$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft File: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft (raw, json) Hash identifier: XT5mHAUbyEu/ji/ELZ8Bii422wrtjuh9M6w+EvhHLVE= Subject key identifier: 42:55:F0:68:35:63:B9:1F:AF:5E:38:5D:32:1E:87:38:66:59:22:E9 Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 Certificate issuer: /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Certificate serial: 1BCA8F9DCFD532E32E45FA6FA9288C3B03A7887D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft Manifest number: 021C Signing time: Mon 03 Nov 2025 18:21:34 +0000 Manifest this update: Mon 03 Nov 2025 18:16:34 +0000 Manifest next update: Thu 06 Nov 2025 20:36:34 +0000 Files and hashes: 1: 3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (hash: fQYP6KBmK43mZ1BOpBi0K6IbkEvJhG31/o2xXC40uG8=) 2: 64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl (hash: q6CIGKHnMMJ06VhpiCrMxdaP+DSJ6K0ygYM07ORXmcs=) 3: 3130332e3135382e3230382e302f32342d3234203d3e20313431313436.roa (hash: Mc8Ea5+5WJ6GF7G0KNR6Ybiy7ufabhA8F83CYeyA+z0=) 4: 3130332e3135382e3230392e302f32342d3234203d3e20313431313436.roa (hash: cu+gkkkTCuwJj0tPWyI4oDjIIQe1JqfFTuFCDD6tSKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ca:8f:9d:cf:d5:32:e3:2e:45:fa:6f:a9:28:8c:3b:03:a7:88:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6 Validity Not Before: Nov 3 18:16:34 2025 GMT Not After : Nov 6 20:36:34 2025 GMT Subject: CN=4255F0683563B91FAF5E385D321E8738665922E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4a:e9:98:c3:5b:82:d2:c8:a7:f4:4b:2c:0b: 89:5d:99:b8:fa:2f:1a:22:bf:6c:6a:59:31:f4:ef: d4:9d:76:c2:c7:7a:30:72:e8:49:b7:e8:85:c7:c3: 70:ed:fa:69:f4:26:84:61:a0:10:0b:dd:99:12:16: 04:a4:21:bc:de:bd:61:42:3d:52:c8:d3:1b:4f:7e: 4f:7a:f4:a5:d9:0c:40:26:8b:3c:8e:5c:2e:6a:c2: 39:05:e0:49:07:9a:0a:d7:2b:ee:d8:f5:7a:67:d9: 49:de:d1:47:3d:fa:61:ef:e7:06:c3:f7:a8:73:06: 3e:ea:7f:31:7f:97:28:dd:79:f4:08:67:76:1a:11: 3e:6d:da:e4:b4:cb:92:e8:94:41:e1:21:7f:7f:21: 62:88:9d:e7:44:39:c6:2c:4d:d7:4e:11:c3:ff:c4: e9:b4:4b:93:a2:ff:73:a6:af:58:f3:6a:34:35:42: 6c:25:ab:d4:b2:08:c3:7f:76:cf:f5:ca:5c:d6:ff: 98:d9:24:ca:e7:ac:d6:92:e7:66:62:cc:81:20:04: e4:01:4c:25:fc:66:1d:5a:f8:4c:7f:f9:df:15:d2: 37:65:bb:ec:45:ba:91:c1:29:78:80:e3:8d:3b:6e: c8:c7:df:34:02:ca:e6:46:24:63:93:67:7f:d0:be: e1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:55:F0:68:35:63:B9:1F:AF:5E:38:5D:32:1E:87:38:66:59:22:E9 X509v3 Authority Key Identifier: keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d0:91:c0:41:49:85:70:04:43:1a:36:c7:03:d9:49:bb:5c: 3e:a7:9b:6e:5e:3b:30:e8:00:52:90:d0:51:86:47:b6:b4:45: b5:98:dc:75:95:57:95:c5:90:9c:54:70:d5:ac:60:a9:a4:d0: b5:63:28:bb:49:3b:3e:5d:a0:e9:83:d6:a0:b7:19:b5:3a:7b: d0:ad:20:b4:9b:77:d1:a2:4d:f7:ef:54:7d:cc:4c:e4:3f:9a: 44:e9:2a:0c:32:4b:b7:12:a8:84:b8:e8:b7:a2:7d:dd:20:d5: 62:7e:8d:1e:22:7e:60:45:f6:6e:e0:96:95:86:bc:48:d5:af: b1:e7:6b:33:16:96:94:52:60:f5:7d:65:11:14:4f:bb:81:42: 62:39:80:b3:ca:31:18:f3:a1:49:af:83:0e:5d:03:a5:d5:5e: b0:d7:aa:e7:2a:4f:2b:dc:17:d2:63:a0:68:a9:e5:75:ee:82: d1:21:e9:a9:87:3d:56:ab:0b:9b:cc:ce:8d:c8:9e:c6:3e:27: 92:96:cc:12:7b:41:63:31:9e:1c:f7:44:99:ee:92:6d:0f:1b: 31:91:35:08:2b:d7:27:17:20:96:59:2d:35:c9:28:26:95:81: f9:83:2e:af:5e:25:d9:d5:bc:a8:b6:2a:6b:f1:17:5c:fe:d8: 73:db:03:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8qPnc/VMuMuRfpvqSiMOwOniH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZF RUYxNURCNjAeFw0yNTExMDMxODE2MzRaFw0yNTExMDYyMDM2MzRaMDMxMTAvBgNV BAMTKDQyNTVGMDY4MzU2M0I5MUZBRjVFMzg1RDMyMUU4NzM4NjY1OTIyRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhSumYw1uC0sin9EssC4ldmbj6 Lxoiv2xqWTH079SddsLHejBy6Em36IXHw3Dt+mn0JoRhoBAL3ZkSFgSkIbzevWFC PVLI0xtPfk969KXZDEAmizyOXC5qwjkF4EkHmgrXK+7Y9Xpn2Une0Uc9+mHv5wbD 96hzBj7qfzF/lyjdefQIZ3YaET5t2uS0y5LolEHhIX9/IWKInedEOcYsTddOEcP/ xOm0S5Oi/3Omr1jzajQ1Qmwlq9SyCMN/ds/1ylzW/5jZJMrnrNaS52ZizIEgBOQB TCX8Zh1a+Ex/+d8V0jdlu+xFupHBKXiA4407bsjH3zQCyuZGJGOTZ3/QvuHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQlXwaDVjuR+vXjhdMh6HOGZZIukwHwYDVR0j BBgwFoAUZLRmUdewx1fkrt4BaR8GL+7xXbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTcwNTkyNy1lYzY0LTQ0ZjUtOWM5ZS1jOWE1NWE1MjNiNjQvMC82NEI0NjY1MUQ3 QjBDNzU3RTRBRURFMDE2OTFGMDYyRkVFRjE1REI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2MkZFRUYx NURCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU3MDU5MjctZWM2NC00NGY1LTlj OWUtYzlhNTVhNTIzYjY0LzAvNjRCNDY2NTFEN0IwQzc1N0U0QUVERTAxNjkxRjA2 MkZFRUYxNURCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHQkcBBSYVwBEMaNscD2Um7XD6nm25eOzDo AFKQ0FGGR7a0RbWY3HWVV5XFkJxUcNWsYKmk0LVjKLtJOz5doOmD1qC3GbU6e9Ct ILSbd9GiTffvVH3MTOQ/mkTpKgwyS7cSqIS46Leifd0g1WJ+jR4ifmBF9m7glpWG vEjVr7HnazMWlpRSYPV9ZREUT7uBQmI5gLPKMRjzoUmvgw5dA6XVXrDXqucqTyvc F9JjoGip5XXugtEh6amHPVarC5vMzo3InsY+J5KWzBJ7QWMxnhz3RJnukm0PGzGR NQgr1ycXIJZZLTXJKCaVgfmDLq9eJdnVvKi2KmvxF1z+2HPbA4Y= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:47 2025 by rpki-client