$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: q6rPkt2uX6X2TTbEjqVecK+W3cowUCjCUJcSD7kxL8k= Subject key identifier: B5:8D:34:7A:78:67:7F:16:5B:7C:69:BF:48:69:59:F6:10:74:3C:4E Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 5276C1EF58784A026FBA07BEC132CC76BF0F8B42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: 0194 Signing time: Tue 04 Nov 2025 06:11:59 +0000 Manifest this update: Tue 04 Nov 2025 06:06:59 +0000 Manifest next update: Fri 07 Nov 2025 13:34:59 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: eS4FjrViWLyiilxg1RkpEK5h3em7xO1B2/rM7GMa+rk=) 2: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: +C1/uvN7CYXfdE0s0cHFFQ7douw+zlPNc8mJpTG123o=) 3: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8=) 4: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: l3Wlt4s6RUyCkILxNr3jF9DoQhk/UHjlKzfRUoeW9ho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:76:c1:ef:58:78:4a:02:6f:ba:07:be:c1:32:cc:76:bf:0f:8b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Nov 4 06:06:59 2025 GMT Not After : Nov 7 13:34:59 2025 GMT Subject: CN=B58D347A78677F165B7C69BF486959F610743C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c6:5e:0d:8a:29:08:af:7e:16:09:d4:fb:b9: ba:85:2c:04:42:00:0c:fb:2e:cf:dc:af:d1:ea:87: 9f:71:03:08:ed:32:fc:fd:69:be:f1:29:12:72:70: ab:6e:19:75:b4:ff:b6:39:a0:23:bf:56:0d:cb:fd: 8b:4e:ce:1f:ab:1b:5c:bc:30:0c:0d:33:04:b6:11: 70:1b:e8:00:bd:60:01:cc:0e:cc:45:a7:74:25:45: 44:a4:89:14:96:05:7c:27:4b:70:45:6c:2d:86:af: 67:a0:dd:9b:85:f9:74:45:a8:09:fd:79:ac:fb:8d: a4:b3:86:94:79:a7:a7:9a:e3:13:1e:0b:58:5e:46: 9b:c6:a0:32:c0:13:a8:f0:b2:62:b1:0c:2b:05:8e: cd:a9:ca:62:29:cf:a8:fd:73:ce:16:89:44:52:ac: f4:af:7f:da:ff:a1:27:4c:80:94:59:42:2d:8d:0a: 11:e4:44:49:3d:51:19:7c:65:28:f3:e7:fc:c8:e0: d4:e8:c6:8d:63:7b:d8:74:4c:dd:39:93:aa:80:00: 55:f4:19:30:6e:34:d7:88:61:fc:7f:26:ba:c9:54: a4:a6:0c:99:0b:63:b4:a1:bd:fe:d6:9b:6a:2e:4b: 7c:be:76:af:64:68:d7:d6:cf:c8:be:f3:31:aa:5e: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8D:34:7A:78:67:7F:16:5B:7C:69:BF:48:69:59:F6:10:74:3C:4E X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c8:c2:44:4d:7f:71:ea:fc:59:7a:4b:eb:86:e1:32:19:3e: f0:e5:72:d7:79:84:03:2e:8b:f4:cd:5c:3f:80:09:f7:12:74: e7:ac:fa:94:79:ca:1b:ae:ff:fa:05:d1:d9:fe:cb:de:cb:6f: 4a:c5:6a:b9:85:b0:8b:0c:97:bb:ed:be:a6:b7:46:31:27:4c: ba:f4:30:f4:88:b9:6d:e5:1d:6e:1a:ac:a6:92:e5:2f:20:ef: f4:35:0b:af:15:9c:40:52:76:f7:ed:c5:5d:ba:7b:46:f2:35: 2a:4d:a6:a1:d4:59:09:da:56:3b:0f:6f:a1:e3:93:33:f6:dd: 3c:57:bb:ea:20:4f:1e:88:9c:82:e5:03:b8:57:40:13:53:b1: ce:6e:2f:9a:e9:6c:79:81:b1:ee:25:8c:fe:e4:76:5e:3a:7e: 6b:68:f0:9e:ba:6e:25:ef:77:bf:9d:1e:2b:6a:ef:db:6a:d0: cd:fe:a9:f3:41:8b:85:d8:86:b6:ee:81:c5:d4:7c:c7:93:80: b8:27:ff:f6:7a:20:b1:06:f1:92:2e:b6:1d:c5:77:5f:e7:c7: 2f:aa:05:3a:03:61:5b:1b:8e:a6:5c:f9:5a:db:fc:22:64:4c: 98:93:02:a9:2c:20:84:5b:81:d7:f2:0a:44:4b:bb:ad:1a:3a: ec:85:b4:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnbB71h4SgJvuge+wTLMdr8Pi0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTExMDQwNjA2NTlaFw0yNTExMDcxMzM0NTlaMDMxMTAvBgNV BAMTKEI1OEQzNDdBNzg2NzdGMTY1QjdDNjlCRjQ4Njk1OUY2MTA3NDNDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUxl4NiikIr34WCdT7ubqFLARC AAz7Ls/cr9Hqh59xAwjtMvz9ab7xKRJycKtuGXW0/7Y5oCO/Vg3L/YtOzh+rG1y8 MAwNMwS2EXAb6AC9YAHMDsxFp3QlRUSkiRSWBXwnS3BFbC2Gr2eg3ZuF+XRFqAn9 eaz7jaSzhpR5p6ea4xMeC1heRpvGoDLAE6jwsmKxDCsFjs2pymIpz6j9c84WiURS rPSvf9r/oSdMgJRZQi2NChHkREk9URl8ZSjz5/zI4NToxo1je9h0TN05k6qAAFX0 GTBuNNeIYfx/JrrJVKSmDJkLY7Shvf7Wm2ouS3y+dq9kaNfWz8i+8zGqXr6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtY00enhnfxZbfGm/SGlZ9hB0PE4wHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXIwkRNf3Hq/Fl6S+uG4TIZPvDlctd5hAMu i/TNXD+ACfcSdOes+pR5yhuu//oF0dn+y97Lb0rFarmFsIsMl7vtvqa3RjEnTLr0 MPSIuW3lHW4arKaS5S8g7/Q1C68VnEBSdvftxV26e0byNSpNpqHUWQnaVjsPb6Hj kzP23TxXu+ogTx6InILlA7hXQBNTsc5uL5rpbHmBse4ljP7kdl46fmto8J66biXv d7+dHitq79tq0M3+qfNBi4XYhrbugcXUfMeTgLgn//Z6ILEG8ZIuth3Fd1/nxy+q BToDYVsbjqZc+Vrb/CJkTJiTAqksIIRbgdfyCkRLu60aOuyFtNM= -----END CERTIFICATE-----Generated at Wed Nov 5 00:28:16 2025 by rpki-client