$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft File: 64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json) Hash identifier: PpW6JzgNIFxOOeSXHCait5cA0GIk18u6hRNJN25fl+E= Subject key identifier: 5D:C9:64:FA:9E:7A:4F:D8:07:5E:51:09:C2:44:EA:B3:15:30:C4:CD Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 Certificate issuer: /CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Certificate serial: 291B40E7DD9B5151AEB02C05C014CF18C975A7A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft Manifest number: 0283 Signing time: Tue 04 Nov 2025 13:42:11 +0000 Manifest this update: Tue 04 Nov 2025 13:37:11 +0000 Manifest next update: Sat 08 Nov 2025 00:24:11 +0000 Files and hashes: 1: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: zKNOIj5wcweSgVlmy9cF1YlIJvHwXhThmIeYdreDA3E=) 2: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: 3XMqr1SbGGTOsdpLnGk2+GvSMvPb+++c1PWx8+UbJng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1b:40:e7:dd:9b:51:51:ae:b0:2c:05:c0:14:cf:18:c9:75:a7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Validity Not Before: Nov 4 13:37:11 2025 GMT Not After : Nov 8 00:24:11 2025 GMT Subject: CN=5DC964FA9E7A4FD8075E5109C244EAB31530C4CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:93:0f:dd:15:83:81:12:3c:27:11:7e:32: 61:6e:2c:52:b5:f3:a9:29:67:f1:a6:d3:f7:0f:26: f9:3a:cb:68:d3:00:78:ae:44:4b:e7:17:28:c4:78: 7c:85:0c:9a:a4:a2:f4:cd:d8:d9:8c:47:03:5f:25: a6:08:bf:5f:10:9d:91:ee:cd:63:89:66:59:61:3d: b7:e8:b4:01:6f:52:0b:27:39:84:01:83:a3:76:33: d6:77:62:8f:1e:f0:7f:83:66:b5:b8:9b:c7:33:fc: 6d:fa:c7:d8:9c:a9:61:89:55:92:ee:10:c4:89:82: ed:79:0a:40:0c:27:a6:ad:60:5d:ce:6e:9f:ea:7e: d4:9e:1c:43:ca:49:f6:ca:4d:67:23:24:ff:d9:17: 77:eb:56:c6:95:0b:2b:44:09:3f:b7:c7:3c:f5:34: 28:a7:97:11:08:ed:cb:75:eb:ff:0c:2d:4f:bc:7c: 35:d3:26:48:65:a7:6a:51:f2:5d:e6:a6:cf:8a:8e: 8e:dc:51:27:cf:dd:ce:f0:5e:ac:6d:45:34:df:f8: f8:96:3e:a4:df:e5:b9:41:71:ce:6d:6a:df:49:9c: ba:b1:0d:76:42:b5:ee:77:01:bb:ac:c1:13:33:a1: d7:0f:21:63:eb:db:bd:2c:44:78:52:25:4b:d9:68: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C9:64:FA:9E:7A:4F:D8:07:5E:51:09:C2:44:EA:B3:15:30:C4:CD X509v3 Authority Key Identifier: keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c5:b2:db:cc:5b:01:d2:aa:f9:00:56:89:e3:fc:4f:a7:a4: 8e:06:e0:93:3d:c0:37:4c:0a:ea:5d:0c:10:4d:d4:76:34:ba: c3:03:cd:7c:1e:fb:9b:dd:34:21:53:01:1a:7e:a7:79:5e:4b: 23:1c:78:3d:07:e2:8a:b4:be:3c:3c:96:ca:19:30:c2:55:08: 7e:19:b8:ac:de:42:c1:66:f1:1a:4f:57:10:55:94:dd:64:ca: 16:6e:b8:63:b5:a5:f0:cb:88:07:b0:c1:45:ab:e9:5d:79:3e: d2:18:9d:96:56:5e:6b:d0:eb:eb:b6:38:c7:db:55:35:c0:2d: eb:32:aa:fb:22:47:69:e2:92:a1:2b:14:01:2d:92:d2:1c:7d: 38:9c:db:a5:25:1a:59:aa:0b:49:eb:d1:a6:73:f3:7c:49:c1: bc:6a:68:4e:57:fb:2b:37:00:4c:fa:25:4a:d6:ef:05:1a:21: eb:2d:0f:3e:42:d3:a8:9a:04:d9:95:aa:4d:ce:e3:1e:7e:c3: a1:87:da:66:55:e9:53:2a:3d:57:46:b1:19:ee:f5:93:25:3d: 5a:a3:77:3f:0a:74:f9:56:e2:c6:a5:23:66:86:6b:c1:0d:f2: 40:24:8f:02:3d:a0:db:04:42:6c:76:0e:94:8a:c3:e6:e7:b1: 2b:e1:71:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRtA592bUVGusCwFwBTPGMl1p6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4 MDIyQzNDNTAeFw0yNTExMDQxMzM3MTFaFw0yNTExMDgwMDI0MTFaMDMxMTAvBgNV BAMTKDVEQzk2NEZBOUU3QTRGRDgwNzVFNTEwOUMyNDRFQUIzMTUzMEM0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQJMP3RWDgRI8JxF+MmFuLFK1 86kpZ/Gm0/cPJvk6y2jTAHiuREvnFyjEeHyFDJqkovTN2NmMRwNfJaYIv18QnZHu zWOJZllhPbfotAFvUgsnOYQBg6N2M9Z3Yo8e8H+DZrW4m8cz/G36x9icqWGJVZLu EMSJgu15CkAMJ6atYF3Obp/qftSeHEPKSfbKTWcjJP/ZF3frVsaVCytECT+3xzz1 NCinlxEI7ct16/8MLU+8fDXTJkhlp2pR8l3mps+Kjo7cUSfP3c7wXqxtRTTf+PiW PqTf5blBcc5tat9JnLqxDXZCte53AbuswRMzodcPIWPr270sRHhSJUvZaB5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXclk+p56T9gHXlEJwkTqsxUwxM0wHwYDVR0j BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3 NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy QzNDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3 NjU4MDIyQzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvFstvMWwHSqvkAVonj/E+npI4G4JM9wDdM CupdDBBN1HY0usMDzXwe+5vdNCFTARp+p3leSyMceD0H4oq0vjw8lsoZMMJVCH4Z uKzeQsFm8RpPVxBVlN1kyhZuuGO1pfDLiAewwUWr6V15PtIYnZZWXmvQ6+u2OMfb VTXALesyqvsiR2nikqErFAEtktIcfTic26UlGlmqC0nr0aZz83xJwbxqaE5X+ys3 AEz6JUrW7wUaIestDz5C06iaBNmVqk3O4x5+w6GH2mZV6VMqPVdGsRnu9ZMlPVqj dz8KdPlW4salI2aGa8EN8kAkjwI9oNsEQmx2DpSKw+bnsSvhcXE= -----END CERTIFICATE-----Generated at Wed Nov 5 14:51:45 2025 by rpki-client