$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft File: 64848BA7A76415C6458AAC267B0A57658022C3C5.mft (raw, json) Hash identifier: 92XDsOSUNs45IRNd6u3foynY22cLhF1/ejz4lSNhD6A= Subject key identifier: E3:50:9B:A6:19:E3:D8:02:2A:9F:31:64:9F:CB:85:AC:AC:BB:E5:86 Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 Certificate issuer: /CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Certificate serial: 269576CEB7774D8E6CBF6467E2D8B8D9FDD3E35B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft Manifest number: 0259 Signing time: Tue 05 Aug 2025 10:42:15 +0000 Manifest this update: Tue 05 Aug 2025 10:37:15 +0000 Manifest next update: Fri 08 Aug 2025 17:32:15 +0000 Files and hashes: 1: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (hash: qSBErkc+YmE96+YNp3stuWS6LNkBq7zVOQLn2fcpQx8=) 2: 64848BA7A76415C6458AAC267B0A57658022C3C5.crl (hash: v3nUpv/u6rfzjmS/+U+0+Wwl5t95eb1gYwcbB86Lczs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:95:76:ce:b7:77:4d:8e:6c:bf:64:67:e2:d8:b8:d9:fd:d3:e3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Validity Not Before: Aug 5 10:37:15 2025 GMT Not After : Aug 8 17:32:15 2025 GMT Subject: CN=E3509BA619E3D8022A9F31649FCB85ACACBBE586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:2b:88:03:46:18:99:b7:12:b2:bb:ae:20: 8c:84:62:86:ed:60:1a:f1:93:2c:30:37:a2:34:92: 62:63:60:49:e6:bf:b1:92:d0:db:23:03:7a:8e:af: 0a:fa:04:92:74:93:ba:d3:e4:97:70:81:b4:2a:9e: 3e:de:d0:f9:9b:f2:e2:71:8b:b9:d0:42:ce:60:d6: bc:dd:79:6d:95:31:75:55:81:35:56:ee:79:72:a0: 29:ca:37:bb:46:2f:ac:9a:5e:36:19:78:84:fe:16: 67:ff:6a:ce:19:68:e3:d7:50:3f:73:68:8c:83:0c: 2f:f2:48:91:40:fb:66:b5:1c:98:1e:f9:d2:cf:4c: 0b:a1:1a:48:36:8d:a7:79:ae:80:e3:57:10:a9:99: 16:16:e7:f6:1a:5d:4a:5d:32:c1:d1:3c:60:d0:6c: 91:fd:45:11:60:f5:15:c9:b2:55:0e:95:90:4f:68: 37:00:df:a3:86:59:70:25:68:d9:e7:f0:ad:5a:2f: 46:38:74:6f:da:4d:3f:8c:ae:4c:62:ba:70:4c:59: fd:d3:69:f3:aa:ba:c8:a2:c9:3a:d1:91:bc:f3:49: 30:a8:ab:11:19:b9:6b:fa:c7:14:5a:01:63:57:1a: d7:a3:d1:e0:e8:af:69:07:3b:54:0e:aa:94:5a:b4: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:50:9B:A6:19:E3:D8:02:2A:9F:31:64:9F:CB:85:AC:AC:BB:E5:86 X509v3 Authority Key Identifier: keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0b:be:77:f6:d6:a5:e0:41:f8:bc:b8:a9:cc:70:eb:f6:05: 0f:d6:c0:56:16:0e:6b:fb:04:a6:50:47:01:68:0f:85:ad:83: 39:40:5b:cc:e4:a8:fa:5c:92:5b:3f:4a:c5:a9:81:e4:3d:b8: 63:ae:4f:a2:eb:ed:cc:c7:bb:16:c6:7e:75:c4:4d:15:91:fc: c2:c3:0e:d6:db:15:ed:86:29:8a:73:af:43:ed:66:fe:29:22: 10:c1:88:bc:04:4d:06:37:3d:a5:77:86:98:24:ad:92:bf:e0: a8:94:af:ef:34:a1:65:af:e4:78:04:2b:eb:c6:1b:7f:fd:47: dc:21:55:94:bc:66:c7:10:a0:30:87:29:0f:22:b3:0c:37:87: 01:b9:35:7c:70:48:6e:43:7e:04:9b:04:e3:96:4f:e4:23:74: 0c:61:80:c6:18:22:18:65:20:4d:c5:e1:fa:7b:15:20:68:56: 7b:e7:2f:3d:bd:69:6f:3f:8d:04:b2:4b:96:1b:73:c7:24:76: 58:4f:f8:73:3f:a1:9f:6a:f4:e5:b5:72:97:b9:fc:21:13:e8: 0a:54:2a:73:1a:98:91:df:17:5b:d4:89:79:79:2e:bd:b4:90: 83:32:c1:33:21:41:f5:a0:ec:73:01:09:2e:83:93:17:32:83: df:5e:a3:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpV2zrd3TY5sv2Rn4ti42f3T41swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4 MDIyQzNDNTAeFw0yNTA4MDUxMDM3MTVaFw0yNTA4MDgxNzMyMTVaMDMxMTAvBgNV BAMTKEUzNTA5QkE2MTlFM0Q4MDIyQTlGMzE2NDlGQ0I4NUFDQUNCQkU1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLiuIA0YYmbcSsruuIIyEYobt YBrxkywwN6I0kmJjYEnmv7GS0NsjA3qOrwr6BJJ0k7rT5JdwgbQqnj7e0Pmb8uJx i7nQQs5g1rzdeW2VMXVVgTVW7nlyoCnKN7tGL6yaXjYZeIT+Fmf/as4ZaOPXUD9z aIyDDC/ySJFA+2a1HJge+dLPTAuhGkg2jad5roDjVxCpmRYW5/YaXUpdMsHRPGDQ bJH9RRFg9RXJslUOlZBPaDcA36OGWXAlaNnn8K1aL0Y4dG/aTT+MrkxiunBMWf3T afOqusiiyTrRkbzzSTCoqxEZuWv6xxRaAWNXGtej0eDor2kHO1QOqpRatL5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU41Cbphnj2AIqnzFkn8uFrKy75YYwHwYDVR0j BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3 NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy QzNDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWQwMTItYWZkYi00MmZiLTk3 MWEtZTE2MmE5ZGVjNDZkLzAvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3 NjU4MDIyQzNDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4Lvnf21qXgQfi8uKnMcOv2BQ/WwFYWDmv7 BKZQRwFoD4WtgzlAW8zkqPpckls/SsWpgeQ9uGOuT6Lr7czHuxbGfnXETRWR/MLD DtbbFe2GKYpzr0PtZv4pIhDBiLwETQY3PaV3hpgkrZK/4KiUr+80oWWv5HgEK+vG G3/9R9whVZS8ZscQoDCHKQ8isww3hwG5NXxwSG5DfgSbBOOWT+QjdAxhgMYYIhhl IE3F4fp7FSBoVnvnLz29aW8/jQSyS5Ybc8ckdlhP+HM/oZ9q9OW1cpe5/CET6ApU KnMamJHfF1vUiXl5Lr20kIMywTMhQfWg7HMBCS6Dkxcyg99eo2k= -----END CERTIFICATE-----Generated at Thu Aug 7 11:07:54 2025 by rpki-client