/KCPBoDPqZM TI22YoBR5oeETt0kkn9EgFiD0Z2f9chK4JPFa5I0us4exu6QG8tgapze9KrnDDTL j9Mr+MmfWRxvvUnhjxdmteSzoywFZ6Twa2xpT9RuZQ3BIRqQFiEuXkLITP+U9Lya lvwNOfRJBvruTPjK/XmU0Rivlh1lnro7+aYAbcobqNLS7nW/khMg3V9TI+G3eMBc 7nUGtI9WGwz524LE3umDXkitANSg8sr83S4WqJ6wxco1Sy2Rn6E= -----END CERTIFICATE-----Generated at Thu Aug 7 11:07:31 2025 by rpki-client